
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa
File: 840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa (raw, json)
Hash identifier: PwCLEN3SGMQkRiBOeWpve7dB2CFk/MIc1ohRs432BLc=
Subject key identifier: 33:C7:1F:A0:E4:4B:98:5D:5B:B4:6B:11:1C:E0:A5:9C:F5:8D:A8:9F
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584EA7884D229E4096E73E010780
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16417
IP address blocks: 139.138.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:4d:22:9e:40:96:e7:3e:01:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f2ae09cd-ba98-470a-b8e7-395244edd211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:26:7e:e7:d5:b6:ae:2f:4e:2b:d3:7b:f6:
49:8a:7a:66:96:de:71:b9:1d:14:0f:bf:2c:1d:7a:
e2:f8:00:e5:6d:74:b0:db:83:26:b0:12:ca:c7:d8:
0b:db:4d:26:23:7a:63:b2:79:d4:bf:db:a1:39:3b:
dd:ca:d7:26:a6:d2:6b:b4:25:01:85:9f:b9:7b:1c:
b2:f6:bf:75:dd:3b:1c:64:4b:6d:d2:61:0b:dc:7b:
73:6a:f2:60:2e:ae:26:1d:3e:df:5b:c5:c1:1c:60:
d5:51:8a:ae:67:89:12:64:64:46:36:b6:7d:b3:ed:
4b:e7:d2:38:c6:61:3c:54:35:76:1c:e6:84:8f:00:
ed:c0:f8:b3:8b:3f:24:0c:80:10:02:9c:e9:b3:61:
1a:23:c0:e7:32:c9:b5:b2:cc:8b:7d:89:a6:3c:40:
37:f4:66:b0:98:94:5f:01:93:0f:5b:f7:ff:98:40:
e1:90:b4:c7:4b:84:09:5a:8e:ca:bb:83:b3:7b:2f:
b5:eb:7c:2a:87:ae:0b:6e:b9:b2:ad:04:d3:f5:d9:
9d:d6:16:26:34:a0:2f:76:f4:dc:3f:12:1c:a0:37:
52:ae:15:d4:ff:32:ec:52:b9:62:80:34:ac:58:6c:
28:47:71:f9:c1:2e:4a:51:bb:ac:36:9a:69:00:1d:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:1F:A0:E4:4B:98:5D:5B:B4:6B:11:1C:E0:A5:9C:F5:8D:A8:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:67:9d:55:55:b2:ff:ee:d6:25:06:91:94:7a:8a:ab:c3:85:
0a:5b:04:d6:24:48:a2:6f:e4:f0:5a:d7:6e:99:07:47:2f:12:
31:be:9c:92:fd:e4:95:28:50:d4:d9:5d:f3:48:0d:a9:c2:c0:
3a:25:f5:c9:b6:89:ed:13:26:c5:4d:c4:8f:be:50:50:55:e5:
e1:78:e9:4d:0d:15:9a:34:9c:80:41:93:32:be:9f:1a:6c:ae:
a2:bb:a8:22:22:c2:d7:9a:bb:f4:53:c4:8e:6b:0e:02:04:86:
12:16:f0:cc:28:2e:1b:8b:12:77:04:94:96:0e:5b:2d:a4:46:
29:b3:08:72:9f:bb:df:d6:76:86:1d:5f:79:26:83:1d:24:3d:
6d:c0:05:7b:d0:b6:87:dd:c5:eb:1b:5d:69:2b:85:3a:23:a9:
3d:ab:01:11:0b:0d:b8:80:4e:9d:94:5d:4a:31:a8:01:d7:f0:
5f:79:35:e4:29:39:b7:fc:94:d8:19:58:fa:d9:04:76:c4:26:
ef:56:96:1e:c6:0a:53:3d:ec:01:f0:88:49:15:96:ca:8b:0d:
54:32:05:d6:2f:8f:9b:6c:90:38:89:18:35:2f:9f:d6:b9:da:
04:50:56:09:db:bc:17:05:a7:06:58:97:7b:15:7a:f7:c6:33:
4d:ce:15:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE0inkCW5z4BB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjJhZTA5Y2QtYmE5OC00NzBhLWI4ZTctMzk1MjQ0ZWRkMjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJwmfufVtq4vTivTe/ZJinpmlt5xuR0UD78s
HXri+ADlbXSw24MmsBLKx9gL200mI3pjsnnUv9uhOTvdytcmptJrtCUBhZ+5exyy
9r913TscZEtt0mEL3HtzavJgLq4mHT7fW8XBHGDVUYquZ4kSZGRGNrZ9s+1L59I4
xmE8VDV2HOaEjwDtwPiziz8kDIAQApzps2EaI8DnMsm1ssyLfYmmPEA39GawmJRf
AZMPW/f/mEDhkLTHS4QJWo7Ku4Ozey+163wqh64LbrmyrQTT9dmd1hYmNKAvdvTc
PxIcoDdSrhXU/zLsUrligDSsWGwoR3H5wS5KUbusNpppAB3rAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPHH6DkS5hdW7RrERzgpZz1jaifMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODQwZWViZTctZGQxNC0z
ZTdlLWI4ZjMtZmI0YzVjZGJjZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJnnVVVsv/u1iUGkZR6iqvDhQpbBNYkSKJv5PBa126ZB0cvEjG+nJL9
5JUoUNTZXfNIDanCwDol9cm2ie0TJsVNxI++UFBV5eF46U0NFZo0nIBBkzK+nxps
rqK7qCIiwteau/RTxI5rDgIEhhIW8MwoLhuLEncElJYOWy2kRimzCHKfu9/WdoYd
X3kmgx0kPW3ABXvQtofdxesbXWkrhTojqT2rARELDbiATp2UXUoxqAHX8F95NeQp
Obf8lNgZWPrZBHbEJu9Wlh7GClM97AHwiEkVlsqLDVQyBdYvj5tskDiJGDUvn9a5
2gRQVgnbvBcFpwZYl3sVevfGM03OFeY=
-----END CERTIFICATE-----
Generated at Sat Sep 12 14:25:40 2026 by rpki-client