$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa File: a298af95-2ee0-38a9-a1e4-b40b04c90319.roa (raw, json) Hash identifier: kXId0VkQU/yTeXKdtscXxdpig9KskTcU+Cuy3zsTACs= Subject key identifier: A3:77:2F:4B:8F:7C:0B:99:22:5E:9D:D4:A8:43:95:E1:C7:6C:32:7F Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584ED86489B66497A287801D4260 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 11096 IP address blocks: 35.128.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:89:b6:64:97:a2:87:80:1d:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=78e7a121-8ee7-4ead-9d93-915c07cdc8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:86:cc:3b:c3:49:fb:da:8f:f1:5f:b2:62: 1e:e3:0f:31:36:43:ec:2f:2d:6d:3e:c1:1a:d3:33: 70:be:65:8d:17:96:e2:30:f5:95:be:47:23:99:55: e7:d7:2f:6c:1c:2a:80:5a:a2:80:d3:0b:ef:2d:73: 82:2b:21:3e:87:38:76:e4:d3:01:47:98:db:b4:89: 3e:13:5d:a6:ee:1c:60:23:2a:36:49:3e:3d:3c:4a: 7e:93:83:6b:9d:79:df:db:00:1d:08:ec:25:12:df: a5:61:9d:71:ba:ca:68:6d:0e:ca:cf:4c:8c:0c:02: 78:3a:2f:c9:30:0f:26:59:eb:9b:3e:db:3c:60:13: 21:5a:ee:47:f9:c4:88:ae:e7:20:23:7f:c5:8e:a7: 0b:c3:2b:f3:26:e0:c2:8c:59:7d:6e:5e:d6:2f:d5: 9e:e4:42:64:97:0c:23:28:65:75:22:27:05:de:9c: 77:11:c6:6c:ae:81:e0:67:86:4b:4a:fc:7d:19:77: 1d:ba:19:ea:d8:26:2e:e0:a4:8a:42:18:09:60:06: 7a:39:4a:3a:33:fe:85:71:b6:98:32:ad:33:8f:21: 06:35:21:80:7e:e4:68:bb:50:f6:28:ff:e7:2f:fc: 25:68:05:76:62:44:e5:6d:cf:7e:e3:fa:0a:7a:e0: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:77:2F:4B:8F:7C:0B:99:22:5E:9D:D4:A8:43:95:E1:C7:6C:32:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:61:52:ed:88:a2:53:99:91:ba:8f:e1:c7:e0:96:c0:00:4d: ff:cd:bb:3a:55:fc:05:0b:47:fe:0f:d5:31:2c:c4:0d:bc:c2: 2e:9d:e7:d4:ae:2b:05:06:17:25:0f:c1:f6:05:14:dd:d3:0b: 60:9b:64:2d:f1:ac:73:63:72:a2:1e:78:dd:fa:74:e5:63:b0: f5:1e:62:1c:93:de:b9:68:84:c7:b2:64:5f:2d:ca:36:ad:c6: 1f:c0:be:fe:db:4f:38:71:8b:67:90:98:63:c1:15:a5:4d:56: 61:02:cf:e8:9f:70:c3:82:5e:10:f1:a2:73:16:f6:95:e6:14: f4:0b:74:1e:0b:fe:50:cd:bb:f4:04:f7:5c:d1:4c:49:c8:44: d1:96:fe:69:65:64:fc:f5:af:2f:ed:6c:ca:46:ac:e1:6b:ab: c8:94:41:14:0c:80:79:0b:79:57:86:8a:ab:fc:5e:69:a5:c7: 24:df:40:ee:59:12:df:f7:23:7a:a7:30:02:b2:0a:fb:b7:3a: fc:f1:43:7b:42:2e:a8:91:6f:f5:d2:c8:d5:90:94:44:39:7b: 06:7b:a4:0a:e1:70:ad:29:40:c8:d2:da:e9:34:8d:81:85:e2: 6e:d7:ad:83:a2:af:9c:45:ec:9d:4f:cc:7e:52:91:15:d6:c6: 7d:13:e1:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIm2ZJeih4AdQmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NzhlN2ExMjEtOGVlNy00ZWFkLTlkOTMtOTE1YzA3Y2RjOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VyGzDvDSfvaj/FfsmIe4w8xNkPsLy1tPsEa 0zNwvmWNF5biMPWVvkcjmVXn1y9sHCqAWqKA0wvvLXOCKyE+hzh25NMBR5jbtIk+ E12m7hxgIyo2ST49PEp+k4NrnXnf2wAdCOwlEt+lYZ1xuspobQ7Kz0yMDAJ4Oi/J MA8mWeubPts8YBMhWu5H+cSIrucgI3/FjqcLwyvzJuDCjFl9bl7WL9We5EJklwwj KGV1IicF3px3EcZsroHgZ4ZLSvx9GXcduhnq2CYu4KSKQhgJYAZ6OUo6M/6FcbaY Mq0zjyEGNSGAfuRou1D2KP/nL/wlaAV2YkTlbc9+4/oKeuBPQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN3L0uPfAuZIl6d1KhDleHHbDJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvYTI5OGFmOTUtMmVlMC0z OGE5LWExZTQtYjQwYjA0YzkwMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxhUu2IolOZkbqP4cfglsAATf/NuzpV/AULR/4P1TEsxA28wi6d59Su KwUGFyUPwfYFFN3TC2CbZC3xrHNjcqIeeN36dOVjsPUeYhyT3rlohMeyZF8tyjat xh/Avv7bTzhxi2eQmGPBFaVNVmECz+ifcMOCXhDxonMW9pXmFPQLdB4L/lDNu/QE 91zRTEnIRNGW/mllZPz1ry/tbMpGrOFrq8iUQRQMgHkLeVeGiqv8XmmlxyTfQO5Z Et/3I3qnMAKyCvu3OvzxQ3tCLqiRb/XSyNWQlEQ5ewZ7pArhcK0pQMjS2uk0jYGF 4m7XrYOir5xF7J1PzH5SkRXWxn0T4YY= -----END CERTIFICATE-----Generated at Sat Sep 12 12:02:22 2026 by rpki-client