$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa File: 20c87f65-2f30-33d1-8849-355099193049.roa (raw, json) Hash identifier: DKTs6IBBTfzJ8cfgecvZeyRY/U7arG9eOOfnmNWEOjE= Subject key identifier: 22:B1:32:4C:EE:74:69:FC:49:B4:A9:37:1C:FE:80:BF:64:05:12:8D Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584E97B50E93A15666B0E4911E00 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 397976 IP address blocks: 167.150.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0e:93:a1:56:66:b0:e4:91:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=24428dea-699c-473a-bcb5-634494fa91f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:77:fe:e7:a5:ea:6c:b7:f8:64:d4:89:76: d1:cf:e4:bf:2a:46:0d:cb:11:a3:e3:34:cd:b2:23: 90:d3:8a:a7:72:c9:90:37:c1:d3:6c:df:31:6d:c7: fa:64:bf:d3:f3:d4:40:16:aa:e6:8e:9f:44:ae:78: 40:5f:0f:ed:2b:82:ff:8a:27:7f:07:af:71:a5:76: 41:87:ed:12:0f:87:2a:93:65:c6:e7:f2:ea:26:ed: c5:d1:2d:a3:f8:82:cb:c8:aa:47:6c:25:45:e4:8c: d1:2b:5a:b3:f6:21:61:e0:87:be:5e:25:20:b6:c4: 9a:95:72:a8:5c:29:1d:75:c9:b9:d3:e9:c2:7a:1f: fe:f1:a3:c8:47:c1:38:1d:fd:9e:c6:35:36:7d:70: 2e:0e:1b:96:73:89:14:b3:b4:06:1c:79:a7:c8:b1: 87:96:1c:38:34:6e:01:15:55:5d:06:a8:29:ea:2d: 6c:a3:22:5c:cf:6e:79:52:3f:16:99:ff:1d:87:18: 00:90:ef:9e:c4:d3:2e:3c:a2:0e:d5:9d:f0:2f:5d: b7:39:44:b8:f2:81:69:a6:cf:c4:c3:8f:65:2c:8b: 52:79:35:20:b4:d0:b2:d1:6f:83:f8:8b:9a:4f:89: 3c:2a:76:c8:d0:18:f5:bb:67:15:90:dc:49:fc:91: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B1:32:4C:EE:74:69:FC:49:B4:A9:37:1C:FE:80:BF:64:05:12:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 167.150.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:81:66:0a:8d:c9:34:ba:00:5f:cc:70:a7:61:40:2e:0d:e5: cc:5c:4a:ad:7f:4f:18:8c:33:a5:12:4a:f3:38:32:29:0e:31: 51:6b:e8:23:e2:b6:0f:14:dd:07:1c:3e:77:60:a0:7b:ed:5d: fe:3b:94:4e:7f:7a:3d:fa:e9:18:97:f3:c9:06:0c:10:16:7a: 41:ea:75:82:f6:02:f4:92:69:77:f6:24:7d:d9:4c:2f:c6:13: 0a:62:c2:d2:05:b8:3b:da:ed:9d:52:3b:3c:48:91:1b:89:be: 2d:0e:e7:21:8f:3e:3a:96:e5:12:7f:97:8f:c3:cf:11:1e:40: 23:b1:6f:6d:e6:56:ad:0b:2e:65:80:ab:53:b0:90:fe:0d:5d: a9:82:bc:ba:df:0e:02:85:f1:76:48:47:2c:ba:d6:e1:62:75: 9d:d1:b0:34:6f:d3:98:72:bf:86:e5:e1:cc:71:26:86:e9:c1: af:b2:51:76:26:16:40:b9:36:78:a5:ca:b7:fd:5e:9a:c3:bf: e0:44:01:b9:95:c6:c6:aa:15:88:c1:83:8b:70:38:53:de:8e: 40:9f:79:72:5a:f3:0b:4f:ee:51:68:98:76:4d:4a:9e:3f:80: 57:e6:a1:c2:6b:4f:40:cf:42:9b:a3:c1:f5:f4:42:53:6f:d2: 99:a4:ee:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQ6ToVZmsOSRHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk MjQ0MjhkZWEtNjk5Yy00NzNhLWJjYjUtNjM0NDk0ZmE5MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07N3/uel6my3+GTUiXbRz+S/KkYNyxGj4zTN siOQ04qncsmQN8HTbN8xbcf6ZL/T89RAFqrmjp9ErnhAXw/tK4L/iid/B69xpXZB h+0SD4cqk2XG5/LqJu3F0S2j+ILLyKpHbCVF5IzRK1qz9iFh4Ie+XiUgtsSalXKo XCkddcm50+nCeh/+8aPIR8E4Hf2exjU2fXAuDhuWc4kUs7QGHHmnyLGHlhw4NG4B FVVdBqgp6i1soyJcz255Uj8Wmf8dhxgAkO+exNMuPKIO1Z3wL123OUS48oFpps/E w49lLItSeTUgtNCy0W+D+IuaT4k8KnbI0Bj1u2cVkNxJ/JHKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKxMkzudGn8SbSpNxz+gL9kBRKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvMjBjODdmNjUtMmYzMC0z M2QxLTg4NDktMzU1MDk5MTkzMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp5ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaBZgqNyTS6AF/McKdhQC4N5cxcSq1/TxiMM6USSvM4MikOMVFr6CPi tg8U3QccPndgoHvtXf47lE5/ej366RiX88kGDBAWekHqdYL2AvSSaXf2JH3ZTC/G EwpiwtIFuDva7Z1SOzxIkRuJvi0O5yGPPjqW5RJ/l4/DzxEeQCOxb23mVq0LLmWA q1OwkP4NXamCvLrfDgKF8XZIRyy61uFidZ3RsDRv05hyv4bl4cxxJobpwa+yUXYm FkC5Nnilyrf9XprDv+BEAbmVxsaqFYjBg4twOFPejkCfeXJa8wtP7lFomHZNSp4/ gFfmocJrT0DPQpujwfX0QlNv0pmk7so= -----END CERTIFICATE-----Generated at Fri Jul 24 15:12:59 2026 by rpki-client