$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/03af26c3-2301-3288-a1b1-a04a7a341b34.roa File: 03af26c3-2301-3288-a1b1-a04a7a341b34.roa (raw, json) Hash identifier: 0eoh4YzjYRRBw5m0pUQVU/m+hgZcsfdzPU/D6mu3vtA= Subject key identifier: E0:55:C8:E8:6A:E1:A5:DF:EB:AD:24:78:5D:55:59:B4:06:4C:7D:B7 Certificate issuer: /CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157 Certificate serial: 010D0C9F4328584D6944FF4D5668D68474FE5400 Authority key identifier: 10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/03af26c3-2301-3288-a1b1-a04a7a341b34.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 0 IP address blocks: 209.92.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:ff:4d:56:68:d6:84:74:fe:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157 Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=df33647b-4ec5-4055-afd0-cf8769736f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:8c:d9:7f:e8:0e:36:21:f8:7f:e9:dc:ac: 3e:45:63:63:39:75:12:84:81:1d:63:c5:d5:99:bc: e0:4b:75:21:08:78:68:52:70:fc:d6:5f:08:08:cc: d9:74:ab:32:d0:f6:a9:0f:2b:0c:7c:91:df:79:f6: 33:e2:cf:87:3c:5d:f7:02:90:66:cc:9e:05:19:dd: 7e:f6:ab:e0:42:7f:fb:37:8c:6d:74:c7:4e:e2:e2: 70:02:c2:6d:2a:90:08:4c:cf:e4:41:0f:84:03:4b: a4:ce:62:83:18:fe:48:0a:9f:38:10:c5:15:97:41: 42:86:60:2d:99:05:78:0c:5c:99:5c:a8:41:e9:ca: 81:a5:15:f4:52:0f:88:44:6f:23:a3:36:34:e8:18: 5a:0c:c7:92:84:36:73:9e:f4:3d:c1:df:17:5d:36: ab:a4:29:ed:76:a3:3f:8c:72:cd:09:e7:be:49:25: a7:b6:b6:ab:20:99:ad:b0:57:88:76:a8:11:fb:a7: fb:3f:63:9c:22:d3:b5:c3:d7:fe:12:9f:d6:51:e0: 74:e9:34:57:e5:78:98:ef:dd:cc:1d:ee:08:2c:0c: a0:76:32:5a:82:bd:99:5a:c8:a8:af:21:88:e5:12: 36:d3:c9:c1:fe:57:8d:b5:65:0e:7e:c8:d8:39:d7: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:55:C8:E8:6A:E1:A5:DF:EB:AD:24:78:5D:55:59:B4:06:4C:7D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/03af26c3-2301-3288-a1b1-a04a7a341b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.crl X509v3 Authority Key Identifier: keyid:10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer sbgp-ipAddrBlock: critical IPv4: 209.92.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:32:80:7d:53:83:51:0f:25:3c:cb:2b:c7:74:7d:82:47:88: 5e:29:21:02:ee:74:7c:fe:19:db:d2:d8:6c:5a:f4:3f:81:f7: 31:22:71:fd:7f:74:b5:59:f6:a6:b1:07:2b:0d:7e:1e:fc:4a: ca:e9:e0:68:bf:a2:a3:66:98:91:ac:15:bf:48:ac:7b:06:0a: e8:f8:8b:d8:59:46:ad:3b:f4:43:64:18:e0:5f:af:ec:2f:0a: a1:2a:6e:3a:25:85:8b:98:ef:fc:e6:d8:ed:c9:eb:60:35:59: 91:13:80:80:d8:9c:17:70:be:25:27:85:c9:5d:f8:96:a4:a8: 73:13:ef:88:b6:6f:6e:af:eb:49:59:17:18:e5:54:e2:5b:97: ca:b5:cc:b2:c9:04:7c:a8:03:cb:21:d2:47:a2:d0:c7:b4:bc: b0:9e:19:d0:4e:97:a4:e3:43:93:53:ca:c7:72:8e:dd:7c:31: fa:39:00:29:68:a5:80:11:d3:36:76:00:a8:93:78:0f:38:5a: d9:4f:90:3d:40:43:b1:32:98:66:aa:37:b0:23:70:c7:eb:b0: 9f:6c:37:d0:ac:2e:8e:52:7a:e1:1f:89:b9:23:98:77:49:e6: 86:9f:bf:0a:d7:66:d5:11:cd:5a:b3:a5:b0:24:ba:28:2a:d7: f4:23:64:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRP9NVmjWhHT+VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg1ODZlMjEtNGRkMS00M2U4LTk2NTQtYjhkZDVlNGE3 MTU3MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk ZGYzMzY0N2ItNGVjNS00MDU1LWFmZDAtY2Y4NzY5NzM2ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1GM2X/oDjYh+H/p3Kw+RWNjOXUShIEdY8XV mbzgS3UhCHhoUnD81l8ICMzZdKsy0PapDysMfJHfefYz4s+HPF33ApBmzJ4FGd1+ 9qvgQn/7N4xtdMdO4uJwAsJtKpAITM/kQQ+EA0ukzmKDGP5ICp84EMUVl0FChmAt mQV4DFyZXKhB6cqBpRX0Ug+IRG8jozY06BhaDMeShDZznvQ9wd8XXTarpCntdqM/ jHLNCee+SSWntrarIJmtsFeIdqgR+6f7P2OcItO1w9f+Ep/WUeB06TRX5XiY793M He4ILAygdjJagr2ZWsioryGI5RI208nB/leNtWUOfsjYOdc/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBVyOhq4aXf660keF1VWbQGTH23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODU4 NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRkNWU0YTcxNTcvMDNhZjI2YzMtMjMwMS0z Mjg4LWExYjEtYTA0YTdhMzQxYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg1ODZlMjEtNGRkMS00M2U4LTk2 NTQtYjhkZDVlNGE3MTU3LzU4NTg2ZTIxLTRkZDEtNDNlOC05NjU0LWI4ZGQ1ZTRh NzE1Ny5jcmwwHwYDVR0jBBgwFoAUEBDnrJ5Bk1UDp/o5ZnvCwMB2VUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODU4NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRk NWU0YTcxNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUygH1Tg1EPJTzLK8d0fYJHiF4pIQLudHz+GdvS2Gxa9D+B9zEicf1/ dLVZ9qaxBysNfh78Ssrp4Gi/oqNmmJGsFb9IrHsGCuj4i9hZRq079ENkGOBfr+wv CqEqbjolhYuY7/zm2O3J62A1WZETgIDYnBdwviUnhcld+JakqHMT74i2b26v60lZ FxjlVOJbl8q1zLLJBHyoA8sh0kei0Me0vLCeGdBOl6TjQ5NTysdyjt18Mfo5AClo pYAR0zZ2AKiTeA84WtlPkD1AQ7EymGaqN7AjcMfrsJ9sN9CsLo5SeuEfibkjmHdJ 5oafvwrXZtURzVqzpbAkuigq1/QjZDo= -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:22 2026 by rpki-client