$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/28848381-14b0-3959-8fcc-8c48327276f4.roa File: 28848381-14b0-3959-8fcc-8c48327276f4.roa (raw, json) Hash identifier: RoJwMQ7DpB43LCHO3Szof7Y1eFgRZ6F/3sSjdNvFS5g= Subject key identifier: DE:8C:55:98:F2:8E:FB:9A:94:D1:39:07:A8:18:33:E1:81:87:D5:C7 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F12E31F4212D5A337A9480 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/28848381-14b0-3959-8fcc-8c48327276f4.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 12213 IP address blocks: 45.78.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:2e:31:f4:21:2d:5a:33:7a:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=9c737068-541d-40d8-865d-7a9b9b2a7be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e8:ec:7c:be:27:10:76:da:b6:a7:e4:6f:0b: 41:22:d5:1d:be:47:6e:49:1f:03:4e:2a:36:25:d0: 9e:9f:d8:81:1d:8b:b5:8b:df:cf:9d:f3:64:a6:87: 71:1e:2a:91:95:5c:c5:58:9e:87:a4:7f:18:3d:37: 5c:21:27:05:ce:4a:2e:33:52:f6:0c:79:28:3c:1c: 95:5d:1e:62:c2:83:4a:a4:81:ff:81:89:f5:cd:40: fb:cc:2b:81:26:12:30:29:9d:ee:88:cf:56:a4:7c: d8:93:5e:12:38:ea:4c:e7:26:bf:50:0a:23:85:29: fd:94:2b:07:ea:09:f6:28:05:4f:aa:af:d8:f6:ef: aa:cf:71:fa:0e:87:9f:51:49:f2:cc:c5:3e:c1:2a: 41:19:b2:a5:4e:09:7a:12:19:05:fb:d0:0d:c3:c8: 63:2d:f3:80:2f:41:42:ae:53:a8:72:c4:98:4f:88: c2:74:87:9c:e9:5d:d7:56:cf:01:0a:39:da:7b:0b: 6d:ce:72:a1:e4:1d:b0:7e:d3:4e:87:38:4c:e4:36: 13:86:b9:5a:ed:75:b3:79:2e:74:18:b6:f9:86:c4: a9:ec:be:00:68:b1:82:73:28:a3:f9:de:06:b4:86: aa:cc:ef:09:7f:ea:d8:4b:5b:06:9f:64:16:ba:61: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8C:55:98:F2:8E:FB:9A:94:D1:39:07:A8:18:33:E1:81:87:D5:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/28848381-14b0-3959-8fcc-8c48327276f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 45.78.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:7c:10:02:2d:3d:ce:8a:2f:04:19:dd:0c:a2:d2:a6:34:02: 91:0f:56:17:df:76:bb:4b:fb:80:36:07:c4:47:99:90:f9:f5: dc:d2:bb:71:5f:f9:c6:4e:e1:45:38:e6:5e:c0:47:94:e4:c0: 6d:c9:91:38:07:2a:84:d2:e9:dd:aa:1c:26:d0:9f:04:41:0c: 9e:6a:12:c8:cf:ca:45:cb:92:3f:f3:d2:ed:e3:cc:86:b5:4f: c5:f3:b0:e2:b0:8b:0d:68:6f:cf:0d:3f:e2:f3:dc:58:b4:f2: e3:d0:b9:1f:28:9b:63:5e:71:d1:c6:94:46:d3:ce:1c:ba:94: 74:51:c2:e9:28:12:ea:3f:31:9b:e6:74:97:01:9f:92:31:92: cf:ca:9d:d9:e6:f5:80:f4:0f:58:03:2e:61:b7:22:6b:bd:61: e4:08:cc:b1:bc:16:a6:c8:13:a0:88:42:ed:07:0a:f8:7f:55: 22:fa:e4:bc:21:58:f2:b7:92:e3:8c:d7:91:57:98:80:77:43: ce:33:aa:0f:01:00:d7:65:b6:1e:2e:10:f7:8b:9e:c1:61:06: 8c:03:c8:44:4e:00:e1:ac:00:86:35:58:11:88:d3:4b:dd:21: 01:62:96:6b:2d:ea:f1:46:92:53:15:2e:2e:77:30:90:65:a3: 74:36:4b:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8S4x9CEtWjN6lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OWM3MzcwNjgtNTQxZC00MGQ4LTg2NWQtN2E5YjliMmE3YmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+jsfL4nEHbatqfkbwtBItUdvkduSR8DTio2 JdCen9iBHYu1i9/PnfNkpodxHiqRlVzFWJ6HpH8YPTdcIScFzkouM1L2DHkoPByV XR5iwoNKpIH/gYn1zUD7zCuBJhIwKZ3uiM9WpHzYk14SOOpM5ya/UAojhSn9lCsH 6gn2KAVPqq/Y9u+qz3H6DoefUUnyzMU+wSpBGbKlTgl6EhkF+9ANw8hjLfOAL0FC rlOocsSYT4jCdIec6V3XVs8BCjnaewttznKh5B2wftNOhzhM5DYThrla7XWzeS50 GLb5hsSp7L4AaLGCcyij+d4GtIaqzO8Jf+rYS1sGn2QWumG0nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6MVZjyjvualNE5B6gYM+GBh9XHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMjg4NDgzODEtMTRiMC0z OTU5LThmY2MtOGM0ODMyNzI3NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELU6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd8EAItPc6KLwQZ3Qyi0qY0ApEPVhffdrtL+4A2B8RHmZD59dzSu3Ff +cZO4UU45l7AR5TkwG3JkTgHKoTS6d2qHCbQnwRBDJ5qEsjPykXLkj/z0u3jzIa1 T8XzsOKwiw1ob88NP+Lz3Fi08uPQuR8om2NecdHGlEbTzhy6lHRRwukoEuo/MZvm dJcBn5Ixks/Kndnm9YD0D1gDLmG3Imu9YeQIzLG8FqbIE6CIQu0HCvh/VSL65Lwh WPK3kuOM15FXmIB3Q84zqg8BANdlth4uEPeLnsFhBowDyEROAOGsAIY1WBGI00vd IQFilmst6vFGklMVLi53MJBlo3Q2S0Q= -----END CERTIFICATE-----Generated at Sat Aug 23 22:35:30 2025 by rpki-client