
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
File: 74f2a10b-925e-38b0-81ad-f1d909f42057.roa (raw, json)
Hash identifier: CnFwb3Umvc5opYCiVZwuIshMcuBma2lY44QFcYb74MY=
Subject key identifier: 2A:86:BD:AD:0D:B6:26:1C:2C:86:D1:05:8C:EB:94:C9:09:3C:78:BD
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F4328584F20F7B9FC87024039ECD6FB10
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 35908
IP address blocks: 74.222.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:b9:fc:87:02:40:39:ec:d6:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=624d4928-79f4-47f0-9913-12549a1b6db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:43:57:e4:3e:5a:d0:53:a3:85:fe:22:1d:
f9:e6:a6:0b:14:d6:44:1c:d3:a3:d6:87:54:a0:fc:
f8:0b:c6:f1:e8:4f:6b:45:63:72:14:ab:32:73:14:
40:44:7e:44:9f:f9:95:90:fb:68:38:54:90:34:57:
72:54:53:5b:97:1b:28:a2:ba:0f:80:a9:70:27:6c:
4e:b8:1d:3f:97:a0:0d:02:98:b2:2e:4d:a6:15:79:
1e:42:83:c2:f3:89:1b:ab:65:ef:4c:00:0f:46:9c:
d8:c4:45:f7:21:26:22:d6:8c:bc:75:82:1f:0b:76:
5a:59:a1:e6:af:b4:a5:eb:8f:e4:e5:99:1f:60:98:
61:59:87:42:b8:42:f4:57:10:f3:4c:a8:9e:70:f0:
85:d7:ab:75:27:7c:80:80:e2:41:d0:94:80:fe:f4:
26:a5:73:87:99:43:14:d5:04:e7:3a:11:d1:42:23:
9c:f8:cd:43:48:39:5d:4c:e1:e1:0c:55:af:aa:fa:
ad:5a:35:ce:05:bb:4c:db:d2:17:6b:74:2a:4c:a2:
b8:c5:a3:fc:22:f9:45:f4:0f:77:e1:32:13:7e:44:
78:bc:cb:a9:46:f9:37:2b:cf:fb:01:17:4a:72:a2:
9e:77:94:e8:d2:41:ec:35:4d:24:4f:32:c9:5b:f3:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:86:BD:AD:0D:B6:26:1C:2C:86:D1:05:8C:EB:94:C9:09:3C:78:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
74.222.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:f7:b4:48:d3:ab:54:2b:5a:49:88:b3:fd:f8:ba:4c:93:00:
51:b3:b4:54:de:66:ec:2d:76:fa:32:7a:98:3c:ee:5a:4e:b4:
99:ec:36:9e:91:4b:b0:ae:e7:03:2f:18:5b:70:80:96:26:68:
0a:c4:66:27:06:18:91:07:44:69:e9:07:b5:e9:ec:8d:9e:ff:
f2:da:c6:fd:63:0e:94:6d:45:cb:07:22:05:e3:95:ba:22:b6:
41:0b:ca:8b:f4:98:c9:a8:1c:4b:4b:f9:a5:3c:42:d2:13:ae:
ef:73:92:ab:a6:ac:bb:ed:94:a4:8e:60:fe:f0:fb:d2:bd:be:
f4:3c:43:67:b2:61:a2:a3:85:a0:8e:6f:db:a4:76:8c:19:70:
0e:f6:46:cd:4f:8d:d4:27:27:b2:cc:2e:bc:95:b3:ff:9e:a8:
6a:32:f2:17:b4:c9:fb:cf:5e:a7:e8:cd:9e:71:16:39:d3:18:
ce:cb:e6:15:02:fa:2b:75:a1:54:54:7d:6f:7d:e7:6f:3a:40:
ca:39:31:7a:a1:b9:e6:39:7f:2f:8d:3e:ca:1b:4f:89:6e:1e:
22:33:02:d4:56:30:6e:70:2a:0e:15:45:77:c9:ef:0f:a2:92:
04:e5:ec:82:73:67:b6:65:a6:1f:1f:d3:ab:17:29:a3:f5:95:
28:9f:6c:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97n8hwJAOezW+xAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5
YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
NjI0ZDQ5MjgtNzlmNC00N2YwLTk5MTMtMTI1NDlhMWI2ZGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+5DV+Q+WtBTo4X+Ih355qYLFNZEHNOj1odU
oPz4C8bx6E9rRWNyFKsycxRARH5En/mVkPtoOFSQNFdyVFNblxsooroPgKlwJ2xO
uB0/l6ANApiyLk2mFXkeQoPC84kbq2XvTAAPRpzYxEX3ISYi1oy8dYIfC3ZaWaHm
r7Sl64/k5ZkfYJhhWYdCuEL0VxDzTKiecPCF16t1J3yAgOJB0JSA/vQmpXOHmUMU
1QTnOhHRQiOc+M1DSDldTOHhDFWvqvqtWjXOBbtM29IXa3QqTKK4xaP8IvlF9A93
4TITfkR4vMupRvk3K8/7ARdKcqKed5To0kHsNU0kTzLJW/Nc4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqGva0NtiYcLIbRBYzrlMkJPHi9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj
NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNzRmMmExMGItOTI1ZS0z
OGIwLTgxYWQtZjFkOTA5ZjQyMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3
MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh
OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz
MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSt6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMH3tEjTq1QrWkmIs/34ukyTAFGztFTeZuwtdvoyepg87lpOtJnsNp6R
S7Cu5wMvGFtwgJYmaArEZicGGJEHRGnpB7Xp7I2e//Laxv1jDpRtRcsHIgXjlboi
tkELyov0mMmoHEtL+aU8QtITru9zkqumrLvtlKSOYP7w+9K9vvQ8Q2eyYaKjhaCO
b9ukdowZcA72Rs1PjdQnJ7LMLryVs/+eqGoy8he0yfvPXqfozZ5xFjnTGM7L5hUC
+it1oVRUfW995286QMo5MXqhueY5fy+NPsobT4luHiIzAtRWMG5wKg4VRXfJ7w+i
kgTl7IJzZ7Zlph8f06sXKaP1lSifbFE=
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:18:45 2026 by rpki-client