
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa
File: 3675121f-0e8b-3664-8540-fd9dfccb894f.roa (raw, json)
Hash identifier: vqPSJn0RKAR1m1mtpcQZjBRQeQMFkYucSkPmLC/zZnI=
Subject key identifier: AE:8B:6B:2A:B0:EF:69:01:FB:BF:2A:CD:A7:4E:86:35:CC:8D:46:C3
Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial: 010D0C9F4328584F0C07864AF10C12574EE91B00
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa
Signing time: Thu 03 Sep 2026 01:00:12 +0000
ROA not before: Thu 03 Sep 2026 01:00:12 +0000
ROA not after: Wed 02 Dec 2026 02:00:12 +0000
asID: 12025
IP address blocks: 138.207.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0c:07:86:4a:f1:0c:12:57:4e:e9:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Validity
Not Before: Sep 3 01:00:12 2026 GMT
Not After : Dec 2 02:00:12 2026 GMT
Subject: CN=719bcf17-d084-4915-9c7c-01666f21f5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:dd:da:ef:64:a0:b8:5b:02:64:5c:f9:60:
de:39:0f:56:f0:72:cd:da:28:6b:ed:08:53:03:9d:
6a:b6:34:4d:3a:e0:89:c2:33:d2:11:05:05:04:65:
d2:01:f8:2a:01:0c:a8:89:d0:cd:60:62:25:81:d4:
c9:4e:62:df:13:25:4f:a0:46:a4:22:20:da:bc:98:
7f:95:0d:92:ff:89:ca:b9:6d:1d:a7:4e:40:4d:6e:
ea:22:b6:44:82:a1:53:ad:79:7c:42:40:e4:4d:5c:
0b:51:1e:5f:ad:bf:9c:d4:68:ba:71:49:81:9a:9f:
2a:7f:b2:76:e6:e2:36:3c:ae:74:88:4f:4c:92:e0:
c3:77:65:ad:16:f2:23:ee:4c:25:a7:87:8b:7e:cb:
27:09:28:b3:3f:da:6d:3d:f3:71:5b:d7:67:35:72:
8a:38:b1:11:b7:d3:16:63:5a:cc:3b:49:65:9c:28:
a0:53:2a:6e:6f:63:1d:28:1a:b4:1f:6d:c0:d7:08:
00:10:7f:12:af:72:c9:62:89:e3:91:af:63:38:5b:
3a:33:c6:df:12:c1:d3:c5:9e:3f:99:f8:8a:13:eb:
08:cf:6c:63:c7:4a:f9:24:4f:b5:b7:5c:29:a5:41:
33:3c:a6:d1:bb:43:ac:70:66:ab:fa:d8:ca:96:80:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:6B:2A:B0:EF:69:01:FB:BF:2A:CD:A7:4E:86:35:CC:8D:46:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
X509v3 Authority Key Identifier:
keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
sbgp-ipAddrBlock: critical
IPv4:
138.207.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:db:96:f4:70:fe:3d:b4:c7:e2:75:03:a1:bc:fc:2c:60:db:
2d:6f:42:a7:27:a3:eb:34:2c:96:e7:32:18:1a:4d:c9:41:d3:
9d:48:34:3f:a1:d1:23:3d:49:4b:0c:1c:28:68:33:03:a4:74:
46:d7:97:74:63:a7:15:dd:b7:b5:f5:4f:43:2e:99:b8:61:b6:
5f:bb:b6:0d:9c:ca:62:74:e8:30:28:16:8b:65:c1:be:24:8e:
fd:f0:e7:ff:33:45:33:88:f2:70:5b:51:62:17:ef:a1:b9:71:
46:f4:a1:05:07:03:56:b6:45:b0:49:2c:1d:de:92:6d:95:8d:
45:50:5a:e7:f5:fd:45:87:85:96:36:1c:8c:a8:99:ad:77:97:
4a:03:33:2c:ef:56:15:f0:1c:81:21:fa:62:a8:b9:77:e4:e6:
1b:55:d9:6b:f4:49:de:2e:d6:04:9a:d6:a4:c5:a2:c8:43:a5:
47:36:fc:4a:bf:e3:57:e7:11:1c:2f:2d:13:1f:97:41:d9:ef:
62:f7:4b:25:3d:09:d2:5a:ce:e9:8e:90:db:a1:a8:79:a4:49:
1d:55:85:88:a6:36:be:57:62:22:50:45:d2:34:5c:13:ce:22:
6d:cb:dd:26:66:fa:82:7b:bd:80:23:ee:c0:37:96:f6:b8:cd:
c2:f5:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:54:37 2026 by rpki-client