$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa File: ab506b0e-443b-3dc6-9a74-f9263f403080.roa (raw, json) Hash identifier: aFLgsktpkOl2Cd4p5fGEPUgsFK8RWnTVTHY3spL/D60= Subject key identifier: 32:73:6E:71:BF:D8:63:71:4D:14:7D:71:A7:D2:8B:E7:BA:8F:96:CB Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F13DC7471C5D2E149A7080 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 32298 IP address blocks: 45.78.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3d:c7:47:1c:5d:2e:14:9a:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=bb5b0d17-3899-47c4-b193-ce860a821bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:a7:d8:aa:88:30:cc:49:2b:6a:ab:dc:14: 4c:0e:bc:30:ae:95:9e:fc:03:88:8c:bf:5b:5c:26: 8e:7b:cd:0a:59:e8:a1:7d:90:60:6a:93:b4:cb:19: 86:5e:33:d7:29:5e:03:d9:30:56:de:80:7a:3a:ef: 48:39:96:c1:68:1e:97:bf:bd:42:3a:99:3e:ee:07: dc:9c:2b:2e:a7:33:a4:63:49:98:c9:2c:04:5a:32: 4a:32:e9:c2:70:cf:5a:7c:a7:3f:0e:bb:f4:26:ad: 0f:34:e8:97:d2:c4:81:18:4f:9a:fa:7b:a3:25:a5: d8:05:47:75:27:de:2f:a3:85:c0:bc:96:36:9b:1a: 64:4b:47:ac:9e:03:da:2a:a0:be:57:5b:ba:8c:98: 5b:b5:eb:77:01:e6:0b:c5:5f:92:cf:e1:49:a2:d4: 49:31:f2:2b:8d:23:9f:a0:48:d7:6b:2d:06:60:ab: 09:99:92:69:0e:a7:29:51:ad:fe:79:b4:50:04:11: 49:33:b8:18:7e:4b:d1:46:94:d2:98:a5:42:31:45: 80:82:09:d1:12:d0:fa:fe:cc:79:eb:9c:08:f4:ad: b5:37:d7:ec:9e:e8:24:a8:ad:cd:40:7b:5c:1f:e6: 0a:cf:e0:c0:d7:7c:16:8d:44:8b:5d:0c:d1:f3:2c: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:6E:71:BF:D8:63:71:4D:14:7D:71:A7:D2:8B:E7:BA:8F:96:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 45.78.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f2:81:03:0b:f6:e4:6b:59:be:52:7b:c6:3c:60:d1:a6:96: 13:76:58:c8:12:18:88:05:b5:c2:7a:29:dc:29:72:5d:84:e1: 47:ff:2a:fb:a0:b3:4e:2f:e1:9a:14:bb:99:51:3e:fe:9b:77: e6:a8:11:56:16:2e:28:7d:e9:4e:1d:d5:77:be:b8:db:7f:d2: d7:2f:10:84:15:b9:30:15:d6:4f:b7:50:09:c1:b5:ed:9e:5e: d4:5a:f5:ba:1b:8a:56:5c:ab:c3:fd:fc:94:5b:6e:f6:9a:e8: cb:c2:8d:bf:0a:00:d2:37:42:26:6a:65:97:45:e6:cb:9d:3e: c8:3f:1c:f8:08:3f:cc:f5:08:0e:35:7c:9d:5b:50:00:c2:cb: 47:1f:81:97:c5:7d:46:45:52:09:77:00:a7:6c:7e:4d:32:ec: 12:0b:a6:91:18:0d:6c:6f:f9:af:fb:64:5c:00:c4:5e:36:37: e4:bc:fd:b9:89:b1:b9:2b:11:86:95:8f:96:8f:e5:4b:5d:5c: 69:6b:63:69:13:7d:5a:cf:e0:df:41:2b:3b:62:6d:cd:db:60: 4b:42:50:d0:68:3b:a5:7e:0f:ae:76:4f:ce:6e:e7:78:51:68: 7f:91:63:08:59:bd:d3:bd:bd:cd:54:78:61:d0:13:85:ce:45: 01:dd:e3:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8T3HRxxdLhSacIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YmI1YjBkMTctMzg5OS00N2M0LWIxOTMtY2U4NjBhODIxYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs72n2KqIMMxJK2qr3BRMDrwwrpWe/AOIjL9b XCaOe80KWeihfZBgapO0yxmGXjPXKV4D2TBW3oB6Ou9IOZbBaB6Xv71COpk+7gfc nCsupzOkY0mYySwEWjJKMunCcM9afKc/Drv0Jq0PNOiX0sSBGE+a+nujJaXYBUd1 J94vo4XAvJY2mxpkS0esngPaKqC+V1u6jJhbtet3AeYLxV+Sz+FJotRJMfIrjSOf oEjXay0GYKsJmZJpDqcpUa3+ebRQBBFJM7gYfkvRRpTSmKVCMUWAggnREtD6/sx5 65wI9K21N9fsnugkqK3NQHtcH+YKz+DA13wWjUSLXQzR8yzlNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJzbnG/2GNxTRR9cafSi+e6j5bLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYWI1MDZiMGUtNDQzYi0z ZGM2LTlhNzQtZjkyNjNmNDAzMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELU6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/ygQML9uRrWb5Se8Y8YNGmlhN2WMgSGIgFtcJ6Kdwpcl2E4Uf/Kvug s04v4ZoUu5lRPv6bd+aoEVYWLih96U4d1Xe+uNt/0tcvEIQVuTAV1k+3UAnBte2e XtRa9bobilZcq8P9/JRbbvaa6MvCjb8KANI3QiZqZZdF5sudPsg/HPgIP8z1CA41 fJ1bUADCy0cfgZfFfUZFUgl3AKdsfk0y7BILppEYDWxv+a/7ZFwAxF42N+S8/bmJ sbkrEYaVj5aP5UtdXGlrY2kTfVrP4N9BKztibc3bYEtCUNBoO6V+D652T85u53hR aH+RYwhZvdO9vc1UeGHQE4XORQHd4+g= -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:50 2025 by rpki-client