$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/0b10da6f-aa6a-33a4-9562-db6f185f9820.roa File: 0b10da6f-aa6a-33a4-9562-db6f185f9820.roa (raw, json) Hash identifier: MM5mLGGYmXzLBAxSp9rfhCXffgLeg8/YcyhykjTn6z0= Subject key identifier: 66:44:FF:EF:66:4B:22:86:28:A3:4E:8B:34:7B:67:D0:A1:44:30:07 Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584F498A9CBF47C8E2D69846110A Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/0b10da6f-aa6a-33a4-9562-db6f185f9820.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11096 IP address blocks: 35.128.193.0/24 maxlen: 24 35.128.193.80/28 maxlen: 28 35.128.193.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:9c:bf:47:c8:e2:d6:98:46:11:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbdda83c-6ff3-4249-b95d-282aa81090fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bc:9f:b0:83:f6:e7:3d:ef:92:16:90:4b:53: db:df:0c:1b:b4:df:fe:59:83:4a:c0:bd:54:da:7d: 9d:f5:26:2f:ba:ab:26:be:7c:c9:ad:5d:56:14:4a: cf:c6:96:2a:1c:9d:4c:11:04:c4:72:8f:35:20:b4: 92:33:1d:4b:38:11:4d:63:3e:cf:98:fc:ed:26:ab: b8:12:61:56:ea:30:d1:3c:47:49:92:5b:be:95:44: 05:5b:d2:c2:22:a2:27:bc:98:2b:76:43:8f:5a:5d: 4d:9c:5a:b9:c6:a0:04:1d:6f:41:d0:09:8a:52:2a: 6c:ce:5c:38:22:aa:f6:77:93:a1:e6:87:ca:66:f9: e1:9c:d9:ff:e1:9f:6d:ae:75:56:cc:05:68:f6:a9: b0:59:1d:ef:a2:34:4b:57:31:e0:27:63:13:0f:ec: 38:14:ea:db:80:ab:0c:0c:29:e5:41:9f:7a:34:14: 46:59:aa:c8:55:a3:de:f6:38:b0:a4:1c:02:ae:da: b9:16:3e:ca:35:41:8b:b6:29:6d:fe:c8:99:69:a3: aa:a8:82:09:a2:ca:88:f9:a6:83:1c:f3:94:63:98: 7f:9e:5e:5e:3c:8b:d9:1b:e6:2a:46:34:cf:3d:0e: 93:f4:21:14:d8:54:47:00:a2:74:e6:0e:5b:d6:ba: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:44:FF:EF:66:4B:22:86:28:A3:4E:8B:34:7B:67:D0:A1:44:30:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/0b10da6f-aa6a-33a4-9562-db6f185f9820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5e:d2:10:f3:98:3e:f1:95:05:8c:61:e9:8a:6b:36:ab:75: 24:67:b0:d7:65:c0:9d:89:0d:df:14:e2:55:e2:5d:cf:3b:95: fb:ee:40:b9:2c:66:8a:2c:89:6b:cf:ef:3d:aa:8a:c4:61:b6: 92:18:97:0a:51:73:ae:3f:e0:57:98:0b:93:e4:b4:fa:02:9f: 7f:60:14:03:31:cf:9e:65:6d:50:c0:b2:5b:c7:41:1c:22:df: 16:f8:41:39:12:4d:b2:de:4f:ad:2f:f7:30:81:48:e3:1b:d9: 25:e7:ce:d2:f9:58:21:c5:13:3a:4b:fd:d4:f5:d2:28:74:c2: 0f:ba:dd:de:76:f7:9a:f4:e0:e1:0b:2c:25:d6:82:5c:4d:c7: 85:35:7c:d7:10:58:1c:49:a2:00:f3:dc:5a:58:fe:e8:a0:fe: 4a:3e:a9:3b:a4:99:6a:a9:6f:c1:33:ed:56:ad:f8:bc:d2:ca: c7:87:fe:60:6a:df:78:e2:95:91:eb:f2:3f:c8:f6:9f:dd:61: 64:d1:11:d0:12:13:4e:75:76:a6:45:ac:9a:e2:9a:93:ad:be: 35:60:0f:64:48:5d:01:de:22:c4:73:53:8e:c1:55:df:22:75: f9:a5:ae:b1:9d:10:50:25:4f:b1:ba:21:36:cb:06:13:c9:f2: ed:fb:a6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jipy/R8ji1phGEQowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJkZGE4M2MtNmZmMy00MjQ5LWI5NWQtMjgyYWE4MTA5MGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbyfsIP25z3vkhaQS1Pb3wwbtN/+WYNKwL1U 2n2d9SYvuqsmvnzJrV1WFErPxpYqHJ1MEQTEco81ILSSMx1LOBFNYz7PmPztJqu4 EmFW6jDRPEdJklu+lUQFW9LCIqInvJgrdkOPWl1NnFq5xqAEHW9B0AmKUipszlw4 Iqr2d5Oh5ofKZvnhnNn/4Z9trnVWzAVo9qmwWR3vojRLVzHgJ2MTD+w4FOrbgKsM DCnlQZ96NBRGWarIVaPe9jiwpBwCrtq5Fj7KNUGLtilt/siZaaOqqIIJosqI+aaD HPOUY5h/nl5ePIvZG+YqRjTPPQ6T9CEU2FRHAKJ05g5b1rqGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZE/+9mSyKGKKNOizR7Z9ChRDAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvMGIxMGRhNmYtYWE2YS0z M2E0LTk1NjItZGI2ZjE4NWY5ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRe0hDzmD7xlQWMYemKazardSRnsNdlwJ2JDd8U4lXiXc87lfvuQLks ZoosiWvP7z2qisRhtpIYlwpRc64/4FeYC5PktPoCn39gFAMxz55lbVDAslvHQRwi 3xb4QTkSTbLeT60v9zCBSOMb2SXnztL5WCHFEzpL/dT10ih0wg+63d5295r04OEL LCXWglxNx4U1fNcQWBxJogDz3FpY/uig/ko+qTukmWqpb8Ez7Vat+LzSyseH/mBq 33jilZHr8j/I9p/dYWTREdASE051dqZFrJrimpOtvjVgD2RIXQHeIsRzU47BVd8i dfmlrrGdEFAlT7G6ITbLBhPJ8u37pnI= -----END CERTIFICATE-----Generated at Sat Oct 3 08:51:05 2026 by rpki-client