$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/dba60555-3a63-320b-815c-3741e552e44a.roa File: dba60555-3a63-320b-815c-3741e552e44a.roa (raw, json) Hash identifier: 7iy93Z9K7hhKayvE3nd3RI6NxR9toygTOmb7xfmWBlg= Subject key identifier: A2:75:D6:1E:62:9F:10:2D:3B:C2:BD:E2:45:AB:48:01:84:7B:BB:66 Certificate issuer: /CN=46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd Certificate serial: 010D0C9F4328584F17324889B8D6DC13ABA63A98 Authority key identifier: 0D:F9:D7:68:00:02:78:2D:9A:95:01:6A:C4:A6:16:70:69:D4:61:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/dba60555-3a63-320b-815c-3741e552e44a.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 401232 IP address blocks: 104.219.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:48:89:b8:d6:dc:13:ab:a6:3a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=5f50c6fe-9862-4cfa-8d60-567039c583b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:0a:be:6a:61:9d:61:2d:f3:a6:11:43:5c: b1:33:08:f0:a9:8d:5f:81:48:bf:52:8d:98:46:80: 2b:45:97:55:14:96:14:cd:70:ac:7a:96:3f:8d:86: c8:4d:5a:bf:e6:ee:83:e5:16:63:6f:32:95:25:44: 91:ed:c4:21:c2:42:77:eb:fc:49:e7:5f:43:63:95: 01:ea:52:0c:ec:24:71:8c:35:65:0d:8a:df:a0:3e: cc:05:f7:2e:6e:75:e9:35:3e:e8:a7:65:8c:1c:c0: 32:81:30:c3:ee:2d:05:d3:f7:ec:5c:72:76:ca:d8: 87:2e:8c:b4:69:2d:ce:dd:4a:b1:55:32:7c:ac:bd: cf:66:d1:de:db:6f:c7:d6:91:07:81:c9:f6:66:6b: 53:04:e2:7d:b1:67:fd:a6:a7:89:c4:97:2b:e0:59: 6a:9b:e7:d8:a0:8a:6c:c7:fd:4c:69:23:6f:cb:01: 16:2b:4b:5a:af:18:3a:77:c8:de:44:64:d4:d2:b6: a6:b3:37:a2:4d:bb:f3:6e:65:a1:59:99:d9:f9:3f: 17:7e:0e:e7:3a:1d:90:26:c6:ba:20:ed:f4:83:fd: 68:d4:8f:3b:53:bc:ce:76:52:99:c9:48:f2:4d:59: c2:7e:c6:31:61:51:2d:51:58:21:f7:44:3e:a7:68: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:75:D6:1E:62:9F:10:2D:3B:C2:BD:E2:45:AB:48:01:84:7B:BB:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/dba60555-3a63-320b-815c-3741e552e44a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.crl X509v3 Authority Key Identifier: keyid:0D:F9:D7:68:00:02:78:2D:9A:95:01:6A:C4:A6:16:70:69:D4:61:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.cer sbgp-ipAddrBlock: critical IPv4: 104.219.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:31:17:1a:e4:50:07:6d:c0:3b:59:d7:e0:f4:20:ab:0d:22: 8b:6a:00:9a:fa:0b:ee:ca:f1:f9:c9:17:4c:3b:06:18:d2:ff: 66:71:65:88:bf:96:13:45:9d:21:b8:3a:af:50:0a:54:9d:c6: e1:70:7e:97:a4:88:16:db:fc:d3:d6:64:1a:52:10:44:72:37: 69:ff:2c:12:3a:23:ab:08:bf:27:07:05:6b:82:b4:77:ee:51: 94:f7:d7:c6:11:f7:f2:cf:a9:bb:7f:dd:be:6e:54:1e:9c:9c: 46:45:92:b0:25:a4:91:45:96:74:1c:28:5c:96:c0:cc:c4:57: 7b:b4:83:41:af:57:01:6b:20:3e:a3:e7:6c:de:3f:9d:80:10: 29:7f:0a:7b:06:8d:44:ca:d2:f1:4e:af:27:c7:37:0d:99:c6: 79:9a:a8:3a:c1:32:38:0a:16:38:ae:9e:f3:a9:17:2c:9d:e9: 8e:91:dc:37:43:f0:34:d4:f6:c7:72:01:79:e4:d0:c9:e9:45: a1:17:70:79:e9:d4:4e:16:6c:ba:db:3d:2b:93:ec:db:65:44: e3:63:42:a2:9b:4a:b8:a7:17:0f:34:b5:c4:5d:24:d3:5d:3d: 1f:9f:55:b8:65:a2:9b:c6:a3:06:e7:f8:aa:ea:43:43:1d:9e: 0b:8f:86:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkiJuNbcE6umOpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZjOWVmZTQtOGIxYS00YWVjLWI1ZmYtM2ZjZGZmMTY0 MGJkMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NWY1MGM2ZmUtOTg2Mi00Y2ZhLThkNjAtNTY3MDM5YzU4M2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc0KvmphnWEt86YRQ1yxMwjwqY1fgUi/Uo2Y RoArRZdVFJYUzXCsepY/jYbITVq/5u6D5RZjbzKVJUSR7cQhwkJ36/xJ519DY5UB 6lIM7CRxjDVlDYrfoD7MBfcubnXpNT7op2WMHMAygTDD7i0F0/fsXHJ2ytiHLoy0 aS3O3UqxVTJ8rL3PZtHe22/H1pEHgcn2ZmtTBOJ9sWf9pqeJxJcr4Flqm+fYoIps x/1MaSNvywEWK0tarxg6d8jeRGTU0ramszeiTbvzbmWhWZnZ+T8Xfg7nOh2QJsa6 IO30g/1o1I87U7zOdlKZyUjyTVnCfsYxYVEtUVgh90Q+p2hcrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ11h5inxAtO8K94kWrSAGEe7tmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NmM5 ZWZlNC04YjFhLTRhZWMtYjVmZi0zZmNkZmYxNjQwYmQvZGJhNjA1NTUtM2E2My0z MjBiLTgxNWMtMzc0MWU1NTJlNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDZjOWVmZTQtOGIxYS00YWVjLWI1 ZmYtM2ZjZGZmMTY0MGJkLzQ2YzllZmU0LThiMWEtNGFlYy1iNWZmLTNmY2RmZjE2 NDBiZC5jcmwwHwYDVR0jBBgwFoAUDfnXaAACeC2alQFqxKYWcGnUYRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NmM5ZWZlNC04YjFhLTRhZWMtYjVmZi0zZmNk ZmYxNjQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4xFxrkUAdtwDtZ1+D0IKsNIotqAJr6C+7K8fnJF0w7BhjS/2ZxZYi/ lhNFnSG4Oq9QClSdxuFwfpekiBbb/NPWZBpSEERyN2n/LBI6I6sIvycHBWuCtHfu UZT318YR9/LPqbt/3b5uVB6cnEZFkrAlpJFFlnQcKFyWwMzEV3u0g0GvVwFrID6j 52zeP52AECl/CnsGjUTK0vFOryfHNw2ZxnmaqDrBMjgKFjiunvOpFyyd6Y6R3DdD 8DTU9sdyAXnk0MnpRaEXcHnp1E4WbLrbPSuT7NtlRONjQqKbSrinFw80tcRdJNNd PR+fVbhlopvGowbn+KrqQ0MdnguPhrk= -----END CERTIFICATE-----Generated at Tue Sep 22 15:54:29 2026 by rpki-client