$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/dba60555-3a63-320b-815c-3741e552e44a.roa File: dba60555-3a63-320b-815c-3741e552e44a.roa (raw, json) Hash identifier: XNSraIdFzeWc6KAqZ7t1J8UzuPSXYAvqOqdwoGJVNU4= Subject key identifier: C7:C4:2D:66:D9:CC:E8:00:77:52:66:50:B2:42:4D:91:70:09:EE:AB Certificate issuer: /CN=46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd Certificate serial: 010D0C9F4328584E74CF709294D44FE2FE176A00 Authority key identifier: 0D:F9:D7:68:00:02:78:2D:9A:95:01:6A:C4:A6:16:70:69:D4:61:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/dba60555-3a63-320b-815c-3741e552e44a.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 401232 IP address blocks: 104.219.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:70:92:94:d4:4f:e2:fe:17:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=99f61720-bebc-41e7-82a5-8e84c9abebe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e4:38:c9:69:6c:21:57:52:cf:eb:67:38:06: 8f:36:e6:a3:97:44:b8:24:d7:d6:66:21:a5:9c:d2: da:93:9f:07:26:2a:92:cc:da:43:ce:a9:5e:b6:f2: bc:98:35:6f:09:2a:9c:c9:40:b4:18:4a:45:67:7d: 9c:a2:47:ca:37:13:b4:f4:c0:1a:c8:3f:69:77:c0: 06:01:36:6c:19:64:3b:ac:32:86:8f:ef:4c:38:ad: 7a:34:29:c1:5b:f1:cc:3d:0b:41:08:94:c1:af:c8: 88:6d:fe:1d:d3:41:dd:11:93:c4:be:e0:87:40:4f: 5b:c7:c9:d9:7b:c5:8f:2d:2c:db:9d:18:c0:19:9d: d1:f4:b3:4c:cb:7a:c5:07:5c:a0:14:59:9c:71:dc: 61:5b:3b:b0:7f:c6:93:7e:6e:d4:90:4a:43:d5:2f: ae:59:19:b2:50:16:8a:de:7b:ba:04:e2:cc:0e:d5: cc:74:28:5d:55:e4:c6:e5:97:1a:90:48:93:54:16: ab:bf:a2:8d:b3:1f:1d:7d:0c:8e:e3:89:70:37:14: a8:a3:20:2d:86:b2:3b:99:e8:b4:d0:3c:dc:79:b2: 2c:43:cd:1c:12:b6:e3:80:c0:aa:49:e4:d9:d4:89: 79:d1:84:2e:13:d2:1d:b2:8a:89:34:07:fe:bc:bb: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C4:2D:66:D9:CC:E8:00:77:52:66:50:B2:42:4D:91:70:09:EE:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/dba60555-3a63-320b-815c-3741e552e44a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.crl X509v3 Authority Key Identifier: keyid:0D:F9:D7:68:00:02:78:2D:9A:95:01:6A:C4:A6:16:70:69:D4:61:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.cer sbgp-ipAddrBlock: critical IPv4: 104.219.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ab:f0:b6:50:85:82:f6:43:89:c1:c6:b5:cc:f4:51:e9:ba: bf:e9:e5:74:c8:8f:e3:0b:df:07:07:28:03:df:a2:5a:c1:b0: a9:fe:40:3e:04:13:3d:87:35:66:ad:f1:1a:df:94:72:ec:0a: 2e:d2:c7:28:87:e4:35:e9:71:1c:a1:9d:8c:ee:42:1f:0c:68: d5:84:3c:6c:27:46:58:33:0b:3b:34:0c:d5:49:ed:bd:67:e4: 73:f4:33:cf:31:42:3d:b3:77:03:96:f7:78:5c:74:a5:d3:5a: 5a:15:d4:1d:6e:94:38:77:bf:d0:2a:0d:e3:aa:1c:cb:ee:2a: 0b:5d:ac:78:13:3e:4b:73:a6:c1:62:dc:e0:f6:6e:80:14:71: f7:93:44:62:8b:0c:ba:65:09:06:dd:c9:3c:dc:03:ce:c6:dc: 86:a8:64:df:f0:af:01:dd:c6:b9:21:08:29:80:2e:21:97:97: 5f:c5:fc:d8:31:a6:9c:ee:d0:09:7d:91:cf:f4:13:79:f9:38: 8d:5e:d3:72:9e:87:e2:6a:63:74:5e:e4:71:6f:a6:e4:5a:08: ac:c1:b0:bb:3e:10:9e:cf:20:e3:54:3e:19:64:bd:43:bc:3d: c3:83:0a:e3:d9:07:da:b9:27:ae:0a:5a:78:7f:00:33:8f:a6: ad:11:53:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z3CSlNRP4v4XagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZjOWVmZTQtOGIxYS00YWVjLWI1ZmYtM2ZjZGZmMTY0 MGJkMB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk OTlmNjE3MjAtYmViYy00MWU3LTgyYTUtOGU4NGM5YWJlYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOQ4yWlsIVdSz+tnOAaPNuajl0S4JNfWZiGl nNLak58HJiqSzNpDzqletvK8mDVvCSqcyUC0GEpFZ32cokfKNxO09MAayD9pd8AG ATZsGWQ7rDKGj+9MOK16NCnBW/HMPQtBCJTBr8iIbf4d00HdEZPEvuCHQE9bx8nZ e8WPLSzbnRjAGZ3R9LNMy3rFB1ygFFmccdxhWzuwf8aTfm7UkEpD1S+uWRmyUBaK 3nu6BOLMDtXMdChdVeTG5ZcakEiTVBarv6KNsx8dfQyO44lwNxSooyAthrI7mei0 0DzcebIsQ80cErbjgMCqSeTZ1Il50YQuE9IdsoqJNAf+vLtfnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfELWbZzOgAd1JmULJCTZFwCe6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NmM5 ZWZlNC04YjFhLTRhZWMtYjVmZi0zZmNkZmYxNjQwYmQvZGJhNjA1NTUtM2E2My0z MjBiLTgxNWMtMzc0MWU1NTJlNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDZjOWVmZTQtOGIxYS00YWVjLWI1 ZmYtM2ZjZGZmMTY0MGJkLzQ2YzllZmU0LThiMWEtNGFlYy1iNWZmLTNmY2RmZjE2 NDBiZC5jcmwwHwYDVR0jBBgwFoAUDfnXaAACeC2alQFqxKYWcGnUYRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NmM5ZWZlNC04YjFhLTRhZWMtYjVmZi0zZmNk ZmYxNjQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWr8LZQhYL2Q4nBxrXM9FHpur/p5XTIj+ML3wcHKAPfolrBsKn+QD4E Ez2HNWat8RrflHLsCi7SxyiH5DXpcRyhnYzuQh8MaNWEPGwnRlgzCzs0DNVJ7b1n 5HP0M88xQj2zdwOW93hcdKXTWloV1B1ulDh3v9AqDeOqHMvuKgtdrHgTPktzpsFi 3OD2boAUcfeTRGKLDLplCQbdyTzcA87G3IaoZN/wrwHdxrkhCCmALiGXl1/F/Ngx ppzu0Al9kc/0E3n5OI1e03Keh+JqY3Re5HFvpuRaCKzBsLs+EJ7PIONUPhlkvUO8 PcODCuPZB9q5J64KWnh/ADOPpq0RU2o= -----END CERTIFICATE-----Generated at Wed Jul 15 01:48:11 2026 by rpki-client