$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/96f6d874-5ff6-3048-b568-06006de76f43.roa File: 96f6d874-5ff6-3048-b568-06006de76f43.roa (raw, json) Hash identifier: sT2OsV0eDzKbTAxMe/dFv097FwYGgI7lC4GP+8K9zQ0= Subject key identifier: 22:A0:29:07:12:86:6A:ED:06:2E:2C:D3:BC:ED:85:6A:B0:A8:36:DD Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584A8E15D00FB9F1F9D5DF2C49F0 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/96f6d874-5ff6-3048-b568-06006de76f43.roa Signing time: Fri 18 Jul 2025 03:09:30 +0000 ROA not before: Fri 18 Jul 2025 03:09:30 +0000 ROA not after: Thu 16 Oct 2025 03:09:30 +0000 asID: 11096 IP address blocks: 35.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:15:d0:0f:b9:f1:f9:d5:df:2c:49:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Jul 18 03:09:30 2025 GMT Not After : Oct 16 03:09:30 2025 GMT Subject: CN=6433e81e-8d33-4fd1-8a3f-97f91b6631c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:92:ec:5b:ed:65:ef:bd:f1:f2:77:8a:50: f8:ce:22:8e:96:b1:59:af:74:33:0c:7d:71:ed:80: d6:8f:66:db:31:7b:25:8a:a1:15:a7:6a:bb:47:4a: 90:76:a6:0a:7c:48:d8:fc:ce:c6:35:36:95:23:1e: 99:af:d6:41:12:78:49:ce:1a:a1:bf:4d:3b:fa:58: f7:14:e5:71:9c:bd:c4:41:e8:1c:8b:7b:97:79:b3: 72:f1:94:7f:72:45:b9:e3:1b:80:36:05:b0:7f:78: 91:57:48:5a:e6:08:03:3f:b2:00:e6:5b:27:86:24: 34:00:a2:55:33:c8:bd:2e:83:b2:4b:d6:c2:6a:d8: 54:4c:f9:1e:25:4a:31:3f:5b:e7:14:78:6d:00:36: be:61:0f:03:7e:aa:a6:a4:8e:32:d7:fe:d1:8d:1c: f1:58:29:cc:54:fc:83:92:9b:e4:ae:33:49:61:dc: 34:47:b5:38:3c:a6:de:2e:9a:46:cf:8b:d5:4b:b1: 4c:e1:69:26:e2:7c:b3:c0:df:10:5b:4e:d4:3b:96: cb:36:49:2c:6c:3c:2e:52:14:43:de:10:f8:28:08: 85:e5:00:90:1a:39:eb:d2:81:32:db:53:49:15:57: 4c:37:31:ef:1c:8b:6e:37:2e:92:b0:e2:5d:99:1d: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A0:29:07:12:86:6A:ED:06:2E:2C:D3:BC:ED:85:6A:B0:A8:36:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/96f6d874-5ff6-3048-b568-06006de76f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fc:0b:bd:56:49:89:a2:bf:df:a3:5f:21:74:01:e7:ca:5e: be:b4:9f:58:70:15:16:7d:84:40:ee:92:80:9b:0d:c5:3e:73: c2:a9:f2:0a:c0:1a:fa:f7:9b:ab:56:0e:ae:e6:66:e8:26:ab: 16:62:31:31:06:4a:7b:8b:41:3f:4b:cf:48:f9:78:da:98:31: 9c:30:a8:b3:c3:2a:d2:1b:08:dd:35:07:1b:46:32:aa:9f:f4: 2a:4e:ae:b0:ac:af:1b:60:56:51:7c:30:fb:ed:75:81:d6:3c: 35:7a:90:10:b9:2c:38:79:9a:9b:07:b7:3a:fe:50:90:1a:71: fb:8d:ce:ea:af:1e:49:b9:b7:0c:b5:9d:e7:9d:2e:c5:95:43: a3:d3:78:e9:7d:6c:54:46:7b:92:97:9e:89:60:ae:7e:84:05: 97:31:82:ba:2d:18:c2:36:47:0e:ed:8e:e1:a0:98:f6:43:4c: 77:4e:15:0a:2f:59:4e:75:79:28:23:83:ba:5d:43:28:71:db: ff:09:5a:c1:dd:5a:ea:62:7d:98:e2:68:c7:0f:ff:ae:be:0b: c6:e1:50:3b:56:72:a6:76:ee:85:4b:e7:fe:0f:95:01:af:91: 0a:79:17:f0:f3:29:8e:8b:a7:69:a2:b1:b5:b4:73:22:8b:c5: f6:12:b7:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqOFdAPufH51d8sSfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI1MDcxODAzMDkzMFoXDTI1MTAxNjAzMDkzMFowLzEtMCsGA1UEAxMk NjQzM2U4MWUtOGQzMy00ZmQxLThhM2YtOTdmOTFiNjYzMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QiS7FvtZe+98fJ3ilD4ziKOlrFZr3QzDH1x 7YDWj2bbMXsliqEVp2q7R0qQdqYKfEjY/M7GNTaVIx6Zr9ZBEnhJzhqhv007+lj3 FOVxnL3EQegci3uXebNy8ZR/ckW54xuANgWwf3iRV0ha5ggDP7IA5lsnhiQ0AKJV M8i9LoOyS9bCathUTPkeJUoxP1vnFHhtADa+YQ8DfqqmpI4y1/7RjRzxWCnMVPyD kpvkrjNJYdw0R7U4PKbeLppGz4vVS7FM4Wkm4nyzwN8QW07UO5bLNkksbDwuUhRD 3hD4KAiF5QCQGjnr0oEy21NJFVdMNzHvHItuNy6SsOJdmR1+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKgKQcShmrtBi4s07zthWqwqDbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvOTZmNmQ4NzQtNWZmNi0z MDQ4LWI1NjgtMDYwMDZkZTc2ZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP8C71WSYmiv9+jXyF0AefKXr60n1hwFRZ9hEDukoCbDcU+c8Kp8grA Gvr3m6tWDq7mZugmqxZiMTEGSnuLQT9Lz0j5eNqYMZwwqLPDKtIbCN01BxtGMqqf 9CpOrrCsrxtgVlF8MPvtdYHWPDV6kBC5LDh5mpsHtzr+UJAacfuNzuqvHkm5twy1 needLsWVQ6PTeOl9bFRGe5KXnolgrn6EBZcxgrotGMI2Rw7tjuGgmPZDTHdOFQov WU51eSgjg7pdQyhx2/8JWsHdWupifZjiaMcP/66+C8bhUDtWcqZ27oVL5/4PlQGv kQp5F/DzKY6Lp2misbW0cyKLxfYSt+g= -----END CERTIFICATE-----Generated at Mon Aug 11 11:54:57 2025 by rpki-client