
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa
File: 461aabaf-95c0-3092-b23c-127e90c3f101.roa (raw, json)
Hash identifier: bdt1paUBhG9tjJ5rSYKHzrxfc9uzQSfpNKbykbSaTXw=
Subject key identifier: 38:FF:D1:BF:9B:64:4E:00:5E:47:A5:A3:C8:DC:E9:6D:3C:F2:50:D3
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F4328584EA78897AEC6009F64BFE55500
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 398420
IP address blocks: 74.126.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:97:ae:c6:00:9f:64:bf:e5:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d2186481-ca1c-4dd8-b136-08eeec76a342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:98:83:c4:87:b2:df:47:53:8f:eb:b9:39:
26:5b:dc:b9:e7:a6:1c:04:f6:87:95:96:13:8e:02:
16:b9:2c:37:d4:92:19:6f:1b:54:1e:79:96:9a:37:
15:d6:70:18:54:4f:62:ea:db:6a:fb:23:46:68:df:
26:c0:24:af:b6:9a:bf:46:9e:b3:69:77:07:c0:ed:
04:d9:41:03:0a:bc:94:26:ab:67:78:d1:d7:9e:a9:
b9:ba:7f:1a:91:1d:60:53:20:b0:3a:fa:72:57:08:
92:49:af:88:99:f5:4b:86:52:e2:9f:c2:60:4b:91:
85:67:12:f8:2f:da:bb:6f:59:86:62:e0:07:4f:ed:
f9:6a:b7:e0:14:bb:a4:24:30:db:2e:0f:52:d0:cc:
1c:15:ee:7d:e3:43:b9:52:35:f7:72:57:34:08:ec:
6f:4b:e7:47:b0:1c:7d:7b:2d:f5:b8:ab:2b:1e:5e:
25:bc:76:c0:3c:f3:a9:b7:d5:04:d5:e5:16:7d:1c:
c9:32:e0:2a:ad:a3:92:3c:e6:a8:c8:cc:95:02:d7:
e5:e7:2a:77:63:d2:d8:aa:80:5c:97:e6:48:7c:5e:
ac:03:77:53:b4:33:5d:05:7a:5f:a2:ed:b2:49:5e:
18:20:cf:43:d3:b7:93:fb:fd:c0:0e:61:5a:55:53:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:D1:BF:9B:64:4E:00:5E:47:A5:A3:C8:DC:E9:6D:3C:F2:50:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ea:29:d9:8a:0e:ff:74:8b:44:23:da:94:da:98:c9:b1:a0:
61:2c:8e:e4:db:7f:3f:85:55:76:cb:4f:46:07:56:31:8c:4e:
91:2e:93:38:00:b6:de:51:08:72:41:63:28:42:64:27:ff:a9:
27:b6:63:07:0a:74:15:7d:47:0b:75:bc:e3:e1:3d:d8:26:6b:
fc:30:83:bf:e0:96:ae:22:97:bb:5b:c3:23:f2:4d:30:b3:03:
e6:e0:05:4f:2d:eb:90:17:b6:85:d0:ab:9c:b1:ac:3f:56:dd:
d5:41:ae:e5:34:c0:25:da:6a:08:65:c1:79:cf:81:9f:9d:0f:
25:32:7b:90:6b:c7:df:1a:c4:26:9c:5a:ad:49:38:d6:a0:bb:
1e:70:34:d0:f3:10:07:65:e1:2d:a5:e2:1f:a8:d9:50:aa:58:
ba:61:d3:c6:75:d1:0c:be:9e:da:ca:64:fe:18:ce:30:de:b6:
14:e1:1f:11:a3:1c:3a:f4:1d:5e:80:11:53:97:e1:86:3a:83:
2d:1b:ce:85:04:d8:7f:cf:47:d1:9f:0c:8e:d1:70:14:f0:5b:
4f:79:7a:3a:c6:36:e1:64:cb:c0:0e:fc:8d:95:6c:8a:0b:26:
fd:23:a7:a4:18:6d:78:4b:76:3a:e8:ac:b1:9b:71:7c:e2:34:
c6:90:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:27:14 2026 by rpki-client