
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
File: 85240ca7-41e9-329b-8a29-307187f566aa.roa (raw, json)
Hash identifier: 6aQqOLwXesnkub7n3O81VomopZANe+FDtKDkzHOmuaQ=
Subject key identifier: BE:A7:7E:C7:A8:E7:F6:FB:A6:4E:46:18:F1:DD:B0:B9:20:9E:3A:A9
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584EBC7702FFD10ED8D5A3971800
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
Signing time: Wed 05 Aug 2026 13:00:12 +0000
ROA not before: Wed 05 Aug 2026 13:00:12 +0000
ROA not after: Tue 03 Nov 2026 14:00:12 +0000
asID: 16509
IP address blocks: 158.115.158.0/24 maxlen: 24
2606:7bc0:1093::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:77:02:ff:d1:0e:d8:d5:a3:97:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Aug 5 13:00:12 2026 GMT
Not After : Nov 3 14:00:12 2026 GMT
Subject: CN=d986962a-5114-4892-b0b5-c475b02be5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:0b:5a:c6:d9:ce:23:7f:3f:82:b3:49:de:
65:a5:d3:f4:fb:5c:ce:d9:07:de:6f:3c:5c:e0:b8:
70:74:08:32:cd:b8:db:64:a4:49:14:b9:2e:db:d6:
3b:27:9d:b4:60:55:19:43:a3:ec:d5:63:c3:2f:fd:
36:ab:22:a5:f4:34:7d:f2:8c:73:d6:df:cb:9b:bd:
68:90:57:5a:c5:18:08:1c:32:58:2c:71:cb:8a:f0:
7f:ae:32:99:5b:58:1c:14:62:34:a1:f5:1d:8f:ca:
c4:11:13:e5:11:d2:a2:7c:39:a4:ff:85:94:af:48:
48:9a:df:a4:b1:8b:93:29:35:74:5f:3e:0d:fa:10:
45:95:c1:3f:36:ee:d2:aa:10:2d:a6:3f:f8:22:c9:
5c:ae:3b:c3:4c:3a:35:2a:e1:bf:52:68:95:98:15:
3e:48:bc:c8:0e:80:dd:e7:69:d7:9f:51:84:e2:9c:
7e:23:78:34:8b:42:cf:06:62:f0:54:ed:2b:d4:bc:
a3:ea:8b:f5:43:2b:b4:b4:0e:bc:71:88:af:cd:7f:
b4:7d:a1:8c:4a:47:cf:4f:93:7a:f6:32:3c:01:10:
5b:2d:5a:aa:0a:31:0f:af:bc:ea:2f:12:50:8f:91:
f2:2a:fe:28:b0:b4:4a:1a:aa:46:6f:27:62:73:60:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A7:7E:C7:A8:E7:F6:FB:A6:4E:46:18:F1:DD:B0:B9:20:9E:3A:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.158.0/24
IPv6:
2606:7bc0:1093::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:8b:67:a5:91:52:68:6f:56:bf:ee:15:61:f6:12:70:ab:63:
33:93:51:cc:8f:8b:eb:7e:1f:83:db:26:8c:e1:c3:8a:4c:ca:
90:e7:67:6b:80:e5:e6:13:0a:32:83:22:58:81:76:79:28:5b:
1f:5a:19:60:d0:a8:2e:6a:70:ad:94:9f:30:e9:f3:24:4c:9c:
37:89:a3:74:79:26:96:a9:0c:f6:e8:50:ab:f8:e4:d3:93:2d:
76:ff:cf:56:e7:99:b3:63:89:f6:1a:c6:3d:a1:60:7a:26:a7:
f9:bb:85:42:a9:c0:43:d2:63:ea:a9:42:50:dd:39:25:05:70:
1d:28:c0:13:ea:4e:be:39:57:28:4d:17:df:5e:78:de:8d:b2:
a7:ec:38:5e:fb:f3:d1:1e:ac:8d:73:3f:2d:30:22:80:ef:1b:
45:e4:5e:ce:56:d2:61:26:cd:bd:d3:9c:d2:6b:5e:ab:b5:35:
c3:d4:c3:f4:2c:52:c1:67:21:71:e2:c1:e5:98:e1:56:86:dd:
1d:3a:09:c7:fd:58:06:e3:08:47:34:a8:15:b7:d9:0c:d0:70:
08:9b:8a:66:c9:7c:81:77:ea:95:8a:35:d3:4b:8b:75:bd:45:
dd:29:6e:42:9e:15:f5:a2:58:09:c3:28:3b:43:bb:aa:ca:83:
fe:c9:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:24 2026 by rpki-client