$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5640063b-8b04-39c6-a332-34c9ed577447.roa File: 5640063b-8b04-39c6-a332-34c9ed577447.roa (raw, json) Hash identifier: GKqnEVE1waxF8w3aT9OeRqQTjB38ZGf+4dMpiVGIMwk= Subject key identifier: B7:7E:3E:D7:DE:BF:3C:53:16:6A:22:3E:51:FA:80:68:DA:0E:A6:B2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235180E7772D9EA94C8D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5640063b-8b04-39c6-a332-34c9ed577447.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Tue 19 Mar 2030 04:00:00 +0000 asID: 8068 IP address blocks: 13.107.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:51:80:e7:77:2d:9e:a9:4c:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Mar 19 04:00:00 2030 GMT Subject: CN=ba1a6c0e-fa1a-4a82-9ba1-5d9421ce71b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:27:94:90:60:14:32:d4:e5:dd:4a:b1:47: ce:03:13:1b:d1:7d:32:61:3e:91:fd:4a:22:85:92: 05:51:9c:b2:1e:aa:b3:1d:28:a0:5b:74:8e:da:27: b5:2c:f1:b2:5b:7e:5c:af:f1:a7:70:d4:2b:5b:8d: d8:fb:28:3a:3a:ed:6e:7a:0e:ed:81:8d:94:85:40: 91:45:3c:a0:01:2c:af:df:f1:ee:44:db:5c:1f:05: 1c:30:c4:7a:aa:ed:d1:db:e3:74:94:b2:60:bf:2a: a6:82:3b:cf:7f:48:8e:85:17:7b:ff:d2:39:fc:40: fb:33:83:08:58:9d:b7:2c:b6:e3:d0:2e:bb:85:c2: 02:cf:5f:b0:bb:1b:c1:15:aa:0b:73:a0:56:d4:9d: a9:18:7c:1e:ec:f7:ec:de:69:7e:0e:2a:04:91:11: cc:0b:bb:8c:f6:5d:49:a0:1c:19:f0:7f:8c:88:eb: 1c:25:23:ad:8b:25:c0:2f:5b:9b:b4:89:ad:e5:0b: df:89:1f:bc:33:84:88:a7:e0:60:0d:e7:f2:9b:fc: a0:d0:f4:17:d1:7b:5f:90:fe:75:76:db:56:3a:94: 34:df:9f:76:db:c6:23:5c:dd:2a:1e:af:9a:23:d1: f4:e4:9a:5d:4b:41:b2:f8:37:80:84:bd:c9:9b:10: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7E:3E:D7:DE:BF:3C:53:16:6A:22:3E:51:FA:80:68:DA:0E:A6:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5640063b-8b04-39c6-a332-34c9ed577447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 13.107.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:75:67:a6:b2:7c:93:96:b1:7c:b1:14:e5:05:1f:1e:6f:ad: 60:c6:b9:60:3f:c7:31:ae:0a:72:93:08:54:6e:4f:71:62:b6: 9c:73:35:ab:67:19:22:a9:f7:a4:99:4c:be:5f:4c:66:f2:41: b9:b5:32:55:f3:59:b2:13:eb:55:b1:aa:28:23:ba:1b:1a:ba: 17:6b:11:c5:bd:d7:f2:bb:90:7d:c2:7c:34:2c:c5:01:08:8f: d0:87:1b:a4:94:e0:21:2d:21:c4:f4:f0:98:61:2d:fa:a2:55: 3e:f6:da:51:9c:8f:97:b9:ef:47:f2:0e:f7:ad:a4:20:5d:ff: c2:a0:0a:e5:55:4b:88:23:67:ef:5a:7c:44:15:ce:01:43:4c: 3e:a5:90:1f:d5:29:15:9e:70:c4:d2:08:b0:d5:84:59:ee:11: 6e:04:33:0f:62:0d:c9:4f:e1:82:16:70:ed:6d:04:6e:ed:3c: b6:17:86:9e:95:71:ff:3b:e0:e8:0b:bf:3a:c2:89:52:aa:f3: f3:80:86:d7:47:80:3c:01:63:85:19:60:2e:af:5c:3f:79:bd: 4a:e9:05:fd:b2:0e:a8:02:1d:f6:41:d9:8c:b5:f8:53:d7:11: d1:28:4a:18:69:d8:ff:39:0b:f5:fd:34:9e:21:7d:2a:6d:0f: cd:da:c4:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1GA53ctnqlMjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDMxOTA0MDAwMFowLzEtMCsGA1UEAxMk YmExYTZjMGUtZmExYS00YTgyLTliYTEtNWQ5NDIxY2U3MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI8nlJBgFDLU5d1KsUfOAxMb0X0yYT6R/Uoi hZIFUZyyHqqzHSigW3SO2ie1LPGyW35cr/GncNQrW43Y+yg6Ou1ueg7tgY2UhUCR RTygASyv3/HuRNtcHwUcMMR6qu3R2+N0lLJgvyqmgjvPf0iOhRd7/9I5/ED7M4MI WJ23LLbj0C67hcICz1+wuxvBFaoLc6BW1J2pGHwe7Pfs3ml+DioEkRHMC7uM9l1J oBwZ8H+MiOscJSOtiyXAL1ubtImt5QvfiR+8M4SIp+BgDefym/yg0PQX0XtfkP51 dttWOpQ0359228YjXN0qHq+aI9H05JpdS0Gy+DeAhL3JmxCwkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd+PtfevzxTFmoiPlH6gGjaDqayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTY0MDA2M2ItOGIwNC0z OWM2LWEzMzItMzRjOWVkNTc3NDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADWvdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV1Z6ayfJOWsXyxFOUFHx5vrWDGuWA/xzGuCnKTCFRuT3FitpxzNatn GSKp96SZTL5fTGbyQbm1MlXzWbIT61WxqigjuhsauhdrEcW91/K7kH3CfDQsxQEI j9CHG6SU4CEtIcT08JhhLfqiVT722lGcj5e570fyDvetpCBd/8KgCuVVS4gjZ+9a fEQVzgFDTD6lkB/VKRWecMTSCLDVhFnuEW4EMw9iDclP4YIWcO1tBG7tPLYXhp6V cf874OgLvzrCiVKq8/OAhtdHgDwBY4UZYC6vXD95vUrpBf2yDqgCHfZB2Yy1+FPX EdEoShhp2P85C/X9NJ4hfSptD83axOs= -----END CERTIFICATE-----Generated at Sat Sep 5 05:04:22 2026 by rpki-client