$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa File: 429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa (raw, json) Hash identifier: dT/Kp7w1Ui8SsQvqBskZVR06Lc01zfeVaovumJBClGw= Subject key identifier: 6C:FF:D1:9E:C9:04:E5:A3:E3:EC:9A:42:EB:47:80:EC:AC:FE:62:EB Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF54DF98FF585AB60A3419C Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4d:f9:8f:f5:85:ab:60:a3:41:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=10b8004f-3d61-486f-8e32-e2221b57aa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:fc:35:c9:9a:a7:b9:34:e1:28:a1:6a:43: ae:41:ad:4b:3f:b5:9a:b3:78:d6:98:89:fc:19:e0: 61:ae:e2:ac:33:b2:b5:2c:46:a0:85:8e:f6:8b:93: e9:70:47:bc:f8:d4:f0:d4:0c:6f:ca:7a:72:e7:d2: da:64:6a:38:50:25:78:8b:17:be:aa:f2:92:fb:28: b4:5a:c6:43:f6:20:9c:f7:4f:19:5e:7e:a0:f3:24: 26:1c:09:f0:02:f9:06:1d:cf:92:dd:b5:b2:af:e8: b6:1c:68:e2:cc:36:12:47:fd:83:d8:1b:ab:54:06: f3:de:0c:f2:b9:25:8c:76:ba:55:2d:ea:fb:00:99: 2e:7f:50:5b:8b:c6:09:c8:31:ba:a5:54:67:81:9d: 3f:21:35:00:24:55:25:5e:f6:36:63:5c:38:22:f2: 39:35:45:b7:f0:98:32:42:20:44:06:5d:2a:d8:8b: 30:28:2a:92:39:0a:2b:c0:db:c3:dc:5a:46:14:f2: 73:99:e9:37:14:d0:1a:ac:41:3a:8b:ff:a5:d0:54: 2f:df:e6:fa:e7:71:ee:fa:75:ef:0a:2d:eb:2e:f6: ca:9a:c6:c8:95:18:5a:90:c5:8a:a6:5f:50:bc:36: 9e:9e:94:6a:96:01:8c:22:03:be:06:d5:23:6f:b0: 95:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FF:D1:9E:C9:04:E5:A3:E3:EC:9A:42:EB:47:80:EC:AC:FE:62:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1e:42:65:32:5c:a1:22:b9:ee:fe:76:11:f1:72:f7:d9:9f: 93:0a:de:3b:70:ab:2a:c2:d0:f3:8e:f7:69:52:4e:e0:5f:2b: 0f:62:ba:85:f9:41:7e:b2:cc:be:90:3b:73:f1:42:e2:2a:25: 78:0b:b7:a8:01:19:c8:d0:98:43:ed:ad:8b:a6:76:e3:0a:18: e3:89:5d:f2:8d:e2:1c:d5:15:ac:dc:1c:d0:a1:44:6a:a1:64: cd:b2:b1:18:39:a0:aa:10:3e:85:92:5e:22:7e:d9:55:21:a2: ac:88:f0:b4:4e:0d:84:50:36:41:1e:b4:c0:11:f7:b2:15:b8: 90:a1:7b:9e:ca:43:fa:ea:7b:a0:11:e3:7f:c2:ba:b8:e8:c5: 8e:4f:2a:f2:bc:08:56:03:fb:1a:41:da:14:ab:29:10:73:61: c2:9d:c5:96:8c:33:ca:25:5c:46:fd:53:6e:09:ae:62:34:b2: c5:c1:d1:94:bb:87:89:ac:d5:05:2a:3d:d0:34:19:b7:1a:f4: 0e:53:96:9c:7b:74:38:07:c3:db:6a:61:ca:52:42:e7:09:ca: e8:3c:de:a3:b3:05:7c:12:34:9f:80:81:66:59:45:21:9b:b1: 3c:52:84:ec:ca:e1:4a:ce:ea:cd:71:71:0c:f8:2f:d2:95:f2: b2:c3:34:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9U35j/WFq2CjQZwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MTBiODAwNGYtM2Q2MS00ODZmLThlMzItZTIyMjFiNTdhYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWL8Ncmap7k04SihakOuQa1LP7Was3jWmIn8 GeBhruKsM7K1LEaghY72i5PpcEe8+NTw1Axvynpy59LaZGo4UCV4ixe+qvKS+yi0 WsZD9iCc908ZXn6g8yQmHAnwAvkGHc+S3bWyr+i2HGjizDYSR/2D2BurVAbz3gzy uSWMdrpVLer7AJkuf1Bbi8YJyDG6pVRngZ0/ITUAJFUlXvY2Y1w4IvI5NUW38Jgy QiBEBl0q2IswKCqSOQorwNvD3FpGFPJzmek3FNAarEE6i/+l0FQv3+b653Hu+nXv Ci3rLvbKmsbIlRhakMWKpl9QvDaenpRqlgGMIgO+BtUjb7CVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz/0Z7JBOWj4+yaQutHgOys/mLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDI5ZjgwNmMtNWY3MS0z NTk1LWFjNWMtYzA0YzdlMjljMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMeQmUyXKEiue7+dhHxcvfZn5MK3jtwqyrC0POO92lSTuBfKw9iuoX5 QX6yzL6QO3PxQuIqJXgLt6gBGcjQmEPtrYumduMKGOOJXfKN4hzVFazcHNChRGqh ZM2ysRg5oKoQPoWSXiJ+2VUhoqyI8LRODYRQNkEetMAR97IVuJChe57KQ/rqe6AR 43/CurjoxY5PKvK8CFYD+xpB2hSrKRBzYcKdxZaMM8olXEb9U24JrmI0ssXB0ZS7 h4ms1QUqPdA0Gbca9A5Tlpx7dDgHw9tqYcpSQucJyug83qOzBXwSNJ+AgWZZRSGb sTxShOzK4UrO6s1xcQz4L9KV8rLDNOY= -----END CERTIFICATE-----Generated at Wed May 13 11:16:42 2026 by rpki-client