$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/df6a125b-affb-312c-af61-71917d70c9b4.roa File: df6a125b-affb-312c-af61-71917d70c9b4.roa (raw, json) Hash identifier: 6Rkj/RhIWCgxzqdqRsyNVrxHhqokAej+BnPZBIGJcIs= Subject key identifier: 24:80:2C:50:11:F1:31:6D:EE:7F:A3:AB:A7:3D:B5:0B:40:54:7B:9C Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584D5234ED25D034D20FFAB90040 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/df6a125b-affb-312c-af61-71917d70c9b4.roa Signing time: Sat 28 Mar 2026 18:44:30 +0000 ROA not before: Sat 28 Mar 2026 18:44:30 +0000 ROA not after: Tue 28 Apr 2026 20:27:51 +0000 asID: 198949 IP address blocks: 35.128.207.0/24 maxlen: 24 108.59.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:ed:25:d0:34:d2:0f:fa:b9:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Mar 28 18:44:30 2026 GMT Not After : Apr 28 20:27:51 2026 GMT Subject: CN=ba520a8b-6c65-4ab1-90e4-2cf5c91a8cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:f8:d1:8a:5f:fb:db:8c:e0:b4:90:2c:66: 5a:93:80:34:d6:11:e2:7a:b5:fd:fa:32:3a:be:1c: fd:a0:5a:2a:df:15:96:bb:07:b5:2d:ec:75:60:93: e9:34:d7:91:31:f7:2d:ef:4f:c8:f8:c7:77:13:dd: 0a:30:2f:78:87:2f:cc:73:a6:3e:12:1e:fd:02:33: a7:e2:a3:b8:a5:41:92:e2:16:12:b0:ad:c9:fb:61: 6b:be:82:dc:4f:77:7b:2c:a7:df:87:b4:2d:ba:e0: a0:e0:da:c0:d4:6d:79:31:3d:84:85:9f:9d:b1:cb: d3:78:20:36:e5:5e:12:6a:d2:d3:32:17:2c:67:b4: 51:f0:c6:e6:df:ac:51:5f:c0:74:04:75:9d:01:51: 54:d1:c4:4e:af:09:90:31:81:c8:86:75:38:45:d9: 3f:e9:9c:00:de:b6:c0:fc:96:67:99:4f:ce:76:7d: 59:5f:e7:d4:f0:0d:81:ee:ed:45:a8:0e:94:16:05: e0:96:63:85:fb:f2:b3:2d:f0:8b:5f:92:cf:64:3c: be:7b:e4:de:e8:5a:61:3c:84:5a:b7:38:34:cc:a1: fb:67:38:99:d4:eb:16:33:c0:6d:97:d7:6f:e4:1f: eb:56:dc:ce:41:d1:11:5b:e5:c3:43:fe:ba:c2:c9: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:80:2C:50:11:F1:31:6D:EE:7F:A3:AB:A7:3D:B5:0B:40:54:7B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/df6a125b-affb-312c-af61-71917d70c9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.207.0/24 108.59.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b0:2f:d7:ae:08:97:90:2a:32:a2:62:5a:1d:11:bd:c8:5f: 22:ed:16:ec:91:39:d4:d8:2b:ed:93:6d:2e:1e:23:80:35:6b: ec:ed:0f:42:07:f5:ef:74:36:87:67:16:ae:82:06:c0:f3:9d: 8c:01:fa:4f:23:07:8d:c6:89:94:b7:34:25:57:b1:a6:8c:06: 45:3b:79:a3:d9:c8:2e:a8:9c:b1:5a:0d:a3:ac:1f:7a:21:17: 5d:af:18:5a:7f:e9:12:20:1c:69:bb:8f:81:61:d0:9b:82:d0: ac:9e:8d:79:8d:70:73:dc:e1:4c:ee:80:89:81:be:3d:4b:e2: 6b:b4:dd:73:2b:e7:2a:54:96:96:47:6a:34:0a:7e:e6:c7:0b: 15:14:55:7a:8d:5a:49:f9:79:27:5a:67:46:d4:2f:ac:78:3b: f9:15:47:2b:a3:f6:32:24:9c:66:79:96:31:1e:ef:eb:22:26: f0:0e:7d:e7:5c:76:7c:2a:37:48:00:8d:ad:2a:42:e0:80:5f: e7:3a:9c:b5:28:d1:1a:20:e8:e3:65:07:b9:9b:7b:64:64:94: 63:27:ec:cf:84:be:08:d5:6e:9c:81:24:02:84:ef:a8:35:c8: fc:3c:d2:38:20:cc:2b:b7:ce:69:b5:8b:e4:a2:a9:0d:0c:2d: 5c:20:af:92 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SNO0l0DTSD/q5AEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDMyODE4NDQzMFoXDTI2MDQyODIwMjc1MVowLzEtMCsGA1UEAxMk YmE1MjBhOGItNmM2NS00YWIxLTkwZTQtMmNmNWM5MWE4Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nP40Ypf+9uM4LSQLGZak4A01hHierX9+jI6 vhz9oFoq3xWWuwe1Lex1YJPpNNeRMfct70/I+Md3E90KMC94hy/Mc6Y+Eh79AjOn 4qO4pUGS4hYSsK3J+2FrvoLcT3d7LKffh7QtuuCg4NrA1G15MT2EhZ+dscvTeCA2 5V4SatLTMhcsZ7RR8Mbm36xRX8B0BHWdAVFU0cROrwmQMYHIhnU4Rdk/6ZwA3rbA /JZnmU/Odn1ZX+fU8A2B7u1FqA6UFgXglmOF+/KzLfCLX5LPZDy+e+Te6FphPIRa tzg0zKH7ZziZ1OsWM8Btl9dv5B/rVtzOQdERW+XDQ/66wsk1kQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCSALFAR8TFt7n+jq6c9tQtAVHucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvZGY2YTEyNWItYWZmYi0z MTJjLWFmNjEtNzE5MTdkNzBjOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAI4DPAwQA bDsSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHywL9euCJeQKjKiYlodEb3IXyLtFuyROdTYK+2TbS4eI4A1 a+ztD0IH9e90NodnFq6CBsDznYwB+k8jB43GiZS3NCVXsaaMBkU7eaPZyC6onLFa DaOsH3ohF12vGFp/6RIgHGm7j4Fh0JuC0KyejXmNcHPc4UzugImBvj1L4mu03XMr 5ypUlpZHajQKfubHCxUUVXqNWkn5eSdaZ0bUL6x4O/kVRyuj9jIknGZ5ljEe7+si JvAOfedcdnwqN0gAja0qQuCAX+c6nLUo0Rog6ONlB7mbe2RklGMn7M+EvgjVbpyB JAKE76g1yPw80jggzCu3zmm1i+SiqQ0MLVwgr5I= -----END CERTIFICATE-----Generated at Wed Apr 15 16:14:48 2026 by rpki-client