
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json)
Hash identifier: L+RMsYlA8ZGmeI2Zrh9WLs2QQ/16i/Smaxu4iYz2BAk=
Subject key identifier: 38:A3:E7:29:A9:E7:81:CB:B7:E7:67:8E:70:34:E8:EF:ED:70:9D:9A
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584E1A143A33B51C4AFF81922100
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
Signing time: Mon 08 Jun 2026 09:00:12 +0000
ROA not before: Mon 08 Jun 2026 09:00:12 +0000
ROA not after: Sun 06 Sep 2026 09:00:12 +0000
asID: 16509
IP address blocks: 158.115.157.0/24 maxlen: 24
2606:7bc0:1092::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1a:14:3a:33:b5:1c:4a:ff:81:92:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jun 8 09:00:12 2026 GMT
Not After : Sep 6 09:00:12 2026 GMT
Subject: CN=9c2c2b61-f586-4d53-bc41-66df7a25b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:0a:7f:18:7b:bf:7a:7a:f7:c8:b0:85:15:
7f:4c:70:19:40:83:21:9a:5c:22:65:53:ec:54:d5:
e9:67:b2:af:d5:a6:8e:9b:37:12:04:97:10:7d:87:
d7:2f:e1:ac:94:48:b0:35:bd:ba:77:e1:48:b9:c1:
ec:9f:70:24:ba:f2:50:a9:8c:dd:18:8c:ea:ba:41:
07:94:b8:da:e8:1d:c2:74:f5:30:e6:a5:50:1d:af:
b4:5c:72:63:f2:8a:32:df:c7:6b:5b:18:a0:f7:76:
44:63:5c:48:12:ed:52:0b:7d:d2:4a:e7:33:83:61:
87:8c:1b:c9:aa:0a:50:c2:50:89:81:4e:55:fb:d0:
b9:d7:14:a5:2c:5a:b1:a0:11:f6:23:94:07:00:9b:
f1:b4:68:69:b4:ba:11:bc:8c:b6:48:ab:49:ad:65:
29:dc:66:8b:33:c9:62:ef:ae:75:4d:ef:16:b7:bb:
56:b3:3a:7d:11:d8:0a:ca:12:69:c8:d2:71:8e:9a:
d9:67:b0:69:c1:cc:bd:48:32:c1:02:6e:ea:84:c5:
03:f8:be:47:db:ec:ec:dd:01:ab:da:60:5e:d4:d0:
07:ae:1a:1c:57:52:9e:38:7e:32:03:73:4a:3c:7f:
f5:96:e6:d7:6c:74:28:78:da:b0:0c:ab:28:2b:7a:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:E7:29:A9:E7:81:CB:B7:E7:67:8E:70:34:E8:EF:ED:70:9D:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.157.0/24
IPv6:
2606:7bc0:1092::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:8f:17:54:41:4f:14:68:62:4e:8e:9f:86:69:85:de:0e:97:
42:a8:1f:44:5e:fb:fe:72:90:c0:bc:9e:b7:e1:4d:f3:c5:0d:
01:34:c9:52:b2:65:2c:24:69:b9:93:61:c6:22:7d:2a:01:0a:
bd:2c:95:4f:20:a2:ef:eb:70:c6:30:80:83:bd:c8:21:e2:89:
4b:f4:c0:ed:38:76:92:dd:9a:26:61:94:a1:68:e7:72:b1:77:
16:c1:51:19:a1:46:8e:ce:2b:cf:10:0b:28:38:2c:5a:60:99:
cf:ea:0e:68:93:73:7a:df:03:3e:c8:c3:7e:cd:46:e7:6e:fd:
e7:7e:b0:c8:36:61:fb:6e:86:88:98:c7:17:df:7b:14:dd:fd:
5f:04:a9:e6:47:cc:27:26:87:07:7d:4a:87:12:f6:e5:db:a9:
2d:6c:ba:7e:c2:12:8f:ce:a9:3e:9e:c0:f2:6a:f0:c1:98:38:
c4:f2:ec:1f:f5:ec:c4:62:3f:87:fe:eb:f6:7d:bb:6b:bf:a9:
d7:a3:03:ee:e0:fc:03:da:56:5e:b0:16:f1:7c:a7:53:e1:8c:
dd:56:a8:e7:0f:e6:5f:51:5f:0a:c8:a5:fe:1b:5b:bc:77:40:
16:3a:43:4c:c7:be:2c:a2:85:e6:b3:c2:10:c9:5b:45:00:0f:
08:98:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:33:34 2026 by rpki-client