
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa
File: acafe627-5dfc-3a59-9b16-c8645b637595.roa (raw, json)
Hash identifier: HN0AyiLEk+bv4dNWqC4F26yZxXy7TLaaF2AgUevhHhA=
Subject key identifier: 2D:1F:8B:46:C2:BF:AE:2A:77:8B:38:CD:26:72:21:2E:27:55:A5:72
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E51E9F065012992F52226F780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa
Signing time: Sun 28 Jun 2026 09:00:11 +0000
ROA not before: Sun 28 Jun 2026 09:00:11 +0000
ROA not after: Sat 26 Sep 2026 09:00:11 +0000
asID: 13335
IP address blocks: 198.41.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e9:f0:65:01:29:92:f5:22:26:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 28 09:00:11 2026 GMT
Not After : Sep 26 09:00:11 2026 GMT
Subject: CN=5fec4192-0229-4b21-ac00-fb184f7f4abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:a5:24:80:36:00:f9:b7:87:7c:86:4e:8e:
f8:ed:69:d9:44:96:05:32:21:56:b8:7a:61:a7:fe:
f6:77:7a:3e:53:89:fd:c8:b4:ba:d5:d1:8e:73:bd:
c2:fb:b4:41:49:da:86:31:a0:34:2b:aa:2f:ef:ee:
9e:bc:52:eb:f1:f2:99:bf:50:c5:7a:87:27:15:94:
b7:c6:66:c8:b2:2f:13:77:87:5a:d9:f0:f1:0b:d5:
88:b2:fb:97:ee:a1:be:9c:3f:3f:c7:1c:25:49:19:
3a:7a:13:a0:5d:be:9f:56:34:6c:b9:a4:65:6c:fe:
68:a4:7a:36:06:8f:38:21:f3:4e:a2:d7:78:c3:86:
fc:f8:02:14:dd:eb:6c:da:21:b9:0c:47:c2:72:3a:
92:cb:97:e5:a9:e3:6b:c1:67:84:e9:16:b5:ec:00:
eb:55:de:1e:14:23:ab:fd:22:d1:41:1b:9c:9d:30:
55:b5:37:cb:1a:a1:a3:58:7e:af:24:dc:df:6c:0c:
cf:dc:42:2b:38:e7:25:f9:42:83:c4:f8:30:f4:db:
02:c3:5e:f2:f9:c7:8b:0c:80:eb:82:93:7f:7e:b1:
36:fd:7e:69:db:9e:89:f3:ac:69:37:d5:d7:ff:33:
8b:d7:f0:06:f6:f7:69:65:42:28:c1:dc:17:0a:1a:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:8B:46:C2:BF:AE:2A:77:8B:38:CD:26:72:21:2E:27:55:A5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:6d:0a:df:6b:91:07:85:52:23:2b:e8:eb:2f:6f:4a:7d:27:
39:aa:f5:34:ae:a6:e1:4a:9d:58:1b:14:01:de:d9:20:93:8a:
59:12:0d:aa:1e:b0:21:c2:16:50:35:b2:18:1d:41:78:c2:a2:
aa:79:f9:71:5d:e9:97:ac:72:b2:73:d7:63:7d:eb:e7:55:48:
b1:fa:aa:f9:07:91:e4:9c:58:15:6b:29:1a:4f:65:b8:85:29:
9a:2a:17:2d:ba:81:02:43:28:70:f9:c7:fc:be:d5:58:51:05:
9e:f3:b8:41:b3:14:17:03:03:a6:73:45:06:44:1a:d0:d0:e0:
2c:17:7c:ea:29:ef:7b:41:f4:f7:0e:a9:1b:02:b9:fe:2b:21:
a3:52:7b:38:5d:bf:9f:30:bf:8a:18:e2:b7:87:e2:fd:37:6e:
12:6b:3f:34:1f:5f:bb:f1:d3:eb:b5:ff:e3:a6:6a:38:75:cb:
7e:b5:0c:e5:28:de:47:e9:a9:ef:1a:9c:bc:88:42:c7:73:0f:
7d:5c:fe:a7:37:02:36:70:e2:32:89:ad:9c:de:c1:ad:5d:07:
f6:d3:a2:bf:fa:14:9d:01:49:d5:bb:db:74:f0:e7:3e:0a:eb:
c9:21:c8:dc:80:62:4d:53:72:92:d2:ef:6b:eb:b3:24:a1:10:
70:10:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:50:08 2026 by rpki-client