
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa
File: 709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa (raw, json)
Hash identifier: TfKWnu1WPbvO7sHG9oghLIfnsE+svaqiIDW8MwbeZUo=
Subject key identifier: DD:BC:D3:71:07:2A:67:86:A4:1E:DB:C0:5A:7E:30:F9:4B:4D:89:11
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584EC7A1D5F4564441CB95527100
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa
Signing time: Sun 09 Aug 2026 13:00:12 +0000
ROA not before: Sun 09 Aug 2026 13:00:12 +0000
ROA not after: Sat 07 Nov 2026 14:00:12 +0000
asID: 16417
IP address blocks: 139.138.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c7:a1:d5:f4:56:44:41:cb:95:52:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Aug 9 13:00:12 2026 GMT
Not After : Nov 7 14:00:12 2026 GMT
Subject: CN=fc380f07-e883-464f-88d3-5d03450bb69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:ae:2e:c9:3c:b7:77:39:3e:45:62:7c:c1:
05:d7:9b:44:4c:1d:7f:a2:51:44:60:4f:7a:4d:55:
24:bc:de:b8:17:5e:66:48:1a:c1:b8:eb:a4:77:fc:
fc:f9:56:ca:82:fc:bf:e5:23:83:21:80:15:10:6a:
c3:01:db:61:e1:f0:b9:84:3e:98:02:bf:69:fd:85:
52:84:cb:2c:14:07:0b:62:c5:51:46:08:15:40:0d:
40:9b:a7:6e:e2:72:e4:59:18:ef:d4:32:b4:d7:58:
07:f5:4a:b1:e0:b4:ab:f0:29:91:18:58:25:3e:0e:
5e:e3:97:1f:68:74:19:5a:54:7c:bf:0e:c0:c6:ff:
f5:7d:27:fa:46:15:ae:80:f2:2d:f8:e3:fd:aa:12:
1e:f9:0e:c1:5b:d2:70:6f:a6:13:9f:a1:2c:d0:4e:
bc:30:7a:d8:56:ee:ac:83:45:01:a6:d4:5c:10:76:
8d:e5:bc:8e:74:de:b6:a8:25:c0:7e:c4:b0:70:2e:
6b:34:0e:2f:f2:ee:4a:7c:62:8a:ef:a0:a4:7f:7f:
70:29:66:ab:a9:28:a6:bf:99:d3:28:5b:2f:13:7a:
b2:b4:dc:dc:66:6b:78:6a:ba:4b:20:1e:ae:7c:ab:
98:fe:ea:9c:9b:5f:3c:88:f0:6c:6d:a8:63:ec:e5:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:D3:71:07:2A:67:86:A4:1E:DB:C0:5A:7E:30:F9:4B:4D:89:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:81:8f:a3:d9:5f:20:b5:1d:21:0b:df:03:f4:d3:be:2c:db:
23:4e:38:2f:29:2f:5e:16:ca:ea:2f:68:fe:01:83:0b:62:fc:
33:11:a7:23:b4:dd:12:cc:c4:8a:b9:e4:d9:74:6f:b4:04:06:
a3:50:34:14:78:2a:ed:2f:7c:75:c8:8e:dd:89:2c:6b:ec:9c:
98:93:08:1b:c8:d8:af:c1:1d:29:4c:20:c2:18:8f:f3:2c:0f:
51:d0:b9:e3:e7:40:0c:32:63:fe:31:32:3b:28:bd:a1:44:34:
21:91:69:3b:b0:51:04:60:e9:15:cc:49:ae:c1:81:cc:ce:13:
8b:1f:56:50:3f:fd:60:cd:2b:b7:6a:85:7f:e3:ec:94:f5:5a:
8e:b0:f0:e8:e8:9f:e0:99:9e:50:7e:99:4d:0d:09:6e:f9:71:
c9:92:ac:af:e6:60:2c:56:c6:42:27:70:af:69:45:9f:81:11:
29:52:2e:c0:ba:99:2b:67:14:63:25:e9:9e:b3:87:61:32:60:
23:9c:05:67:3c:cb:12:96:5e:66:18:b4:8d:d4:17:1a:dd:9b:
85:8b:06:12:d5:83:5c:d4:7e:e0:7e:5c:5e:9f:8f:e5:b6:eb:
5a:a7:56:38:34:4f:df:53:11:4a:dd:91:17:a9:bc:1c:5b:a2:
f5:8b:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:26:33 2026 by rpki-client