$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa File: ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa (raw, json) Hash identifier: 2IRZzcJGue7+Nbnsz8axy0XDu0C/zBctrXkGyEH3uag= Subject key identifier: 5B:4B:B8:6B:3A:AB:EE:27:34:4E:D7:7B:FF:E6:83:D5:0B:53:E1:B9 Certificate issuer: /CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Certificate serial: 010D0C9F43285849B896961E4815E00FF2F66300 Authority key identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa Signing time: Fri 02 May 2025 15:45:58 +0000 ROA not before: Fri 02 May 2025 15:45:58 +0000 ROA not after: Thu 31 Jul 2025 15:45:58 +0000 asID: 11075 IP address blocks: 46.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:96:96:1e:48:15:e0:0f:f2:f6:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Validity Not Before: May 2 15:45:58 2025 GMT Not After : Jul 31 15:45:58 2025 GMT Subject: CN=c2b919c8-a455-4168-ae56-5168de56ded5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:bb:5c:74:4b:01:88:0d:01:d0:6f:71:98: 9e:c9:1a:5b:3b:88:30:e7:8b:03:46:4e:51:cb:82: e7:06:4d:8b:cf:67:ed:53:0c:f6:27:06:8a:50:68: b6:b3:96:cd:02:ef:10:8c:b5:43:32:f8:cb:0d:1d: 14:d1:85:aa:b0:ea:4b:00:c2:d5:e4:e0:6f:8a:ce: 9d:46:08:0e:6b:e7:f4:11:f2:b9:ba:df:37:fd:04: 39:78:94:72:d8:36:bb:65:9b:72:08:0c:70:db:66: 0e:ae:a1:66:11:93:ce:8d:72:48:8b:4e:fd:1b:ad: e7:38:04:61:59:1f:4a:c3:69:c5:b6:ad:44:31:2c: d7:f2:f4:dc:40:b7:9f:e5:e7:b0:8c:00:9f:e5:99: 3e:d1:85:bb:cb:06:f2:f0:cb:cf:7c:8c:a8:96:e2: df:98:c0:e9:51:c2:a1:90:d5:b7:a8:26:b4:2b:fb: 94:e1:66:87:e5:65:b5:72:68:71:4a:a9:d9:85:17: 02:70:4a:ff:12:85:77:e7:e0:69:fc:b2:a7:1d:21: c9:4e:a0:86:bd:de:3d:d0:b9:49:ee:12:06:2a:fb: c6:9d:86:f4:3f:c1:d5:2a:e6:61:77:cf:df:13:ec: 46:39:5d:48:2b:60:7a:bb:be:2b:ed:34:21:ec:6f: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4B:B8:6B:3A:AB:EE:27:34:4E:D7:7B:FF:E6:83:D5:0B:53:E1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ca9050b9-bfb4-36b7-98ab-4de3d4d778ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.crl X509v3 Authority Key Identifier: keyid:83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer sbgp-ipAddrBlock: critical IPv4: 46.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3e:99:2a:30:10:0a:4c:81:eb:0e:ab:51:dc:f6:70:ef:99: 09:aa:84:fd:d9:75:2a:56:1a:8e:ef:25:ed:38:a1:86:17:83: cd:68:94:72:7e:aa:2f:f2:1d:39:95:c5:54:91:d0:1c:57:11: 81:69:37:f2:37:55:d6:81:d6:27:07:32:ff:c1:f8:12:de:32: 4c:c9:ee:f8:2f:d9:33:4e:d5:17:9b:eb:a8:59:5e:fe:42:dc: bd:24:d6:04:3b:a0:c1:3a:1e:35:a3:a2:69:23:05:4b:3e:a9: 7d:da:2f:32:34:79:43:15:3a:4c:7f:a1:8a:55:b4:17:fc:e8: 64:f8:e0:44:65:ab:36:7f:74:f6:91:c7:71:6d:3d:1d:8f:7d: df:ad:e0:69:5e:3e:4f:51:a1:03:7a:1c:b5:e1:a4:5b:b4:e9: e8:83:7b:69:25:af:6e:46:55:67:80:ee:41:25:90:9d:96:31: 49:dc:2e:47:68:a8:90:58:39:1c:26:bb:82:5f:db:6d:31:3c: 16:e7:64:74:96:cf:ea:23:bf:bb:17:ea:5b:36:85:ff:ce:b5: 4e:6d:ac:c2:63:5b:f6:e0:40:99:5a:56:d2:b1:19:d3:1c:96: 73:d5:45:45:2e:14:09:9f:fd:dc:54:db:63:c9:45:3f:74:a0: 10:79:9b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm4lpYeSBXgD/L2YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM3MGJmMWEtZDcyNi00YTE2LTk3ZmUtNDRmYzIzZDA2 YmNlMB4XDTI1MDUwMjE1NDU1OFoXDTI1MDczMTE1NDU1OFowLzEtMCsGA1UEAxMk YzJiOTE5YzgtYTQ1NS00MTY4LWFlNTYtNTE2OGRlNTZkZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipG7XHRLAYgNAdBvcZieyRpbO4gw54sDRk5R y4LnBk2Lz2ftUwz2JwaKUGi2s5bNAu8QjLVDMvjLDR0U0YWqsOpLAMLV5OBvis6d RggOa+f0EfK5ut83/QQ5eJRy2Da7ZZtyCAxw22YOrqFmEZPOjXJIi079G63nOARh WR9Kw2nFtq1EMSzX8vTcQLef5eewjACf5Zk+0YW7ywby8MvPfIyoluLfmMDpUcKh kNW3qCa0K/uU4WaH5WW1cmhxSqnZhRcCcEr/EoV35+Bp/LKnHSHJTqCGvd490LlJ 7hIGKvvGnYb0P8HVKuZhd8/fE+xGOV1IK2B6u74r7TQh7G+d6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtLuGs6q+4nNE7Xe//mg9ULU+G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYzcw YmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNkMDZiY2UvY2E5MDUwYjktYmZiNC0z NmI3LTk4YWItNGRlM2Q0ZDc3OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmM3MGJmMWEtZDcyNi00YTE2LTk3 ZmUtNDRmYzIzZDA2YmNlL2ZjNzBiZjFhLWQ3MjYtNGExNi05N2ZlLTQ0ZmMyM2Qw NmJjZS5jcmwwHwYDVR0jBBgwFoAUg36+v2aCALASU6K2dE11H9ZZOa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZj MjNkMDZiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI+mSowEApMgesOq1Hc9nDvmQmqhP3ZdSpWGo7vJe04oYYXg81olHJ+ qi/yHTmVxVSR0BxXEYFpN/I3VdaB1icHMv/B+BLeMkzJ7vgv2TNO1Reb66hZXv5C 3L0k1gQ7oME6HjWjomkjBUs+qX3aLzI0eUMVOkx/oYpVtBf86GT44ERlqzZ/dPaR x3FtPR2Pfd+t4GlePk9RoQN6HLXhpFu06eiDe2klr25GVWeA7kElkJ2WMUncLkdo qJBYORwmu4Jf220xPBbnZHSWz+ojv7sX6ls2hf/OtU5trMJjW/bgQJlaVtKxGdMc lnPVRUUuFAmf/dxU22PJRT90oBB5m3E= -----END CERTIFICATE-----Generated at Tue May 6 18:19:45 2025 by rpki-client