$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa File: 79240116-6214-30e5-83c0-513ce7a88981.roa (raw, json) Hash identifier: Oj8MQhIsQjvX8gojw4/cC5oEpSmXyKDjRXjchdn99o8= Subject key identifier: 9F:C9:E4:4D:97:27:B8:BB:52:3A:97:07:17:9D:3D:4C:BA:EA:60:56 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584D1F4A489156A726D1EE71B4C0 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 170.10.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:48:91:56:a7:26:d1:ee:71:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=609b3dd1-2165-4db2-9620-5d637e412013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:39:3c:0b:15:8a:e9:b2:89:cd:00:bc:d4: cc:b2:e7:47:73:22:89:2c:74:55:63:40:25:5e:88: 83:f0:21:e8:57:b2:1f:ba:77:8d:eb:27:83:f5:b2: 7c:7a:dd:17:5f:6a:0a:f9:0a:a0:00:07:2f:1b:00: b2:a7:d6:55:8e:2f:eb:71:c1:06:1d:fd:44:83:01: af:9e:c6:93:4d:92:56:2e:4b:f6:03:ba:2f:25:00: 85:92:c3:0a:14:c1:6a:39:5e:27:12:a7:ac:d6:b7: 50:49:89:0f:2e:f5:3f:96:8e:bb:34:50:9c:69:f1: ce:e5:cb:5b:85:31:e4:cf:ae:56:a5:f4:be:9c:b8: ab:99:bf:18:d1:a6:09:f7:8c:00:6f:e0:2a:33:c6: 49:f0:05:0d:d1:89:68:81:95:3b:ef:0c:f0:43:c9: 97:02:62:77:3d:36:f6:79:97:74:40:96:9a:ec:b6: 66:06:e6:13:3c:66:d6:37:0a:01:aa:66:be:8c:5d: a4:52:41:3f:07:a4:0d:f9:53:3d:90:01:1e:92:50: a3:43:1d:41:08:b4:15:8b:a1:6e:96:3b:71:5f:c3: 1a:0d:4a:dd:c1:dd:94:87:f7:56:07:83:60:29:97: 63:fc:54:b2:17:c6:1e:22:6d:10:12:78:81:49:84: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C9:E4:4D:97:27:B8:BB:52:3A:97:07:17:9D:3D:4C:BA:EA:60:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0d:72:22:4e:6c:07:b2:d0:06:0e:7c:4e:fd:28:aa:05:68: 6e:f5:5d:5c:bd:94:3b:e5:3d:f1:f9:ad:c6:51:d2:9c:61:e7: bd:49:41:a6:1e:bc:d5:e1:cc:d6:81:6d:c1:b4:5c:0b:58:04: ca:85:d6:b4:ae:dc:99:16:f8:8d:74:6f:a5:b6:cc:da:30:95: 40:d0:fa:91:8a:92:ea:61:79:4f:a2:c7:20:e9:a9:82:f0:dd: f2:09:11:5b:b0:9c:47:1c:4b:c1:d1:b2:ae:14:d1:52:2b:de: d5:19:08:9f:3b:77:57:dd:3e:61:be:2c:3e:81:45:88:4a:17: 76:5c:c0:68:b7:9e:f9:19:e1:31:59:95:b7:4b:f5:e7:69:57: 19:be:34:66:26:77:27:85:9c:73:c1:df:5a:15:2c:db:43:fb: 35:23:26:5a:7a:98:82:ee:83:3d:87:8f:5a:7c:34:14:c0:64: 0f:1e:bc:c4:46:7b:93:34:8c:2b:6d:7f:ff:b8:6e:63:bf:cf: 21:9f:7f:24:cf:1d:81:34:88:5e:6c:02:ea:a5:66:57:75:5f: e5:89:67:d8:27:15:56:c8:ac:2b:a3:74:36:76:ac:24:65:47: d1:eb:39:67:b3:9d:79:47:4f:b9:4c:7b:56:8f:a5:ce:9d:d7: 64:5e:a8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkiRVqcm0e5xtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NjA5YjNkZDEtMjE2NS00ZGIyLTk2MjAtNWQ2MzdlNDEyMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP45PAsViumyic0AvNTMsudHcyKJLHRVY0Al XoiD8CHoV7IfuneN6yeD9bJ8et0XX2oK+QqgAAcvGwCyp9ZVji/rccEGHf1EgwGv nsaTTZJWLkv2A7ovJQCFksMKFMFqOV4nEqes1rdQSYkPLvU/lo67NFCcafHO5ctb hTHkz65WpfS+nLirmb8Y0aYJ94wAb+AqM8ZJ8AUN0YlogZU77wzwQ8mXAmJ3PTb2 eZd0QJaa7LZmBuYTPGbWNwoBqma+jF2kUkE/B6QN+VM9kAEeklCjQx1BCLQVi6Fu ljtxX8MaDUrdwd2Uh/dWB4NgKZdj/FSyF8YeIm0QEniBSYQBRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/J5E2XJ7i7UjqXBxedPUy66mBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNzkyNDAxMTYtNjIxNC0z MGU1LTgzYzAtNTEzY2U3YTg4OTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADINciJObAey0AYOfE79KKoFaG71XVy9lDvlPfH5rcZR0pxh571JQaYe vNXhzNaBbcG0XAtYBMqF1rSu3JkW+I10b6W2zNowlUDQ+pGKkupheU+ixyDpqYLw 3fIJEVuwnEccS8HRsq4U0VIr3tUZCJ87d1fdPmG+LD6BRYhKF3ZcwGi3nvkZ4TFZ lbdL9edpVxm+NGYmdyeFnHPB31oVLNtD+zUjJlp6mILugz2Hj1p8NBTAZA8evMRG e5M0jCttf/+4bmO/zyGffyTPHYE0iF5sAuqlZld1X+WJZ9gnFVbIrCujdDZ2rCRl R9HrOWeznXlHT7lMe1aPpc6d12ReqIA= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:09 2026 by rpki-client