$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa File: ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa (raw, json) Hash identifier: Tz4q1BwMDdurBxTQKUBSGV+5wUSV9e0TmxzBbrIqFYw= Subject key identifier: 56:E3:A4:63:8E:77:51:25:A1:78:B4:07:90:A9:C1:20:F1:EE:3B:4E Certificate issuer: /CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Certificate serial: 010D0C9F4328584EBB11C4DB2FED87766AEC6D80 Authority key identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 11075 IP address blocks: 46.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c4:db:2f:ed:87:76:6a:ec:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=cb067884-39d4-48d3-9622-971b05b59f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:74:d6:cd:c9:7a:7a:4d:cd:be:70:44:ed:fb: 22:c1:bf:03:44:65:fd:8f:a7:03:02:3b:14:d6:f4: 11:dc:2f:2e:7f:9c:99:00:66:36:c7:08:01:60:a0: 0e:70:fd:82:ff:7c:1d:6a:da:8d:9f:54:7a:3b:26: b7:7a:b7:d0:4c:78:98:ee:8f:b5:f3:64:bf:f3:ae: 79:5b:0a:f6:94:e5:a0:f8:6a:af:fd:dd:18:62:0e: 4a:18:f3:99:93:ce:c8:76:0c:9c:60:80:f0:7a:36: cf:f2:7c:d8:80:74:21:ad:d4:9a:83:b4:5a:99:05: 95:c5:16:76:70:26:ed:39:a9:f4:a6:70:e9:36:1d: 70:ce:ea:40:37:33:c0:38:3c:42:ec:f3:0c:0e:7c: 6a:10:bd:ff:bd:16:02:91:3a:9b:22:23:2b:ab:85: 7d:aa:8c:69:11:95:9a:5f:e7:d4:00:40:88:e8:a6: 8a:38:d9:36:ed:f9:c0:65:67:f1:0b:05:77:29:84: 1a:f1:da:e6:98:55:b1:1c:7b:fe:4e:06:27:7b:6b: 64:f9:41:e0:5e:c1:1a:70:45:62:ab:a1:61:37:8a: e4:96:06:28:f5:2e:29:89:46:4c:c8:52:82:ce:18: b3:fd:68:fc:f3:8f:8a:8f:19:e9:83:cd:f8:be:2d: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E3:A4:63:8E:77:51:25:A1:78:B4:07:90:A9:C1:20:F1:EE:3B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl X509v3 Authority Key Identifier: keyid:83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer sbgp-ipAddrBlock: critical IPv4: 46.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:80:03:f9:a1:cb:81:a5:84:1c:b4:06:5b:c9:68:c6:c5:3f: 90:9f:ee:e7:5a:b8:95:b7:5d:ca:1c:c3:3a:2b:ab:c6:87:86: 63:33:13:ac:69:2a:65:5a:54:04:ce:0c:8f:11:53:9b:bd:99: 1d:57:ab:8f:b9:0f:8f:7b:69:a4:05:b4:7c:7f:e9:2b:9a:e3: 0b:c6:f8:28:a8:d8:f3:88:ec:a7:c7:2a:17:54:80:a8:e8:ec: 15:cd:63:79:d8:27:d4:86:87:63:e2:f8:7d:d0:be:2a:94:70: 66:d5:45:34:a0:fe:40:d4:9a:f7:4e:fe:38:3b:fe:04:bd:61: 1c:95:9c:65:6f:ce:1c:73:5a:31:23:41:1a:8d:90:fe:ba:c2: 59:4f:fa:9f:bd:c9:b1:13:39:75:40:e1:64:6c:26:2b:83:10: c7:27:61:a5:f9:62:c2:e6:4e:a2:5a:5c:1c:34:be:3c:a1:b8: 32:cb:8b:50:85:b7:6f:a2:28:5a:72:74:87:8b:a3:c7:35:70: d0:37:cf:7c:db:d5:6c:fd:05:d1:86:e7:a8:65:de:6e:6a:85: 4e:56:c9:48:4a:70:20:e7:d8:64:da:9a:fc:4a:56:57:84:5d: a2:aa:70:17:9e:ad:5b:fd:32:1c:2d:67:84:83:d2:66:6e:59: f7:d6:17:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcTbL+2HdmrsbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM3MGJmMWEtZDcyNi00YTE2LTk3ZmUtNDRmYzIzZDA2 YmNlMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk Y2IwNjc4ODQtMzlkNC00OGQzLTk2MjItOTcxYjA1YjU5ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXTWzcl6ek3NvnBE7fsiwb8DRGX9j6cDAjsU 1vQR3C8uf5yZAGY2xwgBYKAOcP2C/3wdatqNn1R6Oya3erfQTHiY7o+182S/8655 Wwr2lOWg+Gqv/d0YYg5KGPOZk87IdgycYIDwejbP8nzYgHQhrdSag7RamQWVxRZ2 cCbtOan0pnDpNh1wzupANzPAODxC7PMMDnxqEL3/vRYCkTqbIiMrq4V9qoxpEZWa X+fUAECI6KaKONk27fnAZWfxCwV3KYQa8drmmFWxHHv+TgYne2tk+UHgXsEacEVi q6FhN4rklgYo9S4piUZMyFKCzhiz/Wj884+Kjxnpg834vi16GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbjpGOOd1EloXi0B5CpwSDx7jtOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYzcw YmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNkMDZiY2UvY2E5MDUwYjktYmZiNC0z NmI3LTk4YWItNGRlM2Q0ZDc3OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmM3MGJmMWEtZDcyNi00YTE2LTk3 ZmUtNDRmYzIzZDA2YmNlL2ZjNzBiZjFhLWQ3MjYtNGExNi05N2ZlLTQ0ZmMyM2Qw NmJjZS5jcmwwHwYDVR0jBBgwFoAUg36+v2aCALASU6K2dE11H9ZZOa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZj MjNkMDZiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyAA/mhy4GlhBy0BlvJaMbFP5Cf7udauJW3Xcocwzorq8aHhmMzE6xp KmVaVATODI8RU5u9mR1Xq4+5D497aaQFtHx/6Sua4wvG+Cio2POI7KfHKhdUgKjo 7BXNY3nYJ9SGh2Pi+H3QviqUcGbVRTSg/kDUmvdO/jg7/gS9YRyVnGVvzhxzWjEj QRqNkP66wllP+p+9ybETOXVA4WRsJiuDEMcnYaX5YsLmTqJaXBw0vjyhuDLLi1CF t2+iKFpydIeLo8c1cNA3z3zb1Wz9BdGG56hl3m5qhU5WyUhKcCDn2GTamvxKVleE XaKqcBeerVv9MhwtZ4SD0mZuWffWF/o= -----END CERTIFICATE-----Generated at Tue Sep 22 18:08:27 2026 by rpki-client