$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa File: ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json) Hash identifier: Ad4x4ppjijlBv5Vo+XKJcEyHJo0PY8ovD7KmYIbzaEo= Subject key identifier: 78:F7:06:BE:B7:50:67:C0:94:52:CE:76:D4:2F:02:10:EB:99:06:B2 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584B72C1EDC933BCBFBBDBFAF8C0 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 136787 IP address blocks: 138.128.133.0/24 maxlen: 24 138.128.134.0/24 maxlen: 24 138.128.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:ed:c9:33:bc:bf:bb:db:fa:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=77b9da8d-af53-4bb6-83ff-6a5e7b459828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:77:93:73:79:e3:63:df:ab:50:d5:2a:84: 2c:15:8d:09:30:65:9a:70:95:c6:ac:b0:51:d6:b2: fc:ae:75:dd:4b:71:2d:1c:ed:b1:f0:63:79:2d:06: ea:28:0c:bc:94:e2:44:28:29:af:e8:61:bd:0c:0e: 08:45:4d:b9:7e:63:fe:34:48:8e:7a:c7:2f:2f:29: 48:4c:ab:61:7c:22:d3:b9:7d:b9:97:18:24:45:01: ab:64:33:bf:a7:fa:7a:13:54:82:c5:03:fc:24:ad: 20:c3:57:10:7d:7e:8c:56:98:41:8d:11:19:0e:89: e0:9d:82:61:dc:7b:69:8d:9f:62:9e:8c:3f:79:cd: e7:3f:3d:63:c4:cc:e7:c7:e8:98:b2:4f:81:25:4e: 40:f4:ae:13:35:a5:3f:cf:e3:30:1f:61:b7:3c:06: fe:d7:48:c7:57:28:ab:6c:f9:27:9c:4e:45:ad:9a: 1b:a1:47:44:01:cf:47:23:75:07:f7:22:d0:9a:63: 61:59:72:6a:8f:d9:b2:6b:b9:17:62:46:f8:a5:3a: 91:25:80:21:a9:04:d9:54:8f:75:b3:da:fa:47:3b: 51:1c:68:2f:50:d8:ee:5a:e4:b4:cc:c9:2c:e2:66: 82:0b:2f:8b:1a:e6:67:c3:b4:9e:cf:a7:ab:24:0f: 30:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F7:06:BE:B7:50:67:C0:94:52:CE:76:D4:2F:02:10:EB:99:06:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.133.0-138.128.135.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:30:82:8a:47:13:0e:38:90:e3:20:e0:e3:a6:27:14:a8:eb: d0:39:2f:bb:75:59:13:de:05:df:18:79:04:fd:ff:a3:88:8c: c4:44:c3:cf:12:5b:e2:cf:ee:41:07:35:cc:aa:05:7c:5f:4c: cb:4c:a1:ea:b3:94:8b:2e:28:f6:dd:3d:4d:cc:69:01:4f:d4: 97:e1:4b:e3:ab:96:fe:16:d6:24:f0:1e:35:55:29:f5:1f:0a: a1:a2:31:ff:61:d2:e3:41:83:f8:65:24:89:d6:ea:4d:62:51: 15:cf:2d:d3:06:62:33:62:ed:13:be:e0:0f:a1:8b:94:f7:e7: a3:65:90:c1:4c:08:63:f1:df:cd:b7:c6:71:19:68:04:7f:fa: 9a:89:8b:6d:f0:92:d6:86:03:06:e4:65:a2:b2:65:87:38:de: ca:20:c7:95:66:fb:17:7e:16:40:d2:f6:3b:72:95:a7:b0:35: 6c:96:4b:1b:ad:e0:7c:65:a2:88:8c:fc:df:7d:c1:a0:f2:33: 91:c3:0a:e7:22:64:3c:41:a5:11:84:0b:34:80:a4:15:ce:28: b5:b7:f2:15:23:97:eb:49:e1:48:a7:46:35:0d:a1:91:75:b5: b6:81:fe:c5:63:c4:ca:09:c8:da:22:4e:37:2a:10:73:e6:85: d6:d3:e1:1c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtywe3JM7y/u9v6+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk NzdiOWRhOGQtYWY1My00YmI2LTgzZmYtNmE1ZTdiNDU5ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNF3k3N542Pfq1DVKoQsFY0JMGWacJXGrLBR 1rL8rnXdS3EtHO2x8GN5LQbqKAy8lOJEKCmv6GG9DA4IRU25fmP+NEiOescvLylI TKthfCLTuX25lxgkRQGrZDO/p/p6E1SCxQP8JK0gw1cQfX6MVphBjREZDongnYJh 3HtpjZ9inow/ec3nPz1jxMznx+iYsk+BJU5A9K4TNaU/z+MwH2G3PAb+10jHVyir bPknnE5FrZoboUdEAc9HI3UH9yLQmmNhWXJqj9mya7kXYkb4pTqRJYAhqQTZVI91 s9r6RztRHGgvUNjuWuS0zMks4maCCy+LGuZnw7Sez6erJA8wywIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHj3Br63UGfAlFLOdtQvAhDrmQayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYmEyY2E1YTItZTIyMi0z MTk0LWJmYTgtYWI1MjAxMWRjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKgIUD BAOKgIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAHjCCikcTDjiQ4yDg46YnFKjr0Dkvu3VZE94F3xh5BP3/ o4iMxETDzxJb4s/uQQc1zKoFfF9My0yh6rOUiy4o9t09TcxpAU/Ul+FL46uW/hbW JPAeNVUp9R8KoaIx/2HS40GD+GUkidbqTWJRFc8t0wZiM2LtE77gD6GLlPfno2WQ wUwIY/HfzbfGcRloBH/6momLbfCS1oYDBuRlorJlhzjeyiDHlWb7F34WQNL2O3KV p7A1bJZLG63gfGWiiIz8333BoPIzkcMK5yJkPEGlEYQLNICkFc4otbfyFSOX60nh SKdGNQ2hkXW1toH+xWPEygnI2iJONyoQc+aF1tPhHA== -----END CERTIFICATE-----Generated at Mon Oct 20 15:30:53 2025 by rpki-client