$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa File: ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json) Hash identifier: FE/+H4qI1Wgqca9vuz6M5WJKXy/XtNAp0LiOhj+FILk= Subject key identifier: B2:10:24:4D:6C:98:9B:06:5E:0F:4B:CF:70:E4:D4:9A:DB:D3:93:C2 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584E11B4307E0773C29392687900 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 136787 IP address blocks: 138.128.133.0/24 maxlen: 24 138.128.134.0/24 maxlen: 24 138.128.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:30:7e:07:73:c2:93:92:68:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=425669f1-9c08-4194-9579-184c6c9e9132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:71:83:84:2f:a5:af:56:bd:e0:92:1e:fb:fc: 7b:51:d0:e5:62:75:2c:25:c2:ba:5e:9e:cb:04:f3: e9:e5:82:0f:d1:1d:71:5e:3f:d2:f6:49:91:db:72: c0:d0:d8:b4:a0:e3:ba:8f:6d:25:90:f2:2c:09:98: 07:d0:6d:b4:6a:22:6b:f5:3a:cf:c4:92:11:3f:4c: 62:e9:44:b9:95:92:9b:4c:10:c9:17:e7:6c:f4:32: 8a:9c:2e:df:87:d1:c7:24:54:1c:dc:29:a8:91:ca: 90:48:7c:b0:6d:50:69:49:85:0e:25:8f:86:3f:3b: 2b:76:3e:0f:c7:cb:5f:7a:d7:2e:73:e8:c9:70:e0: c3:3c:b8:e5:f1:5e:7a:55:e0:38:9f:36:ea:60:a2: 2c:6d:6b:45:ba:ec:c2:71:70:9f:84:41:fb:10:bd: 0e:0b:50:40:ef:a3:9e:49:4b:1d:bc:09:11:91:be: 2c:57:43:1b:55:03:58:b2:50:5a:a4:85:e1:1c:ae: a4:fe:9c:4b:e6:5c:69:f6:ba:2f:2d:20:4a:7d:41: 57:ac:61:1d:47:f0:7c:e5:3c:c7:d3:8a:c8:d1:25: a2:e9:cb:1c:76:39:c0:db:75:ff:cb:c6:e0:df:42: a2:df:61:a0:1b:59:97:f7:72:ff:00:86:b9:d2:ee: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:10:24:4D:6C:98:9B:06:5E:0F:4B:CF:70:E4:D4:9A:DB:D3:93:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.133.0-138.128.135.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:54:82:6b:60:74:e9:9a:df:43:27:9e:3e:a8:20:38:21:55: 0e:fc:38:59:93:d5:1e:40:ef:33:da:1b:68:90:90:72:55:b6: 37:ac:b6:0a:90:34:a5:37:28:c5:61:7f:dc:9d:52:1d:3e:3d: c8:5b:24:46:7b:04:ef:e5:72:02:03:13:d9:5c:74:41:44:82: 8b:da:5f:eb:f2:9d:47:74:19:68:c1:08:80:06:04:ea:49:a7: 37:4c:88:a6:45:b3:c3:b2:29:24:7d:e5:07:e7:e9:7d:1e:99: 93:b9:66:38:41:0c:f0:14:1c:3e:7d:61:71:01:34:53:94:80: 77:1a:98:0b:a6:c3:85:47:60:c2:5c:c2:30:fa:db:8f:da:a2: 15:fe:17:44:40:d9:21:c0:01:36:87:55:fd:ad:71:e3:29:e4: 4d:c9:3e:4a:8f:2c:cc:e2:8d:c6:c1:c7:aa:11:8d:26:5d:09: 12:2b:ad:b5:65:f5:58:5d:7c:a9:a1:af:ed:cf:ed:75:97:ce: ac:49:73:82:87:f7:9a:f3:df:b2:34:52:0e:3d:93:52:74:7b: 26:d7:9d:76:6b:03:7b:f9:78:8f:43:76:34:7a:67:14:e5:5c: 42:7b:b8:71:9a:3f:eb:c9:03:8b:4d:c3:c9:61:6b:ad:8b:09: 26:7b:69:a4 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4RtDB+B3PCk5JoeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk NDI1NjY5ZjEtOWMwOC00MTk0LTk1NzktMTg0YzZjOWU5MTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXGDhC+lr1a94JIe+/x7UdDlYnUsJcK6Xp7L BPPp5YIP0R1xXj/S9kmR23LA0Ni0oOO6j20lkPIsCZgH0G20aiJr9TrPxJIRP0xi 6US5lZKbTBDJF+ds9DKKnC7fh9HHJFQc3CmokcqQSHywbVBpSYUOJY+GPzsrdj4P x8tfetcuc+jJcODDPLjl8V56VeA4nzbqYKIsbWtFuuzCcXCfhEH7EL0OC1BA76Oe SUsdvAkRkb4sV0MbVQNYslBapIXhHK6k/pxL5lxp9rovLSBKfUFXrGEdR/B85TzH 04rI0SWi6cscdjnA23X/y8bg30Ki32GgG1mX93L/AIa50u597QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLIQJE1smJsGXg9Lz3Dk1Jrb05PCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYmEyY2E1YTItZTIyMi0z MTk0LWJmYTgtYWI1MjAxMWRjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKgIUD BAOKgIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXVSCa2B06ZrfQyeePqggOCFVDvw4WZPVHkDvM9obaJCQ clW2N6y2CpA0pTcoxWF/3J1SHT49yFskRnsE7+VyAgMT2Vx0QUSCi9pf6/KdR3QZ aMEIgAYE6kmnN0yIpkWzw7IpJH3lB+fpfR6Zk7lmOEEM8BQcPn1hcQE0U5SAdxqY C6bDhUdgwlzCMPrbj9qiFf4XREDZIcABNodV/a1x4ynkTck+So8szOKNxsHHqhGN Jl0JEiuttWX1WF18qaGv7c/tdZfOrElzgof3mvPfsjRSDj2TUnR7JteddmsDe/l4 j0N2NHpnFOVcQnu4cZo/68kDi03DyWFrrYsJJntppA== -----END CERTIFICATE-----Generated at Thu Jun 11 21:46:20 2026 by rpki-client