$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/78db96eb-dc86-30f9-98ed-587913865074.roa File: 78db96eb-dc86-30f9-98ed-587913865074.roa (raw, json) Hash identifier: QzxYM2e5hsQboHS2Rk+l1ZMrGYWK6rxqNzV6GUk4Qf4= Subject key identifier: 1E:2D:9C:94:1A:FF:01:E0:FB:93:CD:4A:76:DB:4F:CF:69:CE:9E:48 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584D316F6F6C3F0C172FDCAADA40 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/78db96eb-dc86-30f9-98ed-587913865074.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 136787 IP address blocks: 138.128.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6f:6c:3f:0c:17:2f:dc:aa:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=071b510c-6e5b-4372-acb9-268cdd5ab5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:90:78:21:b3:38:87:3e:8b:cc:13:04:3f:e8: f4:5c:58:f9:d9:2f:d0:bd:90:88:ef:5f:3a:12:c6: 5e:0a:d4:4d:75:99:28:4a:a5:8d:31:59:70:95:eb: dd:cc:79:06:91:53:eb:e9:f3:67:fd:97:46:7f:ed: 8c:92:7b:7d:53:aa:f1:18:22:d4:f0:95:2b:9f:c8: 2e:ee:42:a1:a9:9f:37:2a:c6:df:09:b7:52:c5:6e: 7f:27:3c:5e:ed:cb:dc:a8:02:17:05:39:1a:13:e9: bd:3c:f6:96:58:81:52:79:79:b9:33:30:c5:36:b1: dd:fa:c5:e5:a5:a5:fd:ad:65:c0:43:f1:aa:8e:20: 11:f1:db:c7:ae:fa:ca:f3:9d:4e:49:7a:dd:63:d0: b2:6e:56:cb:c1:02:30:ae:4d:dc:5d:85:83:6d:ed: 6d:af:c5:66:71:a7:eb:28:dd:06:c9:7c:b1:f9:16: 83:68:37:f8:4d:58:d6:f9:e2:c4:86:14:38:b5:6f: 5b:b2:18:44:3c:f1:85:f7:8c:c0:73:14:a3:65:85: 3a:85:8d:16:83:08:89:7a:5f:78:33:47:bf:f2:64: 00:f2:b3:ff:21:ad:55:7f:90:ec:be:90:70:40:ce: fe:6a:05:6f:66:0a:e8:57:e5:65:ed:83:f1:f3:36: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2D:9C:94:1A:FF:01:E0:FB:93:CD:4A:76:DB:4F:CF:69:CE:9E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/78db96eb-dc86-30f9-98ed-587913865074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:59:12:10:27:a2:d2:9c:eb:94:4e:99:01:0d:6c:d0:83:8c: de:63:3a:67:df:46:3e:24:ff:32:bf:d9:01:3c:28:d8:56:ff: 59:87:5b:80:27:a6:d9:87:33:73:95:a4:26:86:fd:fe:5c:e1: 08:20:3d:fe:f1:a3:61:c7:ab:cd:b2:54:88:f0:56:f7:e7:2b: ce:b1:45:e3:b2:3f:f9:d4:c8:1c:34:6c:bd:00:4d:1f:5a:05: 4c:60:59:b5:7d:29:e9:64:84:49:4b:3e:50:cc:52:e7:9c:00: f8:d3:dd:58:55:1f:82:bf:e6:64:5f:c4:3c:ef:c6:c4:30:ce: 81:2c:29:cb:d8:42:d3:14:2e:d5:a5:4b:0d:fc:af:a9:ca:e3: 5f:76:f0:15:e9:54:9e:20:c4:03:16:22:6d:d9:05:7f:d8:3d: b8:90:e6:7e:02:32:dd:e0:7c:1b:1c:87:61:9f:55:f6:74:69: af:16:77:65:4a:94:04:15:79:32:fe:2e:3c:75:36:91:7b:e4: 8d:08:fc:70:0a:65:80:25:a1:d9:9b:0a:11:5a:fe:6a:cd:3d: 0e:35:fa:ce:35:c4:85:51:26:03:e6:7b:82:84:7d:50:e8:3a: 47:91:5c:3d:c9:d0:3a:15:8e:d5:b9:62:c5:2f:64:43:4c:7c: 0c:25:a7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb29sPwwXL9yq2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MDcxYjUxMGMtNmU1Yi00MzcyLWFjYjktMjY4Y2RkNWFiNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZB4IbM4hz6LzBMEP+j0XFj52S/QvZCI7186 EsZeCtRNdZkoSqWNMVlwlevdzHkGkVPr6fNn/ZdGf+2Mknt9U6rxGCLU8JUrn8gu 7kKhqZ83KsbfCbdSxW5/Jzxe7cvcqAIXBTkaE+m9PPaWWIFSeXm5MzDFNrHd+sXl paX9rWXAQ/GqjiAR8dvHrvrK851OSXrdY9CyblbLwQIwrk3cXYWDbe1tr8Vmcafr KN0GyXyx+RaDaDf4TVjW+eLEhhQ4tW9bshhEPPGF94zAcxSjZYU6hY0WgwiJel94 M0e/8mQA8rP/Ia1Vf5DsvpBwQM7+agVvZgroV+Vl7YPx8zZl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4tnJQa/wHg+5PNSnbbT89pzp5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvNzhkYjk2ZWItZGM4Ni0z MGY5LTk4ZWQtNTg3OTEzODY1MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRZEhAnotKc65ROmQENbNCDjN5jOmffRj4k/zK/2QE8KNhW/1mHW4An ptmHM3OVpCaG/f5c4QggPf7xo2HHq82yVIjwVvfnK86xReOyP/nUyBw0bL0ATR9a BUxgWbV9KelkhElLPlDMUuecAPjT3VhVH4K/5mRfxDzvxsQwzoEsKcvYQtMULtWl Sw38r6nK41928BXpVJ4gxAMWIm3ZBX/YPbiQ5n4CMt3gfBsch2GfVfZ0aa8Wd2VK lAQVeTL+Ljx1NpF75I0I/HAKZYAlodmbChFa/mrNPQ41+s41xIVRJgPme4KEfVDo OkeRXD3J0DoVjtW5YsUvZENMfAwlp2c= -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:11 2026 by rpki-client