
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
File: a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa (raw, json)
Hash identifier: 5m9zhQT9W4grS1Vu2+RDS3iVn7smQZHHcuXGlufFTww=
Subject key identifier: 7C:58:B7:46:A6:D1:72:CA:62:A8:53:A9:85:23:F7:32:3C:25:DB:B7
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584EBC7702F09B39CF1259DB6830
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
Signing time: Wed 05 Aug 2026 13:00:12 +0000
ROA not before: Wed 05 Aug 2026 13:00:12 +0000
ROA not after: Tue 03 Nov 2026 14:00:12 +0000
asID: 395831
IP address blocks: 158.115.157.0/24 maxlen: 24
2606:7bc0:1092::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:77:02:f0:9b:39:cf:12:59:db:68:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Aug 5 13:00:12 2026 GMT
Not After : Nov 3 14:00:12 2026 GMT
Subject: CN=589c0daa-44d8-4df6-98e1-86f6bc4e0a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:12:46:b4:92:2f:ec:9b:6b:52:5b:96:b1:
5a:90:c6:72:60:5c:a1:d4:a7:27:48:25:b4:ac:cb:
e2:99:fa:e7:9c:be:df:3c:ac:10:51:17:47:0a:c9:
b1:db:ff:80:2c:4c:53:b7:db:8e:81:e2:76:8e:3c:
ef:2c:cf:c1:9c:3c:67:1d:43:dd:d0:c4:1b:93:f0:
66:15:aa:4b:76:44:ea:75:6e:26:47:9c:d6:b8:96:
62:84:ad:99:d7:73:15:46:a1:45:9e:ab:c5:cf:4d:
90:56:da:87:2a:93:9c:dc:15:66:6a:e4:4e:29:84:
86:a7:9e:d0:fe:06:ad:3b:27:ae:38:90:45:57:36:
13:73:06:6a:1b:4f:97:07:a7:73:aa:ca:26:b7:14:
81:12:d8:1a:38:1d:fd:0d:9b:8f:92:3e:70:33:7e:
85:c9:75:e7:de:38:74:6a:83:50:64:62:78:57:a9:
ca:cd:85:cb:d7:7b:b9:4e:70:d2:46:4c:d7:30:a2:
28:0b:81:43:dc:90:5b:90:68:be:1d:2a:32:c0:17:
98:9d:5e:43:a6:81:8a:56:45:00:1b:67:75:93:a4:
13:f4:cd:b0:0b:3f:0d:00:5c:a0:5c:36:6a:d0:20:
be:94:45:c3:6b:b1:26:5a:23:76:da:45:c1:1f:ad:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:58:B7:46:A6:D1:72:CA:62:A8:53:A9:85:23:F7:32:3C:25:DB:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.157.0/24
IPv6:
2606:7bc0:1092::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:da:48:d6:a9:6b:4c:51:54:db:ba:73:46:7b:89:99:0f:62:
d9:1a:68:a2:40:63:9f:66:6b:b5:22:c3:63:87:0e:d7:1f:7c:
0c:2a:b4:e1:02:b2:69:67:f8:5b:dd:85:3e:8b:97:98:14:cf:
bf:4a:4a:15:3d:a4:d9:e1:8d:b9:90:f0:35:bb:e3:77:04:71:
4e:96:cf:21:0d:f1:ac:0f:fa:13:58:b1:66:10:09:57:60:d9:
b2:96:0d:27:2b:14:fa:9c:3d:f4:d0:a7:54:28:b5:63:b9:fc:
43:3a:5a:cc:99:c3:fa:35:f1:5f:d8:10:2d:ae:9b:03:68:11:
99:cb:7c:24:42:9d:80:25:06:33:71:04:3e:96:d6:4e:76:b8:
d2:b1:ac:85:38:a5:05:31:12:fe:e3:10:02:6c:4d:0e:33:fc:
8a:02:35:83:1d:47:5a:be:70:d2:50:ee:5e:82:3e:6d:e2:95:
0e:40:eb:4b:59:c6:db:4b:33:64:80:4a:fb:6e:71:24:59:35:
1d:d9:ca:1f:a9:fc:f3:db:32:2b:e9:6d:36:42:7e:69:ed:8e:
92:e7:c7:d8:6f:5b:6a:64:9a:5b:d1:c9:4d:33:28:71:97:bf:
60:c9:60:23:7a:c1:57:31:fa:7e:64:15:97:d2:9f:33:7e:a9:
67:14:b5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:46 2026 by rpki-client