$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa File: ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa (raw, json) Hash identifier: tpixyqxu6A5yDptRlnX2qgfhe5Ug6BGrVJBcwUzr0Os= Subject key identifier: 6D:72:16:AF:FA:D3:60:ED:0D:E7:EF:AF:22:68:92:7F:E7:2D:A8:30 Certificate issuer: /CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Certificate serial: 010D0C9F4328584E18AEF95D7C99C21650E0B0B0 Authority key identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 11075 IP address blocks: 46.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:f9:5d:7c:99:c2:16:50:e0:b0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=aae35d07-4618-4d7c-a3a3-d698cbc1685a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:0b:7e:04:1d:b3:09:68:2e:24:bb:19:20: 7d:2b:72:c9:5e:97:d7:8e:0a:91:33:d8:c1:12:b6: cf:85:64:8a:05:6b:9e:d0:8d:8b:ce:f2:f9:2a:fa: c6:a1:4f:1d:c2:0a:0c:73:89:fe:61:61:e0:fc:e1: 71:b3:35:a6:df:e8:f1:d5:66:ce:2d:37:a3:5a:54: 02:4d:cd:9e:67:97:49:35:e7:68:ba:f6:9e:d2:48: 0a:eb:ad:9a:72:04:29:23:2c:83:2a:c0:b4:dd:19: 21:b4:87:12:3c:b4:1d:09:11:dd:88:59:09:37:c4: 64:ae:ea:67:c0:6c:16:80:99:9c:80:41:e9:31:97: bb:35:fd:fc:87:79:51:a2:4d:f8:e9:0e:aa:f5:46: 56:ec:55:da:4e:15:9c:13:71:c3:30:c9:63:c0:1a: 97:fe:08:cd:42:fc:44:13:35:11:6e:c2:36:d4:67: c9:2f:b7:c9:ea:16:7d:a8:8d:6d:df:b5:41:0a:c0: a8:db:52:b1:e4:d8:8b:16:9a:17:db:2a:6a:43:44: 14:2f:1c:b8:0e:bd:fa:32:9c:ee:d7:ec:17:c9:6f: d4:ec:1c:c7:46:e5:50:a4:89:a9:38:71:76:40:f6: 11:f8:e6:06:10:7b:9c:11:b6:2e:4d:0f:3f:5d:70: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:72:16:AF:FA:D3:60:ED:0D:E7:EF:AF:22:68:92:7F:E7:2D:A8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl X509v3 Authority Key Identifier: keyid:83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer sbgp-ipAddrBlock: critical IPv4: 46.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:41:e1:08:f4:21:fe:97:32:d7:37:d6:97:1a:a7:b5:ad:38: e4:17:47:74:48:0c:78:1c:99:d6:13:5b:38:5b:56:26:b3:ac: 70:42:4b:e5:6a:7a:ec:bc:91:42:6d:ce:39:21:48:8a:58:bc: 15:2b:00:67:4c:5e:9e:cc:f0:eb:10:f4:ce:a3:2f:f8:3e:de: bf:0b:07:7b:1a:61:2e:a9:4b:44:cd:05:0b:50:cc:7e:de:08: 2d:59:79:52:fe:3f:c4:dc:cd:25:6d:df:b5:f8:7f:3a:7c:75: 14:6f:97:4e:26:a3:a6:e0:8a:c1:85:4a:cf:32:36:a7:50:6e: bc:20:a0:53:19:da:e0:e5:f9:46:13:68:16:19:0d:64:f6:b3: 94:3c:51:fb:3b:ea:8c:23:ef:7f:7d:30:82:19:97:1a:b1:53: 19:4b:83:cd:b3:ea:f6:63:34:5d:ed:a7:fe:92:bd:2a:71:8b: f4:a3:ba:5e:e9:84:d9:9c:52:2b:c3:8f:c2:9a:1e:b1:a9:4f: 94:8f:24:38:82:89:cf:30:71:83:88:dd:c4:c1:4f:e6:c7:59: 9f:c3:dd:d0:07:53:b5:de:be:65:97:84:89:66:96:16:79:1f: 71:34:a5:11:6a:f3:c1:6f:7b:c8:40:98:a5:f5:45:ab:92:80: c3:a9:20:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrvldfJnCFlDgsLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM3MGJmMWEtZDcyNi00YTE2LTk3ZmUtNDRmYzIzZDA2 YmNlMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk YWFlMzVkMDctNDYxOC00ZDdjLWEzYTMtZDY5OGNiYzE2ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPQLfgQdswloLiS7GSB9K3LJXpfXjgqRM9jB ErbPhWSKBWue0I2LzvL5KvrGoU8dwgoMc4n+YWHg/OFxszWm3+jx1WbOLTejWlQC Tc2eZ5dJNedouvae0kgK662acgQpIyyDKsC03RkhtIcSPLQdCRHdiFkJN8Rkrupn wGwWgJmcgEHpMZe7Nf38h3lRok346Q6q9UZW7FXaThWcE3HDMMljwBqX/gjNQvxE EzURbsI21GfJL7fJ6hZ9qI1t37VBCsCo21Kx5NiLFpoX2ypqQ0QULxy4Dr36Mpzu 1+wXyW/U7BzHRuVQpImpOHF2QPYR+OYGEHucEbYuTQ8/XXB9jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1yFq/602DtDefvryJokn/nLagwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYzcw YmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNkMDZiY2UvY2E5MDUwYjktYmZiNC0z NmI3LTk4YWItNGRlM2Q0ZDc3OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmM3MGJmMWEtZDcyNi00YTE2LTk3 ZmUtNDRmYzIzZDA2YmNlL2ZjNzBiZjFhLWQ3MjYtNGExNi05N2ZlLTQ0ZmMyM2Qw NmJjZS5jcmwwHwYDVR0jBBgwFoAUg36+v2aCALASU6K2dE11H9ZZOa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZj MjNkMDZiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxB4Qj0If6XMtc31pcap7WtOOQXR3RIDHgcmdYTWzhbViazrHBCS+Vq euy8kUJtzjkhSIpYvBUrAGdMXp7M8OsQ9M6jL/g+3r8LB3saYS6pS0TNBQtQzH7e CC1ZeVL+P8TczSVt37X4fzp8dRRvl04mo6bgisGFSs8yNqdQbrwgoFMZ2uDl+UYT aBYZDWT2s5Q8Ufs76owj7399MIIZlxqxUxlLg82z6vZjNF3tp/6SvSpxi/Sjul7p hNmcUivDj8KaHrGpT5SPJDiCic8wcYOI3cTBT+bHWZ/D3dAHU7XevmWXhIlmlhZ5 H3E0pRFq88Fve8hAmKX1RauSgMOpICM= -----END CERTIFICATE-----Generated at Sat Jun 13 11:26:34 2026 by rpki-client