$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa File: 5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa (raw, json) Hash identifier: 4bk/US1R5Kd034L/s8a5YPHaVSAbasscq50tYRKRXJY= Subject key identifier: AA:57:2D:0E:9A:44:D9:E1:77:5F:BA:29:F0:2A:3C:67:39:A6:D7:F0 Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584ED1672B8A24225D2A9DCD87E0 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 11096 IP address blocks: 35.128.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:2b:8a:24:22:5d:2a:9d:cd:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=c2471ee6-d9fd-4c53-a92c-fc31ea54a4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:f8:52:24:e7:e5:ab:ed:88:3e:44:cd:41: 89:6a:66:02:86:6d:d1:9d:bc:49:5b:15:2b:cf:69: 41:7d:f6:fa:9e:30:00:2b:5d:e5:73:4e:e1:56:1c: fe:53:1d:b6:0f:51:14:00:c6:e0:26:ab:b0:c6:78: bc:da:f8:87:10:d4:14:63:38:32:dd:46:76:ca:b5: df:c0:89:a5:f7:07:31:d1:15:74:41:b4:fc:aa:92: 73:a6:0a:72:24:69:f5:bd:40:c8:53:c0:64:f7:c9: 1d:02:4e:da:26:94:a9:45:d6:40:f5:68:10:bf:82: 58:39:0d:56:ef:30:39:35:4b:32:8b:42:63:dd:ab: 17:e6:59:30:b7:23:50:74:49:ec:75:a8:81:42:6f: 7b:6c:c0:33:e2:05:82:ae:94:d2:ff:16:a8:55:f6: 01:ed:27:5c:95:70:a7:5f:42:0d:3a:cb:5d:59:f7: 08:a8:eb:ee:0b:27:a0:25:a5:26:08:8b:fe:5f:66: 04:2b:c9:8f:ef:bb:9a:c1:c1:8f:99:eb:fe:55:82: 37:30:9e:01:94:4c:33:cb:95:14:ea:64:4d:b5:ff: d5:86:d0:00:8d:f1:a8:d8:e5:f3:5f:77:6f:f1:68: 7f:51:67:da:7b:f7:b8:5d:3e:e0:ac:af:63:92:5b: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:2D:0E:9A:44:D9:E1:77:5F:BA:29:F0:2A:3C:67:39:A6:D7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:db:8a:8d:4d:ce:e4:18:99:a8:98:5b:7a:fc:bf:62:41:a5: f1:47:61:1c:ec:1f:cb:8d:d5:b0:4f:c7:28:4c:1d:1d:24:7f: a1:84:6a:94:5d:e7:b3:24:e4:33:85:6f:b8:2a:ea:9b:22:91: d7:40:e0:d8:59:20:89:2d:58:b8:f9:d4:01:4a:b8:66:49:7d: 3f:f1:d2:49:94:6e:74:c4:47:dd:b5:b2:74:e0:39:09:60:0f: 13:03:67:1b:d1:0d:c7:ea:d1:dc:70:4f:ff:2a:7c:28:77:ce: 13:46:21:ae:0b:17:d2:cd:64:22:f9:ad:cc:0d:6e:fc:7c:51: 97:90:17:d6:5a:be:34:d5:cf:f4:b9:57:01:1b:96:d6:bc:e6: 16:11:8c:bd:bd:e8:b8:11:24:11:9e:68:23:84:b8:23:cb:67: 19:95:da:88:4c:14:f3:fc:90:f2:df:8b:16:4f:8f:7a:44:6c: 99:69:a8:8f:23:a3:45:c2:25:6b:44:77:d1:55:2c:5b:f7:2f: 00:60:19:f1:fc:63:11:c1:dc:cf:94:a5:dc:d1:a8:26:fb:bb: ab:57:9a:95:76:08:c4:8d:48:0a:01:42:69:af:32:e5:13:12: bb:7d:59:a3:09:13:f7:8d:b1:c5:94:73:f9:f1:35:f7:23:61: 08:59:8b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZyuKJCJdKp3Nh+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk YzI0NzFlZTYtZDlmZC00YzUzLWE5MmMtZmMzMWVhNTRhNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/T4UiTn5avtiD5EzUGJamYChm3RnbxJWxUr z2lBffb6njAAK13lc07hVhz+Ux22D1EUAMbgJquwxni82viHENQUYzgy3UZ2yrXf wIml9wcx0RV0QbT8qpJzpgpyJGn1vUDIU8Bk98kdAk7aJpSpRdZA9WgQv4JYOQ1W 7zA5NUsyi0Jj3asX5lkwtyNQdEnsdaiBQm97bMAz4gWCrpTS/xaoVfYB7SdclXCn X0INOstdWfcIqOvuCyegJaUmCIv+X2YEK8mP77uawcGPmev+VYI3MJ4BlEwzy5UU 6mRNtf/VhtAAjfGo2OXzX3dv8Wh/UWfae/e4XT7grK9jklvJmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpXLQ6aRNnhd1+6KfAqPGc5ptfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvNWFlZDRhMjctYTgzYi0z MzgzLTlhMjYtMWI2YWE1ZTM3MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzbio1NzuQYmaiYW3r8v2JBpfFHYRzsH8uN1bBPxyhMHR0kf6GEapRd 57Mk5DOFb7gq6psikddA4NhZIIktWLj51AFKuGZJfT/x0kmUbnTER921snTgOQlg DxMDZxvRDcfq0dxwT/8qfCh3zhNGIa4LF9LNZCL5rcwNbvx8UZeQF9ZavjTVz/S5 VwEblta85hYRjL296LgRJBGeaCOEuCPLZxmV2ohMFPP8kPLfixZPj3pEbJlpqI8j o0XCJWtEd9FVLFv3LwBgGfH8YxHB3M+UpdzRqCb7u6tXmpV2CMSNSAoBQmmvMuUT Ert9WaMJE/eNscWUc/nxNfcjYQhZixQ= -----END CERTIFICATE-----Generated at Sat Sep 12 10:21:25 2026 by rpki-client