
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa
File: 8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa (raw, json)
Hash identifier: gS7KQL5QHbXv88XFGDLM1pkRtkujKtJXrfhKn+vF4hc=
Subject key identifier: A5:9B:73:C2:8B:39:02:3C:83:74:0D:09:58:AB:C7:21:5D:D8:76:10
Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial: 010D0C9F4328584EB416FF0FE74A9BADEB808600
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa
Signing time: Sun 02 Aug 2026 13:00:12 +0000
ROA not before: Sun 02 Aug 2026 13:00:12 +0000
ROA not after: Sat 31 Oct 2026 13:00:12 +0000
asID: 210645
IP address blocks: 131.143.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b4:16:ff:0f:e7:4a:9b:ad:eb:80:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
Validity
Not Before: Aug 2 13:00:12 2026 GMT
Not After : Oct 31 13:00:12 2026 GMT
Subject: CN=cdcdc07f-a5c5-4d71-a143-aa10bd351d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:d5:2f:f9:39:53:ae:b8:3f:8b:84:c7:ae:
d8:94:bc:2d:49:39:8e:56:2a:69:75:51:dd:33:12:
0f:e5:8d:39:33:d7:2b:0e:d1:b6:b9:d7:3e:f9:02:
3d:3a:74:45:8b:23:67:61:73:26:7e:4f:06:4d:35:
54:84:41:ee:15:5e:82:97:53:f7:bb:45:41:57:ec:
0f:d9:ab:30:1b:6a:62:24:20:0c:52:1c:a1:4b:e1:
d6:16:a0:bf:99:2a:63:f8:c6:5c:86:f8:e5:31:25:
15:af:f7:1e:a1:d9:8f:df:eb:68:ac:2b:c2:ea:86:
b9:70:97:9e:78:c5:4c:d2:db:a1:02:6d:c1:00:5a:
e0:e8:db:a7:ec:63:bf:f3:0e:83:1a:73:48:07:a1:
72:1f:e1:59:7f:7a:81:45:d2:e4:eb:a0:c9:ee:d1:
a1:32:2b:41:01:93:5c:ba:53:c0:e9:22:dd:39:e5:
0f:24:54:86:d7:34:74:fa:98:2f:6d:ee:dd:b7:fa:
b3:ad:98:58:1c:67:a5:7c:04:63:90:33:7a:95:31:
0e:a8:ee:e6:34:f5:c1:6f:a8:98:a8:48:81:6f:bf:
c4:6d:ff:0d:88:43:af:b9:27:5e:ec:18:e5:0a:98:
ac:a4:16:a8:45:7b:d2:96:a1:11:e1:50:4c:8d:e4:
50:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:73:C2:8B:39:02:3C:83:74:0D:09:58:AB:C7:21:5D:D8:76:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
X509v3 Authority Key Identifier:
keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:78:15:d7:4b:ed:a2:61:75:77:4c:d6:1a:44:be:c0:ff:b9:
09:10:fc:14:41:34:89:71:dc:be:ea:12:2d:80:7c:5e:82:b2:
ed:1f:e9:16:e1:28:0f:98:78:d2:98:8b:b6:17:a6:51:38:90:
dd:e6:58:da:ac:c8:10:39:26:4c:d7:a2:ad:15:41:8f:c5:b4:
82:ee:ec:e8:ce:43:84:d1:90:3d:95:c5:07:45:bb:55:5c:20:
43:78:40:ee:5e:84:c7:8a:7f:36:cf:d5:fa:96:61:2c:bd:d8:
6b:76:da:cf:ee:bc:5f:44:24:af:0c:e9:a5:31:71:93:c5:03:
43:8b:1b:68:f4:dd:7e:5d:ff:84:17:2c:ee:d4:ca:6d:a2:d2:
0c:c3:ad:84:6f:16:47:79:6b:e2:67:94:02:6d:ab:28:7d:27:
d2:9d:89:5c:81:26:6c:4e:3b:4c:51:86:79:58:05:25:07:9a:
3a:4e:58:41:44:e0:0f:02:64:59:a7:af:c6:db:c7:56:16:f7:
33:56:b8:98:ee:d2:9f:c0:47:33:60:bd:4b:60:20:73:ec:31:
c9:67:9b:46:04:45:18:b6:b3:fb:8b:57:06:b5:fa:2b:0d:55:
88:30:be:c5:d8:8d:63:01:b1:49:ea:a4:61:a8:ee:0c:ae:62:
aa:45:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:24:03 2026 by rpki-client