
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d2157dd-b6c9-3442-8ae0-976dead623c0.roa
File: 4d2157dd-b6c9-3442-8ae0-976dead623c0.roa (raw, json)
Hash identifier: RK5+xM7c9ehgKOHNTYsSo1hWcvz5wc20fB6iE/ZRVb8=
Subject key identifier: 6E:88:A3:CA:80:DC:14:93:71:E4:4F:EF:85:D5:E9:19:71:28:69:BF
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584EE4235265B1902C3F4973A580
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d2157dd-b6c9-3442-8ae0-976dead623c0.roa
Signing time: Wed 19 Aug 2026 18:03:59 +0000
ROA not before: Wed 19 Aug 2026 18:03:59 +0000
ROA not after: Wed 13 Mar 2030 04:00:00 +0000
asID: 8068
IP address blocks: 13.107.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:52:65:b1:90:2c:3f:49:73:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Aug 19 18:03:59 2026 GMT
Not After : Mar 13 04:00:00 2030 GMT
Subject: CN=8e8e9c26-f0e8-4489-b475-aaf694e39c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:90:6c:77:c8:11:04:db:cb:bf:34:67:cc:
01:df:c8:79:ec:42:53:87:e7:66:52:fa:ed:e8:8b:
e7:75:09:05:b4:42:1b:e3:21:44:84:20:b7:c0:8b:
61:05:27:df:89:95:c7:63:1d:5d:3d:a0:96:c6:bf:
21:c1:04:da:c5:79:80:f3:ad:e4:8d:b5:67:08:b8:
d4:6d:39:0a:e0:0f:2b:77:46:2d:db:1c:fd:1f:e5:
43:37:09:ae:4a:d9:58:15:c2:19:25:d0:6d:48:59:
68:42:df:45:71:a5:3c:63:50:e4:f8:e6:96:9d:12:
aa:a8:3e:f9:23:20:36:12:cb:80:7e:f1:bd:c4:3c:
65:62:14:7d:d9:4b:82:04:57:f1:ea:30:67:e7:c0:
2e:56:90:84:e0:96:d8:a3:b8:4e:0e:d8:ab:40:96:
68:22:5a:fd:71:34:3a:95:67:70:8b:da:c8:04:45:
f2:f7:8d:85:83:79:f8:fc:28:f6:24:04:79:6f:90:
2c:b1:4c:30:a1:62:47:c7:db:4e:5a:81:72:66:2f:
35:77:56:61:14:6c:39:57:f8:26:b2:d9:1c:d9:21:
6b:7a:b6:0b:1e:33:c6:91:f3:8b:33:94:f5:c5:33:
85:2d:87:be:89:db:b2:1a:50:78:fb:b9:ab:6c:0c:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:88:A3:CA:80:DC:14:93:71:E4:4F:EF:85:D5:E9:19:71:28:69:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d2157dd-b6c9-3442-8ae0-976dead623c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
13.107.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:0e:f2:22:93:2f:70:36:1f:f2:81:25:54:3c:5f:5d:5a:2d:
3a:fe:55:a2:81:78:c6:1e:d3:95:ee:42:28:ee:e8:ec:52:a8:
17:0e:b8:d3:69:ea:68:8e:01:77:8d:fb:f9:b6:21:82:43:8b:
33:9e:4f:7c:7b:38:6a:a0:5c:5f:12:0a:7c:0d:9c:2e:ae:8d:
0b:52:80:11:88:46:91:ec:e7:03:a2:7e:ed:9c:0c:ea:f0:23:
13:d6:16:bc:6d:b8:6c:fb:45:33:3b:12:fb:d2:d5:a5:62:3a:
5a:4d:88:0f:16:c5:45:9d:8d:8b:83:8e:6c:ff:23:a6:ab:9f:
76:ba:ed:0f:ad:e3:82:31:14:a5:ec:d2:08:5d:b6:76:59:96:
dc:c4:c3:f7:1d:6a:c4:34:ec:36:d9:bd:69:3f:56:43:a3:cc:
d7:90:71:cf:ee:41:f1:eb:6d:ef:fd:df:9c:c7:90:f9:43:cd:
65:31:73:92:17:e5:c6:84:66:a5:5b:b9:7b:48:01:49:37:25:
fc:bd:ee:9e:3d:11:08:de:7c:94:e7:e9:9b:d4:e7:c0:69:90:
a6:17:7e:20:9e:8d:f2:48:a5:a7:6f:6e:e9:41:73:ef:51:85:
0a:7f:e2:c5:7a:1b:5e:3b:71:18:39:76:11:bf:48:39:4d:64:
f0:42:f0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:24:09 2026 by rpki-client