$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa File: 6c3485d6-1237-32dd-8713-2aed82f2e07d.roa (raw, json) Hash identifier: DOjlUQ5XQ8+FSpvnxR4aaxUTFZU9k/0eW50g2zP5S+8= Subject key identifier: 59:4C:F8:36:51:6C:98:88:32:06:38:BF:E6:3A:23:1A:4C:37:A9:DA Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584B84E76F8AE156F4D2BCE99880 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396982 IP address blocks: 170.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6f:8a:e1:56:f4:d2:bc:e9:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=748be1bc-1032-41f0-a736-70ee285d7bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:fd:b2:35:98:18:a5:b0:52:f4:a2:ff:b3: a2:6c:3e:6f:24:02:71:ea:a0:31:20:9b:bc:f0:90: e0:dd:ec:86:ef:34:43:f7:00:ee:74:61:1d:9c:e6: ba:db:92:fc:d8:ac:31:74:40:4b:8b:ec:a4:9a:26: df:8c:ba:7b:5d:e6:32:2a:c4:b3:36:57:34:a2:ba: 5b:73:83:ff:dc:73:82:b6:0a:52:9b:c3:5a:72:0b: 51:75:aa:e1:54:47:8c:77:1b:26:31:b4:96:f6:bd: 86:c8:30:fb:d2:95:a3:d2:b3:a8:9f:21:f8:dc:52: b9:e2:ed:4c:c5:f3:40:a1:60:ed:d7:b9:7f:3c:11: 5b:dc:24:a7:1c:56:94:2a:0a:a7:5c:ce:41:2a:b0: 08:cd:5e:cf:8f:8d:ed:ca:4a:51:4c:29:25:31:07: 43:5f:7b:34:48:46:8e:b4:cf:d6:e5:a0:6c:1b:61: 28:93:c1:ba:ac:42:7f:3e:6c:cb:25:0d:fb:08:0f: e1:60:69:7f:7d:9c:78:8f:00:1c:43:b5:1b:42:60: a5:12:2a:4d:e9:0d:a2:bc:43:57:97:fe:60:b0:fc: 94:1b:a3:68:3b:3a:37:ef:d9:6f:32:ce:75:82:ff: ed:e3:11:65:da:53:13:40:cb:20:ac:ce:50:13:e4: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4C:F8:36:51:6C:98:88:32:06:38:BF:E6:3A:23:1A:4C:37:A9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fc:ad:2a:9b:57:59:31:20:ba:e5:76:44:cb:2d:23:78:87: c4:48:9c:37:25:83:bb:2d:52:2c:1c:95:06:51:17:9a:0b:df: 7c:44:dd:59:18:8b:cc:80:ba:51:4d:c6:e6:4f:30:1d:c2:4d: 74:cb:4d:7d:74:9e:f4:f2:c1:6e:0d:34:cd:37:6e:bc:24:27: 19:06:89:8c:60:ce:c9:85:20:9a:e9:cc:68:16:8b:26:ab:2a: 4d:3c:14:fc:99:d2:a6:92:15:11:7d:b0:e4:be:03:49:54:e3: 94:ff:86:ae:79:a8:01:1c:0a:fd:95:5a:6f:69:c3:c5:e6:1b: 4e:64:9a:b5:82:e8:2b:83:cb:dc:5a:b0:09:9c:c4:9a:5c:fa: 84:98:15:0d:0f:b2:69:27:09:cb:ea:10:68:c5:0a:46:ba:6f: 60:26:a3:8f:f5:c4:f7:21:74:12:b6:bb:5d:6a:be:cf:12:53: db:53:e8:bc:c9:97:9a:ac:12:a7:fb:eb:47:30:73:bf:c6:75: 7d:dd:04:9d:15:62:bf:9a:7b:e3:8e:e5:d9:7c:31:6f:f1:ba: 9c:c7:c3:bd:d9:68:8b:bc:50:37:89:97:e5:ad:06:12:68:6a: a0:78:b3:75:86:7d:ad:c4:2b:19:2e:a2:e2:1d:d5:9b:81:9a: 51:78:9f:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52+K4Vb00rzpmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NzQ4YmUxYmMtMTAzMi00MWYwLWE3MzYtNzBlZTI4NWQ3YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu/9sjWYGKWwUvSi/7OibD5vJAJx6qAxIJu8 8JDg3eyG7zRD9wDudGEdnOa625L82KwxdEBLi+ykmibfjLp7XeYyKsSzNlc0orpb c4P/3HOCtgpSm8NacgtRdarhVEeMdxsmMbSW9r2GyDD70pWj0rOonyH43FK54u1M xfNAoWDt17l/PBFb3CSnHFaUKgqnXM5BKrAIzV7Pj43tykpRTCklMQdDX3s0SEaO tM/W5aBsG2Eok8G6rEJ/PmzLJQ37CA/hYGl/fZx4jwAcQ7UbQmClEipN6Q2ivENX l/5gsPyUG6NoOzo379lvMs51gv/t4xFl2lMTQMsgrM5QE+TPMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlM+DZRbJiIMgY4v+Y6IxpMN6naMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNmMzNDg1ZDYtMTIzNy0z MmRkLTg3MTMtMmFlZDgyZjJlMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf8rSqbV1kxILrldkTLLSN4h8RInDclg7stUiwclQZRF5oL33xE3VkY i8yAulFNxuZPMB3CTXTLTX10nvTywW4NNM03brwkJxkGiYxgzsmFIJrpzGgWiyar Kk08FPyZ0qaSFRF9sOS+A0lU45T/hq55qAEcCv2VWm9pw8XmG05kmrWC6CuDy9xa sAmcxJpc+oSYFQ0PsmknCcvqEGjFCka6b2Amo4/1xPchdBK2u11qvs8SU9tT6LzJ l5qsEqf760cwc7/GdX3dBJ0VYr+ae+OO5dl8MW/xupzHw73ZaIu8UDeJl+WtBhJo aqB4s3WGfa3EKxkuouId1ZuBmlF4n6o= -----END CERTIFICATE-----Generated at Mon Oct 20 04:36:18 2025 by rpki-client