
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa
File: 85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa (raw, json)
Hash identifier: Ofl/+Zn/KQMxV32RMY2Msq/IgiWktWJC0J/WrYI2Or8=
Subject key identifier: B0:35:26:95:FF:6B:10:FB:13:C8:4C:A8:DE:18:50:6C:0D:B6:3E:68
Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial: 010D0C9F4328584D2BDA0E10F474779BFE71C400
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 206092
IP address blocks: 45.88.217.0/24 maxlen: 24
45.88.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:0e:10:f4:74:77:9b:fe:71:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=17bc3ec4-f1c8-4174-a439-7e39269ba5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:59:37:13:21:39:cb:dc:3b:a1:2e:e1:a0:
86:e9:9d:67:b7:de:bf:87:ac:8e:1d:60:e6:2c:8e:
6b:9d:86:11:a7:be:14:1f:89:8e:b2:3c:05:5f:17:
fe:ea:c8:36:9c:cb:65:ee:28:5c:57:b4:e9:d0:bf:
b9:cd:43:5b:c0:5b:6c:43:ca:e5:c7:2e:59:34:e0:
d4:5f:3b:f0:70:82:32:e1:5f:c4:be:85:d0:5e:8a:
09:3c:84:74:05:78:74:04:40:ff:82:3e:ac:b1:f3:
65:2f:a2:ea:62:68:90:90:77:ea:e1:7a:d4:bb:22:
cc:dc:ec:a2:9a:6f:01:5a:e3:26:2a:fd:64:55:e1:
28:f9:74:63:99:79:79:15:79:58:dd:e0:fc:d8:4d:
72:82:4f:8c:49:ac:98:68:9b:e3:a6:61:8b:f0:1b:
a4:7b:41:a1:91:bb:e2:6c:d9:b5:e8:da:78:45:03:
50:42:64:4a:2b:94:c4:89:81:53:7e:aa:8c:e9:3c:
10:97:2d:d1:c1:7a:ce:0f:da:0b:e0:96:ea:35:d2:
8f:bb:2e:95:6e:84:ea:78:08:d8:bd:a8:fb:09:81:
08:18:12:10:10:8f:61:73:0c:ef:4c:7c:63:f8:4f:
a4:1a:f3:a1:36:7a:66:f8:9e:d4:a5:5c:e5:91:07:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:26:95:FF:6B:10:FB:13:C8:4C:A8:DE:18:50:6C:0D:B6:3E:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
X509v3 Authority Key Identifier:
keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
sbgp-ipAddrBlock: critical
IPv4:
45.88.217.0-45.88.218.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:35:f0:b6:25:94:48:50:40:61:a2:4f:47:f4:1a:86:9c:03:
6d:c5:ed:1f:93:6f:78:15:86:eb:3b:82:66:f4:3c:11:05:01:
ed:a4:0e:d2:89:be:7b:cc:1c:f6:5e:46:f9:b2:7c:ce:b6:37:
29:c8:3f:46:3d:62:4a:45:37:80:a7:c3:f0:b4:15:e0:8c:cd:
94:67:f3:01:dc:4d:b5:ee:74:16:21:d1:72:2f:19:ee:7a:6b:
a9:52:e3:b5:e8:43:65:4a:49:b6:01:54:07:74:24:7f:35:db:
97:55:c9:49:89:f0:f1:81:e1:05:18:74:07:15:96:cd:f1:5b:
8e:ab:1b:a7:78:d4:04:da:a3:e1:49:52:a5:b1:d0:7e:d4:f1:
b9:42:fa:5d:c3:4c:07:0f:16:f1:bd:39:a4:01:03:00:bf:68:
19:f0:45:e2:3d:40:07:a8:e3:88:a5:5c:32:2d:d8:cb:39:eb:
62:be:25:63:64:ac:95:f6:00:92:45:9d:b0:4f:db:49:f2:fe:
75:c7:14:48:11:57:4c:44:85:47:e2:da:24:69:d7:74:1a:04:
d6:2a:64:e4:32:ee:ac:51:80:06:c2:b0:d3:81:06:44:fb:b9:
40:e9:f3:bb:57:91:1e:57:e6:5a:bd:46:c5:6c:26:89:c7:ad:
01:cd:58:a8
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0r2g4Q9HR3m/5xxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4
MWIyMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
MTdiYzNlYzQtZjFjOC00MTc0LWE0MzktN2UzOTI2OWJhNWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fdZNxMhOcvcO6Eu4aCG6Z1nt96/h6yOHWDm
LI5rnYYRp74UH4mOsjwFXxf+6sg2nMtl7ihcV7Tp0L+5zUNbwFtsQ8rlxy5ZNODU
XzvwcIIy4V/EvoXQXooJPIR0BXh0BED/gj6ssfNlL6LqYmiQkHfq4XrUuyLM3Oyi
mm8BWuMmKv1kVeEo+XRjmXl5FXlY3eD82E1ygk+MSayYaJvjpmGL8Buke0Ghkbvi
bNm16Np4RQNQQmRKK5TEiYFTfqqM6TwQly3RwXrOD9oL4JbqNdKPuy6VboTqeAjY
vaj7CYEIGBIQEI9hcwzvTHxj+E+kGvOhNnpm+J7UpVzlkQdT5wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFLA1JpX/axD7E8hMqN4YUGwNtj5oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl
OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvODU4NTRhZWItNGYyZC0z
MTM0LWEzZWEtNWIxMzM1ZmYxMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm
YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi
ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx
ZTg2YjgxYjIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtWNkD
BAAtWNowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAODXwtiWUSFBAYaJPR/QahpwDbcXtH5NveBWG6zuCZvQ8
EQUB7aQO0om+e8wc9l5G+bJ8zrY3Kcg/Rj1iSkU3gKfD8LQV4IzNlGfzAdxNte50
FiHRci8Z7nprqVLjtehDZUpJtgFUB3QkfzXbl1XJSYnw8YHhBRh0BxWWzfFbjqsb
p3jUBNqj4UlSpbHQftTxuUL6XcNMBw8W8b05pAEDAL9oGfBF4j1AB6jjiKVcMi3Y
yznrYr4lY2SslfYAkkWdsE/bSfL+dccUSBFXTESFR+LaJGnXdBoE1ipk5DLurFGA
BsKw04EGRPu5QOnzu1eRHlfmWr1GxWwmicetAc1YqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:41 2026 by rpki-client