$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/0b10da6f-aa6a-33a4-9562-db6f185f9820.roa File: 0b10da6f-aa6a-33a4-9562-db6f185f9820.roa (raw, json) Hash identifier: TAPvrX5vVqMOiNMl6S6iJWyoAcHGe9iP3QEcRwDw86Y= Subject key identifier: 08:6A:7D:1B:E6:2D:5D:22:D4:72:9B:4C:8B:66:B3:9A:44:29:59:D3 Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584EA793F83B1562FBD6606EB300 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/0b10da6f-aa6a-33a4-9562-db6f185f9820.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11096 IP address blocks: 35.128.193.0/24 maxlen: 24 35.128.193.80/28 maxlen: 28 35.128.193.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:f8:3b:15:62:fb:d6:60:6e:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=11babbf0-b935-4d7a-9b3e-3f261d766a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:4c:ad:b3:f1:b0:b3:f9:2a:73:f2:bc:2f: 6f:50:31:ba:21:09:5c:6a:a4:be:49:a5:46:92:f8: ad:3a:2d:cd:a3:b6:b1:0f:15:ab:bb:ad:5d:35:0e: 63:fe:35:a1:24:57:62:93:18:cf:1b:65:f3:8a:8f: cc:fb:49:f1:c9:85:04:7b:fc:26:f1:32:19:28:ba: 87:29:38:b7:93:5e:94:6e:86:28:73:3b:66:d7:82: 1d:8e:1c:52:46:b2:fa:a5:cf:2f:d2:b2:50:9f:90: bd:46:a5:76:c8:12:88:33:5c:97:e1:0d:81:d1:23: a1:9f:79:39:d1:b2:34:3b:f7:5a:fc:4f:03:85:42: 7a:1d:ef:01:62:1a:e9:82:9a:3e:0c:1a:1b:7a:7d: 57:76:a3:5b:ed:ec:87:79:2c:ac:5b:b7:eb:2b:ec: c7:64:2a:3a:f2:9e:0f:22:04:13:db:2f:3d:8d:db: 8e:28:50:e2:21:93:3f:43:37:34:c3:ff:db:fe:07: 2d:e5:9a:39:65:e0:20:15:cc:02:fa:7c:68:64:79: 1b:ba:08:b6:6d:9d:86:70:62:2f:83:aa:ba:b9:6b: ac:2b:7d:1a:b5:af:47:23:8e:be:2f:ad:ac:1b:af: 83:b4:da:b2:a1:51:83:33:37:a4:0d:ac:d0:fd:0a: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6A:7D:1B:E6:2D:5D:22:D4:72:9B:4C:8B:66:B3:9A:44:29:59:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/0b10da6f-aa6a-33a4-9562-db6f185f9820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7b:f7:99:2b:7a:82:5d:97:d0:be:83:6a:57:9e:d6:52:a8: dd:4d:48:35:d0:5d:41:7c:56:4f:dd:aa:f3:0e:c7:c3:04:7a: ed:cf:f6:16:72:9e:bb:ae:dc:51:9f:fd:97:31:e6:ce:8c:f7: d8:b7:e6:c5:8a:03:44:fb:bc:85:91:09:50:ce:be:62:1f:72: a1:ea:9f:32:ea:db:ed:07:db:f5:d6:dc:f3:e8:69:b0:55:bd: 29:80:f1:a2:d1:58:28:1c:62:de:a2:0c:03:26:a2:48:9b:0a: 02:ba:01:f1:a9:8e:f4:d4:d6:31:53:23:88:6e:33:94:06:3d: b2:1a:6c:9d:56:df:45:b3:c2:25:26:b1:f2:68:e3:86:35:bd: 68:00:43:fa:e4:9b:df:39:05:7b:e3:fe:9c:10:25:98:87:ac: dc:bc:b6:d2:94:7c:42:ad:8b:a9:e0:c9:f0:f6:a6:96:32:45: dc:8c:4c:9c:bd:8e:07:2c:b6:f7:1f:eb:82:29:b4:84:cc:0f: 67:0a:86:99:29:2e:eb:5f:d5:d8:dc:4c:64:a4:16:25:46:3e: 8e:5d:e8:9d:77:c7:d6:ba:d7:6a:29:17:2c:b8:f1:e2:ff:ce: 2e:f0:48:a3:df:b4:d6:b5:bf:91:82:f0:1c:52:2d:86:25:32: 66:94:b6:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk/g7FWL71mBuswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTFiYWJiZjAtYjkzNS00ZDdhLTliM2UtM2YyNjFkNzY2YTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJFMrbPxsLP5KnPyvC9vUDG6IQlcaqS+SaVG kvitOi3No7axDxWru61dNQ5j/jWhJFdikxjPG2Xzio/M+0nxyYUEe/wm8TIZKLqH KTi3k16UboYocztm14IdjhxSRrL6pc8v0rJQn5C9RqV2yBKIM1yX4Q2B0SOhn3k5 0bI0O/da/E8DhUJ6He8BYhrpgpo+DBoben1XdqNb7eyHeSysW7frK+zHZCo68p4P IgQT2y89jduOKFDiIZM/Qzc0w//b/gct5Zo5ZeAgFcwC+nxoZHkbugi2bZ2GcGIv g6q6uWusK30ata9HI46+L62sG6+DtNqyoVGDMzekDazQ/Qrv6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhqfRvmLV0i1HKbTItms5pEKVnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvMGIxMGRhNmYtYWE2YS0z M2E0LTk1NjItZGI2ZjE4NWY5ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF795kreoJdl9C+g2pXntZSqN1NSDXQXUF8Vk/dqvMOx8MEeu3P9hZy nruu3FGf/Zcx5s6M99i35sWKA0T7vIWRCVDOvmIfcqHqnzLq2+0H2/XW3PPoabBV vSmA8aLRWCgcYt6iDAMmokibCgK6AfGpjvTU1jFTI4huM5QGPbIabJ1W30WzwiUm sfJo44Y1vWgAQ/rkm985BXvj/pwQJZiHrNy8ttKUfEKti6ngyfD2ppYyRdyMTJy9 jgcstvcf64IptITMD2cKhpkpLutf1djcTGSkFiVGPo5d6J13x9a612opFyy48eL/ zi7wSKPftNa1v5GC8BxSLYYlMmaUtkw= -----END CERTIFICATE-----Generated at Sat Sep 12 10:21:33 2026 by rpki-client