
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/51fde72b-c272-3d7a-83d9-5542508c0f35.roa
File: 51fde72b-c272-3d7a-83d9-5542508c0f35.roa (raw, json)
Hash identifier: QJ3OHekD9PBpUjhicPhFgEpVhlUgSKtOheMZoI0kN2E=
Subject key identifier: 5C:5C:A9:3B:23:40:BB:92:A1:87:59:D2:FC:A2:70:20:E3:78:30:AD
Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Certificate serial: 010D0C9F4328584EC0A72998C560E88EBF2BF680
Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/51fde72b-c272-3d7a-83d9-5542508c0f35.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 1011
IP address blocks: 45.45.248.0/22 maxlen: 22
45.45.248.0/24 maxlen: 24
45.45.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 12 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:29:98:c5:60:e8:8e:bf:2b:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=9a4ce765-7157-4fbe-a6f0-bca9a6ccc382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:79:45:a5:10:b5:48:23:c7:53:c8:b5:e9:
86:ae:26:df:7a:77:5b:58:9d:17:a0:d3:1b:59:88:
07:10:25:3d:0d:18:13:fb:65:e0:6d:e5:a2:02:f0:
7b:8a:46:ac:dc:7e:2d:5e:87:be:66:78:61:16:75:
96:66:46:e6:fd:f2:31:85:da:a1:e7:3a:52:e5:46:
8f:be:55:3d:47:39:65:ba:2b:8b:52:fa:bb:e8:a9:
c2:c0:ea:fd:cd:33:20:4d:78:f4:76:0a:e6:91:81:
34:37:be:ad:75:4c:b1:b5:d6:fd:df:aa:7f:4e:8d:
34:26:9a:c5:f1:f4:2b:ea:52:89:a0:52:12:79:d7:
2c:e2:08:87:cb:dd:76:ea:28:ec:43:33:2d:a8:5e:
21:fe:0e:9e:db:3b:ce:04:0c:c3:51:02:4c:ff:c3:
10:c4:57:04:3b:88:0f:37:ee:15:48:8f:06:91:de:
fb:fb:80:38:7b:27:f8:4f:b7:5d:96:20:68:64:3b:
3d:6b:6e:a9:2a:31:e3:9f:f8:62:79:f6:c4:01:d4:
33:57:bd:88:5f:f8:83:01:4f:6a:02:57:2a:81:57:
ed:a3:10:08:57:14:81:88:cf:26:4d:5d:21:d0:e2:
5c:59:91:0c:be:08:43:13:4c:72:c6:49:58:09:14:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5C:A9:3B:23:40:BB:92:A1:87:59:D2:FC:A2:70:20:E3:78:30:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/51fde72b-c272-3d7a-83d9-5542508c0f35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl
X509v3 Authority Key Identifier:
keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:3c:18:cf:6c:2b:10:50:72:9d:5a:a2:15:7c:a9:11:ce:76:
46:8b:b3:27:98:d9:63:44:7f:43:01:c5:4a:ed:5e:21:cb:e5:
f3:3f:b9:83:08:a8:1c:79:e8:bc:fa:df:1d:b1:72:a9:70:f9:
74:ff:d5:f7:db:29:6f:e7:4a:3c:f3:0c:93:f5:cc:df:25:fe:
47:55:2c:e7:c5:84:fc:7b:30:d7:56:11:a5:5c:36:bb:1a:b5:
97:6d:12:25:f0:10:98:c8:cd:64:97:9f:9b:e6:59:21:25:80:
00:bd:f6:09:0f:8e:7a:e0:7d:23:56:a0:16:af:17:ce:37:1f:
1f:5c:74:a9:28:28:78:84:aa:3d:6d:ca:97:f2:b9:3b:fb:2d:
f2:8c:70:de:b8:59:98:a7:6d:14:95:b0:ac:cb:25:dd:05:d4:
be:0a:f0:05:15:f5:de:58:ac:9b:2c:3f:a2:21:8c:19:49:f1:
cc:91:45:3a:fb:02:e6:d7:12:e0:da:04:84:3c:1c:5a:3a:6a:
63:8b:1f:22:ed:bc:7d:c4:0b:b5:94:fe:2e:5d:a0:89:55:93:
36:87:26:8b:16:c6:30:3b:90:d6:dc:ad:d6:b0:2c:71:bb:d4:
d7:50:01:79:98:df:ba:0b:19:84:11:14:a6:e0:12:59:37:27:
b6:67:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 14:37:22 2026 by rpki-client