$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa File: ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa (raw, json) Hash identifier: LRYrQsYvyYvmLIVPRCmWjRwgV9VTIIU8+ZD6UtG2UVQ= Subject key identifier: 70:A1:12:80:A8:FA:9E:5B:02:CC:AD:0D:C2:77:15:13:C3:F7:C1:06 Certificate issuer: /CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Certificate serial: 010D0C9F4328584A9900B449CA9D795DA3FDF080 Authority key identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 11075 IP address blocks: 46.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:b4:49:ca:9d:79:5d:a3:fd:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=d78d5b9f-c2c8-4f8b-a909-2d01d548fcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e3:8c:be:4a:78:ec:1f:6a:8d:32:56:58:c8: cf:9c:01:cf:e2:d7:47:f3:4e:0b:88:a5:3a:97:14: 0a:f9:f5:af:b3:74:d5:71:ec:45:ba:62:01:1f:ec: 25:7f:a0:30:af:59:7c:70:1c:a4:db:f4:ec:04:8d: c2:30:c6:ff:3e:de:f9:4a:d8:26:fe:6b:00:61:36: db:36:9d:d6:6e:f0:30:e4:76:c3:34:1d:93:8b:ce: 9a:9c:54:d9:dc:02:a1:56:6e:c6:25:4b:14:78:94: 20:c7:14:33:dd:29:93:e1:0c:f2:a8:52:56:66:87: 5a:19:c4:cb:e0:48:cc:97:7a:a9:ce:1a:54:ae:8e: 03:94:35:85:fd:c4:f8:e7:e4:56:c2:dd:8a:46:d0: a1:7e:79:a9:98:94:ed:d3:cf:67:b9:72:72:8f:d4: 14:df:a5:7d:4f:dc:d9:22:9f:8f:87:f8:b5:e2:42: 70:b4:22:e5:0e:87:2c:d3:fc:a1:86:61:c3:0c:8e: ad:ff:be:79:fc:a9:22:df:0c:3e:ab:9d:68:2a:14: 81:93:db:3e:7f:4f:db:dd:4d:0d:7f:43:a9:34:f8: 92:da:d7:9a:c0:26:68:65:c5:d9:bf:80:a4:83:25: 72:37:22:a8:ab:40:60:9e:eb:45:66:6d:7d:11:3b: c9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A1:12:80:A8:FA:9E:5B:02:CC:AD:0D:C2:77:15:13:C3:F7:C1:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl X509v3 Authority Key Identifier: keyid:83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer sbgp-ipAddrBlock: critical IPv4: 46.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:21:6e:29:f1:e8:52:97:26:c5:1c:6d:e4:4e:09:9b:81:a3: a4:57:0d:1a:1f:29:63:af:33:aa:74:92:f4:a2:ce:3a:e4:62: 3b:4c:41:ff:c5:f8:de:c6:a1:88:5b:99:96:72:04:86:dd:17: 07:40:6f:af:eb:b6:5b:02:ef:74:e0:d2:73:4d:39:11:a5:10: 83:df:7d:64:37:f1:a6:2c:1e:aa:38:21:4c:a5:ff:e4:3f:f9: dc:48:92:ae:9a:10:10:ed:8d:29:be:b9:c4:f8:72:ac:50:10: a8:58:e7:fc:00:0c:03:20:aa:24:23:e3:b0:1c:ed:ab:2c:28: 1e:95:60:1e:30:be:b1:f5:c4:55:fa:95:6f:a9:e7:b4:ac:a5: a2:6f:61:51:b9:9c:09:f8:29:17:70:72:cf:da:55:6e:75:d2: a3:87:c5:83:16:86:6c:dd:3f:c4:da:b1:23:db:57:7b:d6:8f: aa:29:b2:db:06:8c:a5:22:ec:b7:81:73:a7:01:de:6e:43:ad: 04:95:e1:de:1d:34:f8:0a:15:24:62:54:a4:bd:d6:14:3b:d2: b8:39:7d:74:bc:c6:f5:78:43:8c:0e:23:cb:8e:44:af:da:77: f3:75:57:99:b7:22:e6:cc:9c:8b:ae:80:7a:d4:5f:cd:eb:3d: 8c:02:4e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALRJyp15XaP98IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM3MGJmMWEtZDcyNi00YTE2LTk3ZmUtNDRmYzIzZDA2 YmNlMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZDc4ZDViOWYtYzJjOC00ZjhiLWE5MDktMmQwMWQ1NDhmY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+OMvkp47B9qjTJWWMjPnAHP4tdH804LiKU6 lxQK+fWvs3TVcexFumIBH+wlf6Awr1l8cByk2/TsBI3CMMb/Pt75Stgm/msAYTbb Np3WbvAw5HbDNB2Ti86anFTZ3AKhVm7GJUsUeJQgxxQz3SmT4QzyqFJWZodaGcTL 4EjMl3qpzhpUro4DlDWF/cT45+RWwt2KRtChfnmpmJTt089nuXJyj9QU36V9T9zZ Ip+Ph/i14kJwtCLlDocs0/yhhmHDDI6t/755/Kki3ww+q51oKhSBk9s+f0/b3U0N f0OpNPiS2teawCZoZcXZv4CkgyVyNyKoq0BgnutFZm19ETvJbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHChEoCo+p5bAsytDcJ3FRPD98EGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYzcw YmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNkMDZiY2UvY2E5MDUwYjktYmZiNC0z NmI3LTk4YWItNGRlM2Q0ZDc3OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmM3MGJmMWEtZDcyNi00YTE2LTk3 ZmUtNDRmYzIzZDA2YmNlL2ZjNzBiZjFhLWQ3MjYtNGExNi05N2ZlLTQ0ZmMyM2Qw NmJjZS5jcmwwHwYDVR0jBBgwFoAUg36+v2aCALASU6K2dE11H9ZZOa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZj MjNkMDZiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQhbinx6FKXJsUcbeROCZuBo6RXDRofKWOvM6p0kvSizjrkYjtMQf/F +N7GoYhbmZZyBIbdFwdAb6/rtlsC73Tg0nNNORGlEIPffWQ38aYsHqo4IUyl/+Q/ +dxIkq6aEBDtjSm+ucT4cqxQEKhY5/wADAMgqiQj47Ac7assKB6VYB4wvrH1xFX6 lW+p57SspaJvYVG5nAn4KRdwcs/aVW510qOHxYMWhmzdP8TasSPbV3vWj6opstsG jKUi7LeBc6cB3m5DrQSV4d4dNPgKFSRiVKS91hQ70rg5fXS8xvV4Q4wOI8uORK/a d/N1V5m3IubMnIuugHrUX83rPYwCTss= -----END CERTIFICATE-----Generated at Mon Aug 4 14:47:55 2025 by rpki-client