$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa File: a298af95-2ee0-38a9-a1e4-b40b04c90319.roa (raw, json) Hash identifier: jTcHzObcKEDzgKBfK454uHk4AzpppHgQdUcbUnR9obI= Subject key identifier: A3:50:3B:22:77:85:CC:04:8B:41:6E:A9:B6:44:86:5E:72:CC:21:E7 Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584F7A5025B0066CA6F919739F80 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 11096 IP address blocks: 35.128.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:25:b0:06:6c:a6:f9:19:73:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=febcc8ae-5cc5-4a55-9c03-50954322807e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ec:e0:30:ab:77:38:8a:4d:b7:0b:90:c6:07: 54:11:ae:42:e5:8e:67:b8:1a:6e:e2:e7:1c:7a:01: 83:01:19:98:1a:98:26:e1:7b:ed:78:3e:d5:9f:81: 18:e4:b3:84:da:e1:06:5d:83:9b:c1:33:3f:03:30: fe:1e:0f:88:b1:6d:7c:f2:ca:a3:6e:98:55:1a:e8: fe:45:85:ca:49:fb:24:c0:10:00:37:6b:43:f3:c4: 92:3f:e2:a6:e8:14:2e:0a:4e:d6:dd:5c:05:06:6f: a1:4e:5f:0b:45:66:80:d3:1a:20:f9:61:9b:96:bc: 42:68:1e:50:84:97:66:0b:56:9a:61:0b:c3:b0:49: e3:bd:d6:bb:aa:82:af:04:56:ca:ba:b1:9a:42:4d: 33:6f:ed:52:25:b2:0a:f5:54:31:41:b9:46:36:b0: de:76:a0:4a:48:b3:96:39:29:68:2e:60:2c:44:e8: 13:d8:62:05:df:8c:34:30:54:50:6b:9b:85:31:52: 6e:b1:15:9e:5d:c9:6a:e6:63:06:46:1b:0f:d6:99: 03:58:5b:92:a8:3c:81:73:c3:97:40:ff:25:21:a8: fe:84:d8:af:6c:22:78:bb:77:eb:55:f4:19:54:6e: 83:2e:e5:19:45:3c:6f:83:f9:84:7b:b4:3d:c7:2c: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:3B:22:77:85:CC:04:8B:41:6E:A9:B6:44:86:5E:72:CC:21:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6e:57:de:86:5a:a0:29:65:57:21:24:2d:00:cd:f7:2b:7c: 76:e2:fb:7c:62:22:67:57:ed:58:02:77:de:a7:96:77:67:49: 76:3e:bd:46:e4:44:6c:9d:28:a0:cd:1b:40:b5:d4:0f:63:1f: 75:2b:a8:17:6c:bf:e0:7e:a1:1d:00:b3:9f:b0:09:e7:8f:a9: 53:a9:05:c4:3e:b2:0b:ec:c4:c3:8a:aa:89:d4:4e:ec:0d:43: 2c:5b:75:a5:e8:60:b2:42:4a:39:c6:1e:0d:8f:53:70:0b:3b: a5:a8:78:3e:35:4d:1e:51:dc:20:63:7d:a1:f4:eb:e1:d8:7f: dc:91:2e:ad:b2:e1:99:3e:3a:f2:f2:98:d3:02:10:21:45:d7: 61:28:4d:3d:7b:a3:9a:a4:e7:60:6d:79:53:6d:65:bc:69:38: 09:03:93:8b:06:d1:b8:98:61:df:ac:f6:5c:4b:2d:ab:d5:7d: d7:f9:a0:89:e5:a9:7a:dd:9a:69:6f:24:5d:c9:aa:86:97:5d: a9:b4:80:c3:86:08:6c:33:f4:8b:9f:1f:a5:ed:e1:4b:28:44: a6:0f:2d:68:43:4c:34:39:1c:3e:a1:27:72:44:3a:40:7b:05: 08:d9:a2:e6:f1:99:06:5e:5f:ef:81:06:33:cb:74:be:42:b7: d9:c3:fd:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UCWwBmym+Rlzn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmViY2M4YWUtNWNjNS00YTU1LTljMDMtNTA5NTQzMjI4MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOzgMKt3OIpNtwuQxgdUEa5C5Y5nuBpu4ucc egGDARmYGpgm4XvteD7Vn4EY5LOE2uEGXYObwTM/AzD+Hg+IsW188sqjbphVGuj+ RYXKSfskwBAAN2tD88SSP+Km6BQuCk7W3VwFBm+hTl8LRWaA0xog+WGblrxCaB5Q hJdmC1aaYQvDsEnjvda7qoKvBFbKurGaQk0zb+1SJbIK9VQxQblGNrDedqBKSLOW OSloLmAsROgT2GIF34w0MFRQa5uFMVJusRWeXclq5mMGRhsP1pkDWFuSqDyBc8OX QP8lIaj+hNivbCJ4u3frVfQZVG6DLuUZRTxvg/mEe7Q9xyzgMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNQOyJ3hcwEi0FuqbZEhl5yzCHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvYTI5OGFmOTUtMmVlMC0z OGE5LWExZTQtYjQwYjA0YzkwMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVuV96GWqApZVchJC0AzfcrfHbi+3xiImdX7VgCd96nlndnSXY+vUbk RGydKKDNG0C11A9jH3UrqBdsv+B+oR0As5+wCeePqVOpBcQ+sgvsxMOKqonUTuwN QyxbdaXoYLJCSjnGHg2PU3ALO6WoeD41TR5R3CBjfaH06+HYf9yRLq2y4Zk+OvLy mNMCECFF12EoTT17o5qk52BteVNtZbxpOAkDk4sG0biYYd+s9lxLLavVfdf5oInl qXrdmmlvJF3JqoaXXam0gMOGCGwz9IufH6Xt4UsoRKYPLWhDTDQ5HD6hJ3JEOkB7 BQjZoubxmQZeX++BBjPLdL5Ct9nD/bI= -----END CERTIFICATE-----Generated at Tue Oct 13 19:16:26 2026 by rpki-client