
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
File: cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa (raw, json)
Hash identifier: mjlFUezH9RE9B0nbybVVT0IHDfO2vbUvTQ/+onFyuRs=
Subject key identifier: 8A:AE:88:87:AC:AD:B0:79:F5:62:94:EE:C6:F5:FB:61:80:94:0F:D2
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584DE9B08302F15327A85F79BB00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
Signing time: Fri 22 May 2026 01:00:24 +0000
ROA not before: Fri 22 May 2026 01:00:24 +0000
ROA not after: Thu 20 Aug 2026 01:00:24 +0000
asID: 14618
IP address blocks: 158.115.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e9:b0:83:02:f1:53:27:a8:5f:79:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: May 22 01:00:24 2026 GMT
Not After : Aug 20 01:00:24 2026 GMT
Subject: CN=02a36518-b219-448d-84dd-ba51c4594c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:a3:75:84:89:e7:82:2a:4c:51:59:05:d9:
25:75:24:f0:c2:b0:3d:5a:02:b3:95:73:2b:5b:97:
cf:c2:99:09:ca:75:01:83:bc:6d:cf:2a:32:e4:36:
b8:b7:0b:ec:55:5d:c0:c3:1d:f8:94:39:e7:32:72:
9c:c5:5f:dc:57:47:bd:7e:cb:5b:27:4d:45:fc:b1:
fa:ff:6b:58:15:f3:bf:90:6d:1f:89:2a:32:38:52:
03:60:2a:46:8e:39:f2:c4:c0:45:30:ec:1c:60:e0:
98:bd:ff:61:73:74:26:57:45:af:9e:e7:e0:c4:9d:
c7:d6:5b:e8:f6:df:92:ce:4d:98:f3:9c:dd:4c:87:
3b:90:9f:e6:90:36:a5:d8:a5:4f:58:75:65:0a:0a:
ca:9a:fd:ac:46:c4:5b:ad:c9:12:ba:88:75:89:b2:
5f:4b:e5:c3:2a:dc:c4:e0:b5:6f:d9:46:85:34:12:
f7:52:fb:54:03:07:64:36:a4:e4:30:60:c6:71:76:
61:a8:61:f4:89:61:96:68:0b:c0:d0:98:b9:99:d9:
fb:4a:72:2f:31:c3:c5:b2:50:33:ed:b6:3b:de:01:
44:4c:cd:6f:3f:9e:cc:5f:ca:a9:91:f8:8f:11:a4:
f1:02:1d:8c:6b:35:70:f2:e3:d1:04:0b:7d:00:9a:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:88:87:AC:AD:B0:79:F5:62:94:EE:C6:F5:FB:61:80:94:0F:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:23:ba:cc:bd:9c:c0:10:57:39:13:ef:36:59:ef:de:db:f8:
76:6c:58:26:5b:df:49:7e:f2:b7:9c:fa:74:71:41:d4:ef:ae:
80:30:54:13:c8:02:68:64:17:10:d8:73:f7:d8:41:5d:5e:7e:
a7:fe:db:bf:dd:5e:f3:e3:9f:fd:7e:d6:05:c1:c6:f6:ac:f9:
f8:b8:b8:c7:6d:1a:4f:21:a5:d6:7d:a4:8a:02:a8:83:12:68:
22:e2:c7:4a:fe:92:0e:ba:87:0b:73:0b:0f:e3:68:24:3f:f5:
31:00:72:4d:4d:72:9c:2b:54:24:f0:7a:9b:ea:3f:3b:c2:26:
62:94:74:10:33:36:3f:00:e3:55:82:20:7a:bd:b0:6b:f8:5f:
89:aa:31:fe:a7:66:82:d2:45:91:9f:dd:d9:6d:f7:14:5a:bf:
4c:d7:f2:85:a7:2c:69:44:e9:91:5f:53:8c:0b:b0:77:ce:66:
5e:36:9b:84:3b:8b:b9:b9:83:a3:45:c0:43:00:6a:e7:9f:26:
fa:38:ad:34:4c:b3:b2:c2:3d:97:e8:d5:1e:be:75:91:7a:a2:
9c:c5:68:d3:8c:4c:25:0e:ee:90:7f:f9:fa:aa:9e:89:60:e9:
0d:57:54:a7:b6:7a:bc:31:78:2b:00:8e:eb:1b:ae:b6:43:f8:
c2:35:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:20:23 2026 by rpki-client