
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
File: 23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa (raw, json)
Hash identifier: BeOjOjD8L4arF8MVZjkpAvorKQcj18LslRPCesfYqcU=
Subject key identifier: 00:07:1D:9F:46:93:17:B4:E9:EF:93:27:6A:BD:CA:FE:9B:B2:23:74
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584F093CDE4270D7DA167B759900
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 395831
IP address blocks: 158.115.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:de:42:70:d7:da:16:7b:75:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=512f9dbf-79fa-4a7b-b4ce-06e5a6cabe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:28:f1:2a:ed:22:64:62:66:ad:1a:e0:cb:
82:d8:86:d7:2d:2f:36:e5:9c:17:c0:78:b6:b8:37:
28:de:ec:09:83:8f:f0:98:0e:8d:5d:20:cc:ed:7c:
c0:6a:cd:4c:50:97:3b:fe:36:e6:39:bb:6f:78:18:
f1:6c:27:22:10:24:f9:e3:54:1d:b9:ee:9d:23:4b:
d5:14:2d:8f:a2:79:70:c5:76:42:8c:f4:77:c6:ba:
05:7d:48:73:c0:0b:a7:3e:48:3d:42:7b:15:ef:32:
db:2f:b7:90:33:e4:70:f7:15:3e:10:ec:51:5d:db:
0d:5c:ee:93:26:73:c0:e9:c7:65:ee:4a:75:c4:78:
a9:c3:f3:a6:fc:65:38:07:e0:eb:05:fa:8d:9d:5a:
65:c5:6a:c8:7e:23:d0:f0:ce:04:eb:5e:49:e7:89:
1d:70:68:a0:dc:2e:b7:8f:c8:6e:67:00:e2:78:b8:
35:85:3b:c9:38:9e:19:ac:7d:2b:68:e2:a7:7f:24:
4c:76:26:d7:2d:92:f2:33:df:bd:3b:e5:1f:fc:75:
ce:20:97:83:a0:f0:4a:d2:44:98:b3:27:09:f2:62:
1a:f9:5d:93:3b:17:4d:d9:2f:7f:e6:e0:e5:ce:36:
f1:eb:79:7a:8e:cd:fd:93:3f:50:f7:93:c1:30:ce:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:07:1D:9F:46:93:17:B4:E9:EF:93:27:6A:BD:CA:FE:9B:B2:23:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:c3:22:46:80:ac:df:5d:25:db:5d:6d:38:e7:99:f1:e6:9d:
17:49:61:57:54:2e:a6:52:57:19:0c:aa:8e:ae:f7:85:69:52:
36:28:ea:53:85:fd:2f:11:70:9d:64:da:f4:6d:76:5e:d4:ac:
e6:1d:44:42:af:06:71:9a:ef:73:15:21:ca:32:e1:76:50:18:
b0:88:00:f7:d0:6e:79:c6:8c:18:18:98:89:1d:75:f0:5a:99:
d4:c9:e1:44:e4:92:9e:a8:61:1c:5d:4e:09:84:ed:61:fc:21:
48:74:1c:11:60:22:53:4d:e0:3d:ec:a7:20:22:b8:e4:eb:7e:
b5:20:9e:c9:01:1b:a7:5c:56:af:6a:24:43:0a:64:14:d1:1d:
e5:12:45:37:e6:1f:51:16:56:a4:76:6d:9b:15:3b:90:6e:31:
ff:2d:70:dd:18:8a:89:41:1d:66:53:30:df:c5:94:b7:50:37:
54:62:3a:a2:76:88:2c:6f:18:5a:6e:55:6f:79:31:ca:81:e1:
ee:04:c3:b6:0d:c7:06:eb:63:7f:cf:c8:3a:39:e8:81:30:b1:
c0:ad:0b:d1:5f:c0:c8:08:21:b7:0e:de:92:f2:0b:87:77:21:
93:0c:44:97:80:9c:50:2e:9c:8e:a6:02:11:6a:1f:a6:51:8a:
be:a9:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:25:21 2026 by rpki-client