$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa File: ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json) Hash identifier: s7JIWQe8CzMdNVbu4ZDjjLd48efAzHO1602Q2FerlkI= Subject key identifier: 1E:10:F1:42:8D:22:CC:CB:30:91:B0:9A:78:A9:DD:A0:73:62:87:98 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F43285849B2AF6246BF325B583B3F7EA0 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 136787 IP address blocks: 138.128.133.0/24 maxlen: 24 138.128.134.0/24 maxlen: 24 138.128.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:62:46:bf:32:5b:58:3b:3f:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=3ca204a1-394a-4094-aecc-9af7315eaa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:e8:54:ce:08:6f:8f:40:8b:10:0c:95:e9: 34:3c:64:5d:5e:5f:26:48:35:43:ea:f5:3c:56:44: 35:14:45:9c:fe:93:79:a3:4b:71:b8:de:a4:30:04: bc:9e:ac:21:bd:ba:95:a3:ce:ca:8c:13:ed:56:48: cd:d7:d5:3d:d4:f7:0f:d2:6f:07:87:82:01:58:47: 9d:c3:4b:67:26:e1:66:89:25:9d:15:8a:67:35:9f: f4:47:e0:0e:67:4d:e6:5e:e5:84:cd:60:17:12:1e: 56:0b:56:d6:6a:37:2f:39:c1:94:09:9f:8c:6b:30: 5e:a3:e2:16:27:d7:4f:0c:12:b3:f4:f3:cf:59:39: d9:96:9d:a6:71:b1:af:1b:a3:37:55:0c:05:d3:df: d3:40:ba:5d:28:a4:7f:de:15:4f:1f:01:76:8d:31: 73:b1:06:b3:e6:7b:97:98:1f:c1:95:a8:ba:f1:1a: bb:2a:74:67:2c:90:cd:3a:c6:63:51:b2:18:45:65: 57:61:24:9d:bc:5b:c1:88:1e:b6:aa:87:71:65:0d: e8:0a:93:0f:21:39:69:9b:a2:73:b6:cf:01:45:0c: e4:d7:63:dd:95:58:b3:8d:e1:c0:12:56:51:16:eb: 8a:a3:8d:4b:8b:12:da:5d:ba:e4:49:5e:e2:1b:2a: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:10:F1:42:8D:22:CC:CB:30:91:B0:9A:78:A9:DD:A0:73:62:87:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.133.0-138.128.135.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:79:20:9f:07:79:72:2c:3c:bf:8b:77:b5:d6:e6:cf:64:ac: 52:70:d6:e9:71:15:02:61:3e:b4:2b:c2:8d:e5:88:78:fc:14: 98:2c:7d:80:5e:f0:6f:46:6e:1b:5d:b0:4f:72:09:9d:10:93: 48:3a:0d:4f:b5:9f:b7:cf:15:4d:55:01:79:d4:b2:44:bc:4c: 3d:f7:c2:11:d6:a9:88:ed:39:e5:fa:43:32:a4:a8:f3:2d:ef: fd:7c:a4:06:96:1b:09:f5:02:b3:88:f9:71:01:97:c7:e3:4e: b4:a4:4d:41:90:9c:ba:fd:2a:0e:ac:e0:ff:09:4c:90:b1:d4: 09:f8:69:38:ef:10:d8:cf:a5:a8:8a:2d:8e:03:f0:8c:bb:03: 18:19:1f:e1:32:de:1e:69:6c:6e:92:fc:12:ca:94:a5:03:aa: fa:22:cc:3a:80:12:e2:56:c0:c7:93:dc:77:b3:54:cc:31:ec: f6:f6:11:ef:5f:e9:1b:f7:2f:46:48:df:08:21:e1:c9:01:b1: 8e:e1:95:d9:cf:c1:5a:f6:d5:24:58:8a:9b:77:09:d1:d1:bc: 94:e4:a7:55:b6:27:b4:ed:37:6a:bf:ae:28:ce:1a:2b:05:70: fa:3b:8f:84:b2:f4:41:25:b6:b4:75:a0:8a:7e:72:6a:b3:06: e7:06:dc:c4 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmyr2JGvzJbWDs/fqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk M2NhMjA0YTEtMzk0YS00MDk0LWFlY2MtOWFmNzMxNWVhYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dfoVM4Ib49AixAMlek0PGRdXl8mSDVD6vU8 VkQ1FEWc/pN5o0txuN6kMAS8nqwhvbqVo87KjBPtVkjN19U91PcP0m8Hh4IBWEed w0tnJuFmiSWdFYpnNZ/0R+AOZ03mXuWEzWAXEh5WC1bWajcvOcGUCZ+MazBeo+IW J9dPDBKz9PPPWTnZlp2mcbGvG6M3VQwF09/TQLpdKKR/3hVPHwF2jTFzsQaz5nuX mB/Blai68Rq7KnRnLJDNOsZjUbIYRWVXYSSdvFvBiB62qodxZQ3oCpMPITlpm6Jz ts8BRQzk12PdlVizjeHAElZRFuuKo41LixLaXbrkSV7iGyqfbwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFB4Q8UKNIszLMJGwmnip3aBzYoeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYmEyY2E1YTItZTIyMi0z MTk0LWJmYTgtYWI1MjAxMWRjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKgIUD BAOKgIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEASXkgnwd5ciw8v4t3tdbmz2SsUnDW6XEVAmE+tCvCjeWI ePwUmCx9gF7wb0ZuG12wT3IJnRCTSDoNT7Wft88VTVUBedSyRLxMPffCEdapiO05 5fpDMqSo8y3v/XykBpYbCfUCs4j5cQGXx+NOtKRNQZCcuv0qDqzg/wlMkLHUCfhp OO8Q2M+lqIotjgPwjLsDGBkf4TLeHmlsbpL8EsqUpQOq+iLMOoAS4lbAx5Pcd7NU zDHs9vYR71/pG/cvRkjfCCHhyQGxjuGV2c/BWvbVJFiKm3cJ0dG8lOSnVbYntO03 ar+uKM4aKwVw+juPhLL0QSW2tHWgin5yarMG5wbcxA== -----END CERTIFICATE-----Generated at Fri May 9 02:42:28 2025 by rpki-client