
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa
File: 84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa (raw, json)
Hash identifier: j9LslqNNjpxM5V1prVApJK/x5aKU4927sEXTY8tVcdI=
Subject key identifier: A9:96:8F:C3:2F:2D:82:14:E8:2E:24:02:D9:F6:96:D9:78:A3:8C:E9
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F4328584CF9B785A26288D4950F6573C0
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa
Signing time: Wed 25 Feb 2026 02:00:32 +0000
ROA not before: Wed 25 Feb 2026 02:00:32 +0000
ROA not after: Tue 26 May 2026 01:00:32 +0000
asID: 398420
IP address blocks: 74.126.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f9:b7:85:a2:62:88:d4:95:0f:65:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Feb 25 02:00:32 2026 GMT
Not After : May 26 01:00:32 2026 GMT
Subject: CN=1b45ecf6-cac4-4f40-9bde-f8ac0630c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:b2:af:9b:9c:02:dc:38:6b:77:8c:74:b0:
cc:14:a9:1b:05:7a:a5:bd:c4:09:7b:7c:f6:7b:12:
73:7f:a2:95:38:e3:ad:25:b4:f0:d5:6b:11:ca:06:
e4:a9:ce:a5:8f:7e:8e:8f:4a:17:7a:96:bb:90:dd:
30:be:07:81:d7:cf:c2:2b:12:16:33:2e:6a:e7:85:
0e:87:87:fd:c3:1e:8f:03:e9:11:0f:15:89:db:d1:
05:99:21:12:e5:2f:67:9e:28:94:e1:6f:94:c2:d6:
db:6e:a1:f4:cd:2b:8f:56:6e:b0:ff:b5:85:2b:77:
9f:58:cc:53:17:cd:26:41:80:ac:9f:82:84:17:96:
24:6f:bc:aa:f2:c6:ff:c2:5f:e6:95:2a:0d:4e:1b:
dc:b6:a4:5d:f0:ab:09:34:6d:6e:3e:3a:1d:03:a5:
e0:93:b1:af:48:0b:60:0a:66:be:1b:08:fa:00:af:
c2:2b:e0:3c:a3:ff:eb:6f:9b:81:ab:27:01:a2:2a:
8e:41:ac:cf:87:69:32:96:db:ab:17:c2:66:58:20:
0d:84:89:f9:51:48:e9:3d:d6:e5:9a:d6:f7:06:31:
e8:bc:0e:17:65:28:fe:e0:d1:90:c8:ca:45:f6:94:
c6:a9:68:c3:08:4d:f6:1b:b7:ea:b8:7d:48:de:3d:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:96:8F:C3:2F:2D:82:14:E8:2E:24:02:D9:F6:96:D9:78:A3:8C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:c5:e4:81:6d:55:29:9e:fa:9e:41:7a:44:6a:f7:80:b9:38:
69:3d:f2:25:a1:77:f4:70:34:2d:5b:59:8a:f2:ee:71:58:d3:
55:e4:4c:97:c5:55:36:f1:0a:76:17:d1:8a:45:fb:98:ea:f6:
33:d3:ff:69:c7:09:7c:a8:db:9a:73:76:3f:4e:d0:77:7a:1d:
4c:ba:e6:6c:cc:e6:b3:73:15:53:d6:7e:f6:65:74:81:db:b3:
e9:72:df:c7:93:44:de:3f:58:23:bf:ed:91:05:4e:71:04:c7:
62:64:10:1b:aa:a3:1d:c4:a4:12:93:6a:9b:6c:54:8d:52:3a:
d1:94:aa:13:7b:fd:3c:26:75:d9:e3:5a:4d:7b:50:97:37:31:
89:99:80:ec:e2:dc:3a:49:70:c3:7e:83:23:8a:4a:d4:f3:fe:
84:f1:ab:0f:70:42:19:db:9b:08:85:b8:55:3b:e2:fd:a7:42:
94:af:64:08:b0:76:3c:e2:96:c4:94:ce:c5:cb:87:2e:f4:a9:
06:5e:68:89:ff:4d:e6:fa:89:79:89:46:a3:96:21:59:e1:88:
5c:90:35:46:9e:99:f7:67:49:9e:8f:1f:8a:9e:35:fb:73:73:
25:dc:ac:a0:4c:25:66:24:e8:37:86:2a:36:ec:dd:42:bb:2c:
ba:44:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:34 2026 by rpki-client