$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa File: a298af95-2ee0-38a9-a1e4-b40b04c90319.roa (raw, json) Hash identifier: DgpXIYNfFaO7dBGG51soiJuFp6FI2nVd90Jt3kEJBJQ= Subject key identifier: 97:86:BA:5F:AF:A3:DF:47:79:77:95:6C:B5:C1:EF:53:89:1A:86:79 Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584B95AAFF93EFBCA22B674D6EC0 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 11096 IP address blocks: 35.128.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:ff:93:ef:bc:a2:2b:67:4d:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8c038fd5-0e61-43de-b2d6-59f396eb4519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:26:ae:76:69:70:9f:cb:93:d6:eb:76:45: 5c:ba:61:fd:de:90:8a:20:d1:1b:67:95:1c:44:e7: ee:ea:01:72:6a:a2:18:0f:dc:1b:9a:b3:ec:50:42: 11:95:26:bd:d8:69:ed:2c:9f:12:aa:45:03:6c:ed: ab:ac:bb:50:4e:18:5e:f5:28:fe:99:62:f7:d6:08: e9:de:9e:e4:20:26:52:dd:5c:31:c8:30:ff:3e:a4: 39:91:be:8d:30:e9:0b:19:af:d1:5a:71:4c:21:78: 67:6a:e6:41:6f:2b:5b:d1:cb:70:28:99:76:2f:6a: c3:00:b1:b4:3b:69:9b:55:ce:56:43:e1:78:72:57: 8e:cf:15:9c:cc:7c:31:4f:96:0d:f0:8c:e0:b1:80: 3f:84:8d:45:41:a8:e8:b4:23:23:26:7b:99:49:42: 3c:db:7d:1f:8f:22:62:ad:b1:d7:b9:dc:d3:54:51: ca:c8:73:f2:b4:89:eb:4b:14:22:45:ce:34:f8:ce: 0a:fe:8a:27:b7:c0:3f:f3:0e:0a:90:0a:4f:4e:14: b5:f7:fe:0f:00:cf:6d:a6:4e:09:0f:6d:5e:c8:37: 1f:32:14:23:2b:a6:35:9a:6d:1d:d7:66:0a:50:e7: 9c:63:24:5d:61:58:e3:5e:39:0c:fd:ab:0b:3e:a5: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:86:BA:5F:AF:A3:DF:47:79:77:95:6C:B5:C1:EF:53:89:1A:86:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:97:0b:8d:8b:7a:ce:68:35:11:26:8b:2a:da:7c:1b:3b:31: f5:a9:8e:cc:44:1a:13:04:2a:d7:9a:6e:09:96:cd:d7:c5:3b: 2b:b8:a7:ec:1a:7e:8d:51:26:eb:7d:fe:51:9a:ed:b8:cb:0f: 81:75:ff:56:7f:e9:12:f5:7d:71:b5:21:65:06:60:e1:6c:52: 2f:4a:b0:3b:b5:52:ca:03:a0:5a:61:81:83:f1:4f:e7:27:57: fa:43:6f:ba:7b:07:a4:dd:2e:f5:fc:1a:02:3e:8a:d3:e6:aa: 28:97:cf:ce:ec:d7:4b:98:c7:74:e6:39:4c:10:57:a1:5b:e6: 38:e8:3b:ca:ea:7f:87:c6:1d:c9:f9:13:9c:b7:e1:14:af:fe: 09:67:64:3e:9e:b6:e9:8a:14:ad:14:37:ba:32:93:b6:c8:72: 15:d2:e6:a2:2b:4c:17:bc:2b:5a:4b:a0:4c:b2:d1:e3:50:9c: 0f:56:50:e9:b3:b7:92:76:7e:43:9c:00:1c:34:99:4b:62:37: 4b:a6:b0:c0:f4:41:9d:49:1c:4d:05:e5:b9:71:fd:4c:9e:0e: 58:c1:b3:48:d7:ec:87:13:ff:45:32:48:b8:cc:c0:17:1b:cf: 0b:7a:20:b3:93:01:24:12:12:50:ce:e7:0b:7c:d9:d0:b4:52: ad:70:bc:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqv+T77yiK2dNbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGMwMzhmZDUtMGU2MS00M2RlLWIyZDYtNTlmMzk2ZWI0NTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcgmrnZpcJ/Lk9brdkVcumH93pCKINEbZ5Uc ROfu6gFyaqIYD9wbmrPsUEIRlSa92GntLJ8SqkUDbO2rrLtQThhe9Sj+mWL31gjp 3p7kICZS3VwxyDD/PqQ5kb6NMOkLGa/RWnFMIXhnauZBbytb0ctwKJl2L2rDALG0 O2mbVc5WQ+F4cleOzxWczHwxT5YN8IzgsYA/hI1FQajotCMjJnuZSUI8230fjyJi rbHXudzTVFHKyHPytInrSxQiRc40+M4K/oont8A/8w4KkApPThS19/4PAM9tpk4J D21eyDcfMhQjK6Y1mm0d12YKUOecYyRdYVjjXjkM/asLPqVrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeGul+vo99HeXeVbLXB71OJGoZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvYTI5OGFmOTUtMmVlMC0z OGE5LWExZTQtYjQwYjA0YzkwMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6XC42Les5oNREmiyrafBs7MfWpjsxEGhMEKteabgmWzdfFOyu4p+wa fo1RJut9/lGa7bjLD4F1/1Z/6RL1fXG1IWUGYOFsUi9KsDu1UsoDoFphgYPxT+cn V/pDb7p7B6TdLvX8GgI+itPmqiiXz87s10uYx3TmOUwQV6Fb5jjoO8rqf4fGHcn5 E5y34RSv/glnZD6etumKFK0UN7oyk7bIchXS5qIrTBe8K1pLoEyy0eNQnA9WUOmz t5J2fkOcABw0mUtiN0umsMD0QZ1JHE0F5blx/UyeDljBs0jX7IcT/0UySLjMwBcb zwt6ILOTASQSElDO5wt82dC0Uq1wvHI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:47 2025 by rpki-client