$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa File: afba448f-444e-3ef6-90f6-f3e3076cdc26.roa (raw, json) Hash identifier: ubEagoLL+FXx2izjXZJWF8pxzkp0/QFk3NLbzJVTFXw= Subject key identifier: E4:CE:5A:8C:93:5B:97:8E:62:57:42:7B:4B:55:BE:BC:9C:F0:04:B8 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF98061065E365DC6A492E0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:80:61:06:5e:36:5d:c6:a4:92:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=06439ef3-853a-4c73-87b0-577ab8e12263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:87:23:b2:79:3f:32:18:c7:7c:ea:dd:97: 96:d7:ba:8e:e1:cf:69:77:99:f1:15:ca:65:91:a4: 25:d5:df:0f:12:4b:0f:03:c3:3c:ae:8e:83:bc:99: 66:fc:b3:58:e3:8a:70:c7:9c:cc:ee:d3:66:29:8b: 79:2e:d0:c7:73:3c:ad:7a:98:52:6d:84:8e:c9:bc: cf:4f:da:4e:2d:fb:ba:63:23:a4:be:c0:7b:a0:16: 61:06:46:43:7e:15:88:3e:f7:81:85:c0:f8:6e:61: 95:5b:fd:8a:3c:ed:56:f6:a5:de:de:01:ce:4d:fe: e1:02:26:a3:4e:6f:61:7c:d0:77:57:fe:99:5b:a4: 9f:e8:ab:5a:7d:7b:59:0d:fb:8b:ec:53:61:4b:b5: c3:30:54:26:eb:d9:1e:01:c6:2c:22:39:1e:91:3c: 4e:8a:df:c9:9d:85:22:f8:f2:e8:00:4d:11:bc:45: a9:dd:33:0a:1c:5e:a4:60:86:5a:19:79:69:f6:a0: db:87:18:97:db:59:17:15:c9:8a:d6:ee:e1:5a:9f: 76:4c:eb:c4:fb:e3:70:43:8f:18:ff:a7:60:04:53: 5e:3f:b7:60:e8:70:4e:ac:02:3c:90:69:bd:17:33: 00:75:74:a2:e8:30:5c:2f:05:44:25:13:03:e0:64: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:5A:8C:93:5B:97:8E:62:57:42:7B:4B:55:BE:BC:9C:F0:04:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b6:8e:61:72:65:a5:75:5c:a9:72:f8:eb:19:ef:3a:1a:b5: 6b:f4:10:87:99:8a:fd:eb:a8:29:86:52:f3:29:e5:e8:11:e9: 4a:21:1a:22:0e:d8:48:70:4d:22:00:4e:72:74:0d:84:10:e7: cd:05:d7:30:32:d5:1c:bd:39:5f:bc:2a:81:14:ee:e8:25:84: 78:8f:09:32:96:dd:ac:28:3e:91:df:5b:58:ca:cd:13:ad:f7: fa:c6:ab:99:78:f2:e1:70:a2:d3:49:57:36:28:a4:87:8d:67: 69:e2:8c:9a:0b:7f:70:f5:52:4d:96:e4:31:86:f1:05:02:8e: 5b:9e:3b:39:19:bc:73:af:36:3a:17:c8:ce:1c:9f:99:01:59: 2a:1d:7e:0d:81:10:ea:ee:ff:7d:1e:da:a0:3b:eb:49:77:39: 95:63:21:46:13:1c:7b:40:04:bf:7f:6e:03:a1:4c:13:81:66: 33:2d:bf:8a:5b:6c:1f:3f:d8:36:0b:5a:e1:8b:09:34:51:8a: 21:1c:ec:7c:19:5e:0f:d5:d5:53:aa:8c:b3:e2:98:52:5b:e2: 02:c2:8d:1f:fd:12:a4:a3:57:da:1f:b8:62:bb:9c:9d:e1:06: ab:d2:47:a3:b5:23:c7:06:76:6c:dd:bc:fe:02:9c:0b:e6:c4: ca:6c:d6:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+YBhBl42XcakkuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDY0MzllZjMtODUzYS00YzczLTg3YjAtNTc3YWI4ZTEyMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdOHI7J5PzIYx3zq3ZeW17qO4c9pd5nxFcpl kaQl1d8PEksPA8M8ro6DvJlm/LNY44pwx5zM7tNmKYt5LtDHczytephSbYSOybzP T9pOLfu6YyOkvsB7oBZhBkZDfhWIPveBhcD4bmGVW/2KPO1W9qXe3gHOTf7hAiaj Tm9hfNB3V/6ZW6Sf6KtafXtZDfuL7FNhS7XDMFQm69keAcYsIjkekTxOit/JnYUi +PLoAE0RvEWp3TMKHF6kYIZaGXlp9qDbhxiX21kXFcmK1u7hWp92TOvE++NwQ48Y /6dgBFNeP7dg6HBOrAI8kGm9FzMAdXSi6DBcLwVEJRMD4GRwcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTOWoyTW5eOYldCe0tVvryc8AS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYWZiYTQ0OGYtNDQ0ZS0z ZWY2LTkwZjYtZjNlMzA3NmNkYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS2jmFyZaV1XKly+OsZ7zoatWv0EIeZiv3rqCmGUvMp5egR6UohGiIO 2EhwTSIATnJ0DYQQ580F1zAy1Ry9OV+8KoEU7uglhHiPCTKW3awoPpHfW1jKzROt 9/rGq5l48uFwotNJVzYopIeNZ2nijJoLf3D1Uk2W5DGG8QUCjlueOzkZvHOvNjoX yM4cn5kBWSodfg2BEOru/30e2qA760l3OZVjIUYTHHtABL9/bgOhTBOBZjMtv4pb bB8/2DYLWuGLCTRRiiEc7HwZXg/V1VOqjLPimFJb4gLCjR/9EqSjV9ofuGK7nJ3h BqvSR6O1I8cGdmzdvP4CnAvmxMps1s8= -----END CERTIFICATE-----Generated at Wed May 13 11:54:49 2026 by rpki-client