
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa
File: acafe627-5dfc-3a59-9b16-c8645b637595.roa (raw, json)
Hash identifier: V84n0t9ZYS0W5J9wSX7ZW1LJ3Loq9LSTmRaWxyW2Ns4=
Subject key identifier: 03:88:83:69:52:62:3E:A3:A1:92:A4:A4:BB:FE:7E:F6:7C:BC:17:9D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D71A5198DE4ACA016D5E285C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa
Signing time: Thu 09 Apr 2026 01:00:23 +0000
ROA not before: Thu 09 Apr 2026 01:00:23 +0000
ROA not after: Wed 08 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 198.41.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:a5:19:8d:e4:ac:a0:16:d5:e2:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 9 01:00:23 2026 GMT
Not After : Jul 8 01:00:23 2026 GMT
Subject: CN=c903b06d-3b11-48a9-ab30-3bef4e10d0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:02:a7:fe:1d:fd:e7:29:c4:37:05:1c:90:
24:2e:e8:25:14:8b:20:f3:66:aa:06:69:45:4d:11:
e6:bb:6c:1c:c1:03:f4:74:2c:fd:3b:f6:1e:79:22:
4a:be:c1:13:77:e0:5a:e6:12:c2:45:d2:51:50:1b:
73:c5:5d:54:c5:60:23:bd:ad:97:f0:f8:e0:99:ec:
ab:90:d4:82:57:e2:9d:0b:a2:c8:c3:a4:a0:fe:53:
77:b0:5d:fe:92:13:53:41:cc:f3:86:4d:54:6d:60:
5b:ab:69:d9:7f:62:05:ff:0c:e8:02:13:e2:bc:d4:
d8:ae:26:e6:40:ce:9b:e6:e0:48:df:ea:9b:5c:8e:
ef:49:ea:68:6d:1c:94:ee:8e:f8:58:8e:f8:8f:00:
8a:ac:71:c2:ed:ae:1d:ad:1c:0f:b0:4b:e9:97:ec:
b8:4d:24:8a:c3:99:36:72:4d:4e:2c:7d:2c:f9:38:
77:0f:06:50:01:89:fd:ba:fb:fc:c0:d3:0e:3e:25:
c2:f7:c1:74:e7:9f:13:fd:9c:2c:34:5e:7b:44:da:
63:8c:0e:f4:a4:ca:23:98:05:81:0f:92:fa:6c:d3:
42:d2:ad:b3:48:c6:84:00:85:d2:70:2d:cc:2c:e6:
f1:a1:29:f3:a3:53:24:bb:46:56:0f:cc:a1:5f:c9:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:83:69:52:62:3E:A3:A1:92:A4:A4:BB:FE:7E:F6:7C:BC:17:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:3e:79:93:d7:cd:e4:49:f5:be:30:1b:46:d9:8b:3e:f1:f8:
1e:02:15:13:92:2e:e9:b0:72:f6:b8:a2:89:d2:77:02:82:82:
21:bc:a3:cf:4a:79:72:4e:e0:84:0c:5f:52:79:b3:33:1b:13:
74:3c:15:9d:0d:15:fe:ba:fe:95:30:c8:01:ff:86:0e:73:f0:
6b:fb:b7:fb:25:7e:e8:dc:ce:95:38:f6:07:0d:27:3c:68:59:
af:0e:95:0b:7b:79:e6:8b:b4:67:d4:b4:36:70:66:e7:52:6b:
1b:d4:5e:d0:aa:14:ed:d2:3d:ef:c0:9f:9d:74:52:b4:e3:79:
e4:1c:2f:aa:8c:41:43:05:ec:aa:88:f0:2a:d8:a7:a7:bc:a9:
d3:56:19:c3:3a:7d:d3:89:71:86:77:4a:33:58:3b:ef:7e:b8:
b4:05:0f:54:1a:04:dd:51:0c:a5:ad:25:b2:50:ad:97:ae:65:
cc:e9:93:1d:de:d3:45:5d:19:e5:0e:5e:9c:cb:12:65:b0:b2:
94:65:64:07:6d:68:e4:b2:53:51:22:06:19:73:bc:5c:11:d8:
49:9b:ba:aa:73:c1:b8:cd:7a:00:da:79:c7:52:85:85:fa:86:
db:2a:51:47:8c:dc:00:49:7c:c3:ba:60:fc:17:46:c1:df:2b:
46:7c:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:52 2026 by rpki-client