$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa File: af04453e-3666-341c-87c8-cc7aa53500c2.roa (raw, json) Hash identifier: PLsxXwiCFRb/qEhZn7lmlmukVi0vq402OipiVSl8TPE= Subject key identifier: CD:A4:AF:6A:54:85:C5:4D:CA:23:B8:1B:74:A9:7C:3D:AA:92:A1:52 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F432858499CA7B41C614A8D3E636C2B00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa Signing time: Tue 22 Apr 2025 15:37:50 +0000 ROA not before: Tue 22 Apr 2025 15:37:50 +0000 ROA not after: Mon 21 Jul 2025 15:37:50 +0000 asID: 16696 IP address blocks: 74.114.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:a7:b4:1c:61:4a:8d:3e:63:6c:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 22 15:37:50 2025 GMT Not After : Jul 21 15:37:50 2025 GMT Subject: CN=8f7e953c-a738-4c1e-bbee-05f3170748e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:1f:a1:8f:54:6f:92:22:13:ee:96:52:34: 1b:64:8a:c0:07:ae:23:9f:40:a2:93:30:f1:32:60: 9c:e3:27:34:65:59:80:51:b9:8f:8a:0e:2f:ee:d6: d8:76:0d:73:97:6a:d6:bc:c1:1f:9b:21:8b:56:bb: 26:99:76:33:a2:5a:93:27:04:b2:41:d6:96:be:8c: 96:23:e9:d4:d2:ed:3d:50:3e:db:78:cc:71:9e:05: ee:ce:fe:47:60:cd:91:89:88:4c:be:ec:f4:22:e2: 45:c1:f1:62:4f:0c:47:45:44:3d:15:c8:6d:27:8d: 48:9d:93:8d:c1:48:ac:ad:98:9f:be:a9:1c:13:b2: 87:28:a1:e0:7d:bb:a5:7c:da:83:04:4e:07:8a:3c: 3b:5b:16:b7:4a:af:29:a4:08:18:b3:9a:62:83:ba: 38:5a:55:3d:48:bb:53:88:be:3f:c8:1b:b2:30:85: e5:9e:b5:ac:76:14:aa:d4:71:f5:b6:39:ac:b1:76: 13:59:94:66:58:aa:6c:a4:0b:00:a0:f6:e3:76:b0: 1a:e1:4e:68:6e:ce:08:47:dc:ed:e9:02:f1:32:d7: df:f8:45:1e:3a:38:dd:14:a8:17:e2:ec:5c:c3:54: e1:27:4a:b4:ae:b1:31:ac:fe:e1:93:ce:b4:78:58: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A4:AF:6A:54:85:C5:4D:CA:23:B8:1B:74:A9:7C:3D:AA:92:A1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/af04453e-3666-341c-87c8-cc7aa53500c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 74.114.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:78:e4:ce:ab:55:44:fc:6c:44:9d:51:be:ff:01:54:ef:d7: 32:27:8b:51:5d:2f:95:ce:6e:ea:2c:e8:b3:20:87:91:46:38: 49:15:3f:1a:64:e4:0c:4b:17:ee:d1:96:70:98:3d:bf:f6:2b: 30:87:02:d9:62:f8:8f:b1:6e:bf:37:87:9d:71:ca:8e:32:98: 1e:6e:71:08:c1:e3:09:bc:e7:f0:78:80:a7:09:20:b9:05:16: 4a:c4:eb:dc:e4:e5:cc:37:93:95:92:e3:90:b3:c2:fb:6d:50: a2:06:04:d3:b9:c1:2f:36:1e:ed:ac:be:0b:37:ce:e6:ed:ea: 09:21:48:64:6b:df:09:e5:c8:76:e6:30:58:50:63:3c:ce:2e: 40:1c:61:c1:fd:1b:1f:50:a8:17:4c:1c:e9:0a:57:54:67:60: 90:9f:a0:3b:e3:94:85:a0:93:e9:bf:30:0a:08:5d:5b:49:43: 5a:ab:82:ba:0f:be:49:0c:19:6a:de:2b:2b:13:e5:33:80:1a: 1e:a7:f1:59:82:84:aa:c6:0e:1e:e7:a6:50:3b:03:0a:65:2c: 45:58:ff:0d:e4:a7:7f:79:c5:8f:50:c4:53:f2:a1:95:8c:38: 0f:7c:9e:38:3b:4e:c1:c3:88:bb:a9:68:b3:2a:fb:ae:de:71: 03:7e:0e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcp7QcYUqNPmNsKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDQyMjE1Mzc1MFoXDTI1MDcyMTE1Mzc1MFowLzEtMCsGA1UEAxMk OGY3ZTk1M2MtYTczOC00YzFlLWJiZWUtMDVmMzE3MDc0OGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphAfoY9Ub5IiE+6WUjQbZIrAB64jn0CikzDx MmCc4yc0ZVmAUbmPig4v7tbYdg1zl2rWvMEfmyGLVrsmmXYzolqTJwSyQdaWvoyW I+nU0u09UD7beMxxngXuzv5HYM2RiYhMvuz0IuJFwfFiTwxHRUQ9FchtJ41InZON wUisrZifvqkcE7KHKKHgfbulfNqDBE4Hijw7Wxa3Sq8ppAgYs5pig7o4WlU9SLtT iL4/yBuyMIXlnrWsdhSq1HH1tjmssXYTWZRmWKpspAsAoPbjdrAa4U5obs4IR9zt 6QLxMtff+EUeOjjdFKgX4uxcw1ThJ0q0rrExrP7hk860eFgK+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2kr2pUhcVNyiO4G3SpfD2qkqFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYWYwNDQ1M2UtMzY2Ni0z NDFjLTg3YzgtY2M3YWE1MzUwMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN45M6rVUT8bESdUb7/AVTv1zIni1FdL5XObuos6LMgh5FGOEkVPxpk 5AxLF+7RlnCYPb/2KzCHAtli+I+xbr83h51xyo4ymB5ucQjB4wm85/B4gKcJILkF FkrE69zk5cw3k5WS45CzwvttUKIGBNO5wS82Hu2svgs3zubt6gkhSGRr3wnlyHbm MFhQYzzOLkAcYcH9Gx9QqBdMHOkKV1RnYJCfoDvjlIWgk+m/MAoIXVtJQ1qrgroP vkkMGWreKysT5TOAGh6n8VmChKrGDh7nplA7AwplLEVY/w3kp395xY9QxFPyoZWM OA98njg7TsHDiLupaLMq+67ecQN+DkM= -----END CERTIFICATE-----Generated at Sat May 10 03:55:15 2025 by rpki-client