
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
File: b3daaa82-df38-3308-8f74-538c1b1500bb.roa (raw, json)
Hash identifier: Yts+3t9TcZtGS4/1BH16JWs7aqBWqe4zJysAUI5V1hQ=
Subject key identifier: 38:77:80:2B:DC:59:9D:34:A1:F7:05:E2:38:27:B4:83:56:B0:3C:B1
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584F1467961587AD53D74C5F9660
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 395831
IP address blocks: 158.115.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:96:15:87:ad:53:d7:4c:5f:96:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=4186bd3d-6261-4634-8cd3-197e0a10a7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:c3:65:35:bd:e6:ab:a9:16:47:f6:4a:c7:
a6:43:66:eb:b3:8a:5f:76:4b:fd:bd:5f:db:f2:01:
41:be:5a:b0:cf:87:0f:a5:d9:2c:65:75:ea:31:74:
dc:a6:ca:96:e9:25:e3:84:0f:75:a4:7c:82:30:55:
bc:73:4f:25:e0:70:3a:d9:63:34:b4:61:86:88:40:
5f:72:ec:07:05:22:c2:9e:0a:3e:e1:a3:69:a0:fa:
5c:d5:e8:fe:fe:41:10:e7:57:ce:51:9a:a5:3d:16:
47:d0:70:96:4a:59:f1:49:af:eb:20:a1:1c:b2:0c:
59:2d:90:b7:51:3b:c7:93:08:8a:45:6a:87:54:b6:
de:38:b3:ae:e5:f7:f0:39:10:aa:b9:d8:c8:9d:bd:
e9:7b:5d:c8:5f:ed:ec:03:ad:d3:d3:ba:c6:0a:10:
0b:20:e4:dd:d5:8b:2f:43:f4:90:f3:74:a8:71:0b:
00:95:a5:07:7c:2f:06:88:fb:61:22:3c:93:71:78:
43:6b:d6:ee:a4:9c:db:f2:b4:87:2e:8f:58:11:ad:
68:6f:b4:38:98:66:7d:fc:69:ae:35:95:c4:dc:cb:
3e:11:b5:29:a0:7b:35:87:a2:38:24:33:e4:51:9b:
5d:50:2b:83:c6:f9:9e:75:07:53:57:43:66:12:87:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:80:2B:DC:59:9D:34:A1:F7:05:E2:38:27:B4:83:56:B0:3C:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:65:7b:01:34:d8:8c:48:87:6f:d2:b8:89:98:b1:7a:12:27:
5b:37:ef:fc:e0:d6:d7:84:f3:9d:c9:75:ef:ba:da:42:5f:dc:
8e:ac:3c:84:30:1f:f5:9e:dd:16:6e:94:7b:70:58:9f:c3:07:
59:e4:43:56:6f:9e:92:99:a7:e5:76:eb:aa:fe:e0:9f:c1:20:
3e:9b:bb:60:ae:71:35:dd:93:5a:de:36:da:39:3e:4f:e7:52:
6e:07:60:44:e0:f5:50:6c:95:5c:ae:25:f5:75:0a:07:e2:1f:
78:cf:b9:87:d4:e0:dc:8a:da:4b:58:3a:92:c3:e2:97:aa:6f:
23:3b:b2:fb:98:c2:50:bf:46:d1:43:8a:28:fb:69:61:4c:ec:
22:22:07:e7:6d:e1:8b:a0:de:0c:91:8d:6a:3f:1c:cb:7c:48:
82:bb:b3:aa:97:b2:78:72:36:ed:7b:52:66:aa:de:b9:11:b5:
f0:1d:b2:10:d9:f7:5f:24:ff:07:48:2f:90:25:89:68:2b:21:
e2:40:96:8e:39:03:15:12:b4:22:40:d8:41:31:27:5d:e6:50:
ba:cd:17:68:63:c1:e7:cc:f6:b8:34:31:5e:78:ed:22:8d:52:
59:1c:c3:97:62:e4:16:9b:de:1e:ba:53:6b:fa:06:1d:7c:cb:
c7:1c:24:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:47:50 2026 by rpki-client