
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa
File: dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa (raw, json)
Hash identifier: EJZQqsvcdnup9upi9lezBIko2T/0dRnINScCMJ7QFME=
Subject key identifier: 3D:BE:10:88:6A:54:A7:3E:34:46:5E:1F:FD:0E:8D:A0:AE:D2:8D:45
Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial: 010D0C9F4328584DCF2B0DDD5234757F4D2A8380
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa
Signing time: Tue 12 May 2026 13:00:30 +0000
ROA not before: Tue 12 May 2026 13:00:30 +0000
ROA not after: Mon 10 Aug 2026 13:00:30 +0000
asID: 40545
IP address blocks: 104.255.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:2b:0d:dd:52:34:75:7f:4d:2a:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Validity
Not Before: May 12 13:00:30 2026 GMT
Not After : Aug 10 13:00:30 2026 GMT
Subject: CN=cb1a05d7-2116-4fd9-bfa8-4f526cf30144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:ee:f6:43:5a:4a:09:2b:39:04:34:f8:2d:
1f:67:08:82:e4:93:db:08:17:de:99:eb:a9:49:32:
60:8e:d9:38:bf:49:a0:15:f6:6c:5f:6c:82:5f:ca:
14:f9:41:0b:da:85:4d:50:28:c0:95:15:df:75:d3:
47:d7:57:37:64:ef:b3:2c:fd:73:84:ef:6e:30:91:
45:a4:90:78:55:1d:95:82:05:03:d4:54:65:db:ec:
98:8d:e1:fc:9f:ab:f4:a3:9d:f6:a1:01:42:59:dd:
06:b5:69:b8:5c:f4:70:cd:62:c4:bd:00:4c:ca:d4:
eb:f1:dc:dc:55:1b:67:b6:27:25:0c:f8:21:bd:c6:
1d:2a:72:69:3c:62:dc:fe:71:3f:9d:27:75:36:08:
af:b4:69:a0:55:6c:6d:b3:cc:d4:3c:3b:e9:a6:aa:
ae:b0:b9:b3:26:1d:24:1e:18:f0:78:71:84:1e:dc:
87:c9:5f:0a:65:0e:90:19:7d:61:e1:b0:6e:5c:c8:
81:77:6f:2a:48:fd:19:22:01:be:7b:ef:9a:bb:23:
c0:7b:d2:41:a5:3c:2c:92:87:4d:23:2d:ed:19:9a:
2e:26:13:e2:e9:08:8b:b5:0e:bd:b2:d4:86:9c:e6:
16:93:8f:94:6d:df:e1:03:9a:15:ad:e9:c3:94:fa:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BE:10:88:6A:54:A7:3E:34:46:5E:1F:FD:0E:8D:A0:AE:D2:8D:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
X509v3 Authority Key Identifier:
keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b5:4f:5b:a7:84:4c:df:94:f6:29:82:f7:f9:3f:c1:61:63:
e7:44:c3:36:06:86:e1:6f:26:5f:ad:5a:ec:a4:08:0f:be:63:
20:d2:31:1c:9f:58:d4:ab:1f:d0:9c:21:11:81:ed:e6:be:60:
ea:ad:de:49:74:19:d5:2f:3f:3e:40:3b:92:71:3f:53:8f:1f:
1d:e7:f0:5e:1c:d9:3e:66:16:a5:e7:d1:55:58:e8:66:c5:fb:
a3:86:e1:71:85:b1:3a:4e:29:99:b8:67:ed:ed:e0:98:10:83:
e3:9f:9a:1e:ec:5e:57:94:7d:7c:15:3d:96:60:1b:84:5d:9f:
a3:cb:92:37:f5:71:6f:32:eb:ea:1f:0d:bc:98:36:62:ef:28:
ab:9b:80:d2:d3:68:b2:5c:93:f3:0d:de:0a:b2:99:e6:36:22:
88:3f:a4:bc:c5:10:b1:cb:e4:d1:80:2a:99:a0:8e:a1:ab:26:
9b:58:6d:70:8b:d3:8e:72:14:3f:fc:53:70:6b:77:c6:85:e2:
d0:8f:75:07:50:e3:2e:67:5f:7e:cf:e2:ea:ba:c4:db:f6:8f:
c7:9e:c3:06:8f:7a:26:7e:cd:a1:29:29:b5:3d:b5:cb:a6:b3:
8f:00:0c:a5:e9:6f:8d:9e:8c:cf:35:2e:9f:05:31:50:13:11:
63:c7:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:03:03 2026 by rpki-client