$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa File: 5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa (raw, json) Hash identifier: 34eUKmXvMP0QahFYpCchG3t9hUq0FCgfuzWCMPJbcjY= Subject key identifier: 13:20:D3:FD:30:B7:0A:54:02:D1:B7:BB:19:A2:31:55:05:B5:59:A0 Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584F7352E029CFD6798B62D7F740 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 11096 IP address blocks: 35.128.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e0:29:cf:d6:79:8b:62:d7:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=af844874-e692-4860-80ed-7a351b464f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:e2:c9:f5:98:25:76:2d:fc:9c:8a:1c:cb: 16:cd:1e:dd:df:66:c0:cc:1d:19:8b:f9:b4:66:28: e9:d5:2c:98:82:8c:4d:0f:44:8c:57:99:61:27:6e: a7:d3:c6:fc:b9:1e:7b:f7:fd:00:77:fa:2f:87:26: c8:06:cf:3e:6c:66:67:e1:aa:ad:d6:94:4f:78:e9: 40:27:4e:7f:d4:ab:d2:a4:9a:44:18:72:07:ee:46: d5:ce:bf:5f:67:f7:8e:43:ae:f4:2c:7f:b0:54:ed: 1f:d6:35:9f:84:f2:09:32:96:49:16:d2:43:86:42: c0:71:53:58:0e:db:f7:09:13:f3:9b:48:e3:71:7c: fc:7f:e8:c2:16:e9:e5:43:c4:b6:44:f3:c7:f0:e5: ba:e7:30:1a:ee:2b:17:91:8c:05:84:c6:21:a5:44: 2e:7e:25:b2:d8:67:1f:84:e7:e5:ae:bc:c2:2f:5d: c1:a9:43:91:80:b9:fa:49:4c:e9:4d:5c:0b:44:98: 31:ff:4d:be:5f:62:b9:85:fa:84:64:24:20:0e:05: 69:4e:de:0d:41:a4:92:97:11:23:e8:49:70:20:07: 56:34:7b:9f:f6:1b:79:56:59:29:21:7f:f0:34:04: 43:68:3e:ff:85:a3:64:23:80:41:4a:20:be:fc:b9: 1c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:20:D3:FD:30:B7:0A:54:02:D1:B7:BB:19:A2:31:55:05:B5:59:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:45:65:bc:ff:4a:a1:30:4d:7b:8b:2c:12:63:56:31:da:fb: e4:ae:43:04:64:9b:ea:bb:34:e1:73:ab:26:3f:b0:8f:84:70: e4:74:1b:79:06:0d:5a:d0:a5:48:a2:51:54:92:bc:b0:64:23: ea:11:d0:06:33:0f:1d:0b:c4:73:92:f7:87:df:48:25:25:76: 09:e4:20:ee:ac:bc:c9:bf:15:4a:09:a0:5c:a5:18:09:fd:80: 72:dd:1c:0b:b5:19:09:ba:a8:ea:d6:67:4b:33:df:34:3d:d2: 98:41:98:51:89:1c:69:5d:5a:1e:33:02:34:75:a0:ac:0d:82: ba:7e:84:ab:36:b6:bc:97:3c:1e:59:d2:a6:1b:2d:c9:78:0a: 1c:67:ef:57:d6:e7:c8:e6:71:ba:f4:63:72:1e:91:2a:4b:c9: 76:04:04:61:c3:38:0a:07:d8:c2:4f:1c:81:e8:e3:a1:77:63: 52:b4:bb:a3:fb:5d:d3:4e:30:91:f4:a3:51:3b:50:8a:a8:57: b2:d8:e1:2e:3b:0e:52:b8:c6:89:5a:49:95:15:98:4d:32:92: 6e:38:a3:29:d0:fa:90:be:86:04:eb:8c:7e:31:ef:d7:9b:56: d2:31:80:98:c9:ca:e6:61:a4:20:c8:70:71:df:49:1b:87:8f: a2:78:0f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuApz9Z5i2LX90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk YWY4NDQ4NzQtZTY5Mi00ODYwLTgwZWQtN2EzNTFiNDY0ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHviyfWYJXYt/JyKHMsWzR7d32bAzB0Zi/m0 Zijp1SyYgoxND0SMV5lhJ26n08b8uR579/0Ad/ovhybIBs8+bGZn4aqt1pRPeOlA J05/1KvSpJpEGHIH7kbVzr9fZ/eOQ670LH+wVO0f1jWfhPIJMpZJFtJDhkLAcVNY Dtv3CRPzm0jjcXz8f+jCFunlQ8S2RPPH8OW65zAa7isXkYwFhMYhpUQufiWy2Gcf hOflrrzCL13BqUORgLn6SUzpTVwLRJgx/02+X2K5hfqEZCQgDgVpTt4NQaSSlxEj 6ElwIAdWNHuf9ht5VlkpIX/wNARDaD7/haNkI4BBSiC+/LkcWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMg0/0wtwpUAtG3uxmiMVUFtVmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvNWFlZDRhMjctYTgzYi0z MzgzLTlhMjYtMWI2YWE1ZTM3MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1FZbz/SqEwTXuLLBJjVjHa++SuQwRkm+q7NOFzqyY/sI+EcOR0G3kG DVrQpUiiUVSSvLBkI+oR0AYzDx0LxHOS94ffSCUldgnkIO6svMm/FUoJoFylGAn9 gHLdHAu1GQm6qOrWZ0sz3zQ90phBmFGJHGldWh4zAjR1oKwNgrp+hKs2tryXPB5Z 0qYbLcl4Chxn71fW58jmcbr0Y3IekSpLyXYEBGHDOAoH2MJPHIHo46F3Y1K0u6P7 XdNOMJH0o1E7UIqoV7LY4S47DlK4xolaSZUVmE0ykm44oynQ+pC+hgTrjH4x79eb VtIxgJjJyuZhpCDIcHHfSRuHj6J4Dww= -----END CERTIFICATE-----Generated at Sat Oct 10 11:26:04 2026 by rpki-client