
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa
File: 2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa (raw, json)
Hash identifier: vVew0CQ4r029WMI1HvVbQ4wTPkLeA0/lvFOy6uYQpO8=
Subject key identifier: 34:23:4C:28:88:69:2B:67:D0:49:9A:F7:54:4B:FE:78:0E:32:A0:7D
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F4328584BBB7589CD1BDD76F9606B9C40
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa
Signing time: Mon 03 Nov 2025 02:00:31 +0000
ROA not before: Mon 03 Nov 2025 02:00:31 +0000
ROA not after: Sun 01 Feb 2026 02:00:31 +0000
asID: 394708
IP address blocks: 74.126.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bb:75:89:cd:1b:dd:76:f9:60:6b:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Nov 3 02:00:31 2025 GMT
Not After : Feb 1 02:00:31 2026 GMT
Subject: CN=128cc18c-32f4-4450-ad06-56ab4b3ab4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:c5:98:1b:df:b7:88:13:8e:56:5a:61:f4:
ea:b8:94:73:ad:4d:3c:6a:b3:88:09:05:a1:c5:ff:
da:23:c2:f2:d8:ce:3d:d5:53:30:40:e5:4d:58:f7:
60:a3:c8:dc:1e:a0:5a:c7:30:59:e8:7e:7b:93:d8:
5f:0b:02:04:25:25:72:c7:61:74:34:c0:36:ee:72:
49:1f:b7:fc:55:5a:9d:d8:33:c4:c1:d6:9b:de:9a:
08:a6:32:59:1c:64:eb:28:3e:56:5d:0b:b9:ca:07:
14:45:08:81:5c:56:66:2b:bb:3d:04:d0:71:4f:15:
79:27:5b:31:4a:7f:8f:b5:a9:e3:8b:68:56:df:cc:
94:fc:ff:93:81:78:3c:e8:53:ba:a6:e1:0e:50:35:
14:5b:b4:47:d1:cc:93:82:b9:1b:a8:9b:81:47:bb:
5e:b4:3a:37:c3:af:79:3c:36:a7:14:ac:bc:5a:83:
99:9f:7a:61:6a:df:e3:31:64:39:48:41:3b:22:3b:
2a:b8:34:18:d5:7b:e4:1f:2a:6f:56:0d:8e:69:54:
62:93:a0:e2:7a:40:ba:ff:f8:6c:15:a3:a8:01:2d:
3e:b7:ce:31:6b:25:44:65:a3:42:c0:2f:db:55:31:
9d:d5:39:9f:fa:0c:73:56:5b:fe:84:df:d7:c8:f1:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:4C:28:88:69:2B:67:D0:49:9A:F7:54:4B:FE:78:0E:32:A0:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:bd:92:d3:1e:01:33:f8:b2:32:56:cd:6d:91:5b:fa:62:c7:
54:6b:a5:ee:30:0f:12:02:8d:3f:15:f1:21:e8:2a:b3:26:f3:
12:f5:d5:8d:05:3f:f7:cf:a7:45:37:c2:71:9d:f3:f2:27:8d:
fe:87:8b:0f:4d:c5:38:40:be:ad:6c:25:f7:f7:6b:e1:c6:2d:
26:26:6e:47:b5:0c:82:eb:6b:d0:b7:32:68:98:e2:f2:a8:0d:
f0:ee:ce:20:b8:59:6d:08:68:05:d9:2a:75:82:db:97:c3:1c:
08:9d:0d:0a:d6:66:ea:2e:23:cf:e8:c7:f5:53:a8:64:63:73:
61:66:ba:b0:df:ce:cf:ad:ef:58:7d:86:fd:66:8d:63:bf:61:
d3:ef:a2:39:a7:1a:e2:96:85:cf:d2:b0:cd:d8:9d:ee:57:3b:
db:f7:4f:e7:41:f6:09:25:07:0f:af:6f:fa:97:77:cc:90:33:
89:bc:69:df:c0:db:a0:b5:60:4f:2c:d6:27:66:79:f9:b4:82:
eb:9a:2a:36:40:78:95:7d:e3:92:c2:82:ea:59:0c:9a:d2:83:
d2:d2:49:d4:63:44:75:2a:33:03:17:81:b7:86:82:31:22:fe:
4b:67:93:e1:d0:eb:78:1f:08:1b:f1:97:d5:d3:2f:53:73:70:
b1:bb:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:35:49 2025 by rpki-client