$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa File: 6c3485d6-1237-32dd-8713-2aed82f2e07d.roa (raw, json) Hash identifier: isN3L7CnTihYETtO0Pryxa0j9d9e1g1ogaKxd5/AE/E= Subject key identifier: A0:9F:0F:51:DF:CE:B1:13:21:E1:36:3B:25:45:31:D2:78:1B:AB:5F Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584E253EFBED1AD97AF607F2DE6C Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 396982 IP address blocks: 170.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3e:fb:ed:1a:d9:7a:f6:07:f2:de:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=868a40ef-f8dd-44c2-92ab-3b333de76703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:45:cb:a6:a4:15:de:ff:92:f2:e6:7e:40: 72:06:00:58:01:22:67:d6:d1:30:e0:51:36:9a:02: 1c:51:62:f1:1b:8e:91:24:ed:a2:d5:0f:31:34:ee: 1b:60:d3:32:05:f5:4e:96:d4:42:78:16:9a:b2:b4: 7b:b5:9d:82:f3:be:68:4f:44:e2:94:cd:02:a0:31: 64:25:07:aa:df:7a:1c:93:63:3c:2f:84:46:9f:9d: 90:be:7c:60:42:21:bc:be:ea:1e:76:eb:16:b4:bb: 30:5b:6b:42:f9:e5:a3:40:f1:03:3d:6d:d3:21:a7: 31:2c:a1:bb:c9:1f:b2:43:05:3f:bd:21:fe:5c:7e: 59:0a:90:40:16:3c:40:7f:47:86:eb:31:ab:bf:eb: 57:3a:29:db:ef:bd:68:75:8d:14:a6:d5:3b:81:d2: aa:03:e6:5d:f9:d3:b6:50:ba:16:cb:d9:9f:a7:42: 54:d6:8c:bd:7b:b0:20:8d:01:f8:c6:5f:b4:da:c5: de:e8:52:d2:ae:8c:89:67:13:a9:ec:53:71:55:f8: cd:61:2f:40:60:a6:11:82:19:64:ee:97:ce:92:f3: c8:ae:02:83:80:12:29:15:d6:06:25:2d:be:7e:79: b9:56:e4:53:44:7b:88:af:54:38:bd:43:26:26:bf: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9F:0F:51:DF:CE:B1:13:21:E1:36:3B:25:45:31:D2:78:1B:AB:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:56:38:a4:bb:a2:79:13:40:0b:79:4d:6d:29:96:7c:5f:9c: cc:b6:e5:47:38:e3:bb:c2:9c:38:dc:97:05:83:c2:18:c5:07: 27:e3:ab:24:1e:ea:19:ce:02:a6:90:86:d6:06:bb:66:a9:de: 98:8e:11:a2:72:57:a8:c1:e8:5e:2a:70:0d:4e:e9:25:45:5d: e1:c7:06:17:ae:fd:36:84:3a:cd:8f:42:f5:7a:79:fb:7b:5f: 8e:f4:b8:42:d2:47:83:2c:54:78:e6:2d:3d:fe:12:94:3c:10: 13:11:11:23:c6:a8:31:37:24:48:18:07:86:2d:9b:97:a2:6e: 6b:5a:a4:0f:23:69:ff:02:63:2a:e5:57:5e:5e:4d:a4:55:a1: d3:b3:99:3c:e4:63:15:8a:97:d7:e8:54:31:03:fc:39:a3:ea: 77:13:da:2e:4c:ce:ba:61:b6:01:31:70:c4:fb:00:41:2a:ad: b4:ff:52:82:0e:06:53:73:e9:d8:7b:3b:67:3c:08:28:76:ea: b0:a1:3c:fb:3b:4e:e1:24:43:1f:32:41:1c:f2:a8:be:6b:d9: a5:28:a2:d1:ea:d6:c8:28:4d:13:fa:58:22:4e:f0:ac:99:7c: b6:79:77:f8:c4:a6:2d:7f:fd:d8:56:ed:a4:4c:c3:ca:10:bc: 47:00:11:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPvvtGtl69gfy3mwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ODY4YTQwZWYtZjhkZC00NGMyLTkyYWItM2IzMzNkZTc2NzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIxFy6akFd7/kvLmfkByBgBYASJn1tEw4FE2 mgIcUWLxG46RJO2i1Q8xNO4bYNMyBfVOltRCeBaasrR7tZ2C875oT0TilM0CoDFk JQeq33ock2M8L4RGn52QvnxgQiG8vuoedusWtLswW2tC+eWjQPEDPW3TIacxLKG7 yR+yQwU/vSH+XH5ZCpBAFjxAf0eG6zGrv+tXOinb771odY0UptU7gdKqA+Zd+dO2 ULoWy9mfp0JU1oy9e7AgjQH4xl+02sXe6FLSroyJZxOp7FNxVfjNYS9AYKYRghlk 7pfOkvPIrgKDgBIpFdYGJS2+fnm5VuRTRHuIr1Q4vUMmJr/ktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCfD1HfzrETIeE2OyVFMdJ4G6tfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNmMzNDg1ZDYtMTIzNy0z MmRkLTg3MTMtMmFlZDgyZjJlMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJWOKS7onkTQAt5TW0plnxfnMy25Uc447vCnDjclwWDwhjFByfjqyQe 6hnOAqaQhtYGu2ap3piOEaJyV6jB6F4qcA1O6SVFXeHHBheu/TaEOs2PQvV6eft7 X470uELSR4MsVHjmLT3+EpQ8EBMRESPGqDE3JEgYB4Ytm5eibmtapA8jaf8CYyrl V15eTaRVodOzmTzkYxWKl9foVDED/Dmj6ncT2i5MzrphtgExcMT7AEEqrbT/UoIO BlNz6dh7O2c8CCh26rChPPs7TuEkQx8yQRzyqL5r2aUootHq1sgoTRP6WCJO8KyZ fLZ5d/jEpi1//dhW7aRMw8oQvEcAEb4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:41 2026 by rpki-client