$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa File: a298af95-2ee0-38a9-a1e4-b40b04c90319.roa (raw, json) Hash identifier: JTuYW9hDWzlODHq+pRTG3CXosAX2AJPnm3Ii3OuSmX4= Subject key identifier: D5:19:3D:3A:F6:49:8F:FF:3B:D6:4D:33:27:CF:36:3C:3A:C6:83:DA Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584E36017F0CC24202734C209BD0 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 11096 IP address blocks: 35.128.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:01:7f:0c:c2:42:02:73:4c:20:9b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=6410e356-e491-4952-b998-3b84a0ff8941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:b7:aa:c3:89:41:7b:8e:f2:3a:fe:11:db: b2:95:1f:ff:07:07:7b:94:6f:f9:3a:d2:1d:61:d7: eb:54:5d:56:75:9e:a0:21:5d:33:da:7b:ab:f2:30: 10:d8:f8:77:ad:ab:9d:49:9a:51:90:84:d0:74:61: 6c:6e:46:91:89:2d:84:03:98:a8:06:2d:98:0f:4e: fe:62:e9:17:d2:80:d6:dc:11:ce:13:bd:9b:58:d8: 35:73:f2:07:b5:ac:25:f9:cd:90:c6:98:35:9b:5d: 8b:af:cc:7b:0d:f3:6f:83:b6:2c:0a:7f:b9:67:5f: e0:96:11:84:20:02:87:30:4c:b3:5d:30:dc:da:2b: 37:cb:bb:dd:a1:cf:81:da:18:1d:74:18:33:cb:73: 21:30:84:b6:61:4d:0b:f2:c1:7e:a7:cd:f4:3d:31: 94:cb:b3:13:c3:30:06:bf:a3:1d:84:5c:49:24:47: d0:85:13:ab:19:95:27:9a:f3:e4:a6:a2:e2:01:11: a4:f6:43:61:f7:5f:76:2c:48:fd:94:f9:24:b6:9b: cb:ed:62:ef:d5:1f:ec:d1:45:c7:b2:74:eb:11:5f: cd:08:70:60:c6:6d:ae:1e:f9:5b:e8:7e:d2:2c:c0: 73:b5:64:8d:eb:31:67:f5:7e:5d:6e:bd:ef:56:1e: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:19:3D:3A:F6:49:8F:FF:3B:D6:4D:33:27:CF:36:3C:3A:C6:83:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f4:99:53:11:3a:48:10:cd:e9:ff:99:d1:93:c9:15:08:f4: 61:b0:8f:ec:fd:64:aa:48:cd:55:7e:12:de:c6:f8:e9:b7:cd: dd:8d:9c:3b:32:5f:2f:e3:3c:ec:6d:d5:76:b1:73:a7:db:c2: 70:ca:30:41:07:84:e5:bb:03:2e:e0:ff:9a:74:00:e2:64:6c: b3:26:6c:66:61:a4:2a:4d:c5:c4:32:a3:89:e8:a8:80:23:3a: 16:16:37:41:d7:8c:58:57:12:56:ee:d3:f4:a5:7d:1f:0e:a0: 81:4d:4b:84:29:1a:f9:0d:bf:de:07:80:d8:6c:a7:b3:dd:60: 55:21:8f:e0:ff:9f:98:d4:89:72:2e:24:00:0e:86:86:2b:73: d6:93:6f:f3:77:e1:4a:04:ba:cd:93:06:d2:35:b3:ba:69:7d: 53:e9:46:dd:92:aa:1a:14:2e:85:88:37:9d:be:d4:9b:cd:a4: 84:c4:29:ed:70:86:8d:62:0f:2d:d6:b2:74:1f:4f:ab:43:1d: dc:54:a3:59:2f:4d:4a:d7:31:17:e6:92:22:4f:1d:93:d9:46: 56:c4:83:16:f0:9e:d5:54:6b:a5:eb:43:3d:c6:39:34:52:79: 34:39:34:ab:c2:56:35:4d:4b:1d:ea:97:68:97:88:7b:78:41: d0:83:7c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AX8MwkICc0wgm9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NjQxMGUzNTYtZTQ5MS00OTUyLWI5OTgtM2I4NGEwZmY4OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ63qsOJQXuO8jr+EduylR//Bwd7lG/5OtId YdfrVF1WdZ6gIV0z2nur8jAQ2Ph3raudSZpRkITQdGFsbkaRiS2EA5ioBi2YD07+ YukX0oDW3BHOE72bWNg1c/IHtawl+c2Qxpg1m12Lr8x7DfNvg7YsCn+5Z1/glhGE IAKHMEyzXTDc2is3y7vdoc+B2hgddBgzy3MhMIS2YU0L8sF+p830PTGUy7MTwzAG v6MdhFxJJEfQhROrGZUnmvPkpqLiARGk9kNh9192LEj9lPkktpvL7WLv1R/s0UXH snTrEV/NCHBgxm2uHvlb6H7SLMBztWSN6zFn9X5dbr3vVh6eZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUZPTr2SY//O9ZNMyfPNjw6xoPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvYTI5OGFmOTUtMmVlMC0z OGE5LWExZTQtYjQwYjA0YzkwMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL0mVMROkgQzen/mdGTyRUI9GGwj+z9ZKpIzVV+Et7G+Om3zd2NnDsy Xy/jPOxt1Xaxc6fbwnDKMEEHhOW7Ay7g/5p0AOJkbLMmbGZhpCpNxcQyo4noqIAj OhYWN0HXjFhXElbu0/SlfR8OoIFNS4QpGvkNv94HgNhsp7PdYFUhj+D/n5jUiXIu JAAOhoYrc9aTb/N34UoEus2TBtI1s7ppfVPpRt2SqhoULoWIN52+1JvNpITEKe1w ho1iDy3WsnQfT6tDHdxUo1kvTUrXMRfmkiJPHZPZRlbEgxbwntVUa6XrQz3GOTRS eTQ5NKvCVjVNSx3ql2iXiHt4QdCDfNs= -----END CERTIFICATE-----Generated at Fri Jul 24 14:49:32 2026 by rpki-client