$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa File: 20c87f65-2f30-33d1-8849-355099193049.roa (raw, json) Hash identifier: /SO8ZYSIo3G+3SYPsOJIQai+addB51XxBLiazIiuZQ4= Subject key identifier: 45:28:96:79:A9:B3:D5:A5:55:C4:03:26:32:F7:0F:E6:A3:93:D4:92 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584F3A17DC67C1CD7A860BF8AF00 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 397976 IP address blocks: 167.150.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:dc:67:c1:cd:7a:86:0b:f8:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=5fc223d7-69c1-4227-bfd5-45942d7bce2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:34:49:bb:df:f2:f9:7e:c2:88:2a:dc:40: 8c:3a:e3:d7:84:d7:82:cd:f0:e1:e7:b5:9c:4c:1a: cb:07:0c:e5:7d:fa:21:77:ee:29:89:e7:b7:c9:39: 65:a1:65:c8:0b:43:52:97:d0:9b:8f:eb:0b:fa:07: 8b:e0:50:53:dc:73:98:96:7e:cd:5a:b5:59:f2:78: 1d:b3:4c:ae:87:07:48:41:c5:63:21:54:4b:39:14: a4:62:6e:7e:6f:55:97:9c:41:78:4e:e7:3c:1e:17: 3a:b1:d8:21:4d:56:8d:08:b1:2b:a9:24:9a:5d:16: 94:ae:84:8b:e5:8b:96:da:df:d0:39:e7:a6:5f:8b: ab:ce:d1:69:91:02:ed:2b:d9:77:fa:28:56:4f:f0: ca:b9:56:81:fe:0d:b1:5d:e6:69:70:1e:f8:e8:b4: d9:08:ec:27:6c:4b:5b:7e:75:39:2a:e5:7a:4c:bf: aa:c6:15:33:11:50:91:73:f3:2f:fe:ca:e4:51:cd: b5:df:dd:e6:5a:db:21:e6:b9:f0:46:55:93:ff:79: ff:9d:57:86:e7:de:a6:a7:c2:ef:4f:1f:13:c1:e3: 2a:11:4f:be:72:a3:87:45:d9:64:8c:82:aa:5c:c6: fe:86:24:29:9e:56:12:16:70:ca:96:9e:2f:91:7d: 73:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:28:96:79:A9:B3:D5:A5:55:C4:03:26:32:F7:0F:E6:A3:93:D4:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 167.150.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c3:e1:52:05:f3:e6:6d:fa:e4:52:2e:6c:b0:36:9d:14:65: 61:47:2d:28:53:05:87:5b:da:69:22:ab:97:4f:e4:65:64:bb: 73:9a:26:d3:cb:11:28:b7:a9:83:d9:fe:93:f5:61:10:a6:12: fa:07:ab:e0:ad:4c:15:a7:7c:9e:dc:07:ce:c7:77:c2:cb:dd: 04:5c:0a:ab:94:cb:d3:da:43:6d:cf:d7:5d:9e:11:10:25:f7: 63:cd:eb:aa:51:f8:e9:a0:cd:21:c0:44:32:07:03:ec:bd:9e: 3a:f3:10:4a:5b:49:42:40:93:c1:bc:be:67:57:82:b1:12:ca: 17:37:43:83:8b:fd:e6:a5:30:52:61:a5:c3:bf:2f:f2:46:10: 8f:e9:24:01:87:e4:e2:ed:fb:86:d1:63:e0:26:48:6c:62:2b: 09:57:1a:09:35:8c:0f:a9:3e:f2:aa:59:fa:f7:ee:15:cc:d3: aa:f0:bb:ee:36:46:98:e5:8b:d7:ca:e6:61:c6:09:f9:0f:2d: 9e:b8:af:75:3b:b3:f5:11:84:9d:47:bd:ba:f8:89:7a:bc:af: 08:ff:70:87:06:5a:f4:88:9d:e7:c8:a8:e6:8c:f2:d1:c5:bd: 8a:f8:ab:8f:27:c7:57:9d:d7:f5:dd:71:f5:8c:20:ef:5b:3c: fe:51:e2:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9xnwc16hgv4rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NWZjMjIzZDctNjljMS00MjI3LWJmZDUtNDU5NDJkN2JjZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRc0Sbvf8vl+wogq3ECMOuPXhNeCzfDh57Wc TBrLBwzlffohd+4piee3yTlloWXIC0NSl9Cbj+sL+geL4FBT3HOYln7NWrVZ8ngd s0yuhwdIQcVjIVRLORSkYm5+b1WXnEF4Tuc8Hhc6sdghTVaNCLErqSSaXRaUroSL 5YuW2t/QOeemX4urztFpkQLtK9l3+ihWT/DKuVaB/g2xXeZpcB746LTZCOwnbEtb fnU5KuV6TL+qxhUzEVCRc/Mv/srkUc21393mWtsh5rnwRlWT/3n/nVeG596mp8Lv Tx8TweMqEU++cqOHRdlkjIKqXMb+hiQpnlYSFnDKlp4vkX1z1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUolnmps9WlVcQDJjL3D+ajk9SSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvMjBjODdmNjUtMmYzMC0z M2QxLTg4NDktMzU1MDk5MTkzMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp5ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3D4VIF8+Zt+uRSLmywNp0UZWFHLShTBYdb2mkiq5dP5GVku3OaJtPL ESi3qYPZ/pP1YRCmEvoHq+CtTBWnfJ7cB87Hd8LL3QRcCquUy9PaQ23P112eERAl 92PN66pR+OmgzSHARDIHA+y9njrzEEpbSUJAk8G8vmdXgrESyhc3Q4OL/ealMFJh pcO/L/JGEI/pJAGH5OLt+4bRY+AmSGxiKwlXGgk1jA+pPvKqWfr37hXM06rwu+42 Rpjli9fK5mHGCfkPLZ64r3U7s/URhJ1Hvbr4iXq8rwj/cIcGWvSInefIqOaM8tHF vYr4q48nx1ed1/XdcfWMIO9bPP5R4ig= -----END CERTIFICATE-----Generated at Sun Oct 4 09:01:49 2026 by rpki-client