$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/d6cb54f6-84f8-3f33-84e5-91897194e34d.roa File: d6cb54f6-84f8-3f33-84e5-91897194e34d.roa (raw, json) Hash identifier: WhXBbNCRxgnPgZguEYG/sILHjePA+Nj0HT8DkM2w5X4= Subject key identifier: F2:D6:4E:52:1E:AD:A9:01:50:BB:2F:FA:D4:61:25:11:BF:21:78:17 Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584F4974B05407DB068EE8522780 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/d6cb54f6-84f8-3f33-84e5-91897194e34d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11096 IP address blocks: 35.128.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b0:54:07:db:06:8e:e8:52:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d89fd6b-d22b-4ada-ad65-21d8221db236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:e0:30:46:02:c5:83:ce:92:b5:12:c6:91: 7e:b8:38:e8:7c:32:3a:2b:5d:ea:32:7f:6a:02:ae: de:b0:b4:14:55:7b:7a:ab:17:96:4b:1c:30:ba:b0: c6:8d:c6:97:8e:b7:3f:75:f6:b8:6d:4b:71:17:cf: fc:18:21:f7:5f:e3:70:9a:1a:f4:b6:3c:97:42:2c: 37:97:68:45:aa:9e:c9:2c:5c:78:c2:df:07:fb:c7: 3c:3f:cb:0c:3e:d1:4b:27:da:90:b5:aa:2c:17:c5: 57:38:08:c5:41:57:c8:91:90:00:33:67:33:d2:40: 19:3a:ce:98:d9:65:63:34:dc:3b:be:e5:55:3b:14: 7b:8c:de:c1:86:e7:71:ae:4a:a8:4d:e4:40:ae:cd: e7:be:29:82:44:5c:13:de:6c:2a:6c:e7:68:45:a1: 9c:df:ce:bb:39:40:d9:70:8b:98:b2:db:a4:e7:c3: 41:b7:7d:b8:2e:b0:80:1b:4f:32:ea:f2:22:e1:3e: 2d:00:71:d9:a1:30:71:b0:b1:f8:ff:7b:06:5a:eb: 39:cf:ec:97:56:1d:98:3a:13:0a:42:b0:04:e9:22: e5:53:7a:bb:b0:e1:99:ac:dc:f8:2a:81:bb:26:8a: 0a:ef:14:86:9d:49:f8:fe:f1:1e:38:9d:5e:ec:df: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D6:4E:52:1E:AD:A9:01:50:BB:2F:FA:D4:61:25:11:BF:21:78:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/d6cb54f6-84f8-3f33-84e5-91897194e34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fe:08:8b:f2:86:b4:6b:aa:44:26:57:2e:93:91:65:23:b0: 57:91:7b:e8:88:0d:97:da:e6:00:d5:77:34:b2:59:c8:82:5d: 15:ee:98:f6:b9:dd:06:2d:7b:92:0c:fa:a1:9c:fd:17:b1:0e: c3:50:bf:9e:a2:f6:df:7d:34:3e:d9:6b:ea:3e:9a:f5:c0:1e: 44:1c:8f:36:b6:3b:13:04:aa:54:76:59:eb:e6:1e:0c:58:a6: 35:4a:ec:fa:6c:7c:dd:27:ad:8d:48:34:34:cc:f7:07:37:c5: 33:00:a1:f9:3f:03:ae:c1:a8:dc:5c:af:36:fc:50:3b:80:f3: 6b:97:ef:fd:83:87:77:79:15:32:da:72:f7:09:bd:30:b1:2e: a9:c4:c9:7a:65:e2:7e:91:46:86:dd:6e:9d:75:5b:a4:ce:7f: 6b:0a:8c:10:b5:b9:f4:2b:03:69:56:40:3f:5c:bc:cc:f7:55: e3:78:e1:1f:98:b6:56:3e:cd:b7:ad:93:cd:18:1b:d9:b5:33: f8:99:75:85:fa:5e:b5:3a:1a:36:52:94:42:00:bc:d9:7a:64: 3e:58:de:25:e0:58:c1:b4:e1:7c:28:5a:ba:7a:29:66:03:e5: 20:89:bd:3e:7c:c8:57:da:55:fe:f5:28:94:f2:33:e5:9c:e3: 99:1b:c2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLBUB9sGjuhSJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Q4OWZkNmItZDIyYi00YWRhLWFkNjUtMjFkODIyMWRiMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb7gMEYCxYPOkrUSxpF+uDjofDI6K13qMn9q Aq7esLQUVXt6qxeWSxwwurDGjcaXjrc/dfa4bUtxF8/8GCH3X+Nwmhr0tjyXQiw3 l2hFqp7JLFx4wt8H+8c8P8sMPtFLJ9qQtaosF8VXOAjFQVfIkZAAM2cz0kAZOs6Y 2WVjNNw7vuVVOxR7jN7BhudxrkqoTeRArs3nvimCRFwT3mwqbOdoRaGc3867OUDZ cIuYstuk58NBt324LrCAG08y6vIi4T4tAHHZoTBxsLH4/3sGWus5z+yXVh2YOhMK QrAE6SLlU3q7sOGZrNz4KoG7JooK7xSGnUn4/vEeOJ1e7N/+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLWTlIerakBULsv+tRhJRG/IXgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvZDZjYjU0ZjYtODRmOC0z ZjMzLTg0ZTUtOTE4OTcxOTRlMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf+CIvyhrRrqkQmVy6TkWUjsFeRe+iIDZfa5gDVdzSyWciCXRXumPa5 3QYte5IM+qGc/RexDsNQv56i9t99ND7Za+o+mvXAHkQcjza2OxMEqlR2WevmHgxY pjVK7PpsfN0nrY1INDTM9wc3xTMAofk/A67BqNxcrzb8UDuA82uX7/2Dh3d5FTLa cvcJvTCxLqnEyXpl4n6RRobdbp11W6TOf2sKjBC1ufQrA2lWQD9cvMz3VeN44R+Y tlY+zbetk80YG9m1M/iZdYX6XrU6GjZSlEIAvNl6ZD5Y3iXgWMG04XwoWrp6KWYD 5SCJvT58yFfaVf71KJTyM+Wc45kbwqk= -----END CERTIFICATE-----Generated at Sun Oct 4 18:38:49 2026 by rpki-client