$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa File: a298af95-2ee0-38a9-a1e4-b40b04c90319.roa (raw, json) Hash identifier: znyHGSE5OcABJv+RJSDeMxLpDaCaFkg42WCFa27sV7o= Subject key identifier: 07:25:DF:8A:18:63:9A:7A:F5:97:6A:D3:79:3F:10:63:16:50:39:12 Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584D55BCB6AEF7608C7834E21C00 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 11096 IP address blocks: 35.128.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b6:ae:f7:60:8c:78:34:e2:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3a3a2873-fcf1-41bc-9eee-5847affe0408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:34:16:dc:06:09:1a:c2:3a:1f:09:fc:37: c8:b4:aa:25:bc:66:3e:53:c3:76:d8:b5:64:69:96: c3:c1:b5:74:ae:8d:c0:1f:d1:9f:c8:2e:eb:80:96: a9:5d:bc:0b:6d:cb:cd:21:e1:29:1a:00:b5:df:f0: 26:b6:ef:b4:8b:a0:5c:0f:5a:ec:d2:1c:df:5e:ac: a7:96:44:a0:e3:e2:6a:a3:6e:75:2b:f1:06:72:2c: 15:9a:e2:3f:25:d3:f5:d5:fa:d8:35:f7:a4:63:68: 0d:be:75:f4:fc:68:a5:3f:42:81:5e:3c:46:6e:87: 16:e5:bb:53:2b:da:e8:cc:94:1f:b0:c5:61:d9:3e: 18:29:a3:86:ef:c3:96:51:0b:3a:b7:05:92:cd:10: 92:ec:ad:43:04:c0:15:6c:dd:fe:0f:ef:dc:18:6a: 99:d8:0b:26:00:53:76:6d:7b:cb:22:d4:8e:23:0c: 78:76:5b:70:60:c0:29:00:8f:76:bd:56:e0:07:a4: a2:78:86:7d:d9:de:cb:4c:f0:8e:80:59:2c:65:21: 8f:13:0e:bc:78:07:17:66:3c:ad:4d:df:33:f9:21: da:7e:9b:57:39:9c:ae:5a:af:54:24:2d:4a:fc:90: a6:da:c4:23:26:a4:4a:89:c2:3c:a1:ac:3e:2a:44: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:25:DF:8A:18:63:9A:7A:F5:97:6A:D3:79:3F:10:63:16:50:39:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b7:cd:19:8c:fe:37:d3:07:e2:b1:c1:b3:0f:72:12:5e:e0: bb:fd:9f:0a:51:76:d3:b6:41:f2:22:3a:21:29:0d:b8:6e:3b: d5:32:ec:a7:2e:19:0f:2a:14:7b:30:c7:1e:b6:78:ec:11:92: 74:3f:0d:f2:7a:ed:78:c6:95:98:4e:90:15:b0:46:82:ee:11: ac:41:12:2a:f9:0b:d6:55:db:84:05:fa:ce:43:cf:a8:88:91: 4e:7a:77:6c:1b:b8:92:6c:38:64:8c:f1:6e:13:cc:ec:36:67: b6:45:d3:b5:34:e5:46:c9:2c:ea:57:e3:15:a7:c9:57:d1:bb: 05:95:66:23:93:39:81:85:7d:e8:42:26:0a:41:a6:be:ae:e4: 42:9c:c4:97:8d:7e:7e:35:6c:1d:bf:87:53:b6:29:a0:d6:cb: 07:e5:6b:39:69:41:91:29:05:4e:49:d6:b5:bd:0d:17:9c:1d: 79:e1:ff:7d:d2:6e:04:82:fa:07:0f:b0:61:22:b6:72:a0:84: 02:1f:ae:09:f8:1b:fd:f5:cf:34:00:fe:d5:85:46:a5:84:d8: 1b:c1:e3:5d:5d:f8:04:d7:72:bd:53:6a:cc:d9:6f:0f:fe:6e: 71:e7:03:cb:57:a3:6c:a6:96:ad:db:bc:04:82:50:d0:b7:9d: 4a:fe:c4:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLau92CMeDTiHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2EzYTI4NzMtZmNmMS00MWJjLTllZWUtNTg0N2FmZmUwNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVA0FtwGCRrCOh8J/DfItKolvGY+U8N22LVk aZbDwbV0ro3AH9GfyC7rgJapXbwLbcvNIeEpGgC13/Amtu+0i6BcD1rs0hzfXqyn lkSg4+Jqo251K/EGciwVmuI/JdP11frYNfekY2gNvnX0/GilP0KBXjxGbocW5btT K9rozJQfsMVh2T4YKaOG78OWUQs6twWSzRCS7K1DBMAVbN3+D+/cGGqZ2AsmAFN2 bXvLItSOIwx4dltwYMApAI92vVbgB6SieIZ92d7LTPCOgFksZSGPEw68eAcXZjyt Td8z+SHafptXOZyuWq9UJC1K/JCm2sQjJqRKicI8oaw+KkQbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcl34oYY5p69Zdq03k/EGMWUDkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvYTI5OGFmOTUtMmVlMC0z OGE5LWExZTQtYjQwYjA0YzkwMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG3zRmM/jfTB+KxwbMPchJe4Lv9nwpRdtO2QfIiOiEpDbhuO9Uy7Kcu GQ8qFHswxx62eOwRknQ/DfJ67XjGlZhOkBWwRoLuEaxBEir5C9ZV24QF+s5Dz6iI kU56d2wbuJJsOGSM8W4TzOw2Z7ZF07U05UbJLOpX4xWnyVfRuwWVZiOTOYGFfehC JgpBpr6u5EKcxJeNfn41bB2/h1O2KaDWywflazlpQZEpBU5J1rW9DRecHXnh/33S bgSC+gcPsGEitnKghAIfrgn4G/31zzQA/tWFRqWE2BvB411d+ATXcr1TaszZbw/+ bnHnA8tXo2ymlq3bvASCUNC3nUr+xEc= -----END CERTIFICATE-----Generated at Wed Apr 15 16:15:45 2026 by rpki-client