$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa File: facec0c3-3e20-3ab9-92ff-cea91868e688.roa (raw, json) Hash identifier: O/qH15npBCXMUBx2TF+2Gr8ML8Qk8TJPvvozq2LHRk4= Subject key identifier: CA:9C:5A:FB:6A:AF:BA:37:88:62:61:11:1D:F9:0D:4C:9A:91:A0:A4 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F20F7BB79A438F701918A37C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7015 IP address blocks: 23.249.160.0/24 maxlen: 24 23.249.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:bb:79:a4:38:f7:01:91:8a:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=6fac5e4c-3864-4fe6-91b8-14260dad480e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:00:0d:b2:0c:6f:84:46:ab:b2:51:f3:be:3c: 0c:d2:4c:30:cd:95:e6:60:64:c1:c9:9e:12:b6:f9: 26:55:ab:a9:18:f5:83:b6:09:e5:f9:89:fe:65:43: ae:78:d3:bd:0f:cd:25:e1:78:84:0a:a9:1a:75:aa: a3:fb:74:8c:17:1f:39:3b:43:0a:e4:e5:4f:90:a1: 6f:58:32:ae:71:93:dd:aa:73:6f:91:07:9f:91:56: be:50:c1:d3:9d:95:69:80:ba:2e:40:bf:09:6e:72: 19:84:37:88:31:aa:a9:f2:7f:99:27:bb:1d:31:55: 2a:b1:2a:b0:64:52:af:7b:db:dc:a4:7d:8e:4f:2e: 7c:58:a6:61:b8:bc:27:e6:c9:eb:c0:dc:91:5e:de: c7:22:24:77:94:59:d4:97:93:dd:b5:c7:91:bf:28: cb:4c:99:98:25:9f:55:42:9b:e4:89:41:4e:14:98: b2:fb:11:60:30:f6:ac:0b:a7:22:2e:37:f2:f0:dd: a8:68:92:12:b4:0d:22:58:e6:e1:3c:6f:70:e1:a5: 7f:43:25:41:4e:3a:25:a4:0c:af:55:c6:11:29:27: bb:1b:df:aa:3f:00:f5:69:44:be:bd:78:51:d9:4e: 66:3b:14:07:89:65:55:5a:e7:bf:55:a1:24:fc:e2: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9C:5A:FB:6A:AF:BA:37:88:62:61:11:1D:F9:0D:4C:9A:91:A0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 23.249.160.0/24 23.249.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:00:c3:82:3d:80:fd:6e:7c:c6:cc:b3:e5:05:ac:73:4b:b1: e7:02:77:87:8b:d3:9d:ed:95:51:75:eb:61:7d:2e:ad:c5:67: af:f8:75:4c:07:e4:c0:98:d2:88:76:f9:ab:5b:44:99:25:eb: 0e:e8:80:e5:3a:12:97:ea:21:53:c8:67:c4:22:7b:4b:15:68: d1:6e:c1:06:26:e8:ca:ba:35:42:3f:12:32:0b:da:43:50:90: 6d:63:7d:1c:d5:40:82:68:cf:e5:8d:b1:8c:c7:05:6b:d9:d8: 9f:fe:9b:28:fb:b2:20:5b:48:d9:86:ee:ff:0d:d7:72:4b:fa: a2:aa:4c:f7:76:9c:02:63:20:fa:20:b9:6a:70:3d:8b:1f:60: 26:00:22:b0:1d:d2:78:31:69:90:1a:87:b4:3f:94:9b:56:72: 58:31:8e:8f:e5:dd:15:53:ba:48:c3:ce:36:cd:d0:e6:46:37: 17:90:42:5f:32:93:14:0d:b0:87:a8:b7:68:9b:5d:a5:c5:fe: 86:37:a1:50:2e:4b:5e:09:3a:6c:a1:75:e5:4f:e8:c1:3e:d1: b4:5b:76:61:16:8a:32:55:b7:cb:17:43:38:e0:99:af:e3:8d: 4e:6d:2a:bf:ab:a7:80:e6:3c:ae:60:0c:d0:f2:2a:88:e5:c4: eb:1e:ee:33 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8g97t5pDj3AZGKN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NmZhYzVlNGMtMzg2NC00ZmU2LTkxYjgtMTQyNjBkYWQ0ODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAANsgxvhEarslHzvjwM0kwwzZXmYGTByZ4S tvkmVaupGPWDtgnl+Yn+ZUOueNO9D80l4XiECqkadaqj+3SMFx85O0MK5OVPkKFv WDKucZPdqnNvkQefkVa+UMHTnZVpgLouQL8JbnIZhDeIMaqp8n+ZJ7sdMVUqsSqw ZFKve9vcpH2OTy58WKZhuLwn5snrwNyRXt7HIiR3lFnUl5PdtceRvyjLTJmYJZ9V QpvkiUFOFJiy+xFgMPasC6ciLjfy8N2oaJIStA0iWObhPG9w4aV/QyVBTjolpAyv VcYRKSe7G9+qPwD1aUS+vXhR2U5mOxQHiWVVWue/VaEk/OLvLQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMqcWvtqr7o3iGJhER35DUyakaCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZmFjZWMwYzMtM2UyMC0z YWI5LTkyZmYtY2VhOTE4NjhlNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF/mgAwQA F/mqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIgAw4I9gP1ufMbMs+UFrHNLsecCd4eL053tlVF162F9Lq3F Z6/4dUwH5MCY0oh2+atbRJkl6w7ogOU6EpfqIVPIZ8Qie0sVaNFuwQYm6Mq6NUI/ EjIL2kNQkG1jfRzVQIJoz+WNsYzHBWvZ2J/+myj7siBbSNmG7v8N13JL+qKqTPd2 nAJjIPoguWpwPYsfYCYAIrAd0ngxaZAah7Q/lJtWclgxjo/l3RVTukjDzjbN0OZG NxeQQl8ykxQNsIeot2ibXaXF/oY3oVAuS14JOmyhdeVP6ME+0bRbdmEWijJVt8sX Qzjgma/jjU5tKr+rp4DmPK5gDNDyKojlxOse7jM= -----END CERTIFICATE-----Generated at Fri Sep 25 18:23:59 2026 by rpki-client