$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/57cc4591-8dfe-3fec-9dbe-ee95dd8e981e.roa File: 57cc4591-8dfe-3fec-9dbe-ee95dd8e981e.roa (raw, json) Hash identifier: ss+wgy9+r4tqM0cA+g047O3nxBIfSitWfv/t0SKH1p0= Subject key identifier: 75:10:19:99:02:E4:3A:02:75:70:BF:98:E9:D5:4A:9A:A7:A8:2E:2C Certificate issuer: /CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157 Certificate serial: 010D0C9F4328584E4989D94FF7C135213129A880 Authority key identifier: 10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/57cc4591-8dfe-3fec-9dbe-ee95dd8e981e.roa Signing time: Thu 25 Jun 2026 09:00:13 +0000 ROA not before: Thu 25 Jun 2026 09:00:13 +0000 ROA not after: Wed 23 Sep 2026 09:00:13 +0000 asID: 0 IP address blocks: 198.154.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:49:89:d9:4f:f7:c1:35:21:31:29:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157 Validity Not Before: Jun 25 09:00:13 2026 GMT Not After : Sep 23 09:00:13 2026 GMT Subject: CN=b7c7dc81-e8c7-4341-9b66-3ccbce7b39a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:e4:18:5c:44:b4:03:29:b1:1e:9e:b6:d9: 26:28:ac:f2:ec:6a:15:08:3f:f5:02:de:60:f8:c8: a7:2f:b3:24:44:25:28:83:04:72:7c:25:7e:fb:62: 16:40:28:84:34:37:5b:7b:7a:ed:6a:64:14:5f:1c: 84:23:c5:5c:ff:98:ed:d7:16:6b:50:b8:93:94:fb: c4:cc:0b:1f:e1:33:d1:9f:b1:14:ce:2f:00:19:35: 1a:1a:6d:cd:15:7a:62:5d:14:9d:7a:03:50:05:98: 69:8d:92:fd:db:9d:d8:82:27:1c:b6:58:e9:5e:f0: 53:f8:73:78:d6:3d:c7:52:bb:a0:02:f2:6d:f7:95: ab:11:c9:b4:d5:cb:c0:7a:3b:c5:32:44:cd:3d:5c: 8d:b9:51:e9:85:00:e6:c0:3a:0a:68:5d:15:34:7a: 6f:66:e6:46:08:37:f0:cc:19:c9:59:ef:6a:5a:14: 66:2f:97:af:bd:3b:a2:11:ee:f6:06:3f:9c:e4:ce: 97:45:69:d9:d3:a0:1b:73:df:c3:01:e6:36:24:e2: 41:4a:aa:3e:f1:7b:8a:44:c4:d7:4c:3e:07:88:e7: 5d:13:bb:5c:62:56:f6:32:a6:04:dd:4f:58:77:b2: 73:99:c9:53:87:8d:b5:fc:b4:ae:ac:99:6b:36:94: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:10:19:99:02:E4:3A:02:75:70:BF:98:E9:D5:4A:9A:A7:A8:2E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/57cc4591-8dfe-3fec-9dbe-ee95dd8e981e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.crl X509v3 Authority Key Identifier: keyid:10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer sbgp-ipAddrBlock: critical IPv4: 198.154.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7a:7a:2d:fe:9e:b8:7a:d3:a9:30:18:76:40:10:65:35:c8: 5e:9b:ae:6c:a3:62:bb:56:16:01:e5:27:ab:93:7b:c0:50:f6: 58:77:65:a4:01:3e:8b:09:df:9f:e7:b5:64:e7:0a:90:80:c3: 43:81:cb:e5:48:e8:99:df:35:ed:e4:20:e9:24:fd:6f:51:c9: 50:00:93:8b:2a:9b:e4:37:a5:78:08:74:eb:5f:c1:d3:d9:8a: c4:39:e7:2c:01:0c:d0:eb:b6:81:04:23:8c:ad:aa:b9:f1:66: f2:99:ce:91:66:5d:b3:2b:9a:4d:25:1f:73:4e:7f:b6:34:fe: f9:9f:d8:2e:bd:fe:ae:c5:62:f6:61:f8:30:9f:89:48:4e:4c: 9f:af:29:44:13:51:3f:cf:cb:ad:7d:cd:97:d6:59:4a:07:fb: 23:59:d4:92:68:9c:77:f6:f1:da:08:df:63:73:19:f8:4b:ad: f0:7b:60:b0:94:4d:bb:6d:fb:c3:b9:ca:53:5b:7e:bf:7d:8d: 81:ee:d6:94:8d:80:38:05:98:1b:09:c0:33:d2:b5:15:f6:c4: e3:ec:38:7b:23:5e:fa:a6:e0:9b:6d:f6:ce:91:72:7d:cd:d9: d6:2f:40:06:94:25:6a:da:96:cc:d8:03:e2:2e:75:3e:69:47: f6:f9:32:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5JidlP98E1ITEpqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg1ODZlMjEtNGRkMS00M2U4LTk2NTQtYjhkZDVlNGE3 MTU3MB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk YjdjN2RjODEtZThjNy00MzQxLTliNjYtM2NjYmNlN2IzOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfjkGFxEtAMpsR6ettkmKKzy7GoVCD/1At5g +MinL7MkRCUogwRyfCV++2IWQCiENDdbe3rtamQUXxyEI8Vc/5jt1xZrULiTlPvE zAsf4TPRn7EUzi8AGTUaGm3NFXpiXRSdegNQBZhpjZL9253YgicctljpXvBT+HN4 1j3HUrugAvJt95WrEcm01cvAejvFMkTNPVyNuVHphQDmwDoKaF0VNHpvZuZGCDfw zBnJWe9qWhRmL5evvTuiEe72Bj+c5M6XRWnZ06Abc9/DAeY2JOJBSqo+8XuKRMTX TD4HiOddE7tcYlb2MqYE3U9Yd7JzmclTh421/LSurJlrNpSaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUQGZkC5DoCdXC/mOnVSpqnqC4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODU4 NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRkNWU0YTcxNTcvNTdjYzQ1OTEtOGRmZS0z ZmVjLTlkYmUtZWU5NWRkOGU5ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg1ODZlMjEtNGRkMS00M2U4LTk2 NTQtYjhkZDVlNGE3MTU3LzU4NTg2ZTIxLTRkZDEtNDNlOC05NjU0LWI4ZGQ1ZTRh NzE1Ny5jcmwwHwYDVR0jBBgwFoAUEBDnrJ5Bk1UDp/o5ZnvCwMB2VUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODU4NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRk NWU0YTcxNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl6ei3+nrh606kwGHZAEGU1yF6brmyjYrtWFgHlJ6uTe8BQ9lh3ZaQB PosJ35/ntWTnCpCAw0OBy+VI6JnfNe3kIOkk/W9RyVAAk4sqm+Q3pXgIdOtfwdPZ isQ55ywBDNDrtoEEI4ytqrnxZvKZzpFmXbMrmk0lH3NOf7Y0/vmf2C69/q7FYvZh +DCfiUhOTJ+vKUQTUT/Py619zZfWWUoH+yNZ1JJonHf28doI32NzGfhLrfB7YLCU Tbtt+8O5ylNbfr99jYHu1pSNgDgFmBsJwDPStRX2xOPsOHsjXvqm4Jtt9s6Rcn3N 2dYvQAaUJWralszYA+IudT5pR/b5MkE= -----END CERTIFICATE-----Generated at Tue Jul 7 09:44:43 2026 by rpki-client