$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/57cc4591-8dfe-3fec-9dbe-ee95dd8e981e.roa File: 57cc4591-8dfe-3fec-9dbe-ee95dd8e981e.roa (raw, json) Hash identifier: CBQ1PQWUgCUVVFcGu79b2t95XwhdparFhBBWB364qgU= Subject key identifier: 28:E8:0D:92:8E:92:4F:73:6E:DD:CD:17:02:00:7E:D6:66:D5:6D:64 Certificate issuer: /CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157 Certificate serial: 010D0C9F4328584D6944FF641489697432F70B40 Authority key identifier: 10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/57cc4591-8dfe-3fec-9dbe-ee95dd8e981e.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 0 IP address blocks: 198.154.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:ff:64:14:89:69:74:32:f7:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157 Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=c9f209f9-c5ce-494b-9239-821d287f56dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:7d:66:37:95:0c:42:e7:7d:42:0d:53:d5: 06:83:97:6f:97:5b:14:07:0d:7e:ef:4f:cf:6d:76: 61:5c:8e:30:b1:3c:04:c7:7b:57:a7:50:43:d6:3e: a4:ca:a5:39:9b:36:f3:db:c8:7b:8b:ba:fc:a1:9d: 1f:0e:d6:a2:49:9b:5c:88:34:df:28:9b:ba:0e:51: 3f:d5:46:31:c1:dc:15:da:af:49:d7:2a:20:06:6a: 2c:b0:4d:61:57:28:50:a7:bd:90:4e:44:33:49:b5: f9:43:5f:7f:5f:76:5d:12:e4:25:2c:91:9b:5a:43: 65:7c:9c:64:46:0d:79:21:49:28:ce:20:bd:cd:3d: 34:23:e9:05:80:65:33:ee:a5:bf:0b:4b:45:f1:f8: 35:88:6e:c7:a0:8e:91:0e:34:7b:8f:25:d3:0e:06: e1:37:0f:85:eb:cf:60:16:95:99:a4:0c:a9:27:94: 45:3f:b7:f1:8b:ae:c2:53:e3:1f:13:7f:fc:c2:2c: f3:66:7a:6c:7e:39:82:f9:30:0a:94:83:4d:e1:94: 76:f7:0a:17:02:f7:2e:38:c5:06:a0:0d:05:5b:a0: 8c:1c:38:37:fa:ba:80:2b:f7:25:ce:9a:ae:14:79: b2:25:df:09:25:4c:1b:ba:db:85:f8:a4:f5:6a:f8: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E8:0D:92:8E:92:4F:73:6E:DD:CD:17:02:00:7E:D6:66:D5:6D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/57cc4591-8dfe-3fec-9dbe-ee95dd8e981e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.crl X509v3 Authority Key Identifier: keyid:10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer sbgp-ipAddrBlock: critical IPv4: 198.154.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5e:aa:df:e0:70:df:6e:41:af:f4:1f:3e:4c:72:31:bf:46: 05:13:71:64:8f:92:fb:a4:aa:27:2e:45:2c:c4:e4:9e:e0:e7: 0d:17:e3:87:cb:f4:85:5f:ad:49:83:43:f0:bd:02:dd:4d:d1: e2:81:6c:9d:ba:8a:2a:04:40:72:46:11:a5:a7:1a:1f:e8:0c: 62:47:7b:15:63:3e:32:74:d2:29:a4:22:93:6a:17:98:5f:c3: 60:10:2d:1e:60:df:2c:ec:80:aa:df:14:50:9e:07:3f:84:1f: 0f:6c:42:d1:61:ad:6f:03:b0:e4:9b:d5:4b:b2:d9:f5:26:48: fc:10:13:e4:79:09:08:36:c5:a8:f3:0d:16:04:d9:49:f7:41: fc:8f:39:c6:ba:fa:8b:4d:29:54:da:27:e3:52:e4:31:6d:c2: 25:fc:47:88:31:0b:d6:f1:6a:08:cf:86:74:a7:9b:cb:c8:89: c3:72:7e:ce:b7:5e:7d:b3:05:01:32:4b:22:77:28:a5:24:1b: 8d:58:4f:cf:da:28:eb:51:fa:42:b0:c0:2b:1f:6c:ab:08:93: 74:3d:1a:8e:ec:4a:b1:b6:93:c6:20:ab:95:c5:63:26:09:81: da:15:0c:9d:0f:8e:89:06:f2:f4:59:2b:f2:c7:31:79:01:7b: 4a:89:91:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRP9kFIlpdDL3C0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg1ODZlMjEtNGRkMS00M2U4LTk2NTQtYjhkZDVlNGE3 MTU3MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk YzlmMjA5ZjktYzVjZS00OTRiLTkyMzktODIxZDI4N2Y1NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNh9ZjeVDELnfUINU9UGg5dvl1sUBw1+70/P bXZhXI4wsTwEx3tXp1BD1j6kyqU5mzbz28h7i7r8oZ0fDtaiSZtciDTfKJu6DlE/ 1UYxwdwV2q9J1yogBmossE1hVyhQp72QTkQzSbX5Q19/X3ZdEuQlLJGbWkNlfJxk Rg15IUkoziC9zT00I+kFgGUz7qW/C0tF8fg1iG7HoI6RDjR7jyXTDgbhNw+F689g FpWZpAypJ5RFP7fxi67CU+MfE3/8wizzZnpsfjmC+TAKlINN4ZR29woXAvcuOMUG oA0FW6CMHDg3+rqAK/clzpquFHmyJd8JJUwbutuF+KT1avgzMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjoDZKOkk9zbt3NFwIAftZm1W1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODU4 NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRkNWU0YTcxNTcvNTdjYzQ1OTEtOGRmZS0z ZmVjLTlkYmUtZWU5NWRkOGU5ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg1ODZlMjEtNGRkMS00M2U4LTk2 NTQtYjhkZDVlNGE3MTU3LzU4NTg2ZTIxLTRkZDEtNDNlOC05NjU0LWI4ZGQ1ZTRh NzE1Ny5jcmwwHwYDVR0jBBgwFoAUEBDnrJ5Bk1UDp/o5ZnvCwMB2VUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODU4NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRk NWU0YTcxNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBeqt/gcN9uQa/0Hz5McjG/RgUTcWSPkvukqicuRSzE5J7g5w0X44fL 9IVfrUmDQ/C9At1N0eKBbJ26iioEQHJGEaWnGh/oDGJHexVjPjJ00imkIpNqF5hf w2AQLR5g3yzsgKrfFFCeBz+EHw9sQtFhrW8DsOSb1Uuy2fUmSPwQE+R5CQg2xajz DRYE2Un3QfyPOca6+otNKVTaJ+NS5DFtwiX8R4gxC9bxagjPhnSnm8vIicNyfs63 Xn2zBQEySyJ3KKUkG41YT8/aKOtR+kKwwCsfbKsIk3Q9Go7sSrG2k8Ygq5XFYyYJ gdoVDJ0PjokG8vRZK/LHMXkBe0qJkTg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:27 2026 by rpki-client