$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b59a9a6e-3377-39b4-8f29-dbdc3f5a2f1a.roa File: b59a9a6e-3377-39b4-8f29-dbdc3f5a2f1a.roa (raw, json) Hash identifier: lZbVJmi+4NjhUB8RTP4E3J6tfvzf/2557o5ADxKlHRs= Subject key identifier: 30:05:22:8C:FA:36:22:F6:B2:14:5F:91:0C:CE:83:D8:11:E9:3A:1D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423520A0C248237A71B2D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b59a9a6e-3377-39b4-8f29-dbdc3f5a2f1a.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Thu 04 Apr 2030 04:00:00 +0000 asID: 8068 IP address blocks: 13.107.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:52:0a:0c:24:82:37:a7:1b:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Apr 4 04:00:00 2030 GMT Subject: CN=d74193c7-c87f-4b7f-9764-1d15315ded31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:57:7a:c5:30:89:db:40:7b:32:e1:cc:cb: 15:e8:ef:5e:38:1b:fc:11:42:34:4e:00:27:36:6a: b5:e5:9b:64:37:36:f8:28:ad:6b:34:5b:18:5c:58: c7:00:45:5d:3e:b8:b1:ce:68:7e:a7:81:ed:b0:19: d2:c8:07:d0:dd:ca:b6:5a:56:a8:22:8f:44:9a:b1: 11:75:f5:43:de:89:61:c8:91:e8:56:88:86:e0:79: b4:7d:bb:77:26:55:d8:d8:a8:59:d8:98:0b:43:b8: 32:36:d9:44:92:71:2e:e2:0f:ea:a8:0b:c1:3c:22: b9:96:c8:10:30:4a:86:36:04:f7:5a:34:4b:5a:3c: 32:0f:cb:30:8c:a1:9d:51:18:7b:ac:e8:4b:01:0a: c2:ea:54:de:6d:da:81:1d:40:48:67:bf:cd:1c:92: fb:1f:9d:79:83:d6:be:7e:bc:f5:10:f8:df:8d:57: 27:f9:f1:54:83:0e:ed:84:b1:f5:2a:df:bb:49:43: 9b:07:3f:51:c3:c3:01:f7:4b:5d:76:53:dd:54:5c: c6:e9:2a:ec:5e:fc:ff:8f:4d:d0:06:52:9d:91:d9: 02:92:65:d5:32:50:ef:0e:e3:8b:9b:3a:bd:52:85: 71:4b:1a:fe:a1:34:88:44:1b:22:f9:c0:dd:6e:77: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:05:22:8C:FA:36:22:F6:B2:14:5F:91:0C:CE:83:D8:11:E9:3A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b59a9a6e-3377-39b4-8f29-dbdc3f5a2f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 13.107.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8a:da:e0:79:10:5a:d5:c6:0f:8c:69:50:25:67:5b:bc:97: f8:56:57:2b:a5:14:f7:fb:22:d0:7b:e8:bc:7b:81:5f:1f:25: 01:09:a5:c3:bb:da:c5:60:6b:f1:66:2b:a4:70:30:6c:fd:dc: 2d:aa:fd:56:48:fb:db:4e:3e:b3:24:e2:76:ea:99:45:b5:1a: 2d:59:92:7b:76:c6:81:ac:ba:26:81:e0:e3:7f:44:bf:74:d0: 99:04:00:c0:21:b0:67:86:8d:82:eb:b8:54:d9:d3:0a:7b:98: 52:3a:46:16:4d:f4:7b:8d:f1:b2:72:5a:8d:0e:f0:3e:32:2e: 92:7b:6b:61:69:a5:1b:89:ed:de:70:ee:70:d3:59:87:29:ed: 34:4e:f4:9c:87:7a:d5:d7:8e:18:9a:6b:d3:c7:da:a8:7b:78: 9c:69:ff:f7:ba:5c:13:a2:30:2a:05:d3:d9:28:13:a7:a1:11: f1:84:37:fd:7b:3e:5e:71:2e:90:58:42:11:ee:0f:e5:20:00: 8f:12:da:fe:cc:64:2d:f2:19:e0:f0:da:36:d8:fb:62:65:7f: 30:8f:f1:b2:3c:24:31:33:84:c4:be:72:5d:34:b4:c1:a9:b1: b2:9e:9c:94:2b:04:17:56:b8:89:1f:5c:27:1b:b6:fc:20:55: b6:dc:b5:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1IKDCSCN6cbLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDQwNDA0MDAwMFowLzEtMCsGA1UEAxMk ZDc0MTkzYzctYzg3Zi00YjdmLTk3NjQtMWQxNTMxNWRlZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd1XesUwidtAezLhzMsV6O9eOBv8EUI0TgAn Nmq15ZtkNzb4KK1rNFsYXFjHAEVdPrixzmh+p4HtsBnSyAfQ3cq2WlaoIo9EmrER dfVD3olhyJHoVoiG4Hm0fbt3JlXY2KhZ2JgLQ7gyNtlEknEu4g/qqAvBPCK5lsgQ MEqGNgT3WjRLWjwyD8swjKGdURh7rOhLAQrC6lTebdqBHUBIZ7/NHJL7H515g9a+ frz1EPjfjVcn+fFUgw7thLH1Kt+7SUObBz9Rw8MB90tddlPdVFzG6SrsXvz/j03Q BlKdkdkCkmXVMlDvDuOLmzq9UoVxSxr+oTSIRBsi+cDdbnd+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAFIoz6NiL2shRfkQzOg9gR6TodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjU5YTlhNmUtMzM3Ny0z OWI0LThmMjktZGJkYzNmNWEyZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADWsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCK2uB5EFrVxg+MaVAlZ1u8l/hWVyulFPf7ItB76Lx7gV8fJQEJpcO7 2sVga/FmK6RwMGz93C2q/VZI+9tOPrMk4nbqmUW1Gi1Zknt2xoGsuiaB4ON/RL90 0JkEAMAhsGeGjYLruFTZ0wp7mFI6RhZN9HuN8bJyWo0O8D4yLpJ7a2FppRuJ7d5w 7nDTWYcp7TRO9JyHetXXjhiaa9PH2qh7eJxp//e6XBOiMCoF09koE6ehEfGEN/17 Pl5xLpBYQhHuD+UgAI8S2v7MZC3yGeDw2jbY+2JlfzCP8bI8JDEzhMS+cl00tMGp sbKenJQrBBdWuIkfXCcbtvwgVbbctZM= -----END CERTIFICATE-----Generated at Sat Sep 5 07:37:52 2026 by rpki-client