$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa File: ab506b0e-443b-3dc6-9a74-f9263f403080.roa (raw, json) Hash identifier: 6+tKpPDYHqTeVfPR65D/7lzDbAz9eElXKNIaJVn0BX4= Subject key identifier: 0E:ED:AF:7A:E6:FD:27:EE:85:A2:C7:78:8F:AA:00:28:07:FA:1B:F9 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584D91C00CCB234748B03D533800 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 32298 IP address blocks: 45.78.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0c:cb:23:47:48:b0:3d:53:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=af41a7b5-dd8f-4991-9408-bfa65ac14d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b8:7e:81:70:b8:93:9d:9e:3e:bd:68:9d:b7: 3a:00:67:59:36:04:66:32:99:90:ab:65:3a:25:47: 6c:5d:6c:09:86:67:04:12:d1:c3:ad:98:a8:5a:01: 03:7e:69:1f:01:91:93:88:dd:db:76:76:32:c8:7b: 91:a7:10:0a:f2:b7:1c:4f:3e:f8:71:dc:eb:aa:9a: 64:3e:65:ca:1a:b0:42:cc:ce:eb:52:49:d6:9d:9c: 58:20:07:44:69:a9:58:2a:66:32:e6:34:b8:1c:11: 40:8e:7e:c9:6a:48:b7:48:db:49:53:68:7a:ba:8c: bc:28:70:f7:a8:ab:ef:e9:9f:40:61:8a:d2:0e:67: ed:d8:d9:af:61:21:93:41:ac:4e:13:43:87:98:07: d6:f9:13:b2:e2:53:37:a0:52:8a:2b:a4:ca:4e:77: dc:ac:f1:b5:4c:7b:8f:bd:d1:c5:ce:14:f5:9d:65: 41:22:e3:9f:68:38:e5:43:98:b6:c8:34:50:5f:3c: c9:40:30:13:82:fe:a3:ff:53:d0:b7:d4:70:1c:07: 1f:4c:ac:9e:f0:a0:0e:cd:59:e7:06:e1:5e:b1:48: 67:3c:b6:fa:20:c0:a5:ab:39:dc:d6:74:8b:0d:45: 7a:33:ef:9d:67:5d:72:86:47:d8:a4:dd:b1:ce:76: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:AF:7A:E6:FD:27:EE:85:A2:C7:78:8F:AA:00:28:07:FA:1B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 45.78.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e2:aa:8e:98:d5:87:4b:c5:d7:46:ec:2d:b8:1e:fb:f0:66: d0:85:78:a1:5b:d5:c9:6b:1c:89:0a:6f:43:79:6a:90:6f:75: 15:89:ae:4f:1f:93:ff:42:af:25:9b:80:36:65:3f:a8:5c:cf: 27:28:54:64:39:c9:c3:1a:76:e4:56:a9:65:69:4a:a9:6f:21: 7f:3a:04:7f:58:1b:d3:38:05:ab:d7:19:f3:ce:82:b4:a7:64: 24:cd:0d:8a:23:b3:e1:04:89:f2:5a:cd:fa:92:e6:de:bb:5d: a5:28:a3:83:70:0b:f3:c2:6d:e4:59:98:e1:a8:60:a8:70:82: 5a:81:9e:34:36:f4:69:42:5d:fc:c5:b9:3e:ee:c7:1c:e2:a4: 9e:4a:d1:d0:28:64:ff:20:54:29:72:74:3a:29:11:22:6f:b4: 19:92:d6:05:67:a4:4e:45:05:05:17:c4:27:cf:3c:41:7e:34: b5:be:d5:d3:46:b8:77:31:66:f9:38:99:df:f3:a2:82:d2:13: e4:6e:1c:92:1f:f2:8d:26:d6:47:dd:66:90:79:f8:94:8b:f7: 78:cf:65:6a:51:ce:cb:88:39:ca:12:08:1c:cc:5e:05:e7:e3: 27:92:5d:ae:97:0e:ad:4d:65:8f:5d:9a:07:2d:8d:f0:bd:c5: 8c:6a:b7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAzLI0dIsD1TOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YWY0MWE3YjUtZGQ4Zi00OTkxLTk0MDgtYmZhNjVhYzE0ZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLh+gXC4k52ePr1onbc6AGdZNgRmMpmQq2U6 JUdsXWwJhmcEEtHDrZioWgEDfmkfAZGTiN3bdnYyyHuRpxAK8rccTz74cdzrqppk PmXKGrBCzM7rUknWnZxYIAdEaalYKmYy5jS4HBFAjn7Jaki3SNtJU2h6uoy8KHD3 qKvv6Z9AYYrSDmft2NmvYSGTQaxOE0OHmAfW+ROy4lM3oFKKK6TKTnfcrPG1THuP vdHFzhT1nWVBIuOfaDjlQ5i2yDRQXzzJQDATgv6j/1PQt9RwHAcfTKye8KAOzVnn BuFesUhnPLb6IMClqznc1nSLDUV6M++dZ11yhkfYpN2xznZhmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7tr3rm/SfuhaLHeI+qACgH+hv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYWI1MDZiMGUtNDQzYi0z ZGM2LTlhNzQtZjkyNjNmNDAzMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELU6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHiqo6Y1YdLxddG7C24HvvwZtCFeKFb1clrHIkKb0N5apBvdRWJrk8f k/9CryWbgDZlP6hczycoVGQ5ycMaduRWqWVpSqlvIX86BH9YG9M4BavXGfPOgrSn ZCTNDYojs+EEifJazfqS5t67XaUoo4NwC/PCbeRZmOGoYKhwglqBnjQ29GlCXfzF uT7uxxzipJ5K0dAoZP8gVClydDopESJvtBmS1gVnpE5FBQUXxCfPPEF+NLW+1dNG uHcxZvk4md/zooLSE+RuHJIf8o0m1kfdZpB5+JSL93jPZWpRzsuIOcoSCBzMXgXn 4yeSXa6XDq1NZY9dmgctjfC9xYxqt9c= -----END CERTIFICATE-----Generated at Wed May 13 11:28:15 2026 by rpki-client