$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa File: facec0c3-3e20-3ab9-92ff-cea91868e688.roa (raw, json) Hash identifier: TtY53/6B134d3qEfJUgZdcbnVb6sbnw/GmdSKRSTH3I= Subject key identifier: 0A:2E:C4:F1:71:5D:9E:99:5A:D2:CA:DC:D3:CD:FE:74:9A:81:27:FD Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E7E94F1AF43D9A437CEE666E0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 7015 IP address blocks: 23.249.160.0/24 maxlen: 24 23.249.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f1:af:43:d9:a4:37:ce:e6:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=1e4f30b3-1267-4e35-a304-c75f99471b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:11:12:f7:ed:a4:ed:6c:ab:a6:22:cb:4d: ad:12:06:2b:b7:96:b6:1a:8e:5e:47:d3:54:2e:bf: 7f:20:50:a2:1f:c2:71:c0:ad:0a:f1:52:32:b4:c7: 7a:bb:c5:1b:f3:03:e2:8b:5c:4a:50:9a:fc:63:4b: 46:cb:49:85:05:f9:df:0e:44:67:77:a4:16:55:26: e0:b3:c7:65:e5:84:13:da:ef:55:f9:2a:0a:48:e4: b3:8b:05:dc:ff:f1:bf:a4:b6:83:bd:16:72:8e:8a: b1:f2:96:cc:0a:a1:b5:d5:0e:0d:9d:f8:c4:f2:af: de:8f:83:d2:e6:19:11:12:2f:a6:39:d0:42:40:c3: f8:2c:39:5e:39:b0:ef:06:9c:81:02:c6:cd:11:90: f4:fb:23:3d:ad:e6:a4:b0:00:15:af:c9:03:6b:f5: 03:4f:35:81:05:34:ac:32:b1:22:5a:79:9f:a6:d0: 7d:22:21:77:cb:1c:ad:e0:67:df:b3:e1:0f:69:c9: 29:70:ae:3f:1d:68:06:fa:8d:61:50:56:b3:c2:cf: 22:d1:2c:93:f9:0c:ee:87:6a:52:ad:63:c5:ac:84: fa:9f:cd:c3:d4:f4:f7:43:ad:66:80:41:13:95:50: 17:95:79:a5:6c:84:ac:87:97:3b:2a:3d:bc:3a:1e: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2E:C4:F1:71:5D:9E:99:5A:D2:CA:DC:D3:CD:FE:74:9A:81:27:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 23.249.160.0/24 23.249.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c7:4a:9e:93:ab:b1:b6:52:be:10:dd:71:55:c4:80:5e:8c: 89:f1:dd:aa:0d:e0:a5:8b:a0:a0:a6:68:f1:e8:6f:96:0a:8d: 64:03:c3:d2:b2:63:9b:06:0a:70:55:ef:50:a4:31:82:56:03: 35:84:c9:0d:67:2a:ab:e1:ef:ac:b7:c2:3c:e0:d7:36:2b:91: 39:d2:bb:e0:7a:68:35:9e:a2:da:af:c9:85:d3:fb:de:3d:c8: 30:a0:6a:c8:77:6a:57:36:ef:73:08:da:cd:40:9c:0a:2b:f7: 27:4d:a7:7a:13:7d:9a:be:47:fe:c8:58:1b:7c:64:08:49:b9: a5:7e:a4:39:07:c3:dc:e5:6a:ee:ea:41:ae:63:81:f7:95:61: 46:5e:db:a9:21:d6:57:44:c2:25:4f:fb:8d:2d:a1:2c:f4:e6: 8e:fb:8b:08:68:15:62:c1:65:2c:87:06:d5:7a:57:94:77:5f: fd:d2:d0:b4:7d:1c:32:55:91:30:87:53:08:18:56:32:d4:3d: 81:2d:35:1b:38:68:3a:a3:90:dd:8f:23:4b:64:30:48:96:64: df:28:d7:cf:99:2f:28:91:93:d1:71:b5:99:49:55:6a:22:13: 0f:be:2d:a2:6e:2e:d4:b6:b7:af:e8:b9:d9:9e:38:20:83:99: f1:a3:e5:26 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5+lPGvQ9mkN87mZuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MWU0ZjMwYjMtMTI2Ny00ZTM1LWEzMDQtYzc1Zjk5NDcxYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXMREvftpO1sq6Yiy02tEgYrt5a2Go5eR9NU Lr9/IFCiH8JxwK0K8VIytMd6u8Ub8wPii1xKUJr8Y0tGy0mFBfnfDkRnd6QWVSbg s8dl5YQT2u9V+SoKSOSziwXc//G/pLaDvRZyjoqx8pbMCqG11Q4NnfjE8q/ej4PS 5hkREi+mOdBCQMP4LDleObDvBpyBAsbNEZD0+yM9reaksAAVr8kDa/UDTzWBBTSs MrEiWnmfptB9IiF3yxyt4Gffs+EPackpcK4/HWgG+o1hUFazws8i0SyT+Qzuh2pS rWPFrIT6n83D1PT3Q61mgEETlVAXlXmlbISsh5c7Kj28Oh49mQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAouxPFxXZ6ZWtLK3NPN/nSagSf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZmFjZWMwYzMtM2UyMC0z YWI5LTkyZmYtY2VhOTE4NjhlNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF/mgAwQA F/mqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADPHSp6Tq7G2Ur4Q3XFVxIBejInx3aoN4KWLoKCmaPHob5YK jWQDw9KyY5sGCnBV71CkMYJWAzWEyQ1nKqvh76y3wjzg1zYrkTnSu+B6aDWeotqv yYXT+949yDCgash3alc273MI2s1AnAor9ydNp3oTfZq+R/7IWBt8ZAhJuaV+pDkH w9zlau7qQa5jgfeVYUZe26kh1ldEwiVP+40toSz05o77iwhoFWLBZSyHBtV6V5R3 X/3S0LR9HDJVkTCHUwgYVjLUPYEtNRs4aDqjkN2PI0tkMEiWZN8o18+ZLyiRk9Fx tZlJVWoiEw++LaJuLtS2t6/oudmeOCCDmfGj5SY= -----END CERTIFICATE-----Generated at Sat Jul 18 02:31:04 2026 by rpki-client