$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa File: abbfaddf-5c20-3660-aea9-7a3cec49c265.roa (raw, json) Hash identifier: cVlTK50gK8g15+r+iE4QYuQ8aFPSCjE7/SZw+2FAn1w= Subject key identifier: 7F:A0:6C:8E:5D:05:B2:7C:F8:F1:75:74:B7:9A:DC:6D:AD:65:16:AA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCAC4C39EB04E388959D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 203 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ac:4c:39:eb:04:e3:88:95:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=7b26d94f-175a-4f9d-9f78-dcc9338ed3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:a9:9f:a0:60:c9:64:2b:31:29:9b:59:d2: 3f:cd:ad:56:48:39:a1:22:e1:47:27:cc:bd:37:ff: 01:ff:31:a3:ac:a0:27:7b:20:45:8b:6d:ab:16:db: 58:c6:1f:60:c5:bf:1b:36:23:3a:2a:e0:7e:b2:34: cc:18:c9:f7:51:f6:f0:c9:f8:ac:d9:d1:c7:33:8f: aa:06:be:d9:59:b1:2f:7e:7f:c5:44:b8:ea:93:dd: de:85:03:c4:75:11:2c:24:bd:f2:e3:7d:a6:ed:8d: 05:95:8d:14:fa:1e:72:b2:e0:0e:b7:de:f8:74:9c: 8f:9b:75:e7:03:2d:f8:eb:51:70:07:e4:44:c8:7f: 70:4e:40:f6:de:c0:0a:d8:83:19:e1:9b:90:3f:22: 68:1c:1b:5f:0b:d4:20:19:15:38:2b:f2:93:bb:97: 8f:e9:c4:77:f6:53:00:13:69:98:45:cb:96:6a:7d: e9:e3:83:f0:45:ae:c1:0c:d7:20:6e:bb:7d:18:35: 27:3b:57:32:e9:92:ed:22:53:b0:8b:21:dd:bd:23: 15:5c:00:07:5f:da:8a:69:cf:51:c3:07:7e:71:fd: 8c:d4:aa:85:cc:49:20:9a:5c:ec:08:4c:6e:bd:34: d0:b5:22:64:03:aa:d4:bb:c0:90:56:af:e0:b6:9d: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A0:6C:8E:5D:05:B2:7C:F8:F1:75:74:B7:9A:DC:6D:AD:65:16:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:63:75:89:d1:03:8b:85:48:a4:c2:27:10:68:32:58:06:3f: 19:7a:55:d9:a2:1e:78:38:e5:e9:de:2b:1d:38:47:82:43:bc: c6:ff:30:7b:14:43:94:c0:76:f7:5c:9f:74:ce:d1:46:89:ca: 0c:4a:22:a0:aa:06:3e:16:62:40:a8:1c:47:93:e1:c9:5d:79: 55:b9:c5:c6:52:f9:c8:0b:17:d2:c5:11:1d:60:44:33:3f:97: 08:e7:a0:54:16:78:bb:b9:a4:29:19:ce:95:68:43:aa:22:22: 11:0e:59:69:00:86:61:17:1b:0a:ab:ec:b3:95:10:5a:ad:50: 0f:b8:43:09:b9:19:8b:3a:dc:37:3b:35:17:6d:8b:97:ed:ea: 57:65:33:00:5d:b0:4e:70:8a:97:ea:d9:fb:1d:22:19:d3:80: d1:fe:5d:8a:a0:91:cb:49:91:4d:fd:dd:db:3c:38:ed:8f:b6: f9:2d:b3:ac:a1:84:ad:e3:c5:ee:c9:d8:76:c8:64:50:ec:df: 09:f5:fd:21:8a:15:ec:44:0c:79:68:dc:a7:e5:fc:a8:c4:ee: d5:d0:6c:65:8e:74:bd:f9:c1:cf:d7:af:c3:23:a5:aa:49:f2: ae:53:dc:5c:f3:a2:2b:85:33:a9:fa:30:8e:a5:ee:6c:09:ce: 20:8c:a8:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vKxMOesE44iVnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk N2IyNmQ5NGYtMTc1YS00ZjlkLTlmNzgtZGNjOTMzOGVkM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLCpn6BgyWQrMSmbWdI/za1WSDmhIuFHJ8y9 N/8B/zGjrKAneyBFi22rFttYxh9gxb8bNiM6KuB+sjTMGMn3Ufbwyfis2dHHM4+q Br7ZWbEvfn/FRLjqk93ehQPEdREsJL3y432m7Y0FlY0U+h5ysuAOt974dJyPm3Xn Ay3461FwB+REyH9wTkD23sAK2IMZ4ZuQPyJoHBtfC9QgGRU4K/KTu5eP6cR39lMA E2mYRcuWan3p44PwRa7BDNcgbrt9GDUnO1cy6ZLtIlOwiyHdvSMVXAAHX9qKac9R wwd+cf2M1KqFzEkgmlzsCExuvTTQtSJkA6rUu8CQVq/gtp02VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+gbI5dBbJ8+PF1dLea3G2tZRaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWJiZmFkZGYtNWMyMC0z NjYwLWFlYTktN2EzY2VjNDljMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhjdYnRA4uFSKTCJxBoMlgGPxl6VdmiHng45eneKx04R4JDvMb/MHsU Q5TAdvdcn3TO0UaJygxKIqCqBj4WYkCoHEeT4cldeVW5xcZS+cgLF9LFER1gRDM/ lwjnoFQWeLu5pCkZzpVoQ6oiIhEOWWkAhmEXGwqr7LOVEFqtUA+4Qwm5GYs63Dc7 NRdti5ft6ldlMwBdsE5wipfq2fsdIhnTgNH+XYqgkctJkU393ds8OO2Ptvkts6yh hK3jxe7J2HbIZFDs3wn1/SGKFexEDHlo3Kfl/KjE7tXQbGWOdL35wc/Xr8MjpapJ 8q5T3FzzoiuFM6n6MI6l7mwJziCMqJE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:14:30 2025 by rpki-client