$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa File: 20c87f65-2f30-33d1-8849-355099193049.roa (raw, json) Hash identifier: hgRNADVmF/1YKAtTfyo29AVmoBa3rq2k4UWz+BP1KCk= Subject key identifier: B2:60:4B:80:48:6E:BE:8E:B7:2E:42:8D:22:C7:EB:B2:9B:55:C3:63 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584B15EC431AF7DCD9B6E76AC280 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa Signing time: Thu 04 Sep 2025 18:55:43 +0000 ROA not before: Thu 04 Sep 2025 18:55:43 +0000 ROA not after: Wed 03 Dec 2025 19:55:43 +0000 asID: 397976 IP address blocks: 167.150.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:ec:43:1a:f7:dc:d9:b6:e7:6a:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Sep 4 18:55:43 2025 GMT Not After : Dec 3 19:55:43 2025 GMT Subject: CN=72859d4d-6ae7-4318-b8cd-f244c24a079e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2f:0f:3e:07:44:ce:48:58:b4:b0:9b:e2:44: f1:3c:e9:da:43:e1:6f:8f:9c:a5:67:f2:bb:68:75: 72:97:57:40:a3:b8:a2:d6:b7:24:a8:91:ba:dc:a3: 3b:2e:e3:75:db:8e:68:03:6a:c0:11:c5:67:d3:25: ad:44:4f:dc:e8:da:20:ba:b3:c4:01:5c:f2:b8:9b: ba:89:a5:dc:5d:67:9b:a6:f6:ff:23:7c:45:82:e6: 8a:72:48:86:b1:ca:db:4d:f6:44:d3:ee:05:0e:92: 0a:62:24:89:42:d2:39:cf:32:d4:06:02:a1:09:8a: fb:84:b9:70:ea:41:73:b5:f6:c0:5a:5f:0a:39:63: 6f:19:be:8d:00:3c:87:d5:35:1e:69:41:68:1b:b0: f8:e8:d0:d7:f3:fb:c5:5f:52:08:73:09:1e:84:d4: 87:14:7d:e0:7c:c9:0f:da:07:e2:fe:30:ad:c8:02: 8f:09:64:62:9f:c5:2b:e5:22:94:a3:8a:68:06:65: fc:03:9b:69:ce:4f:1e:d1:52:d6:02:58:e8:0e:4c: c5:c7:b5:fb:87:9e:a3:8d:77:ad:61:dd:ae:1c:5c: fb:f9:7f:dd:43:3c:ae:8f:5f:b0:15:0e:f8:49:76: 0e:41:8f:ca:22:9b:aa:6e:8e:be:82:2f:92:84:bc: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:60:4B:80:48:6E:BE:8E:B7:2E:42:8D:22:C7:EB:B2:9B:55:C3:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/20c87f65-2f30-33d1-8849-355099193049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 167.150.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:63:4b:f2:44:75:a9:4f:3e:91:88:b4:be:c0:ba:a7:f4:35: 21:4f:b7:d4:f0:7a:c2:57:a0:95:80:40:cf:bc:f3:18:9e:3c: ad:3a:75:c2:8d:fc:ea:b1:3b:44:36:ee:52:bd:55:13:85:2d: a6:c2:0f:ed:d2:c9:39:50:20:35:c8:06:86:7c:99:8f:54:89: 48:6b:1e:bc:07:50:3e:bf:89:62:23:ef:86:11:87:03:cf:59: 5c:11:a8:0c:01:a6:25:52:31:31:f0:da:ef:5a:0f:e1:60:86: f1:e3:8f:68:fa:49:42:12:fd:46:02:b9:71:00:d6:ac:b2:1b: e5:54:31:34:28:ee:b4:75:87:9e:2b:06:c0:e9:82:3b:7d:b4: 73:96:a1:06:ea:7f:84:d8:9f:8f:3d:df:3c:21:1c:fa:0b:1d: 41:13:4e:94:5f:3a:01:91:11:20:ee:93:7b:7e:76:08:00:42: 13:cc:57:11:26:71:7f:fe:83:76:98:20:fd:78:d0:fd:ef:86: 0b:d2:1a:7a:6a:5b:e0:a3:99:92:de:76:81:12:63:f5:32:04: 4c:f5:2c:2f:46:63:7c:90:be:23:9c:aa:8d:62:ba:48:c6:c2: 85:86:73:b7:33:0f:2c:ac:4a:0b:81:5c:c0:cf:da:b0:9f:4e: 34:4f:26:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsV7EMa99zZtudqwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MDkwNDE4NTU0M1oXDTI1MTIwMzE5NTU0M1owLzEtMCsGA1UEAxMk NzI4NTlkNGQtNmFlNy00MzE4LWI4Y2QtZjI0NGMyNGEwNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy8PPgdEzkhYtLCb4kTxPOnaQ+Fvj5ylZ/K7 aHVyl1dAo7ii1rckqJG63KM7LuN1245oA2rAEcVn0yWtRE/c6NogurPEAVzyuJu6 iaXcXWebpvb/I3xFguaKckiGscrbTfZE0+4FDpIKYiSJQtI5zzLUBgKhCYr7hLlw 6kFztfbAWl8KOWNvGb6NADyH1TUeaUFoG7D46NDX8/vFX1IIcwkehNSHFH3gfMkP 2gfi/jCtyAKPCWRin8Ur5SKUo4poBmX8A5tpzk8e0VLWAljoDkzFx7X7h56jjXet Yd2uHFz7+X/dQzyuj1+wFQ74SXYOQY/KIpuqbo6+gi+ShLzv0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJgS4BIbr6Oty5CjSLH67KbVcNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvMjBjODdmNjUtMmYzMC0z M2QxLTg4NDktMzU1MDk5MTkzMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp5ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdjS/JEdalPPpGItL7Auqf0NSFPt9TwesJXoJWAQM+88xiePK06dcKN /OqxO0Q27lK9VROFLabCD+3SyTlQIDXIBoZ8mY9UiUhrHrwHUD6/iWIj74YRhwPP WVwRqAwBpiVSMTHw2u9aD+FghvHjj2j6SUIS/UYCuXEA1qyyG+VUMTQo7rR1h54r BsDpgjt9tHOWoQbqf4TYn4893zwhHPoLHUETTpRfOgGRESDuk3t+dggAQhPMVxEm cX/+g3aYIP140P3vhgvSGnpqW+CjmZLedoESY/UyBEz1LC9GY3yQviOcqo1iukjG woWGc7czDyysSguBXMDP2rCfTjRPJmY= -----END CERTIFICATE-----Generated at Tue Oct 21 09:40:58 2025 by rpki-client