
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa
File: a0f485f5-967d-3448-a732-d57c2d1d96bb.roa (raw, json)
Hash identifier: hsTK0h1mS6mC6y6FqpMiruowxKpaVzW7QrIVlRx3YY4=
Subject key identifier: 48:FC:35:73:58:6F:5E:AF:77:22:2C:DF:DE:98:AF:C4:D5:07:DC:A5
Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial: 010D0C9F4328584D7B6A90DFF465C3CC3B594D00
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa
Signing time: Sun 12 Apr 2026 13:00:30 +0000
ROA not before: Sun 12 Apr 2026 13:00:30 +0000
ROA not after: Sat 11 Jul 2026 13:00:30 +0000
asID: 5715
IP address blocks: 2604:3000::/32 maxlen: 48
2604:d380::/32 maxlen: 48
2605:6d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7b:6a:90:df:f4:65:c3:cc:3b:59:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Validity
Not Before: Apr 12 13:00:30 2026 GMT
Not After : Jul 11 13:00:30 2026 GMT
Subject: CN=2c89b424-5b95-4abf-aea4-f1b5fe662ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:ea:98:b6:98:33:01:59:59:4c:c4:8a:c2:
07:93:f4:08:68:f0:54:75:ac:ba:26:6b:bf:19:3f:
9e:2b:9a:be:71:d2:bd:24:b1:4a:0c:00:39:01:37:
cb:14:a1:f6:cf:07:9a:3b:ff:0d:2b:75:69:f2:fd:
b9:f0:ef:69:82:12:95:85:14:52:17:64:43:38:a7:
e1:d3:e0:a6:c7:ec:95:b6:8c:34:28:3d:84:82:4e:
45:92:3f:95:20:91:11:ed:14:79:53:7b:7b:bc:61:
52:ae:85:a0:88:c6:a3:73:58:15:b3:6c:45:8d:22:
10:55:a0:8e:c9:62:55:37:a7:0c:84:73:0c:dc:0f:
97:94:ae:cb:82:a6:27:0f:2e:42:04:a6:36:f7:32:
c5:bd:26:8b:d7:86:8b:76:d7:7d:6a:57:dc:17:3a:
7c:3e:e0:3e:41:b5:94:d9:a4:d1:db:78:7f:c7:a9:
82:9d:9e:ec:78:df:08:34:9c:2c:5a:31:8e:f1:0b:
8d:9a:4a:35:b8:e3:6d:7a:b5:f4:8a:55:20:cf:bf:
0c:9c:cf:50:07:5b:21:d7:0b:5b:ce:e2:a6:10:e8:
58:ba:40:0c:ec:b7:62:9c:63:a7:91:5d:21:bc:c1:
b7:83:7d:a8:5f:d6:0b:9b:bf:57:4e:4c:4c:a0:21:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FC:35:73:58:6F:5E:AF:77:22:2C:DF:DE:98:AF:C4:D5:07:DC:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
X509v3 Authority Key Identifier:
keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3000::/32
2604:d380::/32
2605:6d80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c9:96:08:a0:a7:56:ac:4c:4e:ad:29:e4:47:e4:42:09:33:
58:69:f8:fc:0e:cc:f9:29:cf:53:51:ea:d7:ea:d9:88:99:d0:
24:c1:e6:38:ff:bd:d9:11:09:e3:07:66:5f:c0:c7:e3:25:52:
b9:ea:dd:98:1a:65:93:af:bd:0b:81:c8:c8:5f:ad:ac:4f:61:
bf:e5:3d:25:41:0c:cb:fc:af:c1:03:8d:49:6b:33:dc:4e:06:
d9:4a:e2:60:2c:f5:db:58:ee:95:a2:a8:5f:ed:35:cd:de:74:
84:96:78:00:ae:a9:89:37:91:2c:b6:87:50:f9:44:89:d7:5d:
e3:32:e1:c7:81:58:e8:97:db:80:7b:fb:a0:b7:25:6f:a1:6c:
46:b7:c7:97:e5:33:62:93:42:b8:55:bf:b8:05:1c:72:ea:51:
44:5a:6b:d3:26:b1:43:10:f7:71:5c:24:cd:fb:eb:a6:80:50:
f0:b1:f6:bd:2f:e7:10:cc:c1:59:c6:96:5a:67:71:e2:df:97:
45:92:b1:70:35:52:a0:21:4e:72:50:4a:c9:c8:20:f8:3e:91:
ae:cd:5d:60:c5:d8:78:10:ef:01:c9:e7:ef:73:4f:e1:42:83:
8b:f5:13:8a:12:b6:8b:d3:06:e5:71:05:42:97:88:45:f5:de:
ac:9e:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:35 2026 by rpki-client