$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa File: facec0c3-3e20-3ab9-92ff-cea91868e688.roa (raw, json) Hash identifier: JlV1weFCUE9w6lYLGQRtbw2qMlnj2FkPpMNhL3qVh1Q= Subject key identifier: 34:E8:62:C5:36:9F:7B:D4:75:71:E0:6D:12:78:61:52:76:7A:24:00 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584AFC1C04139B861631790D0200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7015 IP address blocks: 23.249.160.0/24 maxlen: 24 23.249.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:04:13:9b:86:16:31:79:0d:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=8043334b-ee79-4f78-956f-0ccb761b94a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:68:e3:e8:f8:e3:1c:a5:82:d7:62:d7:c4: e6:50:d3:f5:2a:db:33:9e:a4:60:2f:af:f9:bc:7b: e7:bd:5b:27:62:1f:7d:4f:f8:58:f8:1c:12:0e:1f: 47:51:43:68:74:40:13:9d:10:96:87:4e:60:02:02: 78:38:6e:19:5f:d1:bd:7c:38:c9:ef:a5:44:99:99: b7:29:81:a2:7a:b7:44:f0:ee:8a:65:8d:14:5d:76: ed:b0:e2:e1:b7:97:9d:d8:6a:17:d5:dd:f6:14:a2: 54:ee:9b:bf:a6:e0:25:b0:a7:c9:9e:d1:de:d2:e5: 75:d9:bf:3f:6a:4e:c0:9f:e8:51:b7:c6:ae:b0:91: 26:57:75:e1:17:ec:dc:8d:92:b9:87:a6:d5:75:a6: f7:c7:d0:23:1b:9e:4f:9f:f2:2a:47:fc:8d:9f:4b: 0f:e7:d8:e7:56:ba:ec:c6:86:e4:a4:ce:8a:87:5a: 6a:25:f5:1b:e4:9a:37:80:40:07:37:c3:2f:87:c6: 2e:d3:a2:5b:23:a0:93:b7:65:bd:9a:df:72:a0:d7: d1:26:80:cc:9a:57:b2:61:2a:fd:bf:b0:6e:e3:7a: 3a:01:c6:a8:6c:1c:07:03:c1:c2:ee:73:43:5a:bc: 8a:a6:d4:51:1e:3f:ae:49:c9:2f:bc:97:dd:e4:7b: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E8:62:C5:36:9F:7B:D4:75:71:E0:6D:12:78:61:52:76:7A:24:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 23.249.160.0/24 23.249.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:fa:f5:95:5e:56:67:f4:f4:7d:5b:ef:09:35:ac:e1:11:80: cb:b6:8b:15:60:22:43:2f:b1:ee:74:56:9f:80:a2:c7:7a:d9: 74:ea:7c:ba:38:51:fb:f4:e2:2b:f9:98:91:eb:8c:94:8e:fc: c7:f9:ed:b4:95:a5:d2:5a:f7:c7:8e:b3:c8:63:cf:8a:69:df: 11:59:60:42:0a:34:85:1f:df:ea:ae:37:79:6a:58:f3:3c:22: e7:0c:59:70:3c:4a:f8:31:87:e9:3b:f6:96:2d:c0:43:a0:88: ef:2f:7b:e6:2c:d6:f0:83:ab:4b:7a:f7:18:46:8f:5b:37:7f: ff:fe:0f:22:c8:3d:32:0e:b2:52:f8:2f:a2:50:a4:53:cb:31: 3c:62:40:fc:19:14:b9:87:7a:c1:5f:30:6b:bb:fc:19:c5:05: 11:20:fa:ea:1d:9b:12:5c:88:d1:ec:86:bc:65:52:73:6e:59: 97:25:d5:c2:24:8c:1d:5f:f3:8c:4a:66:2e:b2:d1:31:45:63: 77:7a:7f:14:76:28:66:7b:71:a1:b3:2f:27:dd:21:95:06:b0: d2:b9:f2:05:5e:fe:05:82:f6:52:24:b4:b6:32:8a:6b:ff:bc: c5:25:f0:25:f2:8b:41:ab:43:51:7b:e7:b9:98:c3:75:a4:2d: 39:c5:89:3c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr8HAQTm4YWMXkNAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ODA0MzMzNGItZWU3OS00Zjc4LTk1NmYtMGNjYjc2MWI5NGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMxo4+j44xylgtdi18TmUNP1KtsznqRgL6/5 vHvnvVsnYh99T/hY+BwSDh9HUUNodEATnRCWh05gAgJ4OG4ZX9G9fDjJ76VEmZm3 KYGierdE8O6KZY0UXXbtsOLht5ed2GoX1d32FKJU7pu/puAlsKfJntHe0uV12b8/ ak7An+hRt8ausJEmV3XhF+zcjZK5h6bVdab3x9AjG55Pn/IqR/yNn0sP59jnVrrs xobkpM6Kh1pqJfUb5Jo3gEAHN8Mvh8Yu06JbI6CTt2W9mt9yoNfRJoDMmleyYSr9 v7Bu43o6AcaobBwHA8HC7nNDWryKptRRHj+uSckvvJfd5HtziQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDToYsU2n3vUdXHgbRJ4YVJ2eiQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZmFjZWMwYzMtM2UyMC0z YWI5LTkyZmYtY2VhOTE4NjhlNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF/mgAwQA F/mqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFv69ZVeVmf09H1b7wk1rOERgMu2ixVgIkMvse50Vp+Aosd6 2XTqfLo4Ufv04iv5mJHrjJSO/Mf57bSVpdJa98eOs8hjz4pp3xFZYEIKNIUf3+qu N3lqWPM8IucMWXA8Svgxh+k79pYtwEOgiO8ve+Ys1vCDq0t69xhGj1s3f//+DyLI PTIOslL4L6JQpFPLMTxiQPwZFLmHesFfMGu7/BnFBREg+uodmxJciNHshrxlUnNu WZcl1cIkjB1f84xKZi6y0TFFY3d6fxR2KGZ7caGzLyfdIZUGsNK58gVe/gWC9lIk tLYyimv/vMUl8CXyi0GrQ1F757mYw3WkLTnFiTw= -----END CERTIFICATE-----Generated at Tue Aug 26 18:25:29 2025 by rpki-client