$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c539be7-6784-3203-8e7f-ceff4dd4e46d.roa File: 8c539be7-6784-3203-8e7f-ceff4dd4e46d.roa (raw, json) Hash identifier: ydMv+GnGZ7V/0WrTPw1kI1MeDqlyBMXw00RR9C5eLAI= Subject key identifier: 86:D6:F8:5B:67:0F:D2:79:DA:0E:40:77:55:C1:70:E7:08:1F:83:11 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423518C4DF318CD107AD000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c539be7-6784-3203-8e7f-ceff4dd4e46d.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Mon 08 Apr 2030 04:00:00 +0000 asID: 8068 IP address blocks: 13.107.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:51:8c:4d:f3:18:cd:10:7a:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Apr 8 04:00:00 2030 GMT Subject: CN=ad1eac59-19e5-4f7e-9976-0538bf7e62f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:48:a0:b9:93:ab:13:98:6a:03:5d:5c:a7: f7:02:ca:5a:35:ca:68:25:24:86:99:07:d9:46:dc: b5:5f:c3:f4:15:70:a6:44:79:c4:fb:32:57:5d:0b: 21:95:df:ad:79:01:4d:4d:ed:51:a5:36:e1:a7:3c: a7:da:66:13:f9:2e:f3:c5:01:25:5f:a8:b4:29:e8: 35:d6:af:36:c9:ec:60:c3:2a:f7:82:53:7a:85:d5: fc:3e:c4:e6:69:1c:34:ab:ae:1e:6f:aa:b6:2f:3d: 97:11:1c:d3:ac:0e:dc:e7:b9:e2:c1:a8:7f:db:c6: a9:41:aa:d9:f8:d0:b9:e4:15:8d:7f:7a:54:cb:83: e6:dc:bc:48:8b:45:37:58:5b:1d:a6:0a:50:63:a3: ba:25:df:5b:ff:3e:bf:4d:34:39:c1:36:ed:21:b8: de:20:a7:12:e1:71:e1:1f:dc:6f:91:5a:1b:e4:51: dd:59:4a:04:86:5c:f1:0f:6e:d7:48:7b:de:64:da: e6:62:7a:14:6c:25:f6:07:a0:9b:0a:bc:f3:eb:10: 35:f2:be:31:c7:6c:11:09:c0:a1:8f:0c:9c:da:f1: d2:11:e6:ea:79:df:d8:a0:16:63:03:ab:52:d0:7c: 7a:cf:f1:f3:49:cc:ed:c6:d4:ae:d2:65:21:23:aa: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:F8:5B:67:0F:D2:79:DA:0E:40:77:55:C1:70:E7:08:1F:83:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c539be7-6784-3203-8e7f-ceff4dd4e46d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 13.107.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1a:f1:fa:0e:14:9d:0a:01:25:7c:09:81:c4:4c:f9:2a:fc: 4c:26:63:81:ed:ca:cc:1c:76:fa:32:fb:bf:be:c9:1e:bd:05: 97:6b:4b:86:02:13:a2:09:5b:a0:01:ee:7e:33:b1:07:2f:32: 18:61:34:90:d6:a0:b9:11:35:65:23:55:da:b5:ee:68:94:ec: 58:e5:d5:cd:21:10:f6:97:30:21:09:b2:b2:59:b0:d5:d8:dc: 4c:2e:50:56:18:86:06:44:68:97:96:06:91:b8:cc:1e:9f:87: 46:2e:20:c7:ea:82:66:fb:6f:11:4a:77:a3:06:9d:f6:ae:71: ff:bb:83:43:8c:65:c1:13:82:ee:6c:8c:90:dc:8d:9e:24:e9: 1d:1a:fd:b9:dd:2a:24:89:68:b6:ed:71:ac:ac:44:8f:72:f3: 1b:d1:14:e8:78:c4:53:0b:5e:fc:94:d7:fb:cb:03:f1:c3:20: cf:c0:14:e4:3b:46:69:ad:ae:2c:a2:c1:a9:6e:6f:73:25:16: 1f:75:bc:43:a9:db:a2:c9:8f:3b:46:5e:51:1b:ab:f1:76:3d: 38:84:82:72:56:e9:16:e8:a7:51:02:99:ec:71:fb:d8:22:56: 19:4b:ef:2c:0a:88:73:63:25:d1:39:f6:3b:04:6d:20:2f:b3: 09:ce:fe:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1GMTfMYzRB60AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDQwODA0MDAwMFowLzEtMCsGA1UEAxMk YWQxZWFjNTktMTllNS00ZjdlLTk5NzYtMDUzOGJmN2U2MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrlIoLmTqxOYagNdXKf3AspaNcpoJSSGmQfZ Rty1X8P0FXCmRHnE+zJXXQshld+teQFNTe1RpTbhpzyn2mYT+S7zxQElX6i0Keg1 1q82yexgwyr3glN6hdX8PsTmaRw0q64eb6q2Lz2XERzTrA7c57niwah/28apQarZ +NC55BWNf3pUy4Pm3LxIi0U3WFsdpgpQY6O6Jd9b/z6/TTQ5wTbtIbjeIKcS4XHh H9xvkVob5FHdWUoEhlzxD27XSHveZNrmYnoUbCX2B6CbCrzz6xA18r4xx2wRCcCh jwyc2vHSEebqed/YoBZjA6tS0Hx6z/HzScztxtSu0mUhI6okCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbW+FtnD9J52g5Ad1XBcOcIH4MRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGM1MzliZTctNjc4NC0z MjAzLThlN2YtY2VmZjRkZDRlNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADWvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYa8foOFJ0KASV8CYHETPkq/EwmY4Htyswcdvoy+7++yR69BZdrS4YC E6IJW6AB7n4zsQcvMhhhNJDWoLkRNWUjVdq17miU7Fjl1c0hEPaXMCEJsrJZsNXY 3EwuUFYYhgZEaJeWBpG4zB6fh0YuIMfqgmb7bxFKd6MGnfaucf+7g0OMZcETgu5s jJDcjZ4k6R0a/bndKiSJaLbtcaysRI9y8xvRFOh4xFMLXvyU1/vLA/HDIM/AFOQ7 Rmmtriyiwalub3MlFh91vEOp26LJjztGXlEbq/F2PTiEgnJW6Rbop1ECmexx+9gi VhlL7ywKiHNjJdE59jsEbSAvswnO/rc= -----END CERTIFICATE-----Generated at Sat Sep 5 06:45:34 2026 by rpki-client