$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa File: 35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa (raw, json) Hash identifier: aC6ouWn95JYLCTEQDtwdFZhAwXb9nmBAXHFgTbUhSWM= Subject key identifier: 9F:A3:B2:05:05:05:B8:6D:47:B6:0E:E2:7E:D9:F6:A9:FF:F3:D4:0A Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584CF6ECD6873F4D159FB42A7A80 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 209242 IP address blocks: 139.64.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d6:87:3f:4d:15:9f:b4:2a:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=bae0afcf-d615-4ec7-bd36-a85bbcdeafbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:14:28:cd:ba:e9:66:d0:25:4e:2a:74:14: a5:94:e5:c6:2f:b1:48:79:ea:69:77:b6:58:e6:88: a5:a9:0a:36:1a:22:52:d3:17:37:04:67:85:51:e4: bd:38:04:73:ad:2f:f8:19:d4:77:5e:81:69:b0:7c: 43:58:1a:8f:4b:1b:2d:e2:a0:36:5b:54:7b:a4:86: bd:e6:12:58:0f:42:5c:b2:c2:13:82:3b:89:90:1b: f5:ed:f0:6f:55:7c:83:a6:12:f8:b9:32:3a:b1:ef: 0a:d9:bf:e4:dc:60:33:91:43:5e:9c:50:c9:56:44: 66:75:54:67:9d:97:ad:3b:0e:d5:59:f2:8a:1c:cf: dd:1b:ea:03:f7:b2:42:ef:a6:cf:7a:91:8f:7e:80: 65:89:9e:dc:ea:bc:f2:9f:7c:5b:9e:2f:97:2e:75: ad:8e:c1:93:0b:44:bc:a1:8f:cd:66:9e:8c:fe:d0: e7:e3:4f:38:48:d1:c9:8b:bd:5a:26:5a:f9:26:84: ed:4c:07:49:81:3f:d4:9d:78:0f:fe:41:8d:ae:a5: 46:46:1d:f8:06:c9:d5:a0:6c:b9:0b:e6:75:c9:17: e5:71:04:27:58:ae:fe:bd:39:f0:c4:17:71:22:c8: 9a:b3:5e:4c:cb:01:00:6a:96:22:1e:b3:89:1b:97: af:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A3:B2:05:05:05:B8:6D:47:B6:0E:E2:7E:D9:F6:A9:FF:F3:D4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c3:bd:7a:73:24:78:13:26:40:7d:0f:e5:94:7b:e9:c4:22: 7c:d2:22:ef:96:c0:18:7b:85:28:e4:3d:f8:ab:18:76:c5:85: 1f:7b:ff:4e:f4:68:3d:43:0c:e3:6b:19:01:fb:a9:1d:e4:ec: 2b:7a:e5:8a:79:5c:22:ba:ab:39:85:37:3c:0f:dc:02:4b:f8: 7e:b4:99:bb:16:12:ce:23:33:87:34:b7:b2:c2:af:53:3b:94: 9a:e7:2e:c7:25:21:c6:30:3e:ab:d7:fe:34:5f:17:d8:4e:5a: a6:c4:10:0a:b8:50:32:db:c3:2b:72:68:c9:09:eb:7a:9b:3f: 7a:41:78:fa:ef:0b:5f:cc:78:55:ec:de:41:f4:3b:0c:f3:77: 37:ea:87:f7:00:c8:0b:0f:b7:ba:8a:14:6c:58:25:12:f9:26: a5:db:4c:fe:2f:fc:34:d4:0b:73:14:76:cd:ee:31:28:ea:1f: 88:98:88:0f:3d:29:d5:33:26:70:f4:a7:b6:da:60:ee:20:cb: 42:d9:bc:40:b8:93:e8:86:f9:a2:34:e2:19:18:c6:b3:8d:71: da:a3:52:2b:4d:b0:b5:d4:75:a5:55:de:72:76:f5:a3:3e:9d: 1d:54:a9:b0:49:b9:b2:79:a5:31:bc:da:d4:4b:f7:61:1e:16: 97:a6:03:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NaHP00Vn7QqeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk YmFlMGFmY2YtZDYxNS00ZWM3LWJkMzYtYTg1YmJjZGVhZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+0UKM266WbQJU4qdBSllOXGL7FIeeppd7ZY 5oilqQo2GiJS0xc3BGeFUeS9OARzrS/4GdR3XoFpsHxDWBqPSxst4qA2W1R7pIa9 5hJYD0JcssITgjuJkBv17fBvVXyDphL4uTI6se8K2b/k3GAzkUNenFDJVkRmdVRn nZetOw7VWfKKHM/dG+oD97JC76bPepGPfoBliZ7c6rzyn3xbni+XLnWtjsGTC0S8 oY/NZp6M/tDn4084SNHJi71aJlr5JoTtTAdJgT/UnXgP/kGNrqVGRh34BsnVoGy5 C+Z1yRflcQQnWK7+vTnwxBdxIsias15MywEAapYiHrOJG5evTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+jsgUFBbhtR7YO4n7Z9qn/89QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMzViNjM4NmYtY2Y2Zi0z ZjM1LWE2YTUtZGJmYjA3YThiZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbDvXpzJHgTJkB9D+WUe+nEInzSIu+WwBh7hSjkPfirGHbFhR97/070 aD1DDONrGQH7qR3k7Ct65Yp5XCK6qzmFNzwP3AJL+H60mbsWEs4jM4c0t7LCr1M7 lJrnLsclIcYwPqvX/jRfF9hOWqbEEAq4UDLbwytyaMkJ63qbP3pBePrvC1/MeFXs 3kH0Owzzdzfqh/cAyAsPt7qKFGxYJRL5JqXbTP4v/DTUC3MUds3uMSjqH4iYiA89 KdUzJnD0p7baYO4gy0LZvEC4k+iG+aI04hkYxrONcdqjUitNsLXUdaVV3nJ29aM+ nR1UqbBJubJ5pTG82tRL92EeFpemA7A= -----END CERTIFICATE-----Generated at Mon Mar 2 00:43:33 2026 by rpki-client