$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa File: e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa (raw, json) Hash identifier: BA/Q3ffeph35BM7v8r9kcWTF5ulL6Ke0oj/o1rb90Ts= Subject key identifier: 19:D1:41:67:45:32:E3:65:33:B8:71:6E:FC:6A:5F:6C:4C:AD:67:01 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A03A53D95E64182E72C45F8C0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14061 IP address blocks: 164.90.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:3d:95:e6:41:82:e7:2c:45:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=12e88f9c-cdfb-46d7-93f4-ab1b346ef46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:eb:be:2a:d6:73:90:a4:63:2f:54:2e:5b: e6:0c:f7:50:0c:44:30:8b:c8:bd:fc:2d:24:42:2c: b0:58:ae:8d:f6:55:4b:9a:3a:84:6f:90:85:7a:89: 8a:ba:bb:5a:92:46:9b:68:e4:8e:55:47:9f:eb:fe: 03:41:1d:fa:99:22:a5:ca:c3:f3:fe:12:30:69:b9: 48:99:c4:cf:c1:39:bd:8f:f3:79:61:a1:6a:b3:02: 00:6f:b6:4c:41:8c:18:e8:2c:33:03:9c:b3:4b:81: a4:47:0b:ac:5d:7f:fa:90:63:65:66:0f:7b:71:f5: a4:3a:e6:e5:b3:ed:d2:d5:7a:4a:62:2a:1a:8d:73: 0b:c7:ff:75:f1:49:e0:14:d7:41:5b:3b:31:57:5c: e1:0f:00:1e:c0:2e:64:b4:e2:3b:6b:93:86:65:fe: 9a:e1:8c:30:22:0c:75:36:5f:e9:e2:b5:2b:d5:6b: e0:76:44:d7:16:e4:66:5d:cd:34:a9:99:90:83:0e: be:ae:4d:f3:9e:84:38:05:c6:fd:22:f7:7f:a8:74: 9c:ef:9d:d4:32:ce:02:95:a5:88:0e:eb:df:46:06: 56:40:28:72:69:71:2c:09:d0:20:1f:cc:2b:13:1a: 1f:dc:be:f3:c2:7d:d1:5f:7c:68:f6:c7:cd:70:78: 5d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D1:41:67:45:32:E3:65:33:B8:71:6E:FC:6A:5F:6C:4C:AD:67:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 164.90.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ff:9e:0a:7e:d4:98:c5:7d:08:d5:99:3e:72:10:4a:cb:a4: bb:52:ca:e5:f6:70:a6:e1:ea:4c:84:14:0d:c0:21:3d:9b:d0: 93:49:35:58:1d:e5:c6:ee:bb:19:2f:18:9c:15:62:66:61:17: 07:9d:b3:e3:e9:97:78:b5:46:9b:33:14:ca:c7:82:dc:36:44: 3c:e0:65:f5:83:d6:fb:b8:08:06:7b:80:6d:3e:50:aa:35:f3: bf:37:a6:62:84:1e:30:8a:8b:42:d5:88:4f:1e:3b:d8:9f:61: 12:84:c2:a3:ec:6a:50:0a:c7:2b:e6:30:21:3c:d9:ef:f0:97: 2e:a8:72:89:b8:c9:4a:35:e6:0b:36:c9:51:a4:6a:2d:e6:e9: 5b:f2:52:98:89:40:52:c5:61:9a:61:e4:81:7c:60:cc:2a:32: 51:ea:cb:59:c0:3f:ed:18:83:a6:b4:35:d8:72:62:14:18:e0: 9d:a9:bc:40:ea:6f:fd:37:ac:eb:6a:fc:14:de:dd:de:d2:19: ae:31:98:5b:b5:f7:72:f8:c2:c5:e7:b2:8a:f8:bf:c8:d6:86: df:fb:09:86:d2:29:82:93:f5:05:4f:45:0e:c1:49:35:33:d5: 26:99:48:f9:cd:d6:55:dc:7a:de:47:f4:f9:04:f4:af:5a:47: a4:8a:a6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpT2V5kGC5yxF+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MTJlODhmOWMtY2RmYi00NmQ3LTkzZjQtYWIxYjM0NmVmNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5zrvirWc5CkYy9ULlvmDPdQDEQwi8i9/C0k QiywWK6N9lVLmjqEb5CFeomKurtakkabaOSOVUef6/4DQR36mSKlysPz/hIwablI mcTPwTm9j/N5YaFqswIAb7ZMQYwY6CwzA5yzS4GkRwusXX/6kGNlZg97cfWkOubl s+3S1XpKYioajXMLx/918UngFNdBWzsxV1zhDwAewC5ktOI7a5OGZf6a4YwwIgx1 Nl/p4rUr1WvgdkTXFuRmXc00qZmQgw6+rk3znoQ4Bcb9Ivd/qHSc753UMs4ClaWI DuvfRgZWQChyaXEsCdAgH8wrExof3L7zwn3RX3xo9sfNcHhdIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnRQWdFMuNlM7hxbvxqX2xMrWcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZTNjOGU3ODQtYjE5YS0z ZmQzLWI2MmMtY2VlZjIwNGIwMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpFqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf/ngp+1JjFfQjVmT5yEErLpLtSyuX2cKbh6kyEFA3AIT2b0JNJNVgd 5cbuuxkvGJwVYmZhFweds+Ppl3i1RpszFMrHgtw2RDzgZfWD1vu4CAZ7gG0+UKo1 8783pmKEHjCKi0LViE8eO9ifYRKEwqPsalAKxyvmMCE82e/wly6ocom4yUo15gs2 yVGkai3m6VvyUpiJQFLFYZph5IF8YMwqMlHqy1nAP+0Yg6a0NdhyYhQY4J2pvEDq b/03rOtq/BTe3d7SGa4xmFu193L4wsXnsor4v8jWht/7CYbSKYKT9QVPRQ7BSTUz 1SaZSPnN1lXcet5H9PkE9K9aR6SKpqo= -----END CERTIFICATE-----Generated at Sun Jun 15 16:03:24 2025 by rpki-client