$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3de6c7e9-7f9b-3b71-b6dc-542eb1ba3f51.roa File: 3de6c7e9-7f9b-3b71-b6dc-542eb1ba3f51.roa (raw, json) Hash identifier: tJfhFBtd2aXPbmcGPdkxjYZS1DNo2M4V+YRSlrnDURo= Subject key identifier: 73:DF:23:E7:E8:2C:9F:77:C2:69:88:3C:E2:76:51:A6:6E:D4:E2:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235104BC662713ACE35018 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3de6c7e9-7f9b-3b71-b6dc-542eb1ba3f51.roa Signing time: Wed 19 Aug 2026 18:03:58 +0000 ROA not before: Wed 19 Aug 2026 18:03:58 +0000 ROA not after: Thu 14 Mar 2030 04:00:00 +0000 asID: 8068 IP address blocks: 13.107.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:51:04:bc:66:27:13:ac:e3:50:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:58 2026 GMT Not After : Mar 14 04:00:00 2030 GMT Subject: CN=0642ea9c-82a2-4d7b-bd84-0ab6a3d7d443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:13:67:8d:02:03:c7:cd:d6:01:2b:79:7f:4c: e0:5b:52:9c:fd:32:98:d3:86:cd:68:06:09:84:12: 1d:2c:49:f8:a9:6c:bb:57:64:4f:a2:04:fd:c3:ca: 59:6c:35:2f:53:4e:b1:dc:ac:e9:2b:fb:87:e6:df: ed:09:c6:d1:51:4a:86:f2:6b:f6:31:78:af:dc:d7: 51:a5:a7:0a:23:fb:86:e8:69:e8:5c:4d:4f:ba:5d: 4a:8e:fe:db:47:a7:fd:0c:02:df:2c:72:5e:7a:a2: b0:5d:f9:cc:0c:cd:02:ff:c1:f5:e5:ad:0e:71:15: df:cc:bc:6f:d1:ae:14:eb:5f:3b:9d:c2:3f:64:58: ba:e6:0f:a3:4a:94:e1:02:5b:11:33:0f:f2:36:19: 7e:ec:ef:d3:e0:ab:75:4c:fa:bf:27:b8:d7:01:89: d2:4d:0d:b1:f1:2a:12:40:ac:18:1d:7e:11:22:19: 79:2f:99:04:8d:cd:68:cf:ab:13:05:f1:49:0a:fd: e1:79:31:75:13:5c:ae:d0:e9:c9:79:9c:1f:a4:b0: 89:44:a9:4f:34:1d:ab:06:49:5d:0c:ee:48:92:1a: 11:5a:cd:a4:19:30:48:05:b7:b2:48:df:3e:b9:2c: cb:b4:a8:44:6e:b7:93:0c:96:be:e6:38:8f:e7:53: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:23:E7:E8:2C:9F:77:C2:69:88:3C:E2:76:51:A6:6E:D4:E2:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3de6c7e9-7f9b-3b71-b6dc-542eb1ba3f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 13.107.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bc:b6:9c:5c:a1:c0:ae:2e:2c:19:48:bc:7b:75:9e:68:42: 70:59:75:ef:87:f4:cf:96:58:df:d3:d5:e8:24:07:8b:0f:90: 1c:ba:9f:1d:23:27:03:25:85:99:e7:65:a2:d6:28:7d:36:cf: 4e:e8:01:33:ea:06:ba:cb:a6:51:0f:d4:4f:01:de:65:70:e4: 19:c9:24:0f:9f:f8:aa:47:5c:48:79:bf:e3:87:d0:08:65:58: b2:be:53:04:64:78:4a:6d:4a:aa:65:69:81:2b:48:50:31:61: d4:d5:27:96:1b:1f:cb:fd:15:b2:e6:1f:37:e1:67:f2:f1:e2: 3a:a7:ac:19:ed:a9:fd:6a:30:14:55:c9:8a:40:57:e9:f1:5e: 52:d2:b9:87:8c:e3:4b:2d:ef:21:6c:17:9a:02:f8:fe:ce:a3: c5:6f:49:89:6d:61:45:30:f9:cd:4a:c2:4b:66:16:28:54:4f: ba:65:a0:cd:8e:ba:61:19:91:01:23:be:f2:b2:27:18:cb:62: cb:26:9f:28:09:53:99:a3:74:1e:f0:58:3b:af:87:81:54:c8: 55:bb:0e:02:21:b7:10:12:0c:35:3c:0d:df:4b:55:81:94:fa: 4d:80:6c:ee:b7:34:4e:e0:2a:4a:2f:43:c4:f7:a4:3b:c8:5c: 5e:15:65:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1EEvGYnE6zjUBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OFoXDTMwMDMxNDA0MDAwMFowLzEtMCsGA1UEAxMk MDY0MmVhOWMtODJhMi00ZDdiLWJkODQtMGFiNmEzZDdkNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBNnjQIDx83WASt5f0zgW1Kc/TKY04bNaAYJ hBIdLEn4qWy7V2RPogT9w8pZbDUvU06x3KzpK/uH5t/tCcbRUUqG8mv2MXiv3NdR pacKI/uG6GnoXE1Pul1Kjv7bR6f9DALfLHJeeqKwXfnMDM0C/8H15a0OcRXfzLxv 0a4U6187ncI/ZFi65g+jSpThAlsRMw/yNhl+7O/T4Kt1TPq/J7jXAYnSTQ2x8SoS QKwYHX4RIhl5L5kEjc1oz6sTBfFJCv3heTF1E1yu0OnJeZwfpLCJRKlPNB2rBkld DO5IkhoRWs2kGTBIBbeySN8+uSzLtKhEbreTDJa+5jiP51MAJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPfI+foLJ93wmmIPOJ2UaZu1OKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2RlNmM3ZTktN2Y5Yi0z YjcxLWI2ZGMtNTQyZWIxYmEzZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADWs0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa8tpxcocCuLiwZSLx7dZ5oQnBZde+H9M+WWN/T1egkB4sPkBy6nx0j JwMlhZnnZaLWKH02z07oATPqBrrLplEP1E8B3mVw5BnJJA+f+KpHXEh5v+OH0Ahl WLK+UwRkeEptSqplaYErSFAxYdTVJ5YbH8v9FbLmHzfhZ/Lx4jqnrBntqf1qMBRV yYpAV+nxXlLSuYeM40st7yFsF5oC+P7Oo8VvSYltYUUw+c1KwktmFihUT7ploM2O umEZkQEjvvKyJxjLYssmnygJU5mjdB7wWDuvh4FUyFW7DgIhtxASDDU8Dd9LVYGU +k2AbO63NE7gKkovQ8T3pDvIXF4VZY0= -----END CERTIFICATE-----Generated at Sat Sep 5 06:09:15 2026 by rpki-client