$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa File: ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json) Hash identifier: RV0jR/BYAcJlyTQMi9AVQKeJycFjkth9ajzg3G2b87M= Subject key identifier: BF:2C:F2:51:F4:97:D1:12:4E:C8:F3:C2:99:84:F1:48:5B:9C:AA:2A Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584A920634BF417B6A099D1F2700 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 136787 IP address blocks: 138.128.133.0/24 maxlen: 24 138.128.134.0/24 maxlen: 24 138.128.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:34:bf:41:7b:6a:09:9d:1f:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=749f2b8b-b505-49ef-81dd-5927b0d8ec15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:05:af:e2:c6:23:1a:a4:73:25:70:0f:ff:35: a6:d3:22:47:6b:36:84:8a:b2:9a:05:0a:d0:c8:c0: 5f:95:6e:5d:41:de:00:e5:b3:90:c0:8b:67:25:35: 1a:19:b1:de:ab:32:2a:89:bb:59:bf:c8:a9:bd:70: cb:9d:a4:18:3e:ce:7d:94:8d:e4:f6:04:72:f4:f7: 09:1f:f8:ba:90:49:cb:f0:e8:ec:48:da:da:3e:bf: e1:6f:3c:03:49:d0:f5:ce:cc:5c:31:37:be:2a:d8: 28:db:13:af:18:2b:10:f5:27:c2:3f:36:99:73:f7: 41:13:4e:96:62:ab:b9:cf:1a:80:3d:54:dc:f6:4b: 32:00:07:20:11:3a:27:48:54:2a:74:12:e2:fa:66: de:72:d6:0f:9d:9e:3a:f7:2b:ae:71:7f:65:98:c5: 67:c8:17:08:6a:87:dc:af:c0:f4:da:e5:e0:96:58: e3:b1:7c:f3:a8:78:2e:8f:f4:5b:73:11:49:71:2e: d0:a8:81:12:e1:5f:9b:3b:c2:80:18:06:cb:30:78: 3f:7e:aa:c5:e0:14:b9:2c:51:54:04:83:0e:7b:57: e9:e7:f0:b4:b2:28:80:a5:24:18:87:97:1f:fe:6a: 06:19:20:fb:92:c6:19:e4:37:13:53:81:37:f5:a4: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2C:F2:51:F4:97:D1:12:4E:C8:F3:C2:99:84:F1:48:5B:9C:AA:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.133.0-138.128.135.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a6:44:39:16:7a:dd:79:e7:4e:96:e9:19:21:ec:9a:14:55: a4:1f:f2:00:e5:97:a0:20:7c:b5:d4:5b:6e:15:c4:91:1e:5c: 3a:0c:15:70:da:26:11:2b:e1:63:fe:b0:86:44:5c:65:00:03: df:b5:36:b8:f2:7d:78:39:80:5c:39:17:96:b1:71:22:ce:bb: 2c:d1:03:1d:87:ee:cb:bd:c7:a3:31:a2:47:b8:89:43:b2:35: 6b:c5:ee:9f:ba:a6:03:5c:99:bb:4b:8f:dd:3d:80:42:d3:4b: 26:45:03:05:dd:9f:8f:58:93:2b:0d:1a:e8:c3:ee:41:74:3e: 76:94:34:35:73:2f:fb:cd:4b:f9:b3:e4:11:68:d2:75:fc:65: 11:0a:89:b1:55:56:f1:a7:fc:e4:5b:8c:ca:73:b6:04:ff:40: 9c:f0:6a:55:3e:eb:e4:97:69:c4:2e:56:75:19:21:a5:41:79: 70:27:84:86:e9:eb:3d:85:17:57:bd:7e:ec:89:cb:94:18:66: 31:c1:8a:99:c0:1e:a5:8e:52:de:fa:0d:7f:30:b8:2c:6b:53: a2:e3:82:f6:84:a8:13:b0:1c:f6:cd:ec:5d:8f:ed:75:48:d0: 35:fd:ea:06:20:f8:d6:46:42:37:2a:fc:81:38:2f:bf:87:4d: 19:c2:fc:9a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqSBjS/QXtqCZ0fJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk NzQ5ZjJiOGItYjUwNS00OWVmLTgxZGQtNTkyN2IwZDhlYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QWv4sYjGqRzJXAP/zWm0yJHazaEirKaBQrQ yMBflW5dQd4A5bOQwItnJTUaGbHeqzIqibtZv8ipvXDLnaQYPs59lI3k9gRy9PcJ H/i6kEnL8OjsSNraPr/hbzwDSdD1zsxcMTe+Ktgo2xOvGCsQ9SfCPzaZc/dBE06W Yqu5zxqAPVTc9ksyAAcgETonSFQqdBLi+mbectYPnZ469yuucX9lmMVnyBcIaofc r8D02uXglljjsXzzqHguj/RbcxFJcS7QqIES4V+bO8KAGAbLMHg/fqrF4BS5LFFU BIMOe1fp5/C0siiApSQYh5cf/moGGSD7ksYZ5DcTU4E39aSpbwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFL8s8lH0l9ESTsjzwpmE8UhbnKoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYmEyY2E1YTItZTIyMi0z MTk0LWJmYTgtYWI1MjAxMWRjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKgIUD BAOKgIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAoqZEORZ63XnnTpbpGSHsmhRVpB/yAOWXoCB8tdRbbhXE kR5cOgwVcNomESvhY/6whkRcZQAD37U2uPJ9eDmAXDkXlrFxIs67LNEDHYfuy73H ozGiR7iJQ7I1a8Xun7qmA1yZu0uP3T2AQtNLJkUDBd2fj1iTKw0a6MPuQXQ+dpQ0 NXMv+81L+bPkEWjSdfxlEQqJsVVW8af85FuMynO2BP9AnPBqVT7r5JdpxC5WdRkh pUF5cCeEhunrPYUXV71+7InLlBhmMcGKmcAepY5S3voNfzC4LGtTouOC9oSoE7Ac 9s3sXY/tdUjQNf3qBiD41kZCNyr8gTgvv4dNGcL8mg== -----END CERTIFICATE-----Generated at Sun Jul 27 04:48:05 2025 by rpki-client