$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa File: ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json) Hash identifier: 0sPWjcs+xUmPmMfPvOHyS+ylR4IpeF4tW5fpmjHtXWU= Subject key identifier: 2B:C7:4B:33:47:4D:55:D6:19:13:AA:84:A1:61:09:41:F4:FD:09:43 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F43285848D3765D43306FB31410543900 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 136787 IP address blocks: 138.128.133.0/24 maxlen: 24 138.128.134.0/24 maxlen: 24 138.128.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5d:43:30:6f:b3:14:10:54:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=37a0b607-d5f7-4468-b008-dd68d3600854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6c:b7:28:95:a7:6b:95:97:a0:6f:ea:1d:42: c9:90:7e:d9:30:84:6c:7e:00:44:8f:0b:ce:0f:80: 90:68:8f:0a:34:c8:01:22:21:cd:7f:12:39:4d:5d: 07:b7:ed:b7:9b:83:46:a7:b2:3d:5a:bf:e8:bf:f0: 32:fd:20:17:e6:e4:0a:a1:96:64:b3:41:87:52:5d: 71:e8:a4:73:9b:da:b7:08:9e:13:a8:6a:6c:b5:34: 46:59:a8:61:ff:c7:5c:71:00:55:5a:8a:7f:dc:54: 19:01:91:94:d3:7d:e8:71:b8:be:b7:99:27:7e:c5: d6:80:39:12:21:41:07:df:63:58:4a:00:cc:91:1c: c0:4a:d3:be:ec:5d:eb:0e:3b:2f:7f:6f:f2:6f:f1: 4b:d4:e3:f2:d9:9f:be:7d:ee:56:cb:ec:49:33:83: 4b:68:2c:17:6a:05:b9:92:31:00:90:5a:77:fe:e0: d1:1d:c5:ce:5b:b5:68:ba:80:7a:a9:19:58:a4:55: c0:b8:cc:f6:b2:c5:93:eb:03:37:9c:fb:8c:e0:4f: bf:a0:c3:d9:16:96:45:6e:3d:40:ed:f5:f3:78:07: ec:8c:a0:07:7a:fb:c7:1f:40:db:ad:78:4f:ce:94: e6:64:5b:1d:29:40:c4:d5:4a:85:31:c9:17:85:4e: 62:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C7:4B:33:47:4D:55:D6:19:13:AA:84:A1:61:09:41:F4:FD:09:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.133.0-138.128.135.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:16:d7:7a:32:32:04:29:36:87:38:bd:a2:55:df:fb:b3:0e: f2:ff:6e:f6:b6:98:ae:37:5e:14:4d:ed:be:df:eb:ca:d1:0d: 15:f7:c7:c0:b9:fb:ca:a1:13:0f:d9:39:16:9c:b7:c8:d9:36: 64:c8:f5:4d:60:f5:94:fd:6a:7b:6e:81:f3:2d:96:e1:0d:5e: df:b0:ee:ca:d0:2a:c0:25:a6:c8:d3:a9:ee:37:ba:dd:87:4e: ca:d9:74:9a:08:7b:06:cc:98:28:28:8c:46:e5:3e:e4:02:99: 77:69:9b:e2:84:1e:62:5d:1c:1f:8c:eb:00:2e:f5:0e:03:bd: 9d:e0:d5:80:8e:6f:51:c9:d1:94:13:e3:65:ea:c4:3a:bd:1a: 55:a9:6e:dd:54:bd:1f:e4:74:83:17:b8:33:95:6c:d3:0c:6e: 64:8e:98:86:92:0c:95:ff:8e:93:e7:76:29:90:7d:8e:26:0c: 7f:ef:bb:5e:01:10:4e:24:ea:6a:b0:0a:b8:93:1b:77:85:c6: 0e:aa:4d:d7:5a:90:8f:92:55:cd:84:ed:53:1e:da:5d:6a:d2: 0d:d5:13:2d:32:f7:68:d6:99:3a:6d:8f:b8:dc:e1:6f:dc:41: 46:63:a8:2b:0a:9d:f2:34:af:f7:22:c7:16:bf:b7:ab:64:87: 90:7b:72:50 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjTdl1DMG+zFBBUOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk MzdhMGI2MDctZDVmNy00NDY4LWIwMDgtZGQ2OGQzNjAwODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWy3KJWna5WXoG/qHULJkH7ZMIRsfgBEjwvO D4CQaI8KNMgBIiHNfxI5TV0Ht+23m4NGp7I9Wr/ov/Ay/SAX5uQKoZZks0GHUl1x 6KRzm9q3CJ4TqGpstTRGWahh/8dccQBVWop/3FQZAZGU033ocbi+t5knfsXWgDkS IUEH32NYSgDMkRzAStO+7F3rDjsvf2/yb/FL1OPy2Z++fe5Wy+xJM4NLaCwXagW5 kjEAkFp3/uDRHcXOW7VouoB6qRlYpFXAuMz2ssWT6wM3nPuM4E+/oMPZFpZFbj1A 7fXzeAfsjKAHevvHH0DbrXhPzpTmZFsdKUDE1UqFMckXhU5iNQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCvHSzNHTVXWGROqhKFhCUH0/QlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYmEyY2E1YTItZTIyMi0z MTk0LWJmYTgtYWI1MjAxMWRjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKgIUD BAOKgIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAQBbXejIyBCk2hzi9olXf+7MO8v9u9raYrjdeFE3tvt/r ytENFffHwLn7yqETD9k5Fpy3yNk2ZMj1TWD1lP1qe26B8y2W4Q1e37DuytAqwCWm yNOp7je63YdOytl0mgh7BsyYKCiMRuU+5AKZd2mb4oQeYl0cH4zrAC71DgO9neDV gI5vUcnRlBPjZerEOr0aValu3VS9H+R0gxe4M5Vs0wxuZI6YhpIMlf+Ok+d2KZB9 jiYMf++7XgEQTiTqarAKuJMbd4XGDqpN11qQj5JVzYTtUx7aXWrSDdUTLTL3aNaZ Om2PuNzhb9xBRmOoKwqd8jSv9yLHFr+3q2SHkHtyUA== -----END CERTIFICATE-----Generated at Sat Apr 5 13:07:52 2025 by rpki-client