$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa File: bc521612-402f-3148-b03a-d1bb55015d7a.roa (raw, json) Hash identifier: l0tMANRQs6RaF5dW0+p/SrPEGxuRFz1HfjldXbpTSfg= Subject key identifier: 5A:F9:C3:69:58:54:B7:3C:5B:9A:00:E0:89:C0:7D:D2:17:5A:1A:1C Certificate issuer: /CN=52fb91a6-cd61-4d3a-a409-799dd96b3d14 Certificate serial: 010D0C9F4328584D86953CDD49E14FA902259400 Authority key identifier: 8D:06:2A:56:E4:4B:F4:A4:7C:6B:03:11:79:A1:BF:99:A6:97:13:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 7029 IP address blocks: 23.143.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:3c:dd:49:e1:4f:a9:02:25:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fb91a6-cd61-4d3a-a409-799dd96b3d14 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=e1bb9c86-b09d-45a5-83de-97b4682fe8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:d8:4c:04:74:3c:32:5a:2d:66:77:d0:23: 59:29:b2:95:61:2b:d8:b8:30:a1:25:69:1c:34:3e: 18:d0:a6:e5:ac:df:66:26:a4:33:14:61:d7:47:9b: 87:b9:45:b1:2d:90:6c:23:cb:90:c6:fa:c3:d1:d4: 6e:2e:02:42:04:21:82:24:f9:ab:59:6d:ff:87:56: e7:4b:a8:5a:ea:e5:22:16:7a:7c:3b:9d:fa:07:84: 28:7f:7f:ae:26:26:08:1e:8d:fb:c2:e7:87:46:ca: f9:b3:41:4e:e1:98:be:1d:29:b9:2e:72:1f:70:af: c3:e8:9e:d3:32:fb:a8:c7:ae:bb:2e:bf:bc:f4:91: db:30:ad:80:c6:82:b6:e8:10:ed:ad:f1:61:94:e2: 4e:65:a8:77:74:b3:31:e3:37:06:e6:f3:00:6c:9f: 11:49:59:69:00:f3:1e:a9:8e:f6:b0:ea:0f:ef:f3: ae:50:c0:23:e5:7f:ba:d8:b0:4a:4a:d2:63:56:d5: 07:e3:41:b2:da:f3:36:0d:64:d7:8b:98:9a:1c:9d: e6:bb:d2:35:a6:e9:61:f0:64:1d:b9:cb:d5:66:db: 92:7e:35:fa:31:6b:b0:58:ea:84:07:3a:a3:a4:9f: c3:a7:02:66:37:76:69:43:9c:1a:b6:ce:d7:18:41: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F9:C3:69:58:54:B7:3C:5B:9A:00:E0:89:C0:7D:D2:17:5A:1A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.crl X509v3 Authority Key Identifier: keyid:8D:06:2A:56:E4:4B:F4:A4:7C:6B:03:11:79:A1:BF:99:A6:97:13:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer sbgp-ipAddrBlock: critical IPv4: 23.143.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1e:54:28:e5:28:71:ed:1b:4c:63:ca:4e:54:34:34:17:fe: 99:3e:65:4f:fa:00:40:01:b9:0f:56:3c:c9:86:68:57:56:9a: bb:11:d9:a6:ed:b1:8b:8f:c5:75:95:a5:e7:8d:cb:42:42:2e: 85:5a:0e:93:ef:43:1c:91:cb:80:76:94:a8:da:bb:bd:dc:53: 23:bd:90:e8:0d:56:5c:15:50:19:ed:c3:21:62:cf:f9:24:a5: c1:0c:51:a1:88:db:eb:19:1b:94:e6:d3:68:7c:c6:d4:35:41: d9:72:ab:b1:83:49:f8:15:64:50:3c:d2:31:cd:9c:cc:d4:04: fd:be:4d:8b:19:f5:9f:90:c4:3d:52:b7:65:21:73:e2:47:75: 43:76:ba:41:c7:61:3b:ab:fd:a2:fd:b4:9b:b0:2c:21:a8:13: 85:4d:18:88:c7:9e:42:82:99:ec:5c:1b:25:c2:00:c3:30:e1: 7e:97:c7:de:ee:ab:86:8e:d1:73:d8:2f:ca:35:cb:7d:58:63: b7:f3:bd:8c:0d:3b:09:3f:59:70:21:69:67:e1:12:29:b0:7c: 25:1b:d7:91:5b:56:18:77:6b:91:b8:f4:e1:45:67:6b:74:2b: 74:05:fe:85:70:ee:de:66:42:0d:ef:35:24:e2:67:be:21:2e: b3:d6:45:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlTzdSeFPqQIllAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYjkxYTYtY2Q2MS00ZDNhLWE0MDktNzk5ZGQ5NmIz ZDE0MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZTFiYjljODYtYjA5ZC00NWE1LTgzZGUtOTdiNDY4MmZlOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFzYTAR0PDJaLWZ30CNZKbKVYSvYuDChJWkc ND4Y0KblrN9mJqQzFGHXR5uHuUWxLZBsI8uQxvrD0dRuLgJCBCGCJPmrWW3/h1bn S6ha6uUiFnp8O536B4Qof3+uJiYIHo37wueHRsr5s0FO4Zi+HSm5LnIfcK/D6J7T Mvuox667Lr+89JHbMK2AxoK26BDtrfFhlOJOZah3dLMx4zcG5vMAbJ8RSVlpAPMe qY72sOoP7/OuUMAj5X+62LBKStJjVtUH40Gy2vM2DWTXi5iaHJ3mu9I1pulh8GQd ucvVZtuSfjX6MWuwWOqEBzqjpJ/DpwJmN3ZpQ5wats7XGEEnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr5w2lYVLc8W5oA4InAfdIXWhocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81MmZi OTFhNi1jZDYxLTRkM2EtYTQwOS03OTlkZDk2YjNkMTQvYmM1MjE2MTItNDAyZi0z MTQ4LWIwM2EtZDFiYjU1MDE1ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTJmYjkxYTYtY2Q2MS00ZDNhLWE0 MDktNzk5ZGQ5NmIzZDE0LzUyZmI5MWE2LWNkNjEtNGQzYS1hNDA5LTc5OWRkOTZi M2QxNC5jcmwwHwYDVR0jBBgwFoAUjQYqVuRL9KR8awMReaG/maaXEwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81MmZiOTFhNi1jZDYxLTRkM2EtYTQwOS03OTlk ZDk2YjNkMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQeVCjlKHHtG0xjyk5UNDQX/pk+ZU/6AEABuQ9WPMmGaFdWmrsR2abt sYuPxXWVpeeNy0JCLoVaDpPvQxyRy4B2lKjau73cUyO9kOgNVlwVUBntwyFiz/kk pcEMUaGI2+sZG5Tm02h8xtQ1Qdlyq7GDSfgVZFA80jHNnMzUBP2+TYsZ9Z+QxD1S t2Uhc+JHdUN2ukHHYTur/aL9tJuwLCGoE4VNGIjHnkKCmexcGyXCAMMw4X6Xx97u q4aO0XPYL8o1y31YY7fzvYwNOwk/WXAhaWfhEimwfCUb15FbVhh3a5G49OFFZ2t0 K3QF/oVw7t5mQg3vNSTiZ74hLrPWRdY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:05:13 2026 by rpki-client