$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa File: bcc02f4b-8494-3205-a39a-df56acb1455b.roa (raw, json) Hash identifier: EbtX3kB/n5LcUpV0R7l+BkGSxlQjA0csTKUQKuuQGvc= Subject key identifier: 36:3B:D5:72:B6:EA:2B:60:6C:90:C0:25:1B:FD:57:5F:00:CC:A2:13 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584D571FB89D902DC2EF3959F140 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 210110 IP address blocks: 23.247.132.0/22 maxlen: 24 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b8:9d:90:2d:c2:ef:39:59:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=88682274-0a2a-4510-a61e-819b12e2ab1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f0:2d:26:19:b4:ab:95:38:7e:40:78:f7:b3: ea:63:b9:06:1a:1d:cd:f9:bb:96:a3:41:a4:8a:0e: 77:6a:33:b1:e4:c4:a4:0e:e9:92:ac:86:49:b8:88: c3:66:d6:57:7d:70:9b:f2:77:86:f4:fc:b9:e8:dd: 42:48:5e:3d:06:b4:41:e0:33:71:d5:35:a7:d9:2f: c5:e2:87:80:8a:7f:ab:84:3b:da:77:fb:f8:6d:2d: 49:67:15:7f:08:7f:8c:b5:86:02:04:66:cc:2f:c7: c2:02:a1:93:13:11:9c:6d:fd:80:39:e4:81:1c:b8: 57:19:6f:a8:6b:66:aa:58:f1:a9:30:49:86:73:88: c7:0f:28:64:b5:89:bc:ee:1a:fd:d7:7c:1b:49:5e: 15:a3:2a:46:7e:ff:ad:fd:24:4a:cd:ab:73:da:57: 30:f6:c9:17:33:0b:85:74:ca:3e:2f:2d:9e:9f:2d: 83:6f:e5:5c:ed:72:cc:36:93:76:05:1f:c8:ed:30: 67:03:77:8a:16:e1:00:1a:c1:e5:00:c2:7a:e7:4a: 48:21:11:b0:3f:ec:4c:ff:24:5a:fd:f2:3a:e7:0d: 8e:3f:2a:ad:d9:ae:48:c7:88:ce:c9:23:93:69:cc: db:7f:56:10:42:05:b5:78:65:ca:af:da:8e:e2:b6: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:D5:72:B6:EA:2B:60:6C:90:C0:25:1B:FD:57:5F:00:CC:A2:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 23.247.132.0/22 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:cf:12:3d:e1:ba:be:a4:b9:43:ab:72:a9:c6:d3:a6:12:4c: 26:2f:00:92:c3:14:94:2a:44:c8:71:ff:07:56:0c:75:37:c8: 47:09:e5:3b:fa:84:c7:83:cf:f8:40:83:ba:00:a0:f3:9e:8d: 48:f9:49:45:db:70:b3:05:00:bd:04:87:46:e3:84:f7:3b:cc: ce:9d:ea:57:9a:a8:9b:37:29:34:c4:23:a9:ef:34:c7:58:d4: 76:0e:5f:ce:fe:94:34:b7:75:48:5c:d3:ec:38:77:1a:24:ec: 0d:fd:8c:3a:a3:1f:8b:9c:13:ba:3e:0b:85:b3:83:cd:16:c0: fc:85:fb:87:31:38:c3:5b:dd:a3:a9:9e:93:95:bf:85:10:e5: 9c:88:a1:89:38:d1:c4:22:d9:93:74:de:ec:b4:47:d7:49:62: c4:a6:ca:c0:7b:fa:b4:2a:a4:20:c4:de:d6:f1:1c:8f:b8:f4: 13:e7:92:e2:5a:aa:0d:52:22:87:97:ad:f9:a2:04:d5:f4:c1: ca:ea:4a:13:5a:1c:78:3c:41:1f:6e:44:38:70:3e:c5:78:d9: de:70:0d:a5:55:1a:c6:67:80:b7:ad:e5:7b:4e:cb:35:ca:b4: 87:b1:4e:18:c7:b0:ef:12:57:54:a0:d7:4a:1d:8b:ef:94:67: f6:47:32:93 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1XH7idkC3C7zlZ8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ODg2ODIyNzQtMGEyYS00NTEwLWE2MWUtODE5YjEyZTJhYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/AtJhm0q5U4fkB497PqY7kGGh3N+buWo0Gk ig53ajOx5MSkDumSrIZJuIjDZtZXfXCb8neG9Py56N1CSF49BrRB4DNx1TWn2S/F 4oeAin+rhDvad/v4bS1JZxV/CH+MtYYCBGbML8fCAqGTExGcbf2AOeSBHLhXGW+o a2aqWPGpMEmGc4jHDyhktYm87hr913wbSV4VoypGfv+t/SRKzatz2lcw9skXMwuF dMo+Ly2eny2Db+Vc7XLMNpN2BR/I7TBnA3eKFuEAGsHlAMJ650pIIRGwP+xM/yRa /fI65w2OPyqt2a5Ix4jOySOTaczbf1YQQgW1eGXKr9qO4raMjQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDY71XK26itgbJDAJRv9V18AzKITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvYmNjMDJmNGItODQ5NC0z MjA1LWEzOWEtZGY1NmFjYjE0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF/eEAwQC aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADHPEj3hur6kuUOrcqnG06YSTCYvAJLDFJQqRMhx/wdWDHU3 yEcJ5Tv6hMeDz/hAg7oAoPOejUj5SUXbcLMFAL0Eh0bjhPc7zM6d6leaqJs3KTTE I6nvNMdY1HYOX87+lDS3dUhc0+w4dxok7A39jDqjH4ucE7o+C4Wzg80WwPyF+4cx OMNb3aOpnpOVv4UQ5ZyIoYk40cQi2ZN03uy0R9dJYsSmysB7+rQqpCDE3tbxHI+4 9BPnkuJaqg1SIoeXrfmiBNX0wcrqShNaHHg8QR9uRDhwPsV42d5wDaVVGsZngLet 5XtOyzXKtIexThjHsO8SV1Sg10odi++UZ/ZHMpM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:06:54 2026 by rpki-client