$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa File: ab506b0e-443b-3dc6-9a74-f9263f403080.roa (raw, json) Hash identifier: Tv9LtQFlpVnLbbaM72eDxpU1dngqRjyxfpdSEX/oTZs= Subject key identifier: 73:A3:E9:2D:61:8C:5C:4F:AC:56:D3:C2:5C:C1:E4:BC:75:D8:E5:53 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584F14679CB39BC8F1530A8041C0 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 32298 IP address blocks: 45.78.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9c:b3:9b:c8:f1:53:0a:80:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=d1743e36-6951-4ef4-b9ab-1e29f35c1e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4a:39:cf:81:59:4f:a9:7e:44:70:c0:20:a4: 3f:a5:55:cd:5d:d6:15:34:95:00:0c:92:af:79:6f: 84:38:9c:57:1b:80:15:b0:e7:ea:a6:02:ae:96:30: 80:15:ae:33:8e:27:15:4d:e0:5d:d4:85:a6:56:dc: 6d:22:f2:86:87:b6:94:be:ac:8b:67:6d:27:50:bd: 5c:78:ba:ef:56:f8:15:a0:29:24:3f:b0:7d:25:d3: dc:be:61:a3:fa:23:22:13:45:08:d7:ab:2d:e8:05: f7:9a:5e:19:e9:49:44:da:56:2f:8d:31:e8:cb:61: 43:4d:f0:07:4f:b9:81:a3:43:4a:54:ee:27:9c:f1: 2a:e6:e7:50:0a:62:18:3e:30:d3:97:77:48:01:f0: d7:60:a4:46:59:c8:31:cc:3d:55:e7:d7:c0:62:e7: 34:57:62:a0:3c:d8:d8:ad:ae:d8:be:c4:f1:fa:24: 68:97:9c:2a:48:1a:c2:2d:eb:6d:43:2c:39:84:ca: 15:22:30:4a:ba:cc:60:96:9f:a5:09:d0:f1:e8:f2: 1d:3c:fa:37:10:69:41:61:88:31:e4:71:f1:88:d5: 62:df:4e:cd:63:79:26:3a:de:58:d7:66:1c:dc:e8: 95:ac:22:c2:a8:60:e1:49:b2:5f:03:6e:d2:1c:3e: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A3:E9:2D:61:8C:5C:4F:AC:56:D3:C2:5C:C1:E4:BC:75:D8:E5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ab506b0e-443b-3dc6-9a74-f9263f403080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 45.78.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fb:08:29:c6:28:79:f7:3c:37:49:55:9f:2f:63:80:75:fc: 07:bf:5d:0e:17:82:43:2b:21:c0:5a:09:43:95:41:ac:21:36: 5d:7e:c6:21:ec:a5:ef:f6:fe:7a:0b:89:34:19:69:06:8a:ea: 4c:de:94:04:c5:a7:0f:0f:04:d4:7b:d1:31:71:b0:ab:21:4a: aa:a4:df:72:a6:95:ea:4e:1b:fb:98:92:b2:e2:40:a7:b0:df: 5a:5a:23:27:cf:75:d8:54:4d:92:20:ed:4c:69:43:5d:1b:e7: cb:54:44:6e:21:49:14:a0:e7:7f:7a:6d:00:19:db:a9:4f:58: 88:b0:51:1e:6e:74:3e:40:04:7c:81:3e:6c:b1:0c:93:fc:d9: a7:df:6e:26:87:50:bb:07:5a:8d:d4:c8:20:0d:b2:0d:b7:ca: d3:2c:0b:7e:72:d0:41:f3:f0:e9:f9:ed:9b:c4:71:58:4e:01: 91:37:19:4d:4f:ec:3b:8a:e3:47:b9:58:2d:87:b8:bf:9d:36: b2:0b:15:fd:05:03:3b:64:42:e5:d9:b8:e9:f9:52:d2:e5:fe: dd:60:23:83:d0:1d:ec:be:f9:63:a7:f9:21:8b:1b:05:9a:89: 47:19:db:4b:44:3c:82:cc:fa:f2:1c:a5:57:5c:02:02:c3:3b: e5:32:c8:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5yzm8jxUwqAQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZDE3NDNlMzYtNjk1MS00ZWY0LWI5YWItMWUyOWYzNWMxZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUo5z4FZT6l+RHDAIKQ/pVXNXdYVNJUADJKv eW+EOJxXG4AVsOfqpgKuljCAFa4zjicVTeBd1IWmVtxtIvKGh7aUvqyLZ20nUL1c eLrvVvgVoCkkP7B9JdPcvmGj+iMiE0UI16st6AX3ml4Z6UlE2lYvjTHoy2FDTfAH T7mBo0NKVO4nnPEq5udQCmIYPjDTl3dIAfDXYKRGWcgxzD1V59fAYuc0V2KgPNjY ra7YvsTx+iRol5wqSBrCLettQyw5hMoVIjBKusxglp+lCdDx6PIdPPo3EGlBYYgx 5HHxiNVi307NY3kmOt5Y12Yc3OiVrCLCqGDhSbJfA27SHD6sVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOj6S1hjFxPrFbTwlzB5Lx12OVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYWI1MDZiMGUtNDQzYi0z ZGM2LTlhNzQtZjkyNjNmNDAzMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELU6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH7CCnGKHn3PDdJVZ8vY4B1/Ae/XQ4XgkMrIcBaCUOVQawhNl1+xiHs pe/2/noLiTQZaQaK6kzelATFpw8PBNR70TFxsKshSqqk33KmlepOG/uYkrLiQKew 31paIyfPddhUTZIg7UxpQ10b58tURG4hSRSg5396bQAZ26lPWIiwUR5udD5ABHyB PmyxDJP82affbiaHULsHWo3UyCANsg23ytMsC35y0EHz8On57ZvEcVhOAZE3GU1P 7DuK40e5WC2HuL+dNrILFf0FAztkQuXZuOn5UtLl/t1gI4PQHey++WOn+SGLGwWa iUcZ20tEPILM+vIcpVdcAgLDO+UyyCg= -----END CERTIFICATE-----Generated at Sat Sep 26 17:11:36 2026 by rpki-client