$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e08baf6-b922-395b-a118-eb68e7a9f0ae.roa File: 9e08baf6-b922-395b-a118-eb68e7a9f0ae.roa (raw, json) Hash identifier: wvtfxvW9bSVWt7Z21N7tPO3foCCDXe/NenKGj8eND1A= Subject key identifier: 80:0A:86:E4:B4:E7:4E:5B:AE:20:75:2C:1C:24:6A:AB:EA:7A:E8:9B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423515F4DD00F8150D47D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e08baf6-b922-395b-a118-eb68e7a9f0ae.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Sun 24 Mar 2030 04:00:00 +0000 asID: 8068 IP address blocks: 13.107.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:51:5f:4d:d0:0f:81:50:d4:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Mar 24 04:00:00 2030 GMT Subject: CN=942195f6-b5c4-450b-88e7-a2cc16a7c78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:19:95:33:47:22:38:e3:e9:84:9a:89:2d: af:1f:c3:42:17:94:ad:07:fa:0d:f9:ff:0c:3b:b5: 07:fd:b3:d5:a9:41:c1:86:4d:3f:da:bf:1a:47:83: 71:28:f2:81:e7:a4:c5:48:60:eb:2a:a5:b6:54:3d: 34:73:3c:64:b5:c8:d8:af:6d:db:3d:1f:21:a9:f5: fb:71:bf:22:81:27:d8:0e:5b:2f:8b:d1:01:97:50: 1c:27:86:60:da:06:8d:b1:33:d1:f6:53:0d:0b:ac: 01:99:d8:17:c9:67:7d:2b:43:4a:a8:9e:a0:12:1c: f7:c3:d0:05:5b:4a:3f:06:8b:68:27:31:3e:2a:8f: be:02:9b:e8:06:71:15:e9:3d:ff:3c:c2:2e:e5:fb: 1b:58:b8:36:6d:cd:02:21:c5:8d:f3:87:9c:7d:f5: 03:d2:87:f9:2c:bc:11:f5:ba:43:52:e7:f6:b4:56: 30:69:5f:e3:be:80:6e:6f:4b:35:9b:74:27:fc:6d: 30:cd:5d:f8:a2:04:d0:85:24:f7:ea:5e:bb:41:cd: 1e:e7:d0:23:a1:69:f0:33:36:34:6b:c1:83:bd:b0: 3e:85:09:86:0b:c3:0c:66:9d:1d:a9:b3:0d:35:e0: 8f:8a:d4:7d:92:77:c5:0d:c1:f7:1e:74:af:ac:2e: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0A:86:E4:B4:E7:4E:5B:AE:20:75:2C:1C:24:6A:AB:EA:7A:E8:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e08baf6-b922-395b-a118-eb68e7a9f0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 13.107.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d2:6b:15:7a:5d:e4:44:e3:29:01:10:ff:d0:5a:44:3c:95: 0b:c3:1c:03:f7:15:de:b6:fe:f1:ca:4f:e2:d5:32:fa:53:10: 2b:b6:b6:19:7f:2f:95:c9:9d:89:90:05:54:86:69:e4:3d:40: a4:20:20:17:a8:b7:d9:da:80:f2:f3:bf:09:1e:a4:79:8b:36: 76:d1:a4:29:9f:4f:77:64:86:98:f4:82:0c:66:e0:91:46:a0: fa:1b:a6:98:8d:f1:90:1d:8f:d0:a5:8b:7d:ec:e7:78:62:d5: e8:d1:5c:d5:76:38:a6:4f:8c:22:e1:59:c0:1e:6c:5b:71:46: c2:10:b6:bf:fc:a4:1b:87:d7:25:d9:bd:f0:bb:ee:4e:24:01: 16:3c:c0:05:57:83:56:c6:7a:9f:92:39:a6:39:86:c7:4f:2a: 28:09:87:51:32:a5:85:9c:d7:5e:63:72:c6:9a:28:97:4e:81: 58:e8:6d:d6:9c:2e:a4:ad:36:ae:b2:17:ed:f4:ab:b5:17:0b: c1:dc:a6:27:d0:cd:8d:4a:e3:8c:0c:40:1a:65:e9:21:e0:5d: 8a:79:09:70:d6:4d:02:23:73:67:47:51:33:59:a8:0e:3b:12: b8:11:5a:62:ed:23:92:97:6b:e5:c5:31:73:29:87:da:ec:a7: 6e:3f:66:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1FfTdAPgVDUfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDMyNDA0MDAwMFowLzEtMCsGA1UEAxMk OTQyMTk1ZjYtYjVjNC00NTBiLTg4ZTctYTJjYzE2YTdjNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgscZlTNHIjjj6YSaiS2vH8NCF5StB/oN+f8M O7UH/bPVqUHBhk0/2r8aR4NxKPKB56TFSGDrKqW2VD00czxktcjYr23bPR8hqfX7 cb8igSfYDlsvi9EBl1AcJ4Zg2gaNsTPR9lMNC6wBmdgXyWd9K0NKqJ6gEhz3w9AF W0o/BotoJzE+Ko++ApvoBnEV6T3/PMIu5fsbWLg2bc0CIcWN84ecffUD0of5LLwR 9bpDUuf2tFYwaV/jvoBub0s1m3Qn/G0wzV34ogTQhST36l67Qc0e59AjoWnwMzY0 a8GDvbA+hQmGC8MMZp0dqbMNNeCPitR9knfFDcH3HnSvrC4ZmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAKhuS0505briB1LBwkaqvqeuibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWUwOGJhZjYtYjkyMi0z OTViLWExMTgtZWI2OGU3YTlmMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADWv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPSaxV6XeRE4ykBEP/QWkQ8lQvDHAP3Fd62/vHKT+LVMvpTECu2thl/ L5XJnYmQBVSGaeQ9QKQgIBeot9nagPLzvwkepHmLNnbRpCmfT3dkhpj0ggxm4JFG oPobppiN8ZAdj9Cli33s53hi1ejRXNV2OKZPjCLhWcAebFtxRsIQtr/8pBuH1yXZ vfC77k4kARY8wAVXg1bGep+SOaY5hsdPKigJh1EypYWc115jcsaaKJdOgVjobdac LqStNq6yF+30q7UXC8HcpifQzY1K44wMQBpl6SHgXYp5CXDWTQIjc2dHUTNZqA47 ErgRWmLtI5KXa+XFMXMph9rsp24/Zm0= -----END CERTIFICATE-----Generated at Sat Sep 5 05:46:28 2026 by rpki-client