$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa File: af04453e-3666-341c-87c8-cc7aa53500c2.roa (raw, json) Hash identifier: b9OoutkqF0yIcIzPCPpri6GQf+FCDxepNu3a+2FAExs= Subject key identifier: 19:1F:2C:EE:6F:03:04:BD:F9:20:18:ED:3E:C3:3A:4B:D3:9B:EC:27 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B5DD209E4AB1C03A6F10608E0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16696 IP address blocks: 74.114.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:09:e4:ab:1c:03:a6:f1:06:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=3865c3b7-b4ce-447f-81af-a0baccfbc927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:90:3b:9f:9d:3a:a5:8e:45:64:a7:20:30:84: 80:90:61:ba:b3:ff:bd:ac:c5:72:a4:9c:be:19:f0: 84:d1:b0:38:2e:ab:0c:50:02:aa:26:ff:b9:4c:18: 56:fe:e2:f0:32:94:6b:17:69:cd:47:75:9f:57:10: 97:78:34:3f:a1:45:ab:34:20:22:21:5d:43:7b:74: 90:c5:93:a1:a0:33:67:8f:c0:a7:1a:70:91:6f:48: fd:0b:88:bd:0e:fe:67:f0:df:ac:f4:c0:6e:c6:2c: b3:36:78:48:fc:9e:cb:90:83:7b:d4:a3:87:20:f0: a3:66:da:69:dd:fc:a7:3b:ec:a8:d2:12:53:d4:7d: 10:04:de:16:40:45:41:39:82:1a:87:79:1c:84:4a: 6f:61:7d:55:eb:95:0e:4b:a7:a6:0f:77:2b:e1:24: 5a:4f:d2:e5:d5:41:74:22:90:7d:e8:d5:b1:1e:f2: 27:2c:b3:f3:d4:61:23:d4:96:52:5a:64:cf:6e:50: f6:8a:fa:ad:fc:b4:e9:4b:4a:6a:c1:d8:70:48:e3: 7e:8f:cf:97:e3:cc:ee:52:d6:1a:7c:cc:c1:a3:b3: c9:4f:77:a3:24:31:ca:24:38:f9:ec:18:96:6f:4b: ce:96:35:6e:80:6f:e4:a3:b0:bd:31:dd:67:97:51: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1F:2C:EE:6F:03:04:BD:F9:20:18:ED:3E:C3:3A:4B:D3:9B:EC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 74.114.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9e:99:bf:14:02:ce:9e:7d:16:4f:6d:ca:6e:62:8f:a8:c1: af:bc:62:0b:f9:de:cd:49:d0:fc:d4:5e:0b:f3:83:c7:f2:e5: 74:48:c5:a9:87:64:6d:3a:5b:19:d7:d8:d6:bc:b9:a0:c5:1f: 4f:21:d1:a9:6b:78:c1:27:91:a9:6c:4f:83:b7:c1:3f:90:b5: be:ed:00:93:ca:ca:45:63:e5:cd:80:e4:88:65:78:00:0c:ba: e2:96:96:19:60:c1:ab:72:a3:be:12:fe:be:52:94:f8:36:cd: ed:6f:86:ca:cf:7d:1c:90:51:0d:1a:cb:21:d0:f5:4e:74:17: ec:39:8c:d6:49:60:63:c0:39:55:48:af:35:52:2f:a0:05:58: 13:cf:d6:51:12:aa:64:1d:e6:92:f9:11:4f:ba:30:c5:26:3d: f9:b3:b8:58:74:2c:51:c9:f8:98:2e:ae:fd:b9:44:62:4f:d8: 87:24:18:99:c8:7a:45:16:72:c7:ea:79:12:22:bd:a5:21:ff: 41:e3:22:7a:98:2f:d3:c4:63:1d:c9:d6:23:73:83:e0:4a:8c: 4d:e0:1c:c7:25:ee:c1:dd:73:e3:15:4e:07:af:41:43:20:28: c6:3e:1b:a7:a4:1c:0d:ac:32:fe:54:d0:25:af:b5:1a:9c:26: fc:c4:ce:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gnkqxwDpvEGCOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Mzg2NWMzYjctYjRjZS00NDdmLTgxYWYtYTBiYWNjZmJjOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZA7n506pY5FZKcgMISAkGG6s/+9rMVypJy+ GfCE0bA4LqsMUAKqJv+5TBhW/uLwMpRrF2nNR3WfVxCXeDQ/oUWrNCAiIV1De3SQ xZOhoDNnj8CnGnCRb0j9C4i9Dv5n8N+s9MBuxiyzNnhI/J7LkIN71KOHIPCjZtpp 3fynO+yo0hJT1H0QBN4WQEVBOYIah3kchEpvYX1V65UOS6emD3cr4SRaT9Ll1UF0 IpB96NWxHvInLLPz1GEj1JZSWmTPblD2ivqt/LTpS0pqwdhwSON+j8+X48zuUtYa fMzBo7PJT3ejJDHKJDj57BiWb0vOljVugG/ko7C9Md1nl1Gw1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkfLO5vAwS9+SAY7T7DOkvTm+wnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYWYwNDQ1M2UtMzY2Ni0z NDFjLTg3YzgtY2M3YWE1MzUwMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOemb8UAs6efRZPbcpuYo+owa+8Ygv53s1J0PzUXgvzg8fy5XRIxamH ZG06WxnX2Na8uaDFH08h0alreMEnkalsT4O3wT+Qtb7tAJPKykVj5c2A5IhleAAM uuKWlhlgwatyo74S/r5SlPg2ze1vhsrPfRyQUQ0ayyHQ9U50F+w5jNZJYGPAOVVI rzVSL6AFWBPP1lESqmQd5pL5EU+6MMUmPfmzuFh0LFHJ+Jgurv25RGJP2IckGJnI ekUWcsfqeRIivaUh/0HjInqYL9PEYx3J1iNzg+BKjE3gHMcl7sHdc+MVTgevQUMg KMY+G6ekHA2sMv5U0CWvtRqcJvzEzgw= -----END CERTIFICATE-----Generated at Wed Oct 22 00:18:39 2025 by rpki-client