
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa
File: ba7363a2-8649-3b98-93b5-6f704982a180.roa (raw, json)
Hash identifier: TQd5CLLGmrdcGaEzkoiI0Liksng9yKuS/2PgAadiRgk=
Subject key identifier: C2:D4:D3:D4:18:7E:2D:2F:30:3D:E0:D8:BE:24:A1:F2:BA:A8:E9:E4
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584F4975521F3B61FA049BE5FC00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16417
IP address blocks: 139.138.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:52:1f:3b:61:fa:04:9b:e5:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a8065a7e-360e-4c35-8966-72af23e3d89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:18:6d:e1:e7:20:6a:8b:52:06:3a:50:59:
ac:6d:d2:7d:9b:d1:2e:7f:54:81:35:0a:d5:8d:fc:
fe:64:8c:60:36:44:1f:e8:12:b0:87:33:33:05:68:
45:b1:8b:99:b1:15:0c:6f:9a:c9:74:5f:17:a6:df:
c7:4f:36:90:d7:70:0b:90:d8:3c:f5:75:34:76:f9:
5d:46:65:2c:12:0e:df:db:a9:0c:e3:00:61:c4:ad:
4b:c9:35:5a:a0:97:4a:9e:d9:bf:63:6e:8e:bb:c8:
85:16:f7:40:54:34:c7:11:4c:ac:6a:e5:25:4b:7c:
a1:d5:1e:c5:51:87:d2:b5:91:04:99:f5:9e:e1:be:
d5:1d:1b:e1:10:47:c2:43:13:18:27:59:69:d0:c3:
4e:af:39:ba:b0:57:3b:b1:e6:ca:fb:da:29:98:ab:
40:06:1c:58:07:56:82:6f:d3:e8:b5:02:b5:da:53:
4d:7c:84:46:54:6f:64:40:12:4a:c6:5a:9c:79:c7:
ed:5d:32:6b:3a:4d:f8:ec:67:10:df:ff:96:ed:d8:
e4:3f:36:0f:b7:8b:bb:23:41:2f:1a:70:dd:ae:41:
fb:07:3e:92:7e:54:0d:bf:dd:a0:27:ec:b1:c7:65:
eb:93:19:f9:c8:0d:9f:a9:2d:f5:ac:95:d4:ba:e8:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:D3:D4:18:7E:2D:2F:30:3D:E0:D8:BE:24:A1:F2:BA:A8:E9:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:f8:07:a2:3f:6c:ea:f3:6e:d1:49:e7:64:ff:80:2f:b3:b0:
4c:54:f4:0a:0b:75:f8:5c:f0:e0:47:bd:87:4e:9e:8c:05:71:
8e:09:b6:4d:42:e7:ec:2e:2e:74:d1:f5:78:b9:f1:df:16:7d:
a8:82:57:79:9d:15:5a:50:17:73:73:3d:4a:ce:71:ff:98:f8:
67:01:66:3a:24:e5:6d:8a:ae:6e:ac:37:0f:88:4b:48:4a:3b:
f7:8b:de:45:6f:0c:34:e8:06:29:43:02:3f:78:9d:45:ce:61:
c5:c3:8c:f7:81:d0:59:a4:34:e4:30:62:d4:9b:0c:31:04:23:
e7:f1:f0:21:b9:9f:37:77:dd:94:cf:11:d3:b5:8b:7d:62:d9:
e8:fd:91:14:58:d5:36:7e:cd:72:2b:74:37:bb:6f:d0:7c:0d:
af:48:c6:4b:eb:75:1d:c6:c1:ba:b3:37:87:ee:03:6e:ed:bf:
46:51:e0:d2:9b:22:aa:61:ec:47:f6:91:08:f0:51:b4:08:cc:
27:2d:59:a2:67:4b:43:00:ab:e4:b3:92:63:94:82:98:4f:a6:
7d:c4:b9:d8:d8:4e:9e:6d:db:37:00:a2:f5:38:22:6a:90:d7:
e7:4e:42:f0:88:4d:8a:b4:eb:4a:a7:8b:1d:b9:42:26:8d:f0:
4f:f4:af:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:43:44 2026 by rpki-client