$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa File: ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa (raw, json) Hash identifier: 6qtgI7WQAgHmRpDJQ9K6xDWS6TBAg1z72pl7Fm7Hevo= Subject key identifier: 73:F4:A8:E7:0B:2E:5B:8A:1A:23:3A:44:37:04:7C:09:9D:9D:9A:C8 Certificate issuer: /CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Certificate serial: 010D0C9F4328584B79BCC4F8367D3F344C9AB880 Authority key identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 11075 IP address blocks: 46.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c4:f8:36:7d:3f:34:4c:9a:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=99571742-41f4-48e3-99e4-fbab81f04a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:78:2a:cd:05:61:63:be:29:05:c1:69:f6: 56:31:2d:e1:99:25:ba:66:12:97:8b:d0:c6:eb:bd: f1:eb:71:a0:af:8e:77:8f:e3:fb:db:bd:0b:61:44: 2b:8b:ba:5a:24:1b:ec:8e:6a:d9:41:3a:49:f3:79: 80:ed:c7:8f:03:88:ca:52:bd:20:85:7a:7c:df:44: 4a:09:a7:6b:2c:66:3a:32:4a:80:db:e9:08:66:fd: 88:ec:ac:59:e0:92:fa:5c:73:3f:03:8f:af:c4:a0: 71:36:43:46:9c:6a:c5:93:85:1f:0f:00:b4:2b:2d: 01:7f:8d:55:c1:fc:d4:b7:ab:3c:78:ee:ea:e0:58: fc:85:8f:70:a5:f7:f5:90:66:66:d0:0e:b6:79:a8: 05:69:e9:40:53:92:96:e2:ec:97:6a:53:06:46:39: ba:50:4a:eb:05:9f:0f:41:87:87:cb:8d:e0:1f:80: c5:4c:df:f3:94:d3:7b:77:f1:f9:e6:a0:53:21:57: 0c:6a:49:6c:74:f9:34:91:63:ae:22:65:6d:e8:ff: af:ae:90:0a:c0:6c:f5:45:e8:43:d5:35:f9:59:6d: 29:2b:28:1f:f9:02:31:3f:5e:12:be:77:87:ac:23: 58:93:13:bd:f1:9d:ea:6d:73:f5:5b:dc:a8:6c:3f: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:A8:E7:0B:2E:5B:8A:1A:23:3A:44:37:04:7C:09:9D:9D:9A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl X509v3 Authority Key Identifier: keyid:83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer sbgp-ipAddrBlock: critical IPv4: 46.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9a:d6:79:11:69:e0:f7:e6:23:4d:87:97:f8:7a:2b:3b:5a: d6:c2:71:ed:82:89:25:27:a3:88:30:54:33:b0:93:19:78:5a: ae:e4:ed:47:a6:10:c5:08:5f:4e:ce:8f:ff:bd:5f:58:71:48: dc:c4:73:ae:28:a5:9f:c3:a0:67:5d:b4:be:3b:2e:98:3f:fa: b3:c1:48:87:bd:00:d5:81:e2:45:0c:ee:ce:bf:1b:9b:ef:9c: 1f:bc:0f:6d:59:58:f5:8b:5d:27:f5:0d:14:af:85:d5:ac:f0: 42:ee:7a:c6:c7:4b:96:eb:79:62:cf:19:99:dd:17:5f:14:c7: 84:d7:f0:8e:8c:c4:2d:53:40:8d:75:d4:44:6b:15:e9:87:0c: 9e:cc:d6:f8:a2:ab:6a:99:0f:e1:e8:04:09:1f:1e:c8:ef:d7: ad:e6:a9:11:f7:1f:97:9a:ec:c8:e9:b0:d5:61:c6:e9:42:e9: 60:8a:d0:76:8d:ef:41:a6:4c:a3:1b:7c:b6:75:6c:c3:38:57: 50:83:73:40:fa:18:f1:3f:5c:75:be:f3:6d:31:5f:e3:fe:c5: e4:92:13:cf:b2:6e:77:18:eb:6a:c4:5d:c6:b7:a8:7c:04:f8: 9d:8c:be:fd:c4:f3:8d:7e:c7:59:1a:bd:fe:46:63:6f:50:4b: c5:c5:cc:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMT4Nn0/NEyauIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM3MGJmMWEtZDcyNi00YTE2LTk3ZmUtNDRmYzIzZDA2 YmNlMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OTk1NzE3NDItNDFmNC00OGUzLTk5ZTQtZmJhYjgxZjA0YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ct4Ks0FYWO+KQXBafZWMS3hmSW6ZhKXi9DG 673x63Ggr453j+P7270LYUQri7paJBvsjmrZQTpJ83mA7cePA4jKUr0ghXp830RK CadrLGY6MkqA2+kIZv2I7KxZ4JL6XHM/A4+vxKBxNkNGnGrFk4UfDwC0Ky0Bf41V wfzUt6s8eO7q4Fj8hY9wpff1kGZm0A62eagFaelAU5KW4uyXalMGRjm6UErrBZ8P QYeHy43gH4DFTN/zlNN7d/H55qBTIVcMaklsdPk0kWOuImVt6P+vrpAKwGz1RehD 1TX5WW0pKygf+QIxP14SvneHrCNYkxO98Z3qbXP1W9yobD8ZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP0qOcLLluKGiM6RDcEfAmdnZrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYzcw YmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNkMDZiY2UvY2E5MDUwYjktYmZiNC0z NmI3LTk4YWItNGRlM2Q0ZDc3OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmM3MGJmMWEtZDcyNi00YTE2LTk3 ZmUtNDRmYzIzZDA2YmNlL2ZjNzBiZjFhLWQ3MjYtNGExNi05N2ZlLTQ0ZmMyM2Qw NmJjZS5jcmwwHwYDVR0jBBgwFoAUg36+v2aCALASU6K2dE11H9ZZOa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZj MjNkMDZiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGa1nkRaeD35iNNh5f4eis7WtbCce2CiSUno4gwVDOwkxl4Wq7k7Uem EMUIX07Oj/+9X1hxSNzEc64opZ/DoGddtL47Lpg/+rPBSIe9ANWB4kUM7s6/G5vv nB+8D21ZWPWLXSf1DRSvhdWs8ELuesbHS5breWLPGZndF18Ux4TX8I6MxC1TQI11 1ERrFemHDJ7M1viiq2qZD+HoBAkfHsjv163mqRH3H5ea7MjpsNVhxulC6WCK0HaN 70GmTKMbfLZ1bMM4V1CDc0D6GPE/XHW+820xX+P+xeSSE8+ybncY62rEXca3qHwE +J2Mvv3E841+x1kavf5GY29QS8XFzBE= -----END CERTIFICATE-----Generated at Sat Oct 18 09:20:01 2025 by rpki-client