$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS58955.roa File: AS58955.roa (raw, json) Hash identifier: uIGkLUzm4rtIaMfn0Pg9pZ5VaIjgXAyjgD2PL6EMsxI= Subject key identifier: E2:DA:FC:E8:0C:16:DF:90:9B:78:AD:38:96:8D:1A:C8:D9:98:04:EC Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1AFC340468314E3F083B4251E456DFF8467C626C Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS58955.roa Signing time: Wed 25 Mar 2026 18:00:06 +0000 ROA not before: Wed 25 Mar 2026 17:55:06 +0000 ROA not after: Wed 24 Mar 2027 18:00:06 +0000 asID: 58955 IP address blocks: 157.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fc:34:04:68:31:4e:3f:08:3b:42:51:e4:56:df:f8:46:7c:62:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 25 17:55:06 2026 GMT Not After : Mar 24 18:00:06 2027 GMT Subject: CN=E2DAFCE80C16DF909B78AD38968D1AC8D99804EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:07:05:75:16:4c:34:9b:39:c9:9c:91:0b: c4:93:63:f5:27:99:d6:3b:9e:01:ae:25:02:36:90: d7:27:b4:9d:3c:a7:83:12:92:ac:15:1c:ae:8e:79: 5f:09:86:96:a0:70:c5:07:7e:73:90:47:5c:32:94: e7:81:13:83:38:4f:ba:b3:e9:9b:28:d6:1a:36:d1: 50:20:b8:88:10:67:6b:2f:15:10:69:54:f0:dc:f3: ce:1d:18:2d:80:2f:67:71:ec:be:ed:e4:a5:fb:6e: a9:91:7c:f4:c8:f3:11:81:01:ff:7f:10:b8:aa:4c: a5:19:88:59:a5:9b:40:08:47:f4:38:ac:4f:69:e7: 77:65:c4:72:cc:73:14:42:c2:ce:c0:ae:c4:d1:5f: 42:50:07:03:f5:15:45:2a:20:f5:55:ff:2d:4a:1a: 88:f7:ea:1b:98:af:cf:e4:c8:aa:15:4e:f4:33:0a: 56:a7:b3:dc:8e:66:e3:44:40:3a:7b:c0:a0:b1:9f: fb:fe:ae:a6:9d:ba:e0:8f:98:81:ee:f4:c5:4c:e5: 31:da:d7:c2:aa:62:6c:1e:9e:97:29:5a:d5:1a:01: 10:b2:38:8f:7f:36:91:81:27:e8:53:2e:6e:03:68: 9e:59:b3:92:86:f2:e9:70:db:ce:e7:59:33:57:12: 6f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DA:FC:E8:0C:16:DF:90:9B:78:AD:38:96:8D:1A:C8:D9:98:04:EC X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS58955.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.192.0/24 Signature Algorithm: sha256WithRSAEncryption bb:bb:aa:8d:41:f5:0a:66:92:92:ec:b3:22:7e:5c:8e:c7:85: 98:36:a8:42:56:be:98:17:ce:d1:33:7b:9f:0a:41:b7:89:d6: 59:98:2c:e8:d0:58:05:0f:7e:01:e8:59:3d:a1:c1:d1:1c:6d: a2:2d:91:da:a5:5f:e8:b8:f8:4d:37:be:51:65:9f:55:88:d8: fc:27:9a:ea:16:a7:fb:50:90:59:c1:54:05:19:b9:2f:57:97: 7c:20:c8:a6:13:f0:40:36:d1:74:e3:d4:d7:66:1f:60:d6:f8: db:66:06:a4:be:6f:a8:e7:22:c9:70:08:84:78:60:e8:85:0c: 18:7f:82:8c:4e:ab:52:e0:a1:80:25:da:90:94:da:78:4e:f8: 9a:21:4e:51:dc:00:1c:2d:c3:38:83:07:27:5f:af:6e:71:82: 00:34:2d:30:37:b2:72:42:ac:a0:7a:77:d5:f1:e6:1e:03:1c: cf:f8:21:51:c1:86:34:d1:b6:36:b6:c0:1c:88:35:f6:cb:07: fa:a7:8a:00:f2:b8:af:3e:ac:94:62:83:24:f9:da:21:29:8c: 65:0e:c0:78:9a:c9:8c:55:c6:ac:fa:55:79:3e:8d:37:b1:21: a6:59:79:32:ea:45:4a:67:df:a7:b4:b8:7a:b1:b4:82:82:9d: 5b:45:71:8a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUGvw0BGgxTj8IO0JR5Fbf+EZ8YmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzI1MTc1NTA2WhcNMjcwMzI0MTgwMDA2 WjAzMTEwLwYDVQQDEyhFMkRBRkNFODBDMTZERjkwOUI3OEFEMzg5NjhEMUFDOEQ5 OTgwNEVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D0HBXUWTDSb OcmckQvEk2P1J5nWO54BriUCNpDXJ7SdPKeDEpKsFRyujnlfCYaWoHDFB35zkEdc MpTngRODOE+6s+mbKNYaNtFQILiIEGdrLxUQaVTw3PPOHRgtgC9ncey+7eSl+26p kXz0yPMRgQH/fxC4qkylGYhZpZtACEf0OKxPaed3ZcRyzHMUQsLOwK7E0V9CUAcD 9RVFKiD1Vf8tShqI9+obmK/P5MiqFU70MwpWp7PcjmbjREA6e8CgsZ/7/q6mnbrg j5iB7vTFTOUx2tfCqmJsHp6XKVrVGgEQsjiPfzaRgSfoUy5uA2ieWbOShvLpcNvO 51kzVxJvtQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFOLa/OgMFt+Qm3itOJaNGsjZ mATsMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzU4OTU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7AMA0GCSqGSIb3DQEBCwUAA4IB AQC7u6qNQfUKZpKS7LMiflyOx4WYNqhCVr6YF87RM3ufCkG3idZZmCzo0FgFD34B 6Fk9ocHRHG2iLZHapV/ouPhNN75RZZ9ViNj8J5rqFqf7UJBZwVQFGbkvV5d8IMim E/BANtF049TXZh9g1vjbZgakvm+o5yLJcAiEeGDohQwYf4KMTqtS4KGAJdqQlNp4 TviaIU5R3AAcLcM4gwcnX69ucYIANC0wN7JyQqygenfV8eYeAxzP+CFRwYY00bY2 tsAciDX2ywf6p4oA8rivPqyUYoMk+dohKYxlDsB4msmMVcas+lV5Po03sSGmWXky 6kVKZ9+ntLh6sbSCgp1bRXGK -----END CERTIFICATE-----Generated at Thu Mar 26 17:33:36 2026 by rpki-client