$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa File: 175419ee-8205-3ea6-95fa-eba20907ad30.roa (raw, json) Hash identifier: Gt3tcxqp5/yyijOHcvxrjtZvq97ahYBbcJNXpQnVZ9U= Subject key identifier: 32:55:F1:F7:70:11:19:E7:B8:BE:3B:A5:9C:88:DF:27:76:CA:43:80 Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584F4975E90BDC757354A783E340 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 139.64.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e9:0b:dc:75:73:54:a7:83:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=514c6ae7-9029-46d4-abe7-96718b0aa899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:aa:42:c9:e3:57:53:2a:9a:ef:16:53:cd: 00:c7:5e:ca:ab:de:aa:89:07:8f:82:5e:98:1b:ab: a5:98:35:53:3b:2c:6a:3a:5d:3b:65:1c:16:16:be: aa:68:a3:0d:4b:2c:37:46:47:64:a8:48:bd:c1:6b: 4b:6e:af:75:3c:42:3c:3c:b1:7f:86:21:2c:1f:0f: c2:b8:c6:3c:2e:d6:25:27:42:e1:93:f9:46:5e:17: 92:eb:b8:89:ef:91:5c:92:15:eb:12:80:49:3d:59: 20:71:43:8b:92:8c:59:54:e5:ea:5c:ce:d9:87:13: a9:ba:fe:b0:cb:c3:cd:0a:a3:9d:76:aa:bb:9b:e8: d7:67:fb:23:ec:76:5f:14:2f:cd:d2:66:3d:99:e8: a8:d8:ac:0d:df:e4:f6:32:e2:48:55:92:41:f9:39: 4c:a3:52:37:78:a8:80:ef:33:7a:f8:7b:01:50:a4: 94:b7:41:d1:42:6e:8d:8f:45:57:1b:f1:20:00:bc: 58:c4:62:8e:fd:b1:2a:55:4c:c4:b9:af:b2:4d:5a: c0:8a:16:e4:72:0a:c1:a1:29:74:07:77:9d:9d:a5: cd:d8:ac:07:da:0d:c3:99:95:9b:87:68:64:6e:93: 22:07:0d:eb:c1:9c:89:9d:d7:c8:68:10:89:5c:7e: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:55:F1:F7:70:11:19:E7:B8:BE:3B:A5:9C:88:DF:27:76:CA:43:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:84:b6:54:a9:8f:0f:20:dd:c9:81:85:46:6e:db:58:84:6f: 02:16:0e:23:61:d7:ca:c4:9e:90:b2:5f:50:f3:2a:72:c4:9b: e3:a0:cb:df:cf:80:f6:25:08:ed:6b:a0:1a:3a:ef:77:1c:44: 5b:e4:e2:03:f4:75:35:8b:61:36:57:51:d0:a7:93:6d:be:3a: 96:a3:37:76:91:fb:5a:54:71:49:4a:cb:4b:19:27:6c:2f:45: ce:df:32:df:ac:60:e8:56:9b:ff:36:75:33:c6:83:03:c6:9d: 6f:e0:79:c9:5a:b1:4e:ef:48:ec:4c:64:cf:9d:77:52:b8:23: c7:07:49:e5:8d:2d:c5:93:5b:c9:e6:4e:4e:92:b8:00:17:1b: ff:0e:0e:2c:ae:06:de:36:90:47:fc:a3:7f:34:ff:91:ee:e1: 50:47:f1:0b:87:c9:a6:9b:30:ca:b4:8d:14:5c:a8:ca:18:b8: 80:0c:be:84:28:66:ee:85:64:05:e4:ab:96:b3:e6:a7:af:1a: cc:fd:80:c3:d6:4b:a7:96:cd:ba:68:77:04:36:cd:4c:61:02: c6:98:a4:46:99:ef:b9:cd:96:f8:70:5d:8e:54:96:40:7c:4a: 69:3a:c1:3c:b9:52:76:23:0d:47:4a:b6:f5:f3:43:81:9e:13: de:49:33:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdekL3HVzVKeD40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTE0YzZhZTctOTAyOS00NmQ0LWFiZTctOTY3MThiMGFhODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI2qQsnjV1Mqmu8WU80Ax17Kq96qiQePgl6Y G6ulmDVTOyxqOl07ZRwWFr6qaKMNSyw3RkdkqEi9wWtLbq91PEI8PLF/hiEsHw/C uMY8LtYlJ0Lhk/lGXheS67iJ75FckhXrEoBJPVkgcUOLkoxZVOXqXM7ZhxOpuv6w y8PNCqOddqq7m+jXZ/sj7HZfFC/N0mY9meio2KwN3+T2MuJIVZJB+TlMo1I3eKiA 7zN6+HsBUKSUt0HRQm6Nj0VXG/EgALxYxGKO/bEqVUzEua+yTVrAihbkcgrBoSl0 B3ednaXN2KwH2g3DmZWbh2hkbpMiBw3rwZyJndfIaBCJXH6hNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJV8fdwERnnuL47pZyI3yd2ykOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMTc1NDE5ZWUtODIwNS0z ZWE2LTk1ZmEtZWJhMjA5MDdhZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyEtlSpjw8g3cmBhUZu21iEbwIWDiNh18rEnpCyX1DzKnLEm+Ogy9/P gPYlCO1roBo673ccRFvk4gP0dTWLYTZXUdCnk22+OpajN3aR+1pUcUlKy0sZJ2wv Rc7fMt+sYOhWm/82dTPGgwPGnW/geclasU7vSOxMZM+dd1K4I8cHSeWNLcWTW8nm Tk6SuAAXG/8ODiyuBt42kEf8o380/5Hu4VBH8QuHyaabMMq0jRRcqMoYuIAMvoQo Zu6FZAXkq5az5qevGsz9gMPWS6eWzbpodwQ2zUxhAsaYpEaZ77nNlvhwXY5UlkB8 Smk6wTy5UnYjDUdKtvXzQ4GeE95JM6Y= -----END CERTIFICATE-----Generated at Thu Oct 1 07:02:48 2026 by rpki-client