$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa File: 7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa (raw, json) Hash identifier: oK9bucL/8N2rhJc2YvTlCGBsxFT2j/weXOCK+soUWlU= Subject key identifier: 9E:A1:2C:9F:5A:D0:17:39:5D:A5:76:B8:4D:00:E9:0A:FD:04:31:0D Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584D1CD272270070647FE6255950 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa Signing time: Mon 09 Mar 2026 15:48:14 +0000 ROA not before: Mon 09 Mar 2026 15:48:14 +0000 ROA not after: Sun 07 Jun 2026 15:48:14 +0000 asID: 396982 IP address blocks: 170.10.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:d2:72:27:00:70:64:7f:e6:25:59:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Mar 9 15:48:14 2026 GMT Not After : Jun 7 15:48:14 2026 GMT Subject: CN=1ec74771-32e9-47d6-b666-0623f84fd321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:3a:ba:4d:80:bf:29:39:6c:34:82:04:3b: f7:64:e3:af:22:1a:35:bc:80:26:f1:f5:20:aa:9c: aa:67:0d:73:22:d8:51:95:b0:75:7d:17:2e:e5:b6: ad:ff:ad:ea:ba:25:c0:0d:46:97:ea:46:85:d7:ce: 58:98:c9:94:0c:ae:52:39:a9:7b:de:ad:d4:46:8c: e2:ee:71:f9:8f:6a:4c:2f:1a:41:ac:76:81:e6:43: 43:2a:b9:36:69:fe:21:90:83:06:11:0b:c5:a2:3e: df:c3:0c:36:43:6f:5e:df:22:a0:66:21:6e:f6:bb: 94:be:1f:44:69:73:60:33:af:a8:5c:1a:eb:b4:54: c7:15:cd:1a:b6:e9:16:3f:9c:80:29:3e:16:2b:f3: 17:c5:0d:8d:89:60:f0:4c:9f:29:2a:c4:9b:77:41: 20:b6:de:55:a2:b5:19:19:1e:9f:31:9c:62:9c:22: 6d:24:52:12:c6:6a:e6:e5:d6:c4:03:99:d4:01:9d: 74:4a:6b:a2:20:5b:d5:11:b0:ae:56:48:24:4d:d6: c7:75:2a:39:af:e0:1d:e6:36:fb:cc:6c:c3:13:a1: 66:52:25:2c:00:75:77:d9:89:46:cd:ff:ea:a1:59: a3:0c:49:34:36:f2:e9:e0:10:c4:f1:66:8c:94:aa: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A1:2C:9F:5A:D0:17:39:5D:A5:76:B8:4D:00:E9:0A:FD:04:31:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4a:f4:47:38:0e:dc:f5:6a:7e:7a:b9:2e:f0:8b:48:2a:96: 51:3b:de:05:c4:88:ff:7f:75:4b:6f:a7:b7:43:ae:0a:13:9a: 33:01:2f:97:3c:c6:60:21:ce:ff:18:5e:aa:a1:22:89:c9:5d: ab:72:71:33:22:d0:b9:03:de:f6:6f:55:81:a8:d0:e0:b2:dd: 78:78:3d:b7:f1:50:d5:4e:d8:0f:5f:8a:c0:be:37:a7:1c:49: d3:eb:7a:cb:74:60:c1:28:8d:79:1e:7a:5a:47:52:cf:55:e4: 03:89:1f:db:e9:1a:2e:b0:93:0d:ea:1b:e6:09:a0:ad:4b:51: 56:47:7c:ab:6d:fc:78:aa:67:91:82:4c:8c:9c:b4:df:5c:d4: 72:04:a6:be:e9:dc:61:1b:5e:07:7b:96:24:df:1d:5c:09:66: fb:66:0c:f9:46:de:30:d1:00:2d:18:a4:0a:8f:c8:d9:f9:c8: e2:cd:42:cb:3d:0c:47:6a:91:2b:fc:e6:c9:e6:c6:af:fe:67: 0a:30:d4:7c:94:d7:8d:4d:18:bb:3b:35:19:54:8c:ad:80:9b: 79:56:0b:32:89:ae:86:de:3f:ab:8d:7f:cd:f0:bd:b5:d5:43: f8:c0:c6:90:d6:90:0f:eb:32:9c:85:9d:67:16:db:70:57:fc: f5:3a:4b:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0c0nInAHBkf+YlWVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI2MDMwOTE1NDgxNFoXDTI2MDYwNzE1NDgxNFowLzEtMCsGA1UEAxMk MWVjNzQ3NzEtMzJlOS00N2Q2LWI2NjYtMDYyM2Y4NGZkMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx06uk2Avyk5bDSCBDv3ZOOvIho1vIAm8fUg qpyqZw1zIthRlbB1fRcu5bat/63quiXADUaX6kaF185YmMmUDK5SOal73q3URozi 7nH5j2pMLxpBrHaB5kNDKrk2af4hkIMGEQvFoj7fwww2Q29e3yKgZiFu9ruUvh9E aXNgM6+oXBrrtFTHFc0atukWP5yAKT4WK/MXxQ2NiWDwTJ8pKsSbd0Egtt5VorUZ GR6fMZxinCJtJFISxmrm5dbEA5nUAZ10SmuiIFvVEbCuVkgkTdbHdSo5r+Ad5jb7 zGzDE6FmUiUsAHV32YlGzf/qoVmjDEk0NvLp4BDE8WaMlKqcowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6hLJ9a0Bc5XaV2uE0A6Qr9BDENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvN2Y1OTEwOGQtZmQ5Ny0z OTQ0LTk1ZTAtNGJhN2JhNmUxMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5K9Ec4Dtz1an56uS7wi0gqllE73gXEiP9/dUtvp7dDrgoTmjMBL5c8 xmAhzv8YXqqhIonJXatycTMi0LkD3vZvVYGo0OCy3Xh4PbfxUNVO2A9fisC+N6cc SdPrest0YMEojXkeelpHUs9V5AOJH9vpGi6wkw3qG+YJoK1LUVZHfKtt/HiqZ5GC TIyctN9c1HIEpr7p3GEbXgd7liTfHVwJZvtmDPlG3jDRAC0YpAqPyNn5yOLNQss9 DEdqkSv85snmxq/+Zwow1HyU141NGLs7NRlUjK2Am3lWCzKJrobeP6uNf83wvbXV Q/jAxpDWkA/rMpyFnWcW23BX/PU6S2c= -----END CERTIFICATE-----Generated at Thu Mar 26 13:14:36 2026 by rpki-client