$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa File: af04453e-3666-341c-87c8-cc7aa53500c2.roa (raw, json) Hash identifier: d9OE2761//bpz2TcmEv43tWuUOay0N6Vj0U2Oz6NDBM= Subject key identifier: B9:59:4D:14:6D:93:0D:BE:4E:A1:D4:EB:66:8C:D6:AF:86:E6:6A:36 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D1F4A37A9BE0297E7072A9480 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 16696 IP address blocks: 74.114.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:37:a9:be:02:97:e7:07:2a:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=ce373e68-0c6f-4c07-ab32-5f0598aa3eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:dc:cb:b5:f5:e9:3c:7c:2e:59:86:91:9a: 37:a7:20:18:bb:53:62:07:39:ba:6d:cc:52:40:c0: eb:23:63:73:6b:92:cd:8b:05:74:ed:d2:9f:a3:e9: 1d:6a:83:f5:68:c9:17:3f:71:79:cb:cf:d0:ac:e3: ef:7b:22:b5:e7:40:11:3e:39:f7:87:f3:4a:57:0c: 17:c9:7e:35:18:c1:3e:79:5a:00:e5:03:4d:da:8e: be:9a:5d:77:96:ff:f7:e9:49:2e:00:53:85:6f:4d: f4:bf:f2:d3:51:32:d9:9c:a1:0d:57:78:70:9c:67: f6:6a:0c:13:cc:fd:36:ac:90:9b:78:3a:b0:27:17: 4b:60:74:8a:08:ea:be:0e:ae:79:70:2c:e6:31:3b: 46:7d:21:a4:9d:35:ac:f2:a3:46:b7:b9:29:4e:5d: 39:b2:cd:95:57:9c:d5:15:74:c0:63:76:b4:32:73: 47:0d:93:5f:5f:b0:18:94:2b:b2:3a:a1:27:f0:ff: 71:3d:c9:4a:aa:70:33:bd:e9:ad:b4:7a:dc:25:ac: 94:8e:b1:5e:0c:e7:3a:b9:4c:20:48:b1:04:94:68: 5a:c5:94:f6:e2:f8:40:02:b6:07:cf:50:8e:95:e9: 21:c4:a5:3c:fc:86:fc:9a:37:4e:05:a7:ef:e2:fb: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:59:4D:14:6D:93:0D:BE:4E:A1:D4:EB:66:8C:D6:AF:86:E6:6A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 74.114.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a2:a5:f8:7b:54:b0:08:33:16:4c:55:79:ab:78:0d:0a:38: 58:f6:1c:1e:38:c9:9d:c3:0e:b9:6d:fe:40:d5:09:5e:5d:13: 76:7c:57:a6:61:05:fb:ed:f7:ab:14:68:1a:90:40:f1:27:51: 40:89:ad:2d:e3:82:a7:0b:9a:c7:4b:cd:c2:83:12:5f:7c:25: 98:1d:81:b1:47:03:5a:9d:35:e0:e7:96:46:28:f3:ec:1e:b8: 7a:5d:6b:e9:e2:38:a4:c9:a7:75:4d:6c:2f:92:50:05:01:28: 19:b1:f2:f8:5a:5a:62:91:fd:15:49:16:76:7f:ac:56:b6:8e: 74:34:1d:87:4a:7f:00:9e:f1:66:a7:41:35:56:46:f8:46:f2: 3c:f1:44:17:59:a6:e9:24:36:7d:47:fd:5c:9f:08:12:a5:4b: 4b:2e:41:ca:82:78:ee:81:c5:c4:78:97:59:9d:fd:11:fb:23: 77:14:a3:2f:c8:d8:59:14:59:07:4e:d3:9e:77:aa:fa:ee:91: 45:e1:1e:12:4d:83:d9:3b:14:85:e0:b1:1a:fd:a9:13:69:61: b5:cf:b1:67:6d:1e:31:91:04:78:a5:a2:99:e3:e6:31:51:ea: c2:bc:9b:61:25:de:62:09:9a:59:ef:88:fd:73:5c:67:9c:da: 60:7b:d3:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjepvgKX5wcqlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk Y2UzNzNlNjgtMGM2Zi00YzA3LWFiMzItNWYwNTk4YWEzZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCTcy7X16Tx8LlmGkZo3pyAYu1NiBzm6bcxS QMDrI2Nza5LNiwV07dKfo+kdaoP1aMkXP3F5y8/QrOPveyK150ARPjn3h/NKVwwX yX41GME+eVoA5QNN2o6+ml13lv/36UkuAFOFb030v/LTUTLZnKENV3hwnGf2agwT zP02rJCbeDqwJxdLYHSKCOq+Dq55cCzmMTtGfSGknTWs8qNGt7kpTl05ss2VV5zV FXTAY3a0MnNHDZNfX7AYlCuyOqEn8P9xPclKqnAzvemttHrcJayUjrFeDOc6uUwg SLEElGhaxZT24vhAArYHz1COlekhxKU8/Ib8mjdOBafv4vv6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlZTRRtkw2+TqHU62aM1q+G5mo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYWYwNDQ1M2UtMzY2Ni0z NDFjLTg3YzgtY2M3YWE1MzUwMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGipfh7VLAIMxZMVXmreA0KOFj2HB44yZ3DDrlt/kDVCV5dE3Z8V6Zh Bfvt96sUaBqQQPEnUUCJrS3jgqcLmsdLzcKDEl98JZgdgbFHA1qdNeDnlkYo8+we uHpda+niOKTJp3VNbC+SUAUBKBmx8vhaWmKR/RVJFnZ/rFa2jnQ0HYdKfwCe8Wan QTVWRvhG8jzxRBdZpukkNn1H/VyfCBKlS0suQcqCeO6BxcR4l1md/RH7I3cUoy/I 2FkUWQdO0553qvrukUXhHhJNg9k7FIXgsRr9qRNpYbXPsWdtHjGRBHilopnj5jFR 6sK8m2El3mIJmlnviP1zXGec2mB705A= -----END CERTIFICATE-----Generated at Thu Mar 26 09:09:25 2026 by rpki-client