
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa
File: 6cf7fe11-676a-30a2-84a3-46c07752a767.roa (raw, json)
Hash identifier: /baT/994XCwMEoq+oguRyY+CFrow4SxfVwq3aS0Ju2c=
Subject key identifier: 37:F3:E1:A8:0E:CF:85:41:37:9B:5C:35:A4:14:38:0D:4F:02:90:45
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584F698D871E370CAA9C9F69B200
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa
Signing time: Tue 06 Oct 2026 13:00:13 +0000
ROA not before: Tue 06 Oct 2026 13:00:13 +0000
ROA not after: Mon 04 Jan 2027 14:00:13 +0000
asID: 16417
IP address blocks: 139.138.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:69:8d:87:1e:37:0c:aa:9c:9f:69:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Oct 6 13:00:13 2026 GMT
Not After : Jan 4 14:00:13 2027 GMT
Subject: CN=0a999d48-c4ae-42d7-80d7-08830c45df49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:d2:66:d1:04:1a:32:95:95:15:ce:44:86:
3d:22:e1:ad:38:ab:b3:05:5b:d1:33:69:5b:50:e0:
ba:83:50:9d:47:9b:4d:95:bc:ac:18:01:c0:54:d8:
ea:97:d7:54:f5:cc:e5:5e:40:13:b7:65:99:fb:99:
3b:7d:7a:47:cf:12:97:5a:4b:9a:58:ef:d3:c2:9c:
21:27:03:01:35:46:48:91:9a:06:4d:64:1f:5a:c4:
30:9c:89:6f:e4:f1:5f:8e:a6:7b:6d:84:a5:c1:45:
dd:77:2b:87:bd:90:0f:51:88:e1:5e:a7:da:84:cf:
6a:c2:d9:ce:91:24:4f:22:11:12:42:2d:90:97:91:
bd:2b:e4:2e:aa:41:f9:ac:64:14:84:79:0b:5e:6c:
09:b0:fa:36:f0:03:a2:1d:b2:d2:88:83:80:cb:e4:
35:29:32:ea:d5:3a:ce:97:85:09:a3:0e:63:6c:74:
e5:24:d7:4a:e9:49:c8:ed:14:90:79:e0:1b:43:ce:
3d:8d:76:ae:29:ce:f8:d3:0e:e4:80:f2:2b:b5:45:
3a:19:bb:38:17:f8:00:f5:bd:80:46:fe:1a:14:7e:
43:76:5e:0c:1c:0b:4a:63:08:14:03:b3:7f:33:0e:
1c:67:0f:7a:f0:cc:19:ea:b5:e7:4e:2d:57:c3:bf:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:E1:A8:0E:CF:85:41:37:9B:5C:35:A4:14:38:0D:4F:02:90:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:86:1b:f6:77:6b:cd:95:3d:bf:6b:0e:1e:16:81:d8:9d:df:
03:fd:01:e3:99:96:95:6c:60:59:6f:20:c3:49:b8:7a:f4:be:
2a:69:29:b0:fd:a0:18:65:b9:35:51:d5:eb:70:15:8e:fe:0e:
05:2c:b3:e9:bb:3e:19:85:d5:78:cd:7c:bd:30:84:0b:62:8a:
29:56:94:23:48:47:cd:1d:bd:3f:90:e1:0c:5c:e6:26:b5:27:
de:b3:e4:b2:e5:26:ad:85:3f:a2:52:1e:28:b6:32:60:2e:16:
6d:f4:9b:78:82:0c:41:8f:9c:ae:79:d4:09:9b:c6:26:35:08:
f4:8f:f2:80:a1:80:76:08:95:31:50:90:96:eb:15:da:dc:3e:
d0:48:9f:b4:86:01:42:56:b6:12:85:0a:38:46:b5:52:93:d9:
0f:af:a9:d5:d2:51:b8:64:07:c7:cc:34:84:ba:8b:71:7b:fc:
b3:24:37:d4:d6:50:52:c6:50:b3:f5:4f:e1:03:c2:2e:96:81:
b8:65:9f:b1:79:6b:b1:1b:15:8b:b5:98:05:70:c7:08:3c:f5:
88:f6:3e:e9:63:17:3f:97:0e:b2:91:a3:d2:99:20:60:97:c3:
3c:57:5a:2f:12:bd:6a:25:55:d6:e0:cf:c5:ff:30:67:88:a3:
8d:9e:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 00:13:29 2026 by rpki-client