$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa File: abbfaddf-5c20-3660-aea9-7a3cec49c265.roa (raw, json) Hash identifier: SPmauWyLCe8RFhqh7gQ59fIhRvEKE3SwIqEjrGDrxI4= Subject key identifier: EE:3E:5C:93:BF:57:CB:09:38:4B:F8:01:8A:76:9D:AC:62:DA:74:95 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A2F243EE8DE3BF0D29D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 203 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:2f:24:3e:e8:de:3b:f0:d2:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=ee52fdf2-4b7f-400f-ab46-86d58150d8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:4c:69:3d:32:71:1e:94:80:9c:5c:41:cd: ca:f9:82:3d:69:d9:63:b0:62:b0:45:d1:1c:61:17: b3:fa:7e:d5:c3:0b:c4:6b:1d:b3:de:5f:27:bc:62: 82:4e:42:24:1d:fc:44:d0:84:95:ab:9a:a3:25:3b: bd:ee:0a:57:80:2f:94:ec:0b:0c:1a:26:6a:20:3f: 88:bd:57:38:f9:e2:af:b3:5f:5b:b5:18:c7:81:4b: b1:1a:cd:f7:a0:2a:fc:89:bc:1a:33:6c:28:32:8a: 09:43:8d:6e:e5:44:df:d2:d1:3e:99:e7:74:34:ee: 12:e8:2b:95:bc:d5:d9:87:4b:96:fa:0f:45:1d:eb: f1:ef:c1:41:0b:1d:e6:7e:51:b6:fa:04:6f:45:1f: 17:ed:91:24:34:ff:43:40:b3:c7:a0:12:60:56:52: ab:f3:bd:39:76:c0:d6:ce:e5:59:8f:91:ac:87:ef: 56:6f:aa:89:52:16:26:44:dd:95:31:bf:c8:4a:8a: 3e:d1:47:36:f0:cb:74:a6:b2:92:09:ab:2e:d6:11: 98:9a:a3:f2:88:0d:b0:ad:4f:96:4f:29:3b:d4:46: f7:f7:7e:ee:8c:fe:db:19:91:59:39:03:e2:12:32: bf:c2:b8:e2:94:06:a1:d8:50:fa:8a:76:78:c1:a7: 6b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3E:5C:93:BF:57:CB:09:38:4B:F8:01:8A:76:9D:AC:62:DA:74:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:60:d4:7c:94:60:83:a9:4f:92:12:79:3a:f0:cc:b7:c7:2d: f1:9b:d7:4e:26:ad:1f:b8:d2:39:3e:c5:f2:d2:f3:6a:ab:29: 61:05:98:79:ec:63:6d:4c:16:8d:94:1a:35:5b:f0:4c:d6:2d: 11:01:1d:3d:45:a2:e8:cd:79:03:ae:7d:ac:68:7b:c1:b0:9f: 17:e5:56:bb:fd:18:b4:e1:3b:34:8c:0a:35:71:a2:ab:12:42: 04:69:53:22:4f:f6:02:a7:a7:05:aa:00:63:83:10:d1:be:49: 60:c3:9b:16:d5:6b:7d:08:52:1f:99:d3:e2:a4:e2:7b:02:41: e1:0b:e0:4b:12:04:8b:3b:b9:2e:d4:9e:f5:8f:93:b5:8e:27: 85:1b:43:70:b1:2c:c2:8c:2b:e7:df:04:03:22:59:9b:4d:8d: e5:fd:ee:1a:3f:3e:51:54:17:43:2a:d2:ba:6e:8d:a7:61:a1: e5:b3:61:7c:07:a7:25:57:15:11:b5:47:40:7e:73:40:7f:2c: 6f:7e:90:8f:67:3a:c8:50:d0:7e:1a:57:0d:35:07:9a:3e:c1: 57:b7:c2:65:ce:c0:6f:dc:6f:38:1d:0d:8f:c7:9f:59:d6:c0: 49:bd:6b:1a:67:da:14:fe:ba:d4:fa:23:55:b9:96:33:84:16: ef:21:9c:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ai8kPujeO/DSnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZWU1MmZkZjItNGI3Zi00MDBmLWFiNDYtODZkNTgxNTBkOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAialMaT0ycR6UgJxcQc3K+YI9adljsGKwRdEc YRez+n7VwwvEax2z3l8nvGKCTkIkHfxE0ISVq5qjJTu97gpXgC+U7AsMGiZqID+I vVc4+eKvs19btRjHgUuxGs33oCr8ibwaM2woMooJQ41u5UTf0tE+med0NO4S6CuV vNXZh0uW+g9FHevx78FBCx3mflG2+gRvRR8X7ZEkNP9DQLPHoBJgVlKr8705dsDW zuVZj5Gsh+9Wb6qJUhYmRN2VMb/ISoo+0Uc28Mt0prKSCasu1hGYmqPyiA2wrU+W Tyk71Eb3937ujP7bGZFZOQPiEjK/wrjilAah2FD6inZ4wadrzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4+XJO/V8sJOEv4AYp2naxi2nSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWJiZmFkZGYtNWMyMC0z NjYwLWFlYTktN2EzY2VjNDljMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdg1HyUYIOpT5ISeTrwzLfHLfGb104mrR+40jk+xfLS82qrKWEFmHns Y21MFo2UGjVb8EzWLREBHT1FoujNeQOufaxoe8GwnxflVrv9GLThOzSMCjVxoqsS QgRpUyJP9gKnpwWqAGODENG+SWDDmxbVa30IUh+Z0+Kk4nsCQeEL4EsSBIs7uS7U nvWPk7WOJ4UbQ3CxLMKMK+ffBAMiWZtNjeX97ho/PlFUF0Mq0rpujadhoeWzYXwH pyVXFRG1R0B+c0B/LG9+kI9nOshQ0H4aVw01B5o+wVe3wmXOwG/cbzgdDY/Hn1nW wEm9axpn2hT+utT6I1W5ljOEFu8hnFk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:17:51 2026 by rpki-client