$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa File: ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa (raw, json) Hash identifier: w8OmB/zDnS9DXRpTV/99MBMZvz0d3Bq4GY+0hnDdnSI= Subject key identifier: B9:00:A4:E0:21:9B:FB:B4:6E:D4:8F:5D:4D:B0:EB:8B:D8:A8:04:04 Certificate issuer: /CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Certificate serial: 010D0C9F4328584F5E62CC963EB34D7C9F285E80 Authority key identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 11075 IP address blocks: 46.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:cc:96:3e:b3:4d:7c:9f:28:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=a0c7f667-5530-4000-9d03-6952bb8b933d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:36:ad:fd:12:be:18:93:48:78:dc:03:c3:c7: f0:ec:df:23:4d:f6:e7:f1:b7:b0:68:e4:40:c6:ed: 09:d2:16:9d:9f:7d:72:b7:2e:89:cf:81:6c:58:e5: a1:ca:97:73:02:13:59:bf:a9:54:07:ae:c3:4e:ea: a7:f0:ce:c9:bd:f6:1c:6a:f5:54:fe:ad:e9:4a:ee: 26:40:d0:3a:d8:a7:17:aa:9a:58:11:99:84:13:b9: a9:a6:51:fb:ba:12:87:c6:07:f9:62:fe:e4:b8:f3: d4:3c:60:e8:18:df:95:8e:52:67:3c:35:e7:af:22: 66:0e:6e:f9:10:49:4e:b3:14:09:bc:cc:e1:59:7a: c9:e1:ce:00:dc:80:1c:47:f4:e5:db:80:d2:4d:f5: ec:7d:dc:50:e4:b2:1f:c9:88:b3:79:b9:e2:a4:a6: c2:d6:12:07:38:99:39:56:1a:4a:97:44:96:5e:6c: de:84:37:1c:e8:c6:62:72:90:35:7d:98:a1:e7:2a: 1c:c0:5b:e1:1b:fe:b5:a4:df:3e:09:48:ab:0a:55: 96:23:af:42:85:55:fa:12:c8:be:bd:06:b5:d0:35: ff:26:8e:19:99:30:06:cd:fb:83:1b:aa:75:5c:4e: 3f:54:ca:9f:c2:f0:83:7a:21:2f:9c:5c:d1:02:5d: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:00:A4:E0:21:9B:FB:B4:6E:D4:8F:5D:4D:B0:EB:8B:D8:A8:04:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl X509v3 Authority Key Identifier: keyid:83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer sbgp-ipAddrBlock: critical IPv4: 46.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e5:8b:6c:fd:b0:29:a6:79:35:03:82:0a:89:f3:84:af:74: 31:61:ef:aa:f3:cc:fa:02:56:39:f2:37:ba:94:ce:b5:10:71: 16:82:75:9e:36:9a:6a:be:86:52:9a:05:94:80:13:8d:06:6d: 0d:b1:98:3d:fc:bd:5e:8f:33:28:80:bf:ad:67:90:d1:83:fb: 14:5c:6c:72:d5:74:2a:d1:4c:25:cc:c7:24:69:76:ac:f2:45: 2f:1f:b1:d2:af:4e:65:40:88:32:23:4a:03:97:da:a6:17:4f: 31:85:f2:f0:90:48:02:44:d7:6e:70:7b:5b:7a:10:f9:f7:9f: 34:e0:ae:8b:f5:95:ae:a8:71:93:a3:2f:c3:53:65:5f:94:e5: f0:07:7b:78:a6:17:42:f5:84:6c:33:1a:09:f8:15:d6:d9:51: c1:76:7c:5c:d6:21:da:a7:fe:3b:b0:45:2f:38:05:ba:4b:2e: c5:2d:b6:b4:9f:a0:17:2b:40:65:10:78:ed:13:1a:d1:71:cc: 26:f5:3e:11:c7:33:3a:00:02:99:34:00:a6:3e:8d:5c:9a:01: 1c:fe:de:73:58:84:f4:3d:f2:ef:67:d5:1a:54:b0:dd:b1:81: 18:b1:0c:dc:70:26:6b:5e:b4:88:1d:6d:c2:c5:4d:8b:5e:c1: fc:93:f7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsyWPrNNfJ8oXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM3MGJmMWEtZDcyNi00YTE2LTk3ZmUtNDRmYzIzZDA2 YmNlMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YTBjN2Y2NjctNTUzMC00MDAwLTlkMDMtNjk1MmJiOGI5MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dat/RK+GJNIeNwDw8fw7N8jTfbn8bewaORA xu0J0hadn31yty6Jz4FsWOWhypdzAhNZv6lUB67DTuqn8M7JvfYcavVU/q3pSu4m QNA62KcXqppYEZmEE7mpplH7uhKHxgf5Yv7kuPPUPGDoGN+VjlJnPDXnryJmDm75 EElOsxQJvMzhWXrJ4c4A3IAcR/Tl24DSTfXsfdxQ5LIfyYizebnipKbC1hIHOJk5 VhpKl0SWXmzehDcc6MZicpA1fZih5yocwFvhG/61pN8+CUirClWWI69ChVX6Esi+ vQa10DX/Jo4ZmTAGzfuDG6p1XE4/VMqfwvCDeiEvnFzRAl2DiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkApOAhm/u0btSPXU2w64vYqAQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYzcw YmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNkMDZiY2UvY2E5MDUwYjktYmZiNC0z NmI3LTk4YWItNGRlM2Q0ZDc3OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmM3MGJmMWEtZDcyNi00YTE2LTk3 ZmUtNDRmYzIzZDA2YmNlL2ZjNzBiZjFhLWQ3MjYtNGExNi05N2ZlLTQ0ZmMyM2Qw NmJjZS5jcmwwHwYDVR0jBBgwFoAUg36+v2aCALASU6K2dE11H9ZZOa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZj MjNkMDZiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnli2z9sCmmeTUDggqJ84SvdDFh76rzzPoCVjnyN7qUzrUQcRaCdZ42 mmq+hlKaBZSAE40GbQ2xmD38vV6PMyiAv61nkNGD+xRcbHLVdCrRTCXMxyRpdqzy RS8fsdKvTmVAiDIjSgOX2qYXTzGF8vCQSAJE125we1t6EPn3nzTgrov1la6ocZOj L8NTZV+U5fAHe3imF0L1hGwzGgn4FdbZUcF2fFzWIdqn/juwRS84BbpLLsUttrSf oBcrQGUQeO0TGtFxzCb1PhHHMzoAApk0AKY+jVyaARz+3nNYhPQ98u9n1RpUsN2x gRixDNxwJmtetIgdbcLFTYtewfyT91Q= -----END CERTIFICATE-----Generated at Sat Oct 31 23:53:59 2026 by rpki-client