
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/b7860812-99f6-3bac-bb33-e13bb94bffdf.roa
File: b7860812-99f6-3bac-bb33-e13bb94bffdf.roa (raw, json)
Hash identifier: OUFBFvSYbi6IsfxOFPxSL3v0H225UwfMNxbY58ocBdw=
Subject key identifier: FD:F2:3B:78:69:6E:EA:26:84:1A:8F:41:CA:5A:8C:1A:7D:19:5F:50
Certificate issuer: /CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Certificate serial: 010D0C9F4328584CC611EE6B8C29F83536B84BA0
Authority key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/b7860812-99f6-3bac-bb33-e13bb94bffdf.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 394298
IP address blocks: 203.89.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:11:ee:6b:8c:29:f8:35:36:b8:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=a345adad-60ff-4edc-bb96-0bf18f7f55ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:bd:bf:c8:d5:2f:af:10:35:43:40:91:59:
0c:d4:23:10:81:2f:bd:6d:64:44:e5:cf:80:8b:3b:
a1:c1:fb:cc:86:1b:85:3d:c8:b3:73:23:b6:a7:dc:
02:57:a3:6a:99:2f:dd:b3:65:7c:0b:d8:79:91:2b:
86:fe:de:33:ef:ee:81:83:98:c1:0b:a1:37:f5:64:
84:c7:4c:2e:9d:97:d4:c7:d1:f5:36:ba:d0:da:47:
20:18:de:26:b5:76:a5:92:78:6f:cd:a9:7f:74:ab:
27:d9:72:c1:36:3b:32:ae:d6:85:32:30:50:ef:41:
2d:12:88:a9:f4:b1:53:cf:61:da:50:0c:ac:66:d7:
67:31:11:6c:04:ae:2a:a9:82:83:7b:08:6b:39:2e:
02:b3:d3:5e:13:4d:f5:55:e0:09:9c:c4:42:41:59:
d1:c2:e3:60:bd:36:df:08:c9:33:1a:ef:9b:a8:c0:
97:56:30:e8:0e:cc:e6:c0:39:c6:f0:6d:7c:86:51:
94:cb:68:eb:08:e8:a5:ff:d9:f3:08:c7:ea:5a:60:
8a:17:8b:26:dd:a2:5c:e4:41:1d:de:50:2a:21:b5:
80:6c:7f:e6:6e:06:b9:44:99:bc:c3:6d:e5:27:aa:
bf:b7:6c:47:44:bd:11:b9:9d:4f:f2:9c:73:bf:ce:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F2:3B:78:69:6E:EA:26:84:1A:8F:41:CA:5A:8C:1A:7D:19:5F:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/b7860812-99f6-3bac-bb33-e13bb94bffdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl
X509v3 Authority Key Identifier:
keyid:1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
sbgp-ipAddrBlock: critical
IPv4:
203.89.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e0:12:3f:b0:e6:8c:5a:78:8c:79:d0:89:29:9d:69:b5:ea:
52:ea:99:6b:86:9e:8a:6d:c5:8d:af:81:65:60:53:0c:8c:f1:
5e:74:3b:34:50:d1:ca:72:b1:79:87:ac:a0:1e:07:90:6f:33:
1b:1b:fd:34:f6:6d:c5:10:6d:a0:61:88:b3:3b:82:a9:0c:56:
34:57:5a:cf:bd:c8:35:12:76:de:f7:5b:04:85:99:a7:7c:62:
44:b5:95:ee:5f:25:df:17:4f:8d:fa:3e:f4:e5:af:5c:96:f0:
24:82:5f:fe:0a:89:c2:ec:66:69:2a:2c:30:08:30:ba:ab:d4:
04:a8:f4:e1:3b:a1:84:bf:18:8e:46:69:0f:28:48:34:94:b9:
e6:a8:13:12:a5:1a:ec:c1:79:55:79:b5:ba:27:82:c3:10:24:
7e:72:dc:49:f7:fd:9f:1a:65:08:ed:d1:bc:08:ac:95:cb:48:
0a:b1:a9:a8:af:da:5d:d7:7d:c6:dd:2a:87:0d:73:92:ee:7c:
a6:09:0f:fb:7a:9a:05:17:56:e6:a6:b6:00:1a:c6:61:b4:50:
a1:2b:49:b2:c2:a1:9e:28:86:c3:72:1e:52:98:b4:cb:d3:49:
fe:d9:33:c1:2f:7a:82:23:ba:84:e7:77:b0:95:bb:62:3f:ad:
bb:2a:95:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEe5rjCn4NTa4S6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1YzYyMTEtMTcxNy00YTc1LWE4MmEtMWQ3YTdhYmFj
MmFkMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
YTM0NWFkYWQtNjBmZi00ZWRjLWJiOTYtMGJmMThmN2Y1NWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAC9v8jVL68QNUNAkVkM1CMQgS+9bWRE5c+A
izuhwfvMhhuFPcizcyO2p9wCV6NqmS/ds2V8C9h5kSuG/t4z7+6Bg5jBC6E39WSE
x0wunZfUx9H1NrrQ2kcgGN4mtXalknhvzal/dKsn2XLBNjsyrtaFMjBQ70EtEoip
9LFTz2HaUAysZtdnMRFsBK4qqYKDewhrOS4Cs9NeE031VeAJnMRCQVnRwuNgvTbf
CMkzGu+bqMCXVjDoDszmwDnG8G18hlGUy2jrCOil/9nzCMfqWmCKF4sm3aJc5EEd
3lAqIbWAbH/mbga5RJm8w23lJ6q/t2xHRL0RuZ1P8pxzv85T4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3yO3hpbuomhBqPQcpajBp9GV9QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDVj
NjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2FiYWMyYWQvYjc4NjA4MTItOTlmNi0z
YmFjLWJiMzMtZTEzYmI5NGJmZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1YzYyMTEtMTcxNy00YTc1LWE4
MmEtMWQ3YTdhYmFjMmFkL2Q0NWM2MjExLTE3MTctNGE3NS1hODJhLTFkN2E3YWJh
YzJhZC5jcmwwHwYDVR0jBBgwFoAUHR39tAkXOr3+L6AjK0wqo3r6AdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdh
N2FiYWMyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1lqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvgEj+w5oxaeIx50IkpnWm16lLqmWuGnoptxY2vgWVgUwyM8V50OzRQ
0cpysXmHrKAeB5BvMxsb/TT2bcUQbaBhiLM7gqkMVjRXWs+9yDUSdt73WwSFmad8
YkS1le5fJd8XT436PvTlr1yW8CSCX/4KicLsZmkqLDAIMLqr1ASo9OE7oYS/GI5G
aQ8oSDSUueaoExKlGuzBeVV5tbongsMQJH5y3En3/Z8aZQjt0bwIrJXLSAqxqaiv
2l3XfcbdKocNc5LufKYJD/t6mgUXVuamtgAaxmG0UKErSbLCoZ4ohsNyHlKYtMvT
Sf7ZM8EveoIjuoTnd7CVu2I/rbsqlWE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:52 2026 by rpki-client