$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa File: 6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa (raw, json) Hash identifier: 0qYyhrSky3jK4VVGxsIOsoKJJoouUumOBfPL9V49NOQ= Subject key identifier: AA:87:F4:32:1E:6A:7D:37:03:79:F5:39:B9:34:E8:3A:FA:98:9C:28 Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584CF6ECD6B80E7B5BC302A6D780 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 14618 IP address blocks: 139.64.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d6:b8:0e:7b:5b:c3:02:a6:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=ee456c19-c06a-48c6-b37d-470ea0452442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:b9:66:7e:b4:42:08:8d:c5:7c:7d:98:cf: 79:96:bb:2e:e2:f7:ba:52:bb:a2:61:63:c8:a1:88: b9:a9:0c:c1:d2:0a:9c:7c:28:a6:47:85:be:b4:00: cd:9a:ee:4b:2b:8f:1c:cb:25:a9:fe:27:41:c7:b8: fb:5d:e7:ed:69:b1:98:af:a4:69:9c:20:6b:35:16: 11:9e:57:11:ab:e6:57:4b:2f:71:14:3b:44:85:18: f7:eb:7d:73:c9:2b:ff:46:73:6f:59:69:40:38:cb: df:0d:79:48:72:af:04:46:e4:0f:52:a0:31:d4:5d: 61:ce:df:5e:f7:2b:b1:e9:ec:e9:8b:5d:48:40:07: 81:75:4b:88:3f:95:80:8f:24:70:70:04:f4:67:fa: de:c1:5a:cb:f0:19:ff:39:40:34:7c:c7:44:7f:04: 97:17:7e:f5:84:ba:64:ac:2f:c9:76:b8:8f:9a:a8: f3:c8:1e:fc:ee:34:6a:3e:f7:45:aa:c8:70:f2:56: 7c:d4:fc:ae:85:03:d8:31:41:11:c7:dc:79:3a:92: 29:40:49:76:9c:97:52:f2:0e:a7:6c:19:23:7a:6a: c3:dd:ff:8d:d8:fc:b1:d2:e8:81:bf:74:4f:a3:b4: 33:4d:38:02:a0:88:1f:18:2b:da:46:4d:11:c9:8c: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:87:F4:32:1E:6A:7D:37:03:79:F5:39:B9:34:E8:3A:FA:98:9C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a3:c7:42:18:6e:34:48:9c:bd:53:15:44:51:db:90:9f:9e: 60:77:7a:3d:5c:fb:af:7d:8e:37:e2:67:93:66:b2:90:27:45: 73:69:71:46:0b:ce:3f:ab:8c:f3:79:a9:b4:38:f4:0e:e3:90: cb:4b:06:90:51:f0:f5:dc:d3:13:2b:99:9b:81:f8:f4:22:71: 87:74:83:b4:30:5a:a8:8d:64:b9:50:28:82:e4:da:fc:47:f8: b5:2a:cb:db:48:84:52:60:83:11:bf:ae:47:0b:16:87:93:ad: 73:59:ba:12:1f:46:e2:2d:f4:4c:44:b5:68:21:5a:cf:57:7e: 87:23:e0:47:2f:05:a4:46:21:67:40:f8:ee:a2:ac:3d:84:ca: 31:35:4e:75:26:57:06:4b:85:15:1e:1e:23:c4:49:6a:56:a2: 1f:4d:15:69:e3:a0:62:d2:30:50:a0:ea:29:0c:f5:95:ad:25: 46:2e:f8:a0:dc:49:76:a0:28:87:e2:b6:f3:98:5f:11:31:ed: ad:f6:d8:98:7f:8d:39:03:51:cf:15:5f:fe:ad:38:8e:1d:07: d5:15:52:cc:27:ea:9f:10:d1:9d:e6:3b:c1:78:1c:d0:99:1f: 0e:d3:08:41:c3:3f:f9:f0:bd:fc:4b:2f:e4:f0:6d:e2:f2:08: 67:d4:72:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27Na4DntbwwKm14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZWU0NTZjMTktYzA2YS00OGM2LWIzN2QtNDcwZWEwNDUyNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWO5Zn60QgiNxXx9mM95lrsu4ve6UruiYWPI oYi5qQzB0gqcfCimR4W+tADNmu5LK48cyyWp/idBx7j7XeftabGYr6RpnCBrNRYR nlcRq+ZXSy9xFDtEhRj3631zySv/RnNvWWlAOMvfDXlIcq8ERuQPUqAx1F1hzt9e 9yux6ezpi11IQAeBdUuIP5WAjyRwcAT0Z/rewVrL8Bn/OUA0fMdEfwSXF371hLpk rC/JdriPmqjzyB787jRqPvdFqshw8lZ81PyuhQPYMUERx9x5OpIpQEl2nJdS8g6n bBkjemrD3f+N2Pyx0uiBv3RPo7QzTTgCoIgfGCvaRk0RyYzPVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqH9DIean03A3n1Obk06Dr6mJwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvNmE5ZmYyMDQtYjMxZC0z N2Y1LWIyN2UtZDZhYzIwMTBmZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2jx0IYbjRInL1TFURR25CfnmB3ej1c+699jjfiZ5NmspAnRXNpcUYL zj+rjPN5qbQ49A7jkMtLBpBR8PXc0xMrmZuB+PQicYd0g7QwWqiNZLlQKILk2vxH +LUqy9tIhFJggxG/rkcLFoeTrXNZuhIfRuIt9ExEtWghWs9Xfocj4EcvBaRGIWdA +O6irD2EyjE1TnUmVwZLhRUeHiPESWpWoh9NFWnjoGLSMFCg6ikM9ZWtJUYu+KDc SXagKIfitvOYXxEx7a322Jh/jTkDUc8VX/6tOI4dB9UVUswn6p8Q0Z3mO8F4HNCZ Hw7TCEHDP/nwvfxLL+TwbeLyCGfUchQ= -----END CERTIFICATE-----Generated at Sun Mar 1 18:47:43 2026 by rpki-client