$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa File: 6c3485d6-1237-32dd-8713-2aed82f2e07d.roa (raw, json) Hash identifier: NVXmv1doPvpYzP55Nrms0NL/9ETyVhwIMdPEGg1xihI= Subject key identifier: 91:2D:8E:5B:50:F4:B7:84:C3:63:3B:A7:D4:15:E3:57:31:D4:07:69 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584D44FA31912F32A15B87A35800 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396982 IP address blocks: 170.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:31:91:2f:32:a1:5b:87:a3:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=34e0ed8c-7470-4964-a285-d2993e89f754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:a8:17:e2:a1:0a:9a:e3:1a:9a:a6:8d:3b: 6b:14:6c:fa:d2:89:93:2b:76:fd:d9:79:10:a8:5f: 13:5b:e4:f4:df:40:19:76:db:78:ea:b1:37:d5:0c: bc:39:da:1e:b5:e9:e4:71:2b:82:29:71:41:03:dc: 0b:e3:95:66:b6:dd:23:66:97:89:e7:d8:84:e3:cc: 94:a9:39:e2:b9:ba:f4:d7:0f:14:3e:5a:b1:9e:b8: 47:63:7a:e8:1c:b8:7b:fc:ac:6a:ee:74:82:9a:eb: b4:32:4b:47:f3:fc:3e:82:4c:96:0e:7e:5d:04:68: c6:5e:9a:eb:c0:c6:6f:34:75:22:62:68:7b:59:d7: 8a:c0:97:ef:e5:0a:da:30:25:7e:1a:4e:00:45:56: 69:ec:95:25:44:a2:73:2c:59:97:57:76:1e:77:d9: 85:2d:f5:fa:84:06:63:12:e8:e1:50:da:b9:2d:47: a6:9d:97:54:43:6a:2a:63:9c:74:13:d2:e4:ec:35: e9:94:a3:f8:56:03:bc:3c:a0:a4:c2:22:d6:57:00: fc:5b:e9:3a:bd:96:15:0e:ea:3e:34:f0:78:d6:53: 99:6f:cd:2a:54:ef:25:51:8a:b7:71:ee:48:fc:2a: 61:ff:92:bd:84:91:97:84:ef:35:22:48:13:a5:1b: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2D:8E:5B:50:F4:B7:84:C3:63:3B:A7:D4:15:E3:57:31:D4:07:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d1:a8:21:ef:31:fb:94:dc:a1:6b:e9:fa:5a:b1:c2:ef:3b: 30:a0:76:dc:03:3d:62:3a:90:05:f1:07:25:f2:b8:cc:8e:99: 31:87:22:50:b4:77:3f:02:72:49:90:d9:61:c1:38:e5:50:f2: 19:fe:92:6d:81:8a:7a:3e:52:63:44:b1:5e:c5:0f:21:ea:12: b6:15:5a:93:a3:37:c6:45:6f:5d:2e:0c:4f:79:bb:e1:9d:7d: ce:9b:d0:31:a2:47:b2:64:c6:66:6f:3f:a9:b0:5e:b9:20:9a: 41:40:e1:4e:96:70:4d:94:50:7e:13:89:c0:7b:10:94:49:e2: 79:d4:df:da:59:72:5a:a0:f2:03:b9:5a:eb:3e:cc:eb:98:a9: c1:0c:66:bb:3c:bb:69:73:8d:4f:5b:81:b8:75:e7:ba:83:10: a6:0d:81:4d:ee:f7:7e:73:d4:84:71:5f:8a:e8:c0:f1:7a:8d: 39:e1:a5:4b:18:da:38:fc:c6:a7:e0:86:86:91:67:1e:ef:5e: b9:c8:b8:86:3d:ca:80:d9:50:2d:c0:46:ce:e2:7e:1a:b6:f7: d3:04:b5:eb:10:ab:26:d9:23:e4:c0:94:df:d0:eb:34:71:db: 5b:51:6a:20:cd:9e:6e:7e:be:e5:c1:2c:96:ef:05:56:eb:cc: a7:fa:ab:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jGRLzKhW4ejWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MzRlMGVkOGMtNzQ3MC00OTY0LWEyODUtZDI5OTNlODlmNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla2oF+KhCprjGpqmjTtrFGz60omTK3b92XkQ qF8TW+T030AZdtt46rE31Qy8OdoetenkcSuCKXFBA9wL45Vmtt0jZpeJ59iE48yU qTniubr01w8UPlqxnrhHY3roHLh7/Kxq7nSCmuu0MktH8/w+gkyWDn5dBGjGXprr wMZvNHUiYmh7WdeKwJfv5QraMCV+Gk4ARVZp7JUlRKJzLFmXV3Yed9mFLfX6hAZj EujhUNq5LUemnZdUQ2oqY5x0E9Lk7DXplKP4VgO8PKCkwiLWVwD8W+k6vZYVDuo+ NPB41lOZb80qVO8lUYq3ce5I/Cph/5K9hJGXhO81IkgTpRs8swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEtjltQ9LeEw2M7p9QV41cx1AdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNmMzNDg1ZDYtMTIzNy0z MmRkLTg3MTMtMmFlZDgyZjJlMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPRqCHvMfuU3KFr6fpascLvOzCgdtwDPWI6kAXxByXyuMyOmTGHIlC0 dz8CckmQ2WHBOOVQ8hn+km2Bino+UmNEsV7FDyHqErYVWpOjN8ZFb10uDE95u+Gd fc6b0DGiR7JkxmZvP6mwXrkgmkFA4U6WcE2UUH4TicB7EJRJ4nnU39pZclqg8gO5 Wus+zOuYqcEMZrs8u2lzjU9bgbh157qDEKYNgU3u935z1IRxX4rowPF6jTnhpUsY 2jj8xqfghoaRZx7vXrnIuIY9yoDZUC3ARs7ifhq299MEtesQqybZI+TAlN/Q6zRx 21tRaiDNnm5+vuXBLJbvBVbrzKf6qwo= -----END CERTIFICATE-----Generated at Thu Mar 26 01:57:02 2026 by rpki-client