$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa File: bc521612-402f-3148-b03a-d1bb55015d7a.roa (raw, json) Hash identifier: OcyASpa5MGPqmX+aSJpUYI4faapyUe/4//yz53UbaFc= Subject key identifier: 84:98:74:06:4B:21:9C:93:4C:B5:04:E6:C9:89:17:55:EF:74:86:87 Certificate issuer: /CN=52fb91a6-cd61-4d3a-a409-799dd96b3d14 Certificate serial: 010D0C9F4328584CA5F746E7572ABD0128878180 Authority key identifier: 8D:06:2A:56:E4:4B:F4:A4:7C:6B:03:11:79:A1:BF:99:A6:97:13:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 7029 IP address blocks: 23.143.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:46:e7:57:2a:bd:01:28:87:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fb91a6-cd61-4d3a-a409-799dd96b3d14 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=90218ec9-9d82-4e0d-af4b-c2e34a6e7a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:00:1a:da:dc:28:33:5c:62:d6:2d:77:cf: 2f:30:4f:be:17:fd:ff:51:f0:82:69:8b:a0:d4:79: ca:69:97:44:1e:ee:0f:be:01:b5:fc:37:58:58:0e: 4d:55:98:ec:4a:2f:16:e3:ac:48:88:2a:76:db:b0: cd:7d:e4:30:da:28:8b:b1:c9:c3:62:74:60:c6:16: 27:d8:90:95:63:07:8e:5b:66:e7:30:97:e8:f0:06: 0d:35:6b:6d:12:df:c3:5a:69:c1:97:13:5d:3c:8d: 80:dd:66:0c:f5:93:0e:80:22:ac:c3:e1:d5:9c:7b: 39:93:24:97:9c:ed:81:86:5b:e3:c7:19:f1:43:70: 44:b3:81:f7:3e:ae:86:0c:92:5e:77:89:17:a7:1e: 15:63:11:55:6b:da:cb:2d:25:18:b1:dc:be:ea:3b: f2:19:9d:08:77:ed:91:6d:92:9d:e5:7b:51:7a:d8: 08:a3:90:7a:b4:6a:9e:cc:81:fe:29:81:14:ae:3a: 60:eb:4e:b1:5e:9e:7c:b4:c0:c8:73:bf:a7:4c:53: 32:2e:75:cd:3d:18:78:c3:0e:ad:cb:7d:97:9a:06: b9:f3:4a:3f:dc:78:bd:7f:0c:58:74:74:98:94:a4: 91:45:91:70:e6:1e:bd:4d:11:d2:a4:c5:0c:c9:0c: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:98:74:06:4B:21:9C:93:4C:B5:04:E6:C9:89:17:55:EF:74:86:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.crl X509v3 Authority Key Identifier: keyid:8D:06:2A:56:E4:4B:F4:A4:7C:6B:03:11:79:A1:BF:99:A6:97:13:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer sbgp-ipAddrBlock: critical IPv4: 23.143.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9f:54:5d:3a:0b:90:b6:0a:83:ca:cf:b5:88:62:20:eb:0b: c2:3b:98:5a:8a:e5:0f:77:a4:66:ca:bb:21:68:14:03:c1:52: b1:ea:9f:4f:63:62:a7:6f:27:dd:6e:75:ef:3b:fe:46:a4:92: 80:ba:46:dd:6b:30:48:db:05:fc:72:ab:be:a8:dc:fe:68:10: 46:2d:d1:70:e5:14:f7:c2:58:ad:c7:f2:4d:9a:21:03:e8:ca: cc:c9:9e:29:f5:4a:b6:e6:76:de:1b:11:45:ec:6d:fb:4b:36: df:63:13:83:d5:9f:01:a8:35:b2:30:eb:d8:c7:df:8e:04:94: 60:db:db:7c:55:b5:7a:5d:05:45:8a:ce:32:75:8b:1c:c7:f7: 14:61:af:38:61:0a:91:54:b0:24:0e:29:14:6c:1e:67:83:e3: 6a:08:46:51:68:f8:50:63:ec:e5:11:61:3c:11:35:19:03:57: 65:e7:44:98:e7:85:72:4c:68:92:99:d2:db:c5:89:66:60:6d: 55:f1:64:89:4a:5c:00:f2:e2:81:ba:8f:4d:c8:91:c1:34:7f: 5a:39:57:bd:8b:c6:8b:65:f6:06:ea:c4:c2:2f:ec:c4:5f:d0: 55:31:78:0f:46:4c:e5:48:5d:23:1a:99:ce:a6:46:3c:29:d8: 81:19:34:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90bnVyq9ASiHgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYjkxYTYtY2Q2MS00ZDNhLWE0MDktNzk5ZGQ5NmIz ZDE0MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk OTAyMThlYzktOWQ4Mi00ZTBkLWFmNGItYzJlMzRhNmU3YTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/AAGtrcKDNcYtYtd88vME++F/3/UfCCaYug 1HnKaZdEHu4PvgG1/DdYWA5NVZjsSi8W46xIiCp227DNfeQw2iiLscnDYnRgxhYn 2JCVYweOW2bnMJfo8AYNNWttEt/DWmnBlxNdPI2A3WYM9ZMOgCKsw+HVnHs5kySX nO2BhlvjxxnxQ3BEs4H3Pq6GDJJed4kXpx4VYxFVa9rLLSUYsdy+6jvyGZ0Id+2R bZKd5XtRetgIo5B6tGqezIH+KYEUrjpg606xXp58tMDIc7+nTFMyLnXNPRh4ww6t y32Xmga580o/3Hi9fwxYdHSYlKSRRZFw5h69TRHSpMUMyQxuwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISYdAZLIZyTTLUE5smJF1XvdIaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81MmZi OTFhNi1jZDYxLTRkM2EtYTQwOS03OTlkZDk2YjNkMTQvYmM1MjE2MTItNDAyZi0z MTQ4LWIwM2EtZDFiYjU1MDE1ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTJmYjkxYTYtY2Q2MS00ZDNhLWE0 MDktNzk5ZGQ5NmIzZDE0LzUyZmI5MWE2LWNkNjEtNGQzYS1hNDA5LTc5OWRkOTZi M2QxNC5jcmwwHwYDVR0jBBgwFoAUjQYqVuRL9KR8awMReaG/maaXEwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81MmZiOTFhNi1jZDYxLTRkM2EtYTQwOS03OTlk ZDk2YjNkMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOfVF06C5C2CoPKz7WIYiDrC8I7mFqK5Q93pGbKuyFoFAPBUrHqn09j YqdvJ91ude87/kakkoC6Rt1rMEjbBfxyq76o3P5oEEYt0XDlFPfCWK3H8k2aIQPo yszJnin1Srbmdt4bEUXsbftLNt9jE4PVnwGoNbIw69jH344ElGDb23xVtXpdBUWK zjJ1ixzH9xRhrzhhCpFUsCQOKRRsHmeD42oIRlFo+FBj7OURYTwRNRkDV2XnRJjn hXJMaJKZ0tvFiWZgbVXxZIlKXADy4oG6j03IkcE0f1o5V72Lxotl9gbqxMIv7MRf 0FUxeA9GTOVIXSMamc6mRjwp2IEZNKM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:29:23 2026 by rpki-client