
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa
File: f25b49c9-5690-3892-8366-7d916842509c.roa (raw, json)
Hash identifier: 9jyLGhHmkSYluon5w8DnihQEDRR/25Mu2rsCUs+Ci3w=
Subject key identifier: F9:CD:B9:DC:E3:68:C6:7B:55:DB:98:47:9A:9A:20:84:2D:3D:9D:62
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F4328584EA78897A46BC5CAD1D92434C8
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 398420
IP address blocks: 74.126.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:97:a4:6b:c5:ca:d1:d9:24:34:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=c2bb7088-bfb4-402b-a4d2-30ea3d343c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:7d:7c:40:0f:e5:aa:45:88:d4:8d:1e:6e:
90:89:25:1d:39:58:ba:2b:95:c6:59:24:81:7f:e6:
53:9d:d4:33:e1:49:af:2c:fd:34:1c:58:ef:35:a5:
9e:0c:f6:2e:1d:4a:79:72:a1:17:68:f6:f5:28:aa:
6d:97:eb:0d:98:d4:87:44:d4:28:ba:b8:c5:34:47:
74:e7:c6:62:02:18:41:c8:1e:ab:bd:53:7d:74:cc:
1a:5c:48:c6:5d:63:07:85:47:91:d8:f5:a1:9f:9e:
ec:2f:c0:e0:af:81:23:4c:ed:ed:57:f5:a0:f0:a3:
a2:6c:45:7e:fa:7f:70:d4:5b:0d:19:c9:18:6c:28:
f3:ee:36:b3:e7:06:7c:d5:3b:30:39:43:24:38:cb:
b2:56:1b:d9:6c:e0:38:b2:48:81:da:37:1e:74:2a:
c4:c9:f4:a7:1e:ff:0b:50:bb:7c:d7:5e:7a:bd:45:
09:ea:2d:ca:31:6a:31:3e:a7:dd:32:db:88:97:be:
95:2f:96:50:51:0f:5f:de:d4:39:6b:a6:66:c1:e3:
5a:2b:80:a3:92:e9:3b:d0:0b:4d:7e:6b:8b:54:2c:
be:bf:31:9d:4f:88:8e:e3:4e:8e:ee:ad:17:1b:67:
c4:51:14:8e:4f:18:25:2d:cc:02:f8:ff:cf:3f:af:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CD:B9:DC:E3:68:C6:7B:55:DB:98:47:9A:9A:20:84:2D:3D:9D:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:a5:dd:a2:85:a3:08:97:82:42:3b:95:8e:78:6d:d5:3f:17:
15:ad:a3:22:72:16:51:52:1e:c3:14:1f:4d:94:c2:ae:b6:42:
7c:f0:f7:6f:4f:39:3a:cb:86:ef:08:87:30:03:8e:ea:4e:4d:
12:88:ff:8e:e0:1d:67:48:34:11:ab:35:e9:73:49:a4:88:d5:
b1:a9:ef:90:a3:86:07:82:f9:72:d4:5f:56:6b:d2:de:5f:3d:
e6:5a:83:3b:81:e0:38:9f:58:ed:7e:23:5a:f1:2e:58:a2:5a:
12:aa:0d:be:88:e6:41:4a:f3:9f:b4:e2:03:26:a8:d8:2a:6d:
c9:72:fa:6f:f8:bf:90:02:36:5a:e2:bd:2b:b5:86:44:0a:5c:
36:e2:e1:a4:af:e1:12:b2:af:b0:e6:0b:af:96:8f:fc:51:1a:
f2:a3:9d:fe:24:76:e8:02:cb:58:0c:25:37:22:7e:32:a4:1b:
ab:f4:2e:7c:1d:8d:ac:14:61:9d:d3:54:40:a5:ab:24:0a:a0:
6b:dd:03:ed:02:d1:23:c3:cb:9c:94:b7:d1:9b:3f:18:45:68:
83:95:46:41:8c:7a:f0:09:dc:29:aa:c4:84:d4:ba:86:86:f5:
90:3c:58:7e:e8:73:a1:e6:ef:8e:a6:d3:15:31:d8:ec:ed:89:
90:cd:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:26:49 2026 by rpki-client