$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9936526-b1d1-37e2-8f2a-94e5fec1d9e8.roa File: c9936526-b1d1-37e2-8f2a-94e5fec1d9e8.roa (raw, json) Hash identifier: MRnU7HqWNyAglq42Ry/348dGOV6plm2KJp/Zqsa4C8U= Subject key identifier: 26:14:D8:05:B0:D1:AB:CB:1B:CA:33:7C:6B:60:B4:C7:8A:7F:03:49 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF54BA0665F0CE4C8DF9B00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9936526-b1d1-37e2-8f2a-94e5fec1d9e8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4b:a0:66:5f:0c:e4:c8:df:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ba9326c4-3b24-4469-bfea-6e10a122da97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:de:c9:7a:20:4e:83:45:80:f8:ea:e7:31:88: 92:a5:3b:1c:69:cb:28:84:39:48:05:09:41:e3:93: 2a:e7:fc:91:1c:53:7d:26:1b:d7:f4:fa:d7:05:1a: 9b:dc:17:3e:24:4f:c9:08:90:2f:cc:95:cb:4c:b6: 5f:00:5b:ff:0f:6a:5c:4d:04:32:8d:ae:3f:43:e0: 02:5b:84:8a:d2:19:21:05:9d:d1:5c:3d:7d:b2:a5: 22:bd:74:90:bf:7f:b7:b5:0a:17:5e:74:9b:67:07: 68:9c:a3:1f:59:d3:e6:45:7a:f2:da:55:92:fe:10: da:ea:cf:1c:7c:01:03:ed:88:93:87:23:17:84:8f: b8:f0:58:5c:0e:9c:7c:5c:83:77:84:d4:9d:b1:67: ee:a9:c9:5f:2e:49:37:d7:48:5f:93:71:bd:5d:b1: 55:02:4e:fd:b5:71:be:4e:38:9b:0b:41:68:20:2c: 0b:45:73:f8:25:77:a7:8e:3f:f3:9b:e6:d6:e2:94: 7c:35:22:94:ca:db:52:67:a6:4f:4f:e4:0c:28:af: db:7a:1b:f4:d2:e9:c6:13:21:04:ac:74:cf:57:72: 4b:49:dd:8d:9f:2b:90:25:2f:9c:50:0a:68:84:92: 21:f4:2f:e3:9b:ba:64:e4:11:25:70:2f:2f:26:ef: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:14:D8:05:B0:D1:AB:CB:1B:CA:33:7C:6B:60:B4:C7:8A:7F:03:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9936526-b1d1-37e2-8f2a-94e5fec1d9e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7b:50:85:7c:6a:9d:c8:cb:0b:9b:9d:0a:f3:dd:d9:c6:8a: 2e:f5:d4:56:a2:cd:76:4d:f8:57:d4:23:73:4e:6b:1b:1e:e7: 43:cf:3d:4e:0c:f6:51:cd:4c:cc:af:d6:cd:a7:61:39:1f:26: 90:52:fb:77:a1:20:9b:86:33:89:53:42:f3:75:93:79:72:6c: 24:69:27:96:ec:5d:15:1b:ee:ef:b3:4d:c6:38:e9:af:7a:62: e1:d7:b8:fa:ad:f8:3a:88:34:de:78:73:ff:5a:ac:91:6f:6a: 26:48:4d:0e:75:54:42:16:3c:f6:30:3d:09:8a:7a:8c:a3:61: 1e:e7:52:74:5f:3d:e4:7f:f6:4d:91:6a:fb:7c:1a:1f:22:91: 5d:9a:c0:fb:fc:82:82:43:e7:3f:f3:3d:a3:fd:fa:be:50:0f: df:82:52:bc:a1:4b:2f:1e:62:08:ed:c9:08:a9:90:3c:31:5f: 5e:72:be:53:8d:07:8d:07:b8:03:58:8d:66:bc:bd:68:00:27: 0e:4e:1f:c4:47:cc:3f:62:75:34:19:0f:13:d1:5a:78:55:d5: d1:de:02:16:34:07:10:33:46:88:08:55:99:08:2b:aa:e2:8f: 26:04:32:6a:8b:04:77:02:1d:48:72:c6:0e:b4:f7:6a:7f:6d: a5:6b:92:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9UugZl8M5MjfmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmE5MzI2YzQtM2IyNC00NDY5LWJmZWEtNmUxMGExMjJkYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid7JeiBOg0WA+OrnMYiSpTscacsohDlIBQlB 45Mq5/yRHFN9JhvX9PrXBRqb3Bc+JE/JCJAvzJXLTLZfAFv/D2pcTQQyja4/Q+AC W4SK0hkhBZ3RXD19sqUivXSQv3+3tQoXXnSbZwdonKMfWdPmRXry2lWS/hDa6s8c fAED7YiThyMXhI+48FhcDpx8XIN3hNSdsWfuqclfLkk310hfk3G9XbFVAk79tXG+ TjibC0FoICwLRXP4JXenjj/zm+bW4pR8NSKUyttSZ6ZPT+QMKK/behv00unGEyEE rHTPV3JLSd2NnyuQJS+cUApohJIh9C/jm7pk5BElcC8vJu/IcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYU2AWw0avLG8ozfGtgtMeKfwNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzk5MzY1MjYtYjFkMS0z N2UyLThmMmEtOTRlNWZlYzFkOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt7UIV8ap3IywubnQrz3dnGii711FaizXZN+FfUI3NOaxse50PPPU4M 9lHNTMyv1s2nYTkfJpBS+3ehIJuGM4lTQvN1k3lybCRpJ5bsXRUb7u+zTcY46a96 YuHXuPqt+DqINN54c/9arJFvaiZITQ51VEIWPPYwPQmKeoyjYR7nUnRfPeR/9k2R avt8Gh8ikV2awPv8goJD5z/zPaP9+r5QD9+CUryhSy8eYgjtyQipkDwxX15yvlON B40HuANYjWa8vWgAJw5OH8RHzD9idTQZDxPRWnhV1dHeAhY0BxAzRogIVZkIK6ri jyYEMmqLBHcCHUhyxg6092p/baVrkuk= -----END CERTIFICATE-----Generated at Wed May 13 11:09:12 2026 by rpki-client