
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da5b7ba3-4902-3c8b-bfc5-c126032d842a.roa
File: da5b7ba3-4902-3c8b-bfc5-c126032d842a.roa (raw, json)
Hash identifier: PsElVf8Q+FZ11TF3AF7CRWAZmaiiXXYfPntPuZ5OgBw=
Subject key identifier: B5:E0:E1:F9:A2:56:30:E5:85:C5:F4:67:34:AF:DD:66:3B:9F:85:10
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFC70C12B87A8A8F0AE700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da5b7ba3-4902-3c8b-bfc5-c126032d842a.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 2605:a401:806a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:c7:0c:12:b8:7a:8a:8f:0a:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=a29412c3-835d-405e-9a9d-dbbd640ab49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:ea:c8:86:58:0d:39:8e:14:9a:85:94:45:
e9:e8:c8:1b:a1:ea:8f:a5:a9:4e:99:af:df:74:2d:
65:0a:ab:e0:95:1f:77:e2:5e:6f:7e:e0:bc:a5:65:
f6:68:2e:d1:13:74:05:2e:f9:be:38:8d:c1:f1:9f:
75:09:ef:97:c8:8c:3e:9d:5b:17:60:e4:21:fc:71:
c7:e4:52:7d:46:23:89:1c:d7:a2:8a:d0:45:6f:57:
90:bf:ba:1c:09:02:eb:9a:9f:2b:ca:40:77:55:4b:
44:03:8c:a2:56:ad:68:6e:77:a4:a5:63:c9:2b:18:
d7:1f:5a:72:cc:44:83:16:c5:ed:81:47:ec:3b:65:
a5:26:72:1e:0b:50:3d:1d:c6:bc:93:80:d6:6d:60:
3a:15:f9:4e:04:18:e4:b5:99:66:cb:db:96:b6:73:
af:0e:16:90:2d:12:3d:a7:eb:20:a0:75:46:fe:26:
64:85:d6:73:9b:55:9f:1a:7d:a1:7f:7e:8d:03:7b:
f9:0e:4b:2f:d2:6d:9a:f1:72:56:7e:2b:f8:1b:4f:
b7:9d:af:5b:b9:6e:3b:f2:65:d7:98:af:e6:27:9e:
14:9f:03:c7:0e:ae:82:54:ad:d9:db:4c:e9:61:2b:
ea:aa:8c:14:90:74:df:c2:0a:9c:1b:1d:bc:27:c7:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:E1:F9:A2:56:30:E5:85:C5:F4:67:34:AF:DD:66:3B:9F:85:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da5b7ba3-4902-3c8b-bfc5-c126032d842a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:806a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:90:9b:fd:4e:0a:2c:10:a8:2e:d1:78:33:b7:75:f4:b4:e5:
47:2b:1c:70:0a:1b:17:80:48:d3:4d:b4:c0:df:ef:5d:2b:c1:
23:14:d3:42:13:bc:65:04:1b:9e:b3:fe:ed:24:ff:53:e0:a1:
4b:c5:b9:9c:3b:ed:c4:68:83:29:8e:34:ef:0e:13:42:d8:0f:
85:32:11:dc:1a:e9:52:c9:da:f4:24:fa:14:1a:6f:68:30:2e:
89:62:5e:ba:4b:b7:d3:5d:7e:c6:30:f1:f0:21:ed:b9:9c:0b:
29:29:73:c5:9f:82:c6:8d:bc:73:2d:5d:94:7d:08:3f:4f:e0:
15:20:f2:83:7a:25:32:44:e5:78:62:72:70:48:40:51:7a:88:
bc:45:36:50:2e:f9:07:b5:17:7f:13:29:40:54:a7:aa:73:f2:
ed:be:8a:44:c9:5e:ee:bd:15:33:e0:79:95:3b:a6:8f:53:90:
61:41:7f:48:3c:03:6b:61:7e:14:46:59:bc:fd:c9:89:8c:f7:
0d:07:52:83:05:58:e4:fe:d7:88:0b:64:59:90:1b:0d:76:ab:
1a:59:0b:04:c3:85:71:1f:04:3c:1c:8a:74:0e:9a:ac:cc:df:
99:ad:b0:94:7b:56:74:ae:5f:79:1f:83:cd:7d:a1:54:96:1c:
d5:59:75:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:52 2026 by rpki-client