
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa
File: 0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa (raw, json)
Hash identifier: vm23YmjY0pvhy+t2w0xNDnR585ot9ZNj2bnJqA0jRa8=
Subject key identifier: D4:AD:8E:4E:70:00:F7:A4:AC:F5:4A:DD:01:C5:3B:57:0E:EA:EF:5A
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584E66DA0A12E4EFCEB9A7AE7080
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa
Signing time: Sun 05 Jul 2026 21:00:11 +0000
ROA not before: Sun 05 Jul 2026 21:00:11 +0000
ROA not after: Sat 03 Oct 2026 21:00:11 +0000
asID: 14618
IP address blocks: 158.115.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:da:0a:12:e4:ef:ce:b9:a7:ae:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jul 5 21:00:11 2026 GMT
Not After : Oct 3 21:00:11 2026 GMT
Subject: CN=dd560b3d-cf36-4e1e-a8e9-a1c82493717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1e:de:5b:1b:71:69:b7:09:24:65:0b:45:0e:
ab:98:be:89:52:43:3e:fe:9d:0e:a4:bb:42:58:e5:
29:89:a0:83:a0:0d:81:4f:da:33:90:85:71:2b:d3:
b0:f4:52:dd:e2:f4:14:b8:64:0f:bd:41:83:62:f4:
d5:bb:cf:31:66:70:74:a0:a7:d8:b7:96:cd:09:d1:
fb:a6:05:3a:1e:37:10:2e:7b:ac:2f:b9:92:81:47:
bb:ec:fe:0c:3b:da:cf:70:5f:d6:ee:7c:59:89:ca:
f4:a0:37:d5:a2:55:54:aa:b6:2f:ce:c1:27:a9:bf:
6e:30:50:49:9a:c2:9c:93:ee:58:7d:37:df:01:41:
4d:6a:68:d6:da:ea:d5:af:6b:7d:3a:87:b6:0a:e8:
09:1a:25:06:9a:92:ea:a5:ec:49:30:15:4c:82:ea:
f8:b9:a8:df:11:af:4c:25:ba:92:fc:bf:7f:ca:67:
60:c1:8a:f0:1c:da:33:a5:66:a0:10:ff:c8:78:f0:
2b:23:9b:1c:cc:44:3e:5e:9e:83:33:ff:e5:bc:37:
57:e4:c4:40:be:c4:16:4a:12:e0:9f:b2:e9:4a:3c:
a2:9e:d9:dd:af:16:7f:dc:a0:d6:b4:7d:de:0c:b0:
b5:b1:63:e1:bf:23:8b:c9:dd:a6:0b:82:dd:13:a9:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AD:8E:4E:70:00:F7:A4:AC:F5:4A:DD:01:C5:3B:57:0E:EA:EF:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:41:34:a5:35:c7:06:65:fa:2d:5d:61:a0:1c:3f:0a:85:6e:
cc:2b:08:68:11:94:5a:e5:ed:ba:55:f1:6f:46:50:68:73:ae:
f6:f1:da:49:15:a9:f4:07:e0:98:5d:3c:80:3a:17:d9:ab:bb:
f5:82:16:fe:f2:b8:98:81:93:99:0d:0d:38:d0:5c:be:a9:81:
53:30:34:ae:30:2a:15:7d:54:81:39:df:94:6b:5c:20:f6:bb:
7a:ab:48:7e:5b:81:c6:33:69:4c:93:05:9b:e2:8b:f3:cc:a7:
22:74:7e:fb:1f:e0:95:02:62:63:be:7d:a9:06:c8:2d:6a:c8:
b3:ef:80:73:9d:3f:6b:97:3c:76:7a:d4:94:b2:fd:3d:12:33:
2b:71:e9:c9:28:35:54:af:c8:42:67:12:53:22:6a:4f:0d:3b:
82:0a:33:49:84:69:ff:f1:c9:d9:f8:0f:d7:ff:02:fa:de:9d:
a7:4b:34:41:6a:02:1a:2e:93:c7:3c:8e:95:a1:c5:d8:59:c8:
0f:43:a8:02:df:1a:af:85:cf:f4:28:9e:26:92:ae:95:c7:f6:
fe:e1:40:a9:bc:c3:a3:49:39:eb:8d:58:99:c7:99:c5:d0:dd:
d0:a1:2f:24:62:bf:a2:45:29:9e:da:c9:39:9e:63:e4:04:dc:
32:1b:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:21:33 2026 by rpki-client