
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
File: cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa (raw, json)
Hash identifier: H5nMBhcM+L4N710UIvLCIenXkIw0c2vQIz7xtB9jrcI=
Subject key identifier: 8C:F5:AE:CC:D5:F2:CC:AD:51:F0:50:C5:18:C1:44:F6:02:48:50:FD
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584EA7927AC1B81B141307213B50
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 158.115.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:7a:c1:b8:1b:14:13:07:21:3b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=bc9e4567-f46e-418e-8c18-6cc5fa32cf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:5e:27:9d:f5:44:dc:a6:fe:c9:c3:f8:22:
c3:f2:3e:0f:8f:df:5b:15:ed:4c:0c:9f:51:6e:f7:
ce:67:0c:0f:d3:e5:cd:2c:dd:14:29:57:15:53:8b:
ab:6d:66:cf:fd:cb:eb:a6:cd:c5:d9:0e:77:41:5c:
c0:e4:61:c1:c3:be:9a:27:ee:bb:02:fd:fa:01:a0:
96:65:df:a4:56:bb:5a:0b:22:f6:5c:c1:73:2f:a7:
34:88:01:8c:72:7c:ba:7f:1e:48:57:f1:23:b2:e7:
ed:aa:d7:eb:96:1b:5a:8d:09:d0:b5:cb:65:99:30:
d5:a5:a0:b3:06:cf:7d:1b:9b:f0:28:a8:14:39:16:
e8:3b:60:2d:04:e8:63:5f:0f:f6:fc:6a:f3:72:66:
a3:84:4c:ed:c2:d2:bd:2a:4e:e9:7c:48:4d:2e:49:
3b:d4:ff:64:25:47:ce:39:85:cf:bc:a7:d8:b8:56:
16:03:a0:a1:5b:f8:a5:05:65:b4:dc:6c:2a:59:c6:
c5:6b:90:39:6c:96:c2:ab:28:3e:26:10:d1:ca:bd:
40:3c:4e:4a:e5:37:d6:16:3b:26:87:3b:e4:fc:2e:
84:fc:10:e0:f4:9c:78:cd:f9:1d:aa:74:b9:d2:88:
80:14:41:d9:de:54:df:55:ba:2a:f7:27:b7:94:f7:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:AE:CC:D5:F2:CC:AD:51:F0:50:C5:18:C1:44:F6:02:48:50:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:f4:76:f0:58:96:16:1d:2d:78:8a:bb:f5:cb:97:fc:83:7c:
a7:7f:bc:9f:4f:57:fe:4f:aa:33:83:6c:a1:86:ef:e9:dc:87:
a7:95:94:41:3b:f0:2b:b0:0d:9b:d2:ce:6c:01:3a:5e:17:41:
ad:a9:d7:09:c1:89:69:49:3d:98:33:91:e4:b9:26:dd:fa:db:
e0:d4:0f:ef:54:42:75:66:ab:52:c3:1c:bb:32:7a:9f:a9:28:
e0:17:ec:da:10:30:89:99:62:31:a7:78:2b:e9:95:a7:31:92:
ad:84:e4:f1:30:be:a5:2a:ab:0e:4d:84:14:c3:5b:9a:36:a0:
bc:64:26:8a:2d:84:ec:a2:c4:f2:e1:44:b9:41:c0:84:a4:02:
0f:08:fa:ef:58:19:0e:d9:cf:b1:42:c5:a9:62:df:50:a3:6b:
e4:57:3c:3a:69:a7:45:85:a2:db:7b:fd:f6:d6:c8:f2:f1:82:
06:c5:41:82:8f:92:a1:29:f4:7d:1c:77:f7:d2:a4:c6:4f:c3:
c3:96:b9:8f:30:f1:48:78:56:8a:76:ac:a4:ba:4b:63:2b:17:
be:b7:67:ed:1f:15:c3:fd:47:eb:dc:c7:d6:75:43:59:8c:4a:
cb:d6:1a:38:5e:01:9e:89:1d:bd:60:b2:64:20:be:0b:5e:05:
30:82:22:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nknrBuBsUEwchO1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YmM5ZTQ1NjctZjQ2ZS00MThlLThjMTgtNmNjNWZhMzJjZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKNeJ531RNym/snD+CLD8j4Pj99bFe1MDJ9R
bvfOZwwP0+XNLN0UKVcVU4urbWbP/cvrps3F2Q53QVzA5GHBw76aJ+67Av36AaCW
Zd+kVrtaCyL2XMFzL6c0iAGMcny6fx5IV/EjsuftqtfrlhtajQnQtctlmTDVpaCz
Bs99G5vwKKgUORboO2AtBOhjXw/2/GrzcmajhEztwtK9Kk7pfEhNLkk71P9kJUfO
OYXPvKfYuFYWA6ChW/ilBWW03GwqWcbFa5A5bJbCqyg+JhDRyr1APE5K5TfWFjsm
hzvk/C6E/BDg9Jx4zfkdqnS50oiAFEHZ3lTfVboq9ye3lPe4fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIz1rszV8sytUfBQxRjBRPYCSFD9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvY2I5OTM2YWQtMTljZC0z
ZTUwLWE1MTktYzRlZGM4NzNmOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHT0dvBYlhYdLXiKu/XLl/yDfKd/vJ9PV/5PqjODbKGG7+nch6eVlEE7
8CuwDZvSzmwBOl4XQa2p1wnBiWlJPZgzkeS5Jt362+DUD+9UQnVmq1LDHLsyep+p
KOAX7NoQMImZYjGneCvplacxkq2E5PEwvqUqqw5NhBTDW5o2oLxkJoothOyixPLh
RLlBwISkAg8I+u9YGQ7Zz7FCxali31Cja+RXPDppp0WFott7/fbWyPLxggbFQYKP
kqEp9H0cd/fSpMZPw8OWuY8w8Uh4Vop2rKS6S2MrF763Z+0fFcP9R+vcx9Z1Q1mM
SsvWGjheAZ6JHb1gsmQgvgteBTCCIrk=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:06 2026 by rpki-client