$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa File: 7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa (raw, json) Hash identifier: immILAVIYHT/btgHXwRSbH+rErzmQhb9N+h2JA36KkU= Subject key identifier: F4:F1:6A:31:B7:7C:2E:7C:E4:3F:BA:21:50:F4:26:82:DF:62:A1:47 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584EA799E41B41D79DA8FA459580 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 170.10.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:e4:1b:41:d7:9d:a8:fa:45:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=929ca9b0-56db-4f8d-8d89-19c3e2d2ba28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:f0:0c:9d:4f:96:c8:a8:e0:6b:8b:4b:7f: d0:ba:de:41:6d:f1:63:ff:a0:d2:11:1e:d5:94:82: 62:18:ab:19:5f:1f:70:b5:bc:31:33:be:06:c5:f3: 6b:49:17:4e:18:34:93:e4:62:a6:c0:55:5a:f6:8b: eb:8c:2a:2c:3c:8c:ff:19:73:6a:d0:93:c2:9b:45: b7:7a:df:fc:ae:47:02:aa:aa:67:f1:55:67:c5:56: 85:14:58:6b:09:61:ff:a7:b2:74:31:1c:8a:80:50: 67:d6:01:4c:ce:6b:4b:9d:9b:33:ba:60:ca:af:71: e7:e4:e6:cd:a2:77:96:54:09:56:e2:75:79:2c:36: 20:f7:e1:43:72:c0:9d:ed:fa:8d:73:0d:b1:3b:83: ba:c1:52:9d:ae:69:9f:e6:b0:80:b3:05:a0:ce:29: 71:b7:2e:0f:1f:b9:9d:48:78:12:57:17:07:04:8b: 19:e7:41:eb:33:d2:e1:6c:b7:5c:bc:3d:ac:80:03: 90:23:4b:c4:98:3e:63:78:74:2b:6d:d9:ff:ee:08: 45:eb:86:45:6a:0d:8c:d2:69:2c:82:44:a1:1b:78: 81:41:a2:9d:45:b2:3f:d9:a7:0a:b0:d3:33:7d:bb: a6:94:96:98:35:e7:37:98:08:b2:67:74:13:38:79: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:6A:31:B7:7C:2E:7C:E4:3F:BA:21:50:F4:26:82:DF:62:A1:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/7f59108d-fd97-3944-95e0-4ba7ba6e1068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:aa:9d:c0:6c:12:53:0c:0e:83:e8:2c:93:e5:e0:87:6e:0f: e2:ba:9b:c9:8f:43:07:e0:e8:01:10:a9:dc:a6:45:ad:82:16: 1f:75:4b:a2:a7:c6:27:4b:51:a0:d6:5d:6e:9b:f2:09:82:84: e0:48:19:4e:25:4e:ca:3c:36:45:94:8a:2c:9d:7f:01:44:45: 1c:39:a1:90:b5:0d:1f:c1:c9:5e:71:1b:67:31:c2:87:ac:a0: b4:8a:74:3f:f5:2f:ae:09:07:22:70:d7:81:ea:5d:02:5f:ae: eb:df:b5:4a:e6:e3:da:21:b8:97:e3:39:58:41:03:2d:90:95: b6:6e:89:e5:f6:62:bc:d6:85:a0:d4:bb:d0:7f:bb:1f:61:9f: 55:f4:77:e9:b7:79:46:b1:34:4c:64:26:75:98:d3:d2:74:4f: e9:b9:43:f2:a3:b9:9c:54:94:7b:4c:ef:a3:d1:ef:6a:36:2f: cf:33:30:03:84:7e:be:74:2d:10:b9:aa:82:0d:13:ac:2a:0f: 14:f1:69:f7:8a:a3:08:46:8d:d4:f8:a0:9e:d9:39:9d:56:94: a5:46:80:a4:6f:2c:f9:d6:6e:1c:d0:82:68:55:c2:02:de:c4: be:18:10:a8:57:a5:0c:79:ec:0b:73:bc:0b:24:6c:c2:63:a1: 94:0f:1c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmeQbQdedqPpFlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTI5Y2E5YjAtNTZkYi00ZjhkLThkODktMTljM2UyZDJiYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4jwDJ1Plsio4GuLS3/Qut5BbfFj/6DSER7V lIJiGKsZXx9wtbwxM74GxfNrSRdOGDST5GKmwFVa9ovrjCosPIz/GXNq0JPCm0W3 et/8rkcCqqpn8VVnxVaFFFhrCWH/p7J0MRyKgFBn1gFMzmtLnZszumDKr3Hn5ObN oneWVAlW4nV5LDYg9+FDcsCd7fqNcw2xO4O6wVKdrmmf5rCAswWgzilxty4PH7md SHgSVxcHBIsZ50HrM9LhbLdcvD2sgAOQI0vEmD5jeHQrbdn/7ghF64ZFag2M0mks gkShG3iBQaKdRbI/2acKsNMzfbumlJaYNec3mAiyZ3QTOHmWPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTxajG3fC585D+6IVD0JoLfYqFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvN2Y1OTEwOGQtZmQ5Ny0z OTQ0LTk1ZTAtNGJhN2JhNmUxMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOqncBsElMMDoPoLJPl4IduD+K6m8mPQwfg6AEQqdymRa2CFh91S6Kn xidLUaDWXW6b8gmChOBIGU4lTso8NkWUiiydfwFERRw5oZC1DR/ByV5xG2cxwoes oLSKdD/1L64JByJw14HqXQJfruvftUrm49ohuJfjOVhBAy2QlbZuieX2YrzWhaDU u9B/ux9hn1X0d+m3eUaxNExkJnWY09J0T+m5Q/KjuZxUlHtM76PR72o2L88zMAOE fr50LRC5qoINE6wqDxTxafeKowhGjdT4oJ7ZOZ1WlKVGgKRvLPnWbhzQgmhVwgLe xL4YEKhXpQx57AtzvAskbMJjoZQPHPM= -----END CERTIFICATE-----Generated at Sat Aug 22 19:33:25 2026 by rpki-client