
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13500c20-123c-30ee-9d2a-8b93a7047990.roa
File: 13500c20-123c-30ee-9d2a-8b93a7047990.roa (raw, json)
Hash identifier: ncygEUICzHTA0vUz0oYKqD+DiA5Ix14RWW9hkKQX8cM=
Subject key identifier: 15:F4:47:13:C0:A2:83:0D:B9:83:3B:8E:EB:01:67:FE:1E:BF:86:9B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584EE42350D73ACA8A8CAB0308C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13500c20-123c-30ee-9d2a-8b93a7047990.roa
Signing time: Wed 19 Aug 2026 18:03:58 +0000
ROA not before: Wed 19 Aug 2026 18:03:58 +0000
ROA not after: Sun 03 Mar 2030 05:00:00 +0000
asID: 8068
IP address blocks: 13.107.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:50:d7:3a:ca:8a:8c:ab:03:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Aug 19 18:03:58 2026 GMT
Not After : Mar 3 05:00:00 2030 GMT
Subject: CN=df50e19b-4d8d-4c8e-b545-7081637d2b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:d0:55:c3:cc:0b:01:2b:34:3c:67:63:ad:
30:fd:93:5a:4c:03:39:0b:fa:0b:a9:39:59:82:fb:
bf:6d:9f:05:38:0f:fc:70:69:74:aa:3a:3f:23:87:
51:14:b7:d1:ad:a7:f2:f3:3c:d6:e5:fd:2c:4e:e6:
88:33:cb:8f:45:b0:15:01:c1:0d:be:de:e3:d7:93:
b9:db:34:9e:e9:43:e7:b9:2b:1f:7b:77:cf:50:98:
b5:2b:07:a1:03:d2:40:11:c4:e7:81:a2:98:d0:f9:
c0:05:c1:3c:48:93:26:70:7c:73:f8:31:89:77:4c:
2b:f9:49:ef:3b:fc:a8:e6:fd:0b:20:93:51:57:d9:
da:1f:0e:71:f0:2e:56:ad:f7:bc:c2:b2:55:c5:54:
7d:f8:de:87:f9:0a:85:1c:ef:59:6d:f6:3c:dc:b2:
5d:27:d5:18:22:51:a3:2f:11:79:c9:f0:8f:de:01:
97:14:5c:f1:7f:23:ea:88:56:66:bb:8f:67:55:c1:
bb:08:5a:b5:ce:5f:38:8e:35:48:b8:fc:6a:1e:3d:
08:0c:aa:e8:4c:86:3f:6e:51:c5:97:3d:69:fd:8c:
a5:f0:04:01:c0:cb:9a:ee:2e:7f:75:89:65:50:8e:
2d:e8:68:45:aa:95:14:41:26:77:93:b6:75:53:a2:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:47:13:C0:A2:83:0D:B9:83:3B:8E:EB:01:67:FE:1E:BF:86:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13500c20-123c-30ee-9d2a-8b93a7047990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
13.107.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:9e:25:51:3a:4e:01:4d:50:62:6a:1a:ae:27:c7:2b:54:79:
8e:84:57:43:ab:ad:ab:a9:cb:c7:ba:3d:6b:7a:65:de:e9:d6:
f5:3f:a7:07:79:4d:97:7e:68:b3:df:c9:09:0c:8e:af:6f:12:
bf:bd:75:85:42:7d:a6:cc:78:e0:9f:45:77:30:af:c6:87:af:
0c:59:95:f6:29:af:3f:54:c9:db:ea:87:38:13:cc:b9:0b:e8:
54:92:9d:a6:8e:13:8c:a1:1b:9b:1c:46:d7:db:48:45:5c:a3:
da:6e:7c:77:52:1b:17:37:22:4f:0e:51:13:a6:20:2a:30:f4:
1a:9c:91:5b:61:21:2b:86:de:d9:9e:f6:70:d2:3e:1e:15:0d:
f8:55:3a:b9:dc:86:a4:4d:87:30:ca:63:91:f8:23:6d:42:8a:
b5:af:77:c1:ea:53:be:2c:bc:47:4f:e5:0b:dd:13:8a:c2:97:
6a:63:20:e5:f6:e3:d0:54:25:90:62:1c:42:88:3c:b3:ad:62:
f0:58:f0:26:78:cd:06:e5:bf:66:08:5c:18:fc:3e:38:53:ff:
fa:95:e2:d6:0f:67:13:1a:be:09:77:e7:0f:d8:03:eb:58:51:
9e:61:2b:ea:d0:e1:f9:20:b7:6c:44:03:d2:8d:1c:5e:6b:3d:
b7:89:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:26 2026 by rpki-client