$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa File: facec0c3-3e20-3ab9-92ff-cea91868e688.roa (raw, json) Hash identifier: E0DSNRagHzkQVwfdxyoHZylKtYU2FxS8k69T0KRJ9wg= Subject key identifier: 95:A7:5F:65:D9:0A:FC:EB:F9:1E:1E:DD:9D:76:15:14:98:6B:28:62 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D9E50153FF27864D48B4B44C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 7015 IP address blocks: 23.249.160.0/24 maxlen: 24 23.249.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:15:3f:f2:78:64:d4:8b:4b:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=6bdc5ab1-4522-4425-af2d-8da44c824029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:2c:3f:18:fc:ac:fd:bc:8e:35:7e:60:5d: 55:80:bb:42:2c:da:a6:5a:a3:95:16:94:04:39:88: b8:88:04:39:76:d3:ec:6d:7b:c6:27:88:ab:b6:e1: 14:bb:23:a2:95:9e:27:96:52:ba:c1:f1:39:1f:63: 98:d0:94:16:24:ce:4b:b7:6f:68:e2:0b:97:89:8f: b3:0c:73:bd:b2:f7:bf:d7:52:de:7a:73:ff:b5:34: 9c:82:e3:2b:bb:cd:05:2d:e8:e9:c0:73:38:4e:fe: 74:fc:f3:0f:a5:6d:59:64:bc:2a:e7:7a:8b:36:31: c5:7f:6c:4a:28:22:7c:6b:47:49:51:50:a3:c9:f5: 31:48:0a:45:aa:c3:3f:60:bd:ea:8e:cd:4a:39:32: d8:9f:05:b2:1a:eb:b3:36:45:8c:1d:4e:74:62:1e: 90:6c:89:65:2f:0a:96:bb:fa:a9:11:5f:f1:0e:4d: 27:de:fb:6a:54:de:16:26:c7:ff:c3:d6:eb:a5:b6: 12:7f:b8:0b:79:b0:94:8f:54:e1:a8:01:59:5c:62: 83:96:a6:3a:97:39:d2:80:4a:61:87:6a:48:da:0a: 54:f6:bb:32:5b:d2:e3:99:c1:6e:2a:7f:70:7c:f0: d8:49:47:7e:77:01:21:29:52:c7:19:54:1c:3a:8d: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A7:5F:65:D9:0A:FC:EB:F9:1E:1E:DD:9D:76:15:14:98:6B:28:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 23.249.160.0/24 23.249.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:68:f6:41:ee:8e:8b:ba:f6:a1:bd:38:45:57:a6:87:1b:b0: 80:4f:f5:dc:64:dd:02:ab:b2:ae:9c:b5:4e:32:dc:bb:30:23: 8b:4a:b3:68:71:c9:b3:3e:0c:4e:4a:15:ab:2a:47:d2:c2:69: 6e:42:9b:6a:4f:d8:8f:4a:c8:6b:44:cc:f8:bf:84:f9:57:30: 17:1e:e9:85:e7:48:3a:da:6d:fa:8d:ae:5c:62:67:72:97:5f: 89:a0:01:91:d9:7d:a8:a1:c4:ac:83:cb:ec:b2:a3:1b:df:15: d1:d9:8e:29:40:88:08:59:03:70:10:d1:0b:20:c2:99:92:ba: c1:42:d6:45:32:7b:eb:45:09:65:ad:c6:1d:5c:c8:28:0c:dc: e7:12:47:13:62:08:97:31:11:98:2c:89:f4:f1:c1:9c:85:db: ef:44:64:4e:a5:43:81:65:40:92:8d:c7:3f:a4:4e:21:fd:2c: 93:11:e0:5f:ff:de:a0:45:26:a0:93:11:22:76:11:2b:24:76: 35:93:8b:89:25:3c:2c:60:b1:6a:38:31:3e:dc:3f:7f:c0:1e: 0d:78:c2:a4:c0:f4:b1:cc:e9:d4:c6:d6:25:7c:52:81:ea:89: c3:e4:e8:a4:c7:11:35:84:7d:c9:fd:a5:41:0a:e3:a1:a5:28: ef:34:42:15 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2eUBU/8nhk1ItLRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NmJkYzVhYjEtNDUyMi00NDI1LWFmMmQtOGRhNDRjODI0MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlIsPxj8rP28jjV+YF1VgLtCLNqmWqOVFpQE OYi4iAQ5dtPsbXvGJ4irtuEUuyOilZ4nllK6wfE5H2OY0JQWJM5Lt29o4guXiY+z DHO9sve/11LeenP/tTScguMru80FLejpwHM4Tv50/PMPpW1ZZLwq53qLNjHFf2xK KCJ8a0dJUVCjyfUxSApFqsM/YL3qjs1KOTLYnwWyGuuzNkWMHU50Yh6QbIllLwqW u/qpEV/xDk0n3vtqVN4WJsf/w9brpbYSf7gLebCUj1ThqAFZXGKDlqY6lznSgEph h2pI2gpU9rsyW9LjmcFuKn9wfPDYSUd+dwEhKVLHGVQcOo35qwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJWnX2XZCvzr+R4e3Z12FRSYayhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZmFjZWMwYzMtM2UyMC0z YWI5LTkyZmYtY2VhOTE4NjhlNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF/mgAwQA F/mqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADpo9kHujou69qG9OEVXpocbsIBP9dxk3QKrsq6ctU4y3Lsw I4tKs2hxybM+DE5KFasqR9LCaW5Cm2pP2I9KyGtEzPi/hPlXMBce6YXnSDrabfqN rlxiZ3KXX4mgAZHZfaihxKyDy+yyoxvfFdHZjilAiAhZA3AQ0QsgwpmSusFC1kUy e+tFCWWtxh1cyCgM3OcSRxNiCJcxEZgsifTxwZyF2+9EZE6lQ4FlQJKNxz+kTiH9 LJMR4F//3qBFJqCTESJ2ESskdjWTi4klPCxgsWo4MT7cP3/AHg14wqTA9LHM6dTG 1iV8UoHqicPk6KTHETWEfcn9pUEK46GlKO80QhU= -----END CERTIFICATE-----Generated at Wed May 13 08:20:33 2026 by rpki-client