$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746378c4-106c-340a-bdcd-c17981d4dafa.roa File: 746378c4-106c-340a-bdcd-c17981d4dafa.roa (raw, json) Hash identifier: C6MrF+yJL7zTtk3tQ2S61gYQl9ysGM1hmwh0h2QImz4= Subject key identifier: 52:DD:38:31:AA:92:0D:8B:2E:A6:C4:40:F9:B6:B3:1C:EF:58:B3:DF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235197AE269E1194C94500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746378c4-106c-340a-bdcd-c17981d4dafa.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Mon 18 Mar 2030 04:00:00 +0000 asID: 8068 IP address blocks: 13.107.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:51:97:ae:26:9e:11:94:c9:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Mar 18 04:00:00 2030 GMT Subject: CN=f6cfd379-d852-426d-94c1-ba9c34a96f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:f2:5d:23:42:9b:5d:9f:62:a8:c3:d5:e2: 30:05:f1:62:53:55:ea:39:7d:f7:ee:3d:50:33:dc: 13:17:89:09:41:d7:a6:e9:0a:d1:83:81:46:1f:9b: b4:fc:2e:9b:5f:cc:b9:fe:9d:4b:1c:45:32:20:87: e7:92:dc:b2:84:00:2b:ac:9a:0b:f1:ed:7f:4f:13: f0:6d:67:c8:f5:c8:20:b2:56:4a:0d:c2:3d:bb:2b: c5:4a:ce:c6:d9:1c:97:0d:95:97:49:cd:b4:ec:c3: 3e:30:7b:25:06:76:3f:f3:d3:f9:35:b9:0f:7f:a2: c0:32:c0:b5:d4:14:56:39:44:eb:17:e7:15:8e:ac: 46:84:c7:ad:e5:aa:0a:b4:19:2d:ee:aa:d7:e7:4e: 79:2b:2a:af:ca:09:4f:37:68:7c:8e:6e:4f:2d:d7: fe:62:5e:ad:01:0c:62:32:f4:f5:85:89:6c:4f:31: 75:00:95:ab:b3:2b:70:e3:78:65:22:aa:d9:4c:7c: 9a:01:14:2e:54:63:a5:9c:bb:05:9e:ed:20:ca:6b: 8e:62:c3:62:10:98:ed:6d:7c:1a:cf:87:9e:32:f8: 0c:60:db:85:ee:51:2b:16:dd:d8:ee:4d:c6:47:7e: 6b:56:b3:21:c9:f2:07:82:04:a9:ab:19:7a:ef:ce: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DD:38:31:AA:92:0D:8B:2E:A6:C4:40:F9:B6:B3:1C:EF:58:B3:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746378c4-106c-340a-bdcd-c17981d4dafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 13.107.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a2:20:90:2d:c5:5f:ca:90:20:b4:eb:f3:e5:e3:c1:67:b0: cb:c0:4a:e6:79:7e:8a:35:09:e1:c6:c6:c2:24:c2:22:b8:d4: 5a:bd:fe:fb:c4:57:f4:f7:80:28:b7:72:f6:cc:3b:43:48:b7: f5:e3:b2:fb:4d:58:d2:6f:67:cc:f0:33:30:e1:de:7d:d6:ec: ff:42:8f:b7:c0:9b:63:a4:7e:fc:88:89:be:7c:e7:f1:90:28: c4:28:81:6b:61:63:10:84:09:4b:d1:ce:bb:89:bd:99:f8:dd: ad:c9:18:56:51:03:03:ae:d7:82:a2:8b:3e:d1:c6:98:67:b7: 7e:18:dc:fd:56:77:19:34:32:3f:d1:43:b0:68:06:88:aa:bb: 8a:64:6e:06:8e:ed:93:08:de:6d:fa:6b:8e:fa:a8:5b:43:61: 1c:d1:75:34:cf:45:d6:4c:c2:3d:fb:54:5f:54:6b:35:ca:8e: 53:66:f1:54:aa:2d:17:f8:04:f3:0a:77:19:bb:eb:57:a7:de: 0f:8d:c0:0d:41:25:68:78:ed:b4:8f:4d:68:51:ec:02:e1:e1: c6:cc:f6:4f:e8:66:03:90:0d:ab:3d:5e:d2:1a:3f:19:0f:8c: c7:cd:98:3f:9b:78:23:9b:76:2d:b5:c5:dd:68:13:29:2d:75: eb:44:91:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1GXriaeEZTJRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk ZjZjZmQzNzktZDg1Mi00MjZkLTk0YzEtYmE5YzM0YTk2ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhryXSNCm12fYqjD1eIwBfFiU1XqOX337j1Q M9wTF4kJQdem6QrRg4FGH5u0/C6bX8y5/p1LHEUyIIfnktyyhAArrJoL8e1/TxPw bWfI9cggslZKDcI9uyvFSs7G2RyXDZWXSc207MM+MHslBnY/89P5NbkPf6LAMsC1 1BRWOUTrF+cVjqxGhMet5aoKtBkt7qrX5055KyqvyglPN2h8jm5PLdf+Yl6tAQxi MvT1hYlsTzF1AJWrsytw43hlIqrZTHyaARQuVGOlnLsFnu0gymuOYsNiEJjtbXwa z4eeMvgMYNuF7lErFt3Y7k3GR35rVrMhyfIHggSpqxl6785tywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLdODGqkg2LLqbEQPm2sxzvWLPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzQ2Mzc4YzQtMTA2Yy0z NDBhLWJkY2QtYzE3OTgxZDRkYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADWsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqiIJAtxV/KkCC06/Pl48FnsMvASuZ5foo1CeHGxsIkwiK41Fq9/vvE V/T3gCi3cvbMO0NIt/XjsvtNWNJvZ8zwMzDh3n3W7P9Cj7fAm2OkfvyIib585/GQ KMQogWthYxCECUvRzruJvZn43a3JGFZRAwOu14Kiiz7Rxphnt34Y3P1Wdxk0Mj/R Q7BoBoiqu4pkbgaO7ZMI3m36a476qFtDYRzRdTTPRdZMwj37VF9UazXKjlNm8VSq LRf4BPMKdxm761en3g+NwA1BJWh47bSPTWhR7ALh4cbM9k/oZgOQDas9XtIaPxkP jMfNmD+beCObdi21xd1oEyktdetEkV4= -----END CERTIFICATE-----Generated at Sat Sep 5 08:13:27 2026 by rpki-client