$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa File: 513ad2a0-8a15-3688-8173-779f97b22bad.roa (raw, json) Hash identifier: yKiGaN5F2OPX2YwCKj4+bPAppWDcLrf9oN4sotgtHi4= Subject key identifier: 6C:CA:C2:8B:12:12:8A:0C:28:8D:47:F5:74:97:AC:73:65:7D:65:E8 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584F698D7752221F9BA9D5B1F600 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 63399 IP address blocks: 170.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:77:52:22:1f:9b:a9:d5:b1:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=47a0198d-dd79-479f-8c81-7d239a82a780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f0:5f:bd:c3:e7:4a:82:e8:60:8c:89:b3:57: d0:f3:f6:d9:e6:00:43:44:bc:ea:46:dd:79:46:01: 0d:7c:33:3e:13:41:4b:12:1a:7f:76:56:5a:ad:f3: 86:20:9d:6a:18:f9:a3:d3:03:be:7a:0a:10:9c:44: fa:9c:68:6c:22:48:95:bb:94:45:6d:9a:73:9b:a8: 49:2b:6b:df:35:85:bf:e1:67:59:17:da:2a:d4:a4: 91:1a:6f:fe:e3:37:f4:61:38:c4:ba:2f:6a:7d:98: 65:5e:e9:77:6e:59:ee:7f:0d:09:1c:de:ac:ad:2c: de:ff:09:60:0b:ca:f4:92:e6:14:20:bc:a4:c8:60: 91:15:02:34:4d:bb:cc:a1:ba:be:26:c7:d8:a8:2c: bf:d8:cd:fd:f6:57:96:3f:9c:41:df:f6:53:e2:b7: 36:f3:0c:f3:87:d8:ae:e8:0b:73:85:48:19:45:b2: 80:cb:ff:28:cd:57:ec:76:ff:aa:97:d3:96:2a:01: b1:d5:90:e3:79:3a:f9:54:49:2c:90:a7:39:8f:36: 0f:c4:66:3a:52:c2:d7:dd:8d:00:15:fd:80:c6:02: f0:7f:7e:e7:2f:c3:19:d7:4f:7e:a2:36:99:89:b0: c6:e8:ed:8f:a1:7d:35:69:c0:2c:6a:42:7c:10:4f: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CA:C2:8B:12:12:8A:0C:28:8D:47:F5:74:97:AC:73:65:7D:65:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b6:ee:9d:ca:27:82:0c:e0:bf:1b:9c:de:d3:f3:22:9e:b1: 1b:a1:0c:aa:d0:79:10:3e:fe:09:84:9d:44:bc:4f:da:19:78: ee:06:5f:08:95:e8:51:d3:a0:60:59:cd:36:db:ef:58:00:06: 68:ea:61:83:d9:1d:d3:90:c2:12:eb:8e:63:ae:29:f7:5d:97: 2f:6a:c3:00:96:ff:13:3b:f7:a6:12:5c:fd:ce:8b:79:3a:82: c0:1d:9f:d3:90:d5:cd:73:79:0b:96:f1:cf:5c:f2:a2:f6:03: 86:a6:3b:6f:50:85:9b:ec:ad:f6:d7:6e:27:5b:a3:52:c4:48: 83:b4:72:e1:37:4e:be:ca:50:fd:50:d0:b8:22:33:f4:b0:8f: 75:b3:cc:08:9a:1a:4a:18:64:83:af:b7:8d:ef:bf:04:f2:4f: 41:19:11:ac:5d:54:a9:4b:60:5d:d7:ee:c4:2a:7a:eb:60:57: 45:77:2a:f2:50:9e:c9:e6:4d:f1:6c:58:31:e5:6c:9b:7b:d8: ae:ef:80:47:22:bb:40:a1:9e:5a:46:41:e6:2f:aa:29:5a:2b: 00:bd:28:c6:66:7a:dd:d3:f9:54:d2:90:10:cc:56:01:65:5b: 4a:27:e7:98:2b:9d:9e:25:17:e9:ce:b8:4d:2b:67:f1:ad:34: 36:ad:a9:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXdSIh+bqdWx9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NDdhMDE5OGQtZGQ3OS00NzlmLThjODEtN2QyMzlhODJhNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfBfvcPnSoLoYIyJs1fQ8/bZ5gBDRLzqRt15 RgENfDM+E0FLEhp/dlZarfOGIJ1qGPmj0wO+egoQnET6nGhsIkiVu5RFbZpzm6hJ K2vfNYW/4WdZF9oq1KSRGm/+4zf0YTjEui9qfZhlXul3blnufw0JHN6srSze/wlg C8r0kuYUILykyGCRFQI0TbvMobq+JsfYqCy/2M399leWP5xB3/ZT4rc28wzzh9iu 6AtzhUgZRbKAy/8ozVfsdv+ql9OWKgGx1ZDjeTr5VEkskKc5jzYPxGY6UsLX3Y0A Ff2AxgLwf37nL8MZ109+ojaZibDG6O2PoX01acAsakJ8EE/5jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzKwosSEooMKI1H9XSXrHNlfWXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNTEzYWQyYTAtOGExNS0z Njg4LTgxNzMtNzc5Zjk3YjIyYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW27p3KJ4IM4L8bnN7T8yKesRuhDKrQeRA+/gmEnUS8T9oZeO4GXwiV 6FHToGBZzTbb71gABmjqYYPZHdOQwhLrjmOuKfddly9qwwCW/xM796YSXP3Oi3k6 gsAdn9OQ1c1zeQuW8c9c8qL2A4amO29QhZvsrfbXbidbo1LESIO0cuE3Tr7KUP1Q 0LgiM/Swj3WzzAiaGkoYZIOvt43vvwTyT0EZEaxdVKlLYF3X7sQqeutgV0V3KvJQ nsnmTfFsWDHlbJt72K7vgEciu0ChnlpGQeYvqilaKwC9KMZmet3T+VTSkBDMVgFl W0on55grnZ4lF+nOuE0rZ/GtNDatqWs= -----END CERTIFICATE-----Generated at Sun Oct 11 04:52:53 2026 by rpki-client