
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/40e00cd1-a5cb-37b9-8198-def8b617d648.roa
File: 40e00cd1-a5cb-37b9-8198-def8b617d648.roa (raw, json)
Hash identifier: aI9Klp3pWcx7GXpqE3JI7jxGkgeoK9BDDlg1eC8CgIY=
Subject key identifier: 81:18:27:47:13:11:1D:6C:40:E7:B2:54:7C:B2:63:FA:53:99:DA:3A
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584F38B277AE1235689F06245000
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/40e00cd1-a5cb-37b9-8198-def8b617d648.roa
Signing time: Sat 19 Sep 2026 01:00:12 +0000
ROA not before: Sat 19 Sep 2026 01:00:12 +0000
ROA not after: Fri 18 Dec 2026 02:00:12 +0000
asID: 395831
IP address blocks: 158.115.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:38:b2:77:ae:12:35:68:9f:06:24:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Sep 19 01:00:12 2026 GMT
Not After : Dec 18 02:00:12 2026 GMT
Subject: CN=0141f53d-f50c-4461-8055-93f038f7c81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:f4:4b:11:1d:ee:81:2b:7e:16:bc:d3:97:
7f:f9:11:c3:a5:bb:8a:72:3d:b9:a2:8c:06:53:67:
a5:4b:7e:b4:8d:81:32:a3:ac:da:86:01:42:25:a6:
c0:8b:dc:c7:43:9b:d9:82:e5:5a:47:0e:8d:02:1c:
ae:11:4c:b9:ff:9b:64:0b:1d:5b:b9:22:6c:3f:dc:
6b:5e:03:48:50:2d:c5:5a:f9:9a:d2:e3:0b:a7:e2:
4b:b9:68:ac:67:20:d5:86:d1:12:2d:ed:4d:42:9b:
a4:80:d6:a8:60:dd:a7:df:9c:e6:77:2b:96:7a:af:
6e:6b:6c:06:f7:75:6e:eb:d7:66:fa:47:d4:98:cf:
ba:13:8c:e6:77:45:21:52:08:79:66:27:e1:ff:0e:
13:16:49:fc:28:2d:a5:f6:55:67:0a:a9:58:e9:df:
09:13:3b:48:2f:c4:be:f2:8e:12:99:73:c4:4a:42:
2a:96:08:1f:9e:65:d6:9c:ae:89:42:9d:6c:f1:08:
bf:a5:99:57:6f:61:4b:ce:e4:8e:e3:8e:40:52:d7:
5c:9e:16:29:7e:29:ab:d0:87:82:1e:a5:42:dc:d7:
c7:11:fc:d1:07:63:dd:b9:02:ab:90:b8:08:43:fa:
0e:19:4e:b0:4a:0f:15:40:6b:ac:2e:2c:9f:bb:b1:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:18:27:47:13:11:1D:6C:40:E7:B2:54:7C:B2:63:FA:53:99:DA:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/40e00cd1-a5cb-37b9-8198-def8b617d648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:fd:f0:9b:6c:d4:aa:a0:fb:63:98:07:cf:92:ed:98:f0:ae:
10:bd:31:1f:06:ec:cd:47:07:c5:f2:2d:54:66:f4:e6:a0:d7:
f1:33:c0:8e:f6:ab:7d:62:a7:0b:f8:0c:d0:9c:33:5f:9b:90:
fe:d5:f5:ec:23:0a:f4:85:95:62:c4:37:1e:41:5c:0f:a8:ea:
8d:ed:b7:36:8b:92:07:30:46:23:16:87:88:03:e2:9f:43:b2:
16:82:5c:73:92:24:7b:c7:44:4f:8a:dd:7c:ed:44:20:4e:94:
e7:b9:87:04:b1:12:18:da:8f:00:13:d0:8d:20:8d:30:d8:99:
4e:1f:1c:ac:05:09:9d:16:2b:39:80:80:55:28:4c:fc:8d:24:
48:ee:ee:d7:e6:4c:07:8b:05:a5:08:9e:75:f7:2b:6f:ac:15:
d5:57:a4:c3:ee:82:e5:b2:00:1e:e8:07:59:64:d0:40:ee:d6:
27:88:e1:86:86:31:e8:60:45:53:9d:fc:f2:69:b9:cc:a0:a6:
ee:94:2a:d5:05:66:b1:64:d3:19:e3:1a:9c:f2:3f:8b:e8:c5:
c7:4c:16:bc:f9:db:33:fb:1f:5f:af:2b:37:71:15:e5:ad:a3:
51:a8:3a:6e:0e:f4:08:b4:a2:38:6f:70:38:a0:82:87:46:13:
08:ff:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:11:56 2026 by rpki-client