$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa File: e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa (raw, json) Hash identifier: TZ5luEc7+cCqoH1E6DP+ea41CuI3jDqYwF53Kxs9yKM= Subject key identifier: 02:3E:3E:D0:FE:10:7E:E4:59:96:37:02:45:32:FF:DF:E1:B2:11:02 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584D8695428765E9A5B7F3057080 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14061 IP address blocks: 164.90.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:42:87:65:e9:a5:b7:f3:05:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=b2ad305c-7cb9-4cb8-832f-254f428bbfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bf:66:d6:e9:2d:c1:81:6c:e5:a6:ec:5a:95: 7b:a2:7c:58:3c:01:9c:ba:e5:8b:a9:96:b8:93:85: 58:fd:d3:ba:b7:91:de:88:d2:4e:d5:d0:4c:41:e9: ba:8c:0e:9f:06:bf:2b:9b:f8:a9:af:d1:28:2a:52: b6:4e:90:75:e0:3f:f2:94:ee:f9:61:c0:3e:4c:d2: b0:43:d0:50:09:f4:4c:89:04:7b:03:49:5f:d8:5d: 5b:24:93:d7:ac:d2:e1:2e:b3:fd:61:46:21:a4:66: d7:cd:99:0d:87:6c:fd:68:02:b6:38:cf:ca:51:a7: c2:b7:69:90:ad:7f:c8:16:40:71:12:c2:ff:3a:6d: 28:3a:25:9d:bd:2c:cc:31:dc:f4:e4:ce:c4:07:ee: 63:e5:87:d7:69:b8:e1:56:e3:d7:26:6b:79:34:51: 7f:f6:76:ea:15:a5:48:ee:a9:77:9f:a2:8c:98:98: 6f:ef:53:fc:0c:86:a1:f0:cf:36:a3:bd:9c:d5:10: 7b:ca:9a:82:48:e2:23:d2:3d:6f:81:8d:61:65:c6: 19:bc:ed:da:fd:c4:1f:a9:20:e3:6f:27:f5:60:f3: 86:34:6a:e2:da:bf:b8:fa:f5:9d:73:e4:35:88:8a: 65:8f:51:3d:02:bc:b1:df:32:d4:96:a7:70:d4:1d: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3E:3E:D0:FE:10:7E:E4:59:96:37:02:45:32:FF:DF:E1:B2:11:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 164.90.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:bc:f2:51:6a:13:0a:18:3e:0b:d7:92:d1:87:dd:e2:b6:d9: 09:3f:da:1e:18:ec:6f:0d:9e:5f:17:dd:83:af:79:62:4e:db: 7a:d8:fa:fe:bc:89:55:b2:a5:e2:ab:f9:e1:3e:8e:c1:13:8c: a1:a1:51:80:da:5e:bd:d1:6e:40:49:8d:c0:51:68:1c:40:70: bf:df:d9:7b:ed:24:76:2a:2c:07:3f:c9:dd:52:13:65:20:73: 1c:e5:f9:ec:bc:c1:e5:dd:a7:90:b3:9b:8f:ee:ef:a8:a9:a1: 31:13:5a:d3:eb:8b:0d:05:73:3e:07:3e:f5:5e:61:47:05:ba: 3f:6d:03:4f:76:ee:77:69:03:b0:a4:92:b6:94:2d:44:48:99: 8d:34:d5:d1:c1:2e:d1:60:81:34:37:9d:96:36:b1:ce:cc:e6: 5d:35:8d:79:43:8d:56:eb:f5:15:cb:67:c5:1d:ad:70:cb:3d: b7:22:92:c0:06:d1:71:27:f5:06:81:40:97:4d:cf:11:03:7b: 68:9b:8b:48:e6:db:6c:eb:10:81:71:8a:ee:ab:64:42:5b:85: a9:d4:75:0b:b5:ab:94:c1:04:4c:7d:5b:78:9f:a9:33:a3:da: 8c:43:10:23:eb:74:97:43:4c:f2:04:b8:58:87:2b:41:20:cf: 06:ba:4a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUKHZemlt/MFcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YjJhZDMwNWMtN2NiOS00Y2I4LTgzMmYtMjU0ZjQyOGJiZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r9m1uktwYFs5absWpV7onxYPAGcuuWLqZa4 k4VY/dO6t5HeiNJO1dBMQem6jA6fBr8rm/ipr9EoKlK2TpB14D/ylO75YcA+TNKw Q9BQCfRMiQR7A0lf2F1bJJPXrNLhLrP9YUYhpGbXzZkNh2z9aAK2OM/KUafCt2mQ rX/IFkBxEsL/Om0oOiWdvSzMMdz05M7EB+5j5YfXabjhVuPXJmt5NFF/9nbqFaVI 7ql3n6KMmJhv71P8DIah8M82o72c1RB7ypqCSOIj0j1vgY1hZcYZvO3a/cQfqSDj byf1YPOGNGri2r+4+vWdc+Q1iIplj1E9Aryx3zLUlqdw1B3uUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI+PtD+EH7kWZY3AkUy/9/hshECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZTNjOGU3ODQtYjE5YS0z ZmQzLWI2MmMtY2VlZjIwNGIwMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpFqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALO88lFqEwoYPgvXktGH3eK22Qk/2h4Y7G8Nnl8X3YOveWJO23rY+v68 iVWypeKr+eE+jsETjKGhUYDaXr3RbkBJjcBRaBxAcL/f2XvtJHYqLAc/yd1SE2Ug cxzl+ey8weXdp5Czm4/u76ipoTETWtPriw0Fcz4HPvVeYUcFuj9tA0927ndpA7Ck kraULURImY001dHBLtFggTQ3nZY2sc7M5l01jXlDjVbr9RXLZ8UdrXDLPbciksAG 0XEn9QaBQJdNzxEDe2ibi0jm22zrEIFxiu6rZEJbhanUdQu1q5TBBEx9W3ifqTOj 2oxDECPrdJdDTPIEuFiHK0Egzwa6Sgs= -----END CERTIFICATE-----Generated at Fri Apr 17 12:46:33 2026 by rpki-client