$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f19aef8c-221c-3d3c-83dc-f3b59bf1a641.roa File: f19aef8c-221c-3d3c-83dc-f3b59bf1a641.roa (raw, json) Hash identifier: rOHPS2kTTAB2PHXjP59WL7FnS1Ss6tBbATfzDHvyOhM= Subject key identifier: 08:C7:D9:8E:48:AC:F7:D1:21:3A:EF:64:B4:C6:B5:E4:BC:00:0A:7B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF56F8248AAF3DEBBE32E80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f19aef8c-221c-3d3c-83dc-f3b59bf1a641.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6f:82:48:aa:f3:de:bb:e3:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=86af2d4b-dba6-4cf6-b8f2-39d857d8834d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d7:ff:04:bc:59:1d:84:66:20:45:10:7e:aa: 8e:9f:5a:a9:90:0f:94:fe:d9:fc:50:2d:d3:b7:f3: f3:96:aa:64:b6:24:01:51:c7:55:65:ac:c9:be:e7: 50:56:35:26:b2:b2:b0:11:79:a6:b0:b6:56:58:ae: 17:e3:a3:9f:51:66:02:16:01:d2:10:c6:74:c1:67: f6:10:28:bd:1e:16:dd:9c:da:bb:24:7a:e4:8e:0b: 70:4f:c9:f9:33:9d:78:fd:b7:11:92:15:26:59:d0: 98:6d:c7:4c:63:c9:8e:99:fc:ed:59:a2:83:79:db: 2e:52:1a:d9:30:64:5c:35:f8:41:d8:9e:e3:63:8d: 55:c3:87:1e:1a:5b:ca:19:fd:84:c1:56:34:23:37: 18:96:f5:58:0b:c5:30:20:f1:97:08:ad:2f:08:f1: e9:06:93:d3:cd:d2:3a:7c:9e:a2:08:e3:71:87:fa: 43:69:40:40:75:c8:e8:68:4e:e1:b9:5d:69:52:25: 69:f8:97:20:80:10:eb:89:f2:a5:60:2f:0b:10:61: f1:9c:96:aa:31:4d:63:11:a4:4f:93:3b:61:37:80: 6d:86:59:53:9e:be:b5:47:92:b4:6c:56:b8:9b:6a: 71:71:6e:44:88:77:38:bc:d1:b0:d2:6f:aa:f8:9d: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:D9:8E:48:AC:F7:D1:21:3A:EF:64:B4:C6:B5:E4:BC:00:0A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f19aef8c-221c-3d3c-83dc-f3b59bf1a641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f5:22:a3:72:bb:52:d3:1a:d2:6e:ea:b0:bb:b0:81:88:e5: 3e:44:a5:21:5c:4e:08:fd:48:cc:60:8c:b9:86:e0:25:27:85: 35:a2:13:77:47:2a:d1:2f:a9:5d:32:c4:e2:ac:a5:90:91:1f: 5a:6b:89:b6:04:c6:06:73:8b:54:19:eb:fd:65:3f:65:67:42: 66:b6:2d:be:5e:19:44:5b:be:71:53:62:55:91:13:b2:14:cf: 2f:a5:e7:81:b5:d7:39:41:74:cd:6a:4f:9e:ea:60:51:a0:6a: cf:f7:dc:c6:65:0c:f1:14:90:e2:88:e6:f1:95:6a:64:f4:9d: 4b:19:42:ff:b9:ae:85:f2:5c:9f:9f:58:7e:6c:00:df:72:ec: 19:25:d4:bc:c6:7a:15:94:e5:cb:15:9e:b7:0a:9b:94:23:0e: 97:ac:ad:f8:e7:ba:b2:34:22:96:87:9b:ec:e5:09:9a:27:b6: 7a:8a:4c:17:d3:b8:12:b0:2a:df:2a:09:66:2f:6b:d1:40:5a: 19:ba:c8:7a:ff:53:f3:c6:2c:a8:6f:05:2e:ad:85:6d:61:71: 9d:82:fa:60:df:71:24:8f:8e:b9:09:dc:d6:a6:7f:12:1d:bc: cc:85:6f:1c:ed:46:a0:d3:4d:c9:3b:58:35:01:9c:cb:b0:bc: 05:89:e6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9W+CSKrz3rvjLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODZhZjJkNGItZGJhNi00Y2Y2LWI4ZjItMzlkODU3ZDg4MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndf/BLxZHYRmIEUQfqqOn1qpkA+U/tn8UC3T t/PzlqpktiQBUcdVZazJvudQVjUmsrKwEXmmsLZWWK4X46OfUWYCFgHSEMZ0wWf2 ECi9HhbdnNq7JHrkjgtwT8n5M514/bcRkhUmWdCYbcdMY8mOmfztWaKDedsuUhrZ MGRcNfhB2J7jY41Vw4ceGlvKGf2EwVY0IzcYlvVYC8UwIPGXCK0vCPHpBpPTzdI6 fJ6iCONxh/pDaUBAdcjoaE7huV1pUiVp+JcggBDrifKlYC8LEGHxnJaqMU1jEaRP kzthN4BthllTnr61R5K0bFa4m2pxcW5EiHc4vNGw0m+q+J33AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjH2Y5IrPfRITrvZLTGteS8AAp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjE5YWVmOGMtMjIxYy0z ZDNjLTgzZGMtZjNiNTliZjFhNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH31IqNyu1LTGtJu6rC7sIGI5T5EpSFcTgj9SMxgjLmG4CUnhTWiE3dH KtEvqV0yxOKspZCRH1pribYExgZzi1QZ6/1lP2VnQma2Lb5eGURbvnFTYlWRE7IU zy+l54G11zlBdM1qT57qYFGgas/33MZlDPEUkOKI5vGVamT0nUsZQv+5roXyXJ+f WH5sAN9y7Bkl1LzGehWU5csVnrcKm5QjDpesrfjnurI0IpaHm+zlCZontnqKTBfT uBKwKt8qCWYva9FAWhm6yHr/U/PGLKhvBS6thW1hcZ2C+mDfcSSPjrkJ3NamfxId vMyFbxztRqDTTck7WDUBnMuwvAWJ5lE= -----END CERTIFICATE-----Generated at Wed May 13 11:31:52 2026 by rpki-client