$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa File: 7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa (raw, json) Hash identifier: anKRhCNa4O54x26QEfahXZZApbwee4cZmmmNg6d2ESM= Subject key identifier: F3:8B:59:D9:58:9F:36:EA:7F:DC:C8:C0:47:24:3A:FE:CD:6B:A7:85 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584F4987D19C2A3464D7ADF891A0 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 170.10.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:d1:9c:2a:34:64:d7:ad:f8:91:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6aec67b7-1cd9-4b04-b889-b5d0b8e26113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:b6:0f:4a:dc:91:19:d8:81:2e:21:2e:7d: 1a:17:49:23:32:db:b6:dc:00:ec:8f:b0:cf:d9:89: e4:8b:8b:7d:4d:57:ca:f0:2f:74:33:36:dc:2b:2e: 21:d1:c6:8d:16:d4:f8:f0:d1:62:3b:34:d9:ab:66: 5f:7d:2d:bc:48:96:19:dd:5d:3d:17:0c:8b:ad:30: 44:fc:89:2f:1e:f2:c9:31:4d:c5:17:97:b2:16:be: dc:8f:d5:0b:b5:71:f2:60:c8:fa:2e:58:0f:d8:c5: ab:44:e1:5a:00:b5:64:18:80:0f:96:1b:f9:e6:fd: 2e:04:de:ec:73:5f:b1:7c:a5:0a:94:f8:6a:89:b4: 2c:47:d9:23:25:fa:9a:4e:ab:ae:37:f3:e1:52:5f: 11:67:62:41:e4:23:6a:32:c6:dd:1a:fd:cc:db:14: d2:c8:c9:a4:f0:86:7c:d1:a4:f5:d0:c1:aa:0e:cd: bb:62:cb:a0:92:e0:fd:39:8f:3c:ea:81:c0:f1:e8: a1:4e:9f:d9:f5:d3:6e:77:06:14:76:ec:3a:ee:b8: a5:a9:20:04:6c:7d:f5:a8:89:5c:e3:71:b1:82:65: 75:7f:8c:62:5c:ed:47:72:af:22:e2:d1:ef:ba:79: e9:91:f9:36:0f:c8:a8:a7:f7:58:e2:b5:5e:07:9b: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8B:59:D9:58:9F:36:EA:7F:DC:C8:C0:47:24:3A:FE:CD:6B:A7:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e8:6e:01:2f:09:21:d1:ed:85:37:a7:96:2a:90:99:bd:1a: 79:e3:11:3e:81:5a:54:21:d7:53:b2:8f:16:f8:ed:e3:e3:df: a0:d1:af:66:70:e2:1f:b6:4e:5d:fd:43:b0:3d:39:8a:2f:cc: 3e:66:7d:e6:c0:87:62:2a:bc:7b:97:63:7a:66:cb:52:45:31: 7f:01:f6:c6:d5:86:b8:b4:a6:bb:c4:f6:b7:e0:fc:72:25:87: 84:37:2b:c9:35:a2:dd:85:98:b1:29:7c:72:d1:e5:89:88:9a: a1:5b:88:84:d1:65:4d:03:e9:72:31:44:91:c6:10:4c:e9:7c: 58:c0:95:1c:20:7a:51:fe:9a:67:d8:64:53:22:02:66:f7:90: 16:9a:43:a7:94:8f:ff:4e:1c:6e:e4:c4:c6:ff:e0:06:9b:61: f5:f1:5e:b1:33:00:aa:23:58:2d:a1:aa:5b:c6:e8:67:9d:85: 09:8f:10:e1:5c:df:99:d1:ef:b7:b5:1b:72:2e:31:61:d4:f7: c0:e7:28:d7:1a:81:11:6e:ce:97:98:25:1a:8e:cb:06:01:a3: 3a:3e:d8:37:03:b3:91:d9:7c:b2:02:44:95:e9:05:63:cb:81: dc:29:65:7e:c5:19:1b:e6:bd:b9:f3:02:89:b7:e8:41:f7:3b: 33:5a:76:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh9GcKjRk1634kaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmFlYzY3YjctMWNkOS00YjA0LWI4ODktYjVkMGI4ZTI2MTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom22D0rckRnYgS4hLn0aF0kjMtu23ADsj7DP 2Ynki4t9TVfK8C90MzbcKy4h0caNFtT48NFiOzTZq2ZffS28SJYZ3V09FwyLrTBE /IkvHvLJMU3FF5eyFr7cj9ULtXHyYMj6LlgP2MWrROFaALVkGIAPlhv55v0uBN7s c1+xfKUKlPhqibQsR9kjJfqaTquuN/PhUl8RZ2JB5CNqMsbdGv3M2xTSyMmk8IZ8 0aT10MGqDs27YsugkuD9OY886oHA8eihTp/Z9dNudwYUduw67rilqSAEbH31qIlc 43GxgmV1f4xiXO1Hcq8i4tHvunnpkfk2D8iop/dY4rVeB5vp3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOLWdlYnzbqf9zIwEckOv7Na6eFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvN2Y1OTEwOGQtZmQ5Ny0z OTQ0LTk1ZTAtNGJhN2JhNmUxMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfobgEvCSHR7YU3p5YqkJm9GnnjET6BWlQh11Oyjxb47ePj36DRr2Zw 4h+2Tl39Q7A9OYovzD5mfebAh2IqvHuXY3pmy1JFMX8B9sbVhri0prvE9rfg/HIl h4Q3K8k1ot2FmLEpfHLR5YmImqFbiITRZU0D6XIxRJHGEEzpfFjAlRwgelH+mmfY ZFMiAmb3kBaaQ6eUj/9OHG7kxMb/4AabYfXxXrEzAKojWC2hqlvG6GedhQmPEOFc 35nR77e1G3IuMWHU98DnKNcagRFuzpeYJRqOywYBozo+2DcDs5HZfLICRJXpBWPL gdwpZX7FGRvmvbnzAom36EH3OzNadmQ= -----END CERTIFICATE-----Generated at Fri Sep 25 09:39:33 2026 by rpki-client