
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa
File: 349277bf-1117-3421-ab89-a481dd456f55.roa (raw, json)
Hash identifier: rBEs9c3IWTZ+jh3gXO1zxAp2/soM5AVkvLCSjeGwJZc=
Subject key identifier: 22:9D:B3:E7:50:D2:3E:2E:50:87:3B:A3:86:4A:FC:C1:E0:B1:32:53
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584EA7884D3849ED5707188B54E0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16417
IP address blocks: 139.138.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:4d:38:49:ed:57:07:18:8b:54:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a43027d8-5400-4201-a30d-1768917ec474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:90:ba:4f:44:75:86:f5:76:6d:95:8d:d1:
a2:55:c1:54:e8:a5:53:56:6b:e3:1c:9c:d2:3a:7c:
63:d3:86:4c:f9:0c:df:31:27:f3:1c:99:99:d4:dd:
98:db:a8:42:67:22:8a:51:41:5b:f4:f7:03:af:ee:
e6:8c:79:d0:7f:f8:87:8e:5f:d3:b9:00:a0:db:4d:
c3:36:a5:f8:1f:19:49:2a:c2:a2:c8:76:d6:96:e0:
c4:13:67:c1:33:ef:fd:cb:29:cf:18:4d:1e:e2:03:
30:62:24:d2:aa:e4:53:63:b8:3e:1d:1d:83:0a:c1:
6a:5a:6d:03:4d:df:10:95:c3:79:ca:5c:ad:89:6e:
33:c2:d6:2e:a8:d4:9d:d6:80:cb:27:26:39:3e:42:
87:f9:e0:b6:1b:51:b7:de:4a:9e:b9:af:fa:29:5c:
e9:89:52:3b:17:d4:8a:39:10:48:98:1c:32:ca:2e:
8a:b0:59:66:7c:38:10:69:72:0c:1d:bd:31:42:3c:
79:95:69:b0:fa:e1:65:b2:22:b5:67:12:0d:29:9f:
3c:0f:4f:83:77:ee:ac:9c:5b:ca:71:0f:5b:a6:eb:
7c:7b:81:62:27:34:b3:1d:7f:ad:d3:f2:4e:32:ab:
b8:85:7f:f5:59:6c:0e:b4:f8:20:2c:61:b5:67:5d:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9D:B3:E7:50:D2:3E:2E:50:87:3B:A3:86:4A:FC:C1:E0:B1:32:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:1c:bd:94:24:f8:5f:de:b1:5a:ef:01:ad:8b:00:e9:86:dc:
e8:b2:00:3a:ce:0d:cb:fd:ca:c3:dc:5c:a8:88:cb:c1:76:f8:
68:bb:fe:65:09:4c:6f:26:bf:94:f7:87:1f:4c:29:67:01:00:
75:b5:99:65:81:e3:d8:f1:4b:7e:b5:25:be:48:78:32:08:be:
a1:04:51:51:dc:3d:54:25:06:ea:3f:c1:86:d2:47:78:33:ea:
f0:9b:7b:f1:d3:da:e8:3f:4e:54:b5:a4:ed:66:fe:d5:1e:ac:
98:43:88:d2:6f:b1:67:b9:2b:b7:1b:47:e3:ff:9b:49:f7:d3:
fe:d7:32:19:44:f5:84:70:16:b0:4e:39:70:e2:59:73:7b:a4:
ae:3e:1f:26:d3:03:4f:31:79:c4:98:e4:01:1e:8a:d1:cc:1f:
75:4e:84:18:fb:53:1a:de:5c:6f:eb:a0:cd:2c:98:4a:41:ec:
e8:66:e1:5b:c0:cd:f9:eb:0b:52:b5:70:f9:bc:6d:40:a9:9d:
c0:48:7a:cb:f7:22:f3:62:a1:f8:71:ee:9f:d3:6e:cc:9b:2e:
3c:00:f0:a3:97:a5:03:0f:d4:fd:a7:b3:a0:30:c1:c9:c1:f2:
1d:8f:f6:df:3d:b7:50:97:5f:ac:60:1b:ff:db:41:8b:7d:6a:
a7:a3:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:27:33 2026 by rpki-client