
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/f33bedca-0b42-3876-a9d6-9e6a7ca8d61e.roa
File: f33bedca-0b42-3876-a9d6-9e6a7ca8d61e.roa (raw, json)
Hash identifier: qyElmQa6gtLdXv+ONQ7qvom+osE+XW2nYjFa/hDOSYc=
Subject key identifier: 79:B8:10:2C:14:9E:0B:66:02:0E:AF:8E:B4:A9:C1:63:C3:58:16:39
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584F5B9800492A254BC5F5855080
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/f33bedca-0b42-3876-a9d6-9e6a7ca8d61e.roa
Signing time: Thu 01 Oct 2026 13:00:12 +0000
ROA not before: Thu 01 Oct 2026 13:00:12 +0000
ROA not after: Wed 30 Dec 2026 14:00:12 +0000
asID: 16740
IP address blocks: 74.126.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5b:98:00:49:2a:25:4b:c5:f5:85:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Oct 1 13:00:12 2026 GMT
Not After : Dec 30 14:00:12 2026 GMT
Subject: CN=56bd1aa5-ea43-46ab-b92e-913aebd482e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:dc:c5:87:51:8b:b3:71:20:31:c4:6f:a5:
9f:f0:26:00:d8:88:b6:88:fd:94:c3:9d:44:95:cb:
b4:83:b1:86:7d:c9:05:45:cc:e7:28:d3:50:d6:3c:
a3:8e:ae:6e:71:fd:bc:ef:36:c8:73:57:d2:61:20:
28:de:e7:5b:5b:73:50:7a:d6:ed:a5:d2:cf:97:37:
7a:5e:ac:1c:8a:d2:65:a7:62:78:be:f7:88:40:73:
cf:de:c2:d9:74:0b:b8:4e:cf:c7:76:dd:dc:52:19:
c6:a1:6d:4e:a1:63:70:ee:1d:6d:2c:b6:78:3a:ee:
c6:a0:dd:36:14:75:dc:5a:fa:cd:68:ff:86:e8:6b:
83:3c:a1:b6:e5:73:fc:af:98:65:9d:47:6d:9d:99:
28:e2:91:36:0f:9d:a8:8e:11:7d:70:3d:63:a8:b6:
49:74:04:63:a3:1e:c5:9b:59:8a:7f:51:d3:1c:9c:
0b:ca:47:76:04:8e:3e:35:ae:22:bd:f2:99:3f:9d:
65:4f:23:a8:9b:6a:fb:f0:66:20:5c:e1:1b:35:34:
f2:9f:64:54:89:08:2a:4e:b7:b3:c8:af:ed:41:41:
c9:1a:a8:b0:3a:b5:71:0a:c4:62:88:5e:6e:cd:98:
eb:91:1f:b3:ba:ef:3a:db:bf:ad:29:af:69:41:44:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:10:2C:14:9E:0B:66:02:0E:AF:8E:B4:A9:C1:63:C3:58:16:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/f33bedca-0b42-3876-a9d6-9e6a7ca8d61e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:28:d8:a0:32:20:be:fa:b6:5b:a8:30:66:e5:7b:30:56:84:
5b:67:57:f5:f4:d0:d0:5d:e0:4b:09:46:18:d6:f2:f7:5c:7d:
5d:7c:30:28:a3:8f:b8:bb:97:71:de:b4:4b:3c:2a:b5:9b:2b:
7e:f0:f9:fb:5a:a6:6e:13:66:0c:35:05:02:ad:5a:97:2b:26:
bc:70:12:1f:86:d3:44:8f:58:e2:0f:0c:f0:c0:73:ca:0a:67:
e9:de:e4:48:5e:b3:ae:8e:61:9d:f4:2d:1e:98:8a:78:63:1c:
e7:e9:49:f8:c0:51:a3:38:51:0a:45:73:77:75:c2:9f:d2:b4:
a5:49:45:0e:ec:82:b9:86:61:c8:93:c2:be:80:5a:dc:e1:d4:
08:1d:be:00:93:1a:49:6b:44:bf:7b:a4:e8:b1:01:38:22:dc:
37:ed:17:66:f4:57:7e:87:be:ee:fd:f7:55:ab:1c:09:7e:b6:
a5:8e:36:68:c0:63:1c:0f:c2:1c:a1:89:51:b3:ff:79:a2:53:
11:5c:11:a2:ed:e7:d2:82:03:01:16:64:a0:2f:91:de:44:da:
43:c1:d9:02:8b:26:be:d9:55:b6:3c:46:cb:38:91:cf:05:de:
5c:59:7a:18:30:ca:22:bc:6f:59:10:0b:e7:36:74:ad:d0:c8:
c6:ee:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:00 2026 by rpki-client