$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746f8991-e465-3b41-808f-e5b1d0de37bf.roa File: 746f8991-e465-3b41-808f-e5b1d0de37bf.roa (raw, json) Hash identifier: tNt8oYBFyxxt9w70MdsQtugvIOOdNQksd3KO8zcT2uk= Subject key identifier: 09:39:DF:41:4C:81:8E:3C:A2:D2:3B:3A:73:A0:FC:09:60:24:3E:43 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42351AE774C1AECC734F280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746f8991-e465-3b41-808f-e5b1d0de37bf.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Wed 13 Mar 2030 04:00:00 +0000 asID: 8068 IP address blocks: 13.107.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:51:ae:77:4c:1a:ec:c7:34:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Mar 13 04:00:00 2030 GMT Subject: CN=db273280-befc-4de6-afce-386559434e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:c6:26:6b:6c:b4:9e:cf:22:f3:a9:16:f7: f1:04:b2:29:c9:5e:8d:e2:eb:20:32:d8:ea:ae:1a: b2:cb:63:34:96:e7:ef:1b:1e:8f:c8:2b:ae:73:e1: 42:ae:09:ac:42:6d:9f:6e:9b:c3:1c:e8:9f:65:e5: 53:b3:35:cd:49:9e:93:b5:f1:3b:53:4b:16:e4:63: 9a:a0:10:6a:24:18:54:6e:9e:7a:bb:bb:b7:5d:77: 7d:aa:f7:12:86:9b:43:18:d9:1f:73:8c:7f:73:a8: a8:b9:cb:1f:93:07:81:cd:ee:37:e3:8d:8a:68:dd: c0:d7:89:0e:e5:8c:af:39:87:60:1d:7d:e6:84:24: 3a:bb:0d:d3:8e:0c:5a:2a:a2:4a:8d:e1:36:9c:9f: dc:8d:48:96:51:a0:cc:b6:2d:e7:d6:b5:54:46:62: 3d:d4:51:3b:3b:74:3d:8b:09:e6:8d:e2:b1:90:4a: 63:38:11:ec:20:18:80:de:d8:ba:fe:c3:06:fb:de: 79:77:68:a2:e3:04:dd:f2:dc:0b:e8:3c:ea:2b:bc: 78:41:68:ea:25:92:2d:27:e7:9b:66:07:15:9b:ce: ce:8e:b2:3f:a7:21:54:e5:fe:3f:d2:24:c7:82:f5: 74:02:4e:04:77:06:69:f6:42:63:81:2b:5f:ff:8b: 9f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:39:DF:41:4C:81:8E:3C:A2:D2:3B:3A:73:A0:FC:09:60:24:3E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746f8991-e465-3b41-808f-e5b1d0de37bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 13.107.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:da:31:3d:62:b1:f5:3c:80:66:80:17:f6:f3:9e:4f:62:39: 70:f6:60:40:94:9d:fb:bc:47:97:83:52:e6:66:f1:5f:20:25: e7:72:9c:a3:49:bb:01:a6:62:8f:4d:13:e8:6b:97:3c:15:76: 45:9b:6a:a3:4b:5a:22:6b:d4:f7:08:11:fd:86:37:cf:e4:ed: 19:1f:cb:a3:2c:04:8c:0a:b1:39:24:29:f7:0c:3d:49:d1:81: 71:b2:13:70:69:5b:5e:0c:27:60:85:84:fb:38:25:3e:df:c3: f2:97:88:c6:78:0f:ce:6f:7e:20:70:ac:f6:5f:85:d8:c4:ef: 55:6b:ae:d3:ad:a6:98:be:9f:ba:be:31:a5:21:05:96:57:13: c2:8a:3e:a7:6c:fe:4f:99:a2:d9:79:41:de:5f:5b:06:b2:d5: c1:c6:7a:a2:7d:1d:09:7f:c4:fd:73:7d:10:98:78:92:de:60: 28:cf:1d:cd:cd:f1:e3:d6:1d:b2:ef:cc:06:c6:0b:14:f9:bb: 86:b9:de:ea:96:0d:dd:65:74:fb:46:b0:0e:76:ef:06:ac:40: d9:bf:5d:02:dd:91:64:b8:be:d7:47:f2:bc:14:f6:1d:2a:ab: ef:e2:d4:32:57:77:1c:8b:9b:13:c6:dc:0b:30:45:ac:88:6c: 98:48:b2:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1Gud0wa7Mc08oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk ZGIyNzMyODAtYmVmYy00ZGU2LWFmY2UtMzg2NTU5NDM0ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCjGJmtstJ7PIvOpFvfxBLIpyV6N4usgMtjq rhqyy2M0lufvGx6PyCuuc+FCrgmsQm2fbpvDHOifZeVTszXNSZ6TtfE7U0sW5GOa oBBqJBhUbp56u7u3XXd9qvcShptDGNkfc4x/c6ioucsfkweBze43442KaN3A14kO 5YyvOYdgHX3mhCQ6uw3TjgxaKqJKjeE2nJ/cjUiWUaDMti3n1rVURmI91FE7O3Q9 iwnmjeKxkEpjOBHsIBiA3ti6/sMG+955d2ii4wTd8twL6DzqK7x4QWjqJZItJ+eb ZgcVm87OjrI/pyFU5f4/0iTHgvV0Ak4EdwZp9kJjgStf/4uf9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk530FMgY48otI7OnOg/AlgJD5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzQ2Zjg5OTEtZTQ2NS0z YjQxLTgwOGYtZTViMWQwZGUzN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADWsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnaMT1isfU8gGaAF/bznk9iOXD2YECUnfu8R5eDUuZm8V8gJedynKNJ uwGmYo9NE+hrlzwVdkWbaqNLWiJr1PcIEf2GN8/k7Rkfy6MsBIwKsTkkKfcMPUnR gXGyE3BpW14MJ2CFhPs4JT7fw/KXiMZ4D85vfiBwrPZfhdjE71VrrtOtppi+n7q+ MaUhBZZXE8KKPqds/k+Zotl5Qd5fWway1cHGeqJ9HQl/xP1zfRCYeJLeYCjPHc3N 8ePWHbLvzAbGCxT5u4a53uqWDd1ldPtGsA527wasQNm/XQLdkWS4vtdH8rwU9h0q q+/i1DJXdxyLmxPG3AswRayIbJhIsoQ= -----END CERTIFICATE-----Generated at Sat Sep 5 06:41:08 2026 by rpki-client