
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/39c85a04-0969-3fd5-ab42-95cc7d8ffa11.roa
File: 39c85a04-0969-3fd5-ab42-95cc7d8ffa11.roa (raw, json)
Hash identifier: 0KL0ICobnB335g9ocvm9OAbVBMNOoazxUp0g+UJ4N2c=
Subject key identifier: 00:F6:E1:B9:D2:57:B6:EE:14:83:26:23:18:59:32:23:9C:2E:B4:42
Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial: 010D0C9F4328584D4BC2318F6BB9C1AFC4682780
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/39c85a04-0969-3fd5-ab42-95cc7d8ffa11.roa
Signing time: Thu 26 Mar 2026 11:18:29 +0000
ROA not before: Thu 26 Mar 2026 11:18:29 +0000
ROA not after: Wed 24 Jun 2026 11:18:29 +0000
asID: 12025
IP address blocks: 138.207.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4b:c2:31:8f:6b:b9:c1:af:c4:68:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Validity
Not Before: Mar 26 11:18:29 2026 GMT
Not After : Jun 24 11:18:29 2026 GMT
Subject: CN=4ca3fb14-489e-4a38-84e2-2733983cee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:b8:7b:d9:78:e3:30:6f:85:e0:89:52:f4:
90:fe:16:18:db:e4:9f:2b:7c:fe:44:af:71:39:80:
0e:86:2a:02:d5:78:0a:73:83:a1:ae:e4:c0:e4:c2:
dc:d6:78:98:5a:d3:6c:c9:cb:0c:84:5b:0b:1a:48:
c6:7c:3d:1b:6c:83:38:d1:a3:52:49:69:bf:56:ff:
fc:d3:51:70:c9:73:8f:16:b5:f1:84:e4:51:e5:8a:
29:3b:c9:93:65:5f:c2:95:52:4f:4b:c1:62:cc:8b:
80:9e:e8:92:97:45:9b:13:78:44:66:22:b1:80:e7:
0d:51:60:ab:22:56:cb:dd:57:96:f9:98:a7:7a:58:
19:dd:2d:97:40:83:08:03:2c:14:84:35:7a:e8:dc:
c4:d1:8e:83:2a:5e:b9:56:d5:f1:2c:dd:ea:c9:6d:
bd:d9:ee:58:fa:7c:b6:d8:9f:2e:37:07:49:f7:82:
ed:66:4f:4f:50:fb:80:94:ec:52:04:a9:5d:ea:08:
f2:91:3c:85:63:1f:e5:f5:b7:b4:98:ea:08:c4:13:
f1:1a:b1:39:02:cd:81:36:2f:55:2b:64:53:67:83:
45:de:b5:9c:25:62:90:0f:7d:44:56:b1:82:9d:0b:
89:74:0d:67:83:8e:44:31:1e:b6:0b:a3:94:6d:f1:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F6:E1:B9:D2:57:B6:EE:14:83:26:23:18:59:32:23:9C:2E:B4:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/39c85a04-0969-3fd5-ab42-95cc7d8ffa11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
X509v3 Authority Key Identifier:
keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
sbgp-ipAddrBlock: critical
IPv4:
138.207.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:10:10:cb:c4:a0:cd:21:51:86:1a:0e:29:11:e7:af:ec:86:
ef:b8:ec:3f:54:04:9f:a2:0b:43:c1:82:79:b5:8a:e0:73:bd:
12:73:0a:4d:51:75:f8:c4:9e:a1:2d:4e:a5:ea:5f:c1:45:3e:
ea:8a:15:e0:c2:6a:96:8a:c0:b9:bf:cb:ef:c8:4b:f6:b8:0f:
f4:7e:fd:ff:aa:1a:7c:3c:8a:b8:69:ba:e1:0a:91:a2:10:45:
f7:ee:6b:a0:76:35:a3:74:81:b8:0f:af:c7:f8:c9:98:a9:f3:
eb:d6:f2:c3:a3:0f:cf:ee:0d:62:55:65:04:67:5f:ac:9d:9e:
18:05:1c:36:38:0d:d2:68:ac:33:b3:18:ac:49:2c:9f:f6:b7:
41:75:f2:e2:df:28:42:bb:0a:3f:f3:bc:98:65:f8:6e:f2:a5:
36:f5:f1:9a:23:e1:98:9a:c0:02:d8:d8:55:0f:24:ad:d1:3a:
b0:91:eb:99:9e:6c:ba:e6:95:c1:95:6e:7e:c4:58:35:e2:9a:
68:ec:b4:71:15:df:bc:dd:b2:e4:9f:49:c4:35:e7:3d:82:20:
1b:bd:c3:9b:03:1d:49:39:bc:3c:38:0f:1c:88:49:7a:a9:f0:
6d:d7:30:47:7e:db:0f:4c:b0:6e:41:f0:ff:69:53:1e:ac:0a:
2a:c8:2c:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1LwjGPa7nBr8RoJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDMyNjExMTgyOVoXDTI2MDYyNDExMTgyOVowLzEtMCsGA1UEAxMk
NGNhM2ZiMTQtNDg5ZS00YTM4LTg0ZTItMjczMzk4M2NlZTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+e4e9l44zBvheCJUvSQ/hYY2+SfK3z+RK9x
OYAOhioC1XgKc4OhruTA5MLc1niYWtNsycsMhFsLGkjGfD0bbIM40aNSSWm/Vv/8
01FwyXOPFrXxhORR5YopO8mTZV/ClVJPS8FizIuAnuiSl0WbE3hEZiKxgOcNUWCr
IlbL3VeW+ZinelgZ3S2XQIMIAywUhDV66NzE0Y6DKl65VtXxLN3qyW292e5Y+ny2
2J8uNwdJ94LtZk9PUPuAlOxSBKld6gjykTyFYx/l9be0mOoIxBPxGrE5As2BNi9V
K2RTZ4NF3rWcJWKQD31EVrGCnQuJdA1ng45EMR62C6OUbfEnbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAD24bnSV7buFIMmIxhZMiOcLrRCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvMzljODVhMDQtMDk2OS0z
ZmQ1LWFiNDItOTVjYzdkOGZmYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAis9VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgQEMvEoM0hUYYaDikR56/shu+47D9UBJ+iC0PBgnm1iuBzvRJzCk1R
dfjEnqEtTqXqX8FFPuqKFeDCapaKwLm/y+/IS/a4D/R+/f+qGnw8irhpuuEKkaIQ
Rffua6B2NaN0gbgPr8f4yZip8+vW8sOjD8/uDWJVZQRnX6ydnhgFHDY4DdJorDOz
GKxJLJ/2t0F18uLfKEK7Cj/zvJhl+G7ypTb18Zoj4ZiawALY2FUPJK3ROrCR65me
bLrmlcGVbn7EWDXimmjstHEV37zdsuSfScQ15z2CIBu9w5sDHUk5vDw4DxyISXqp
8G3XMEd+2w9MsG5B8P9pUx6sCirILJY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:36 2026 by rpki-client