
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3438203d3e203133353237.roa
File: 323630323a663833643a3a2f34342d3438203d3e203133353237.roa (raw, json)
Hash identifier: vreSxe23JGVV9hTWayEaE24Ugemay16TZ22ajKGPSTQ=
Subject key identifier: 34:F2:EB:79:B7:6E:0F:22:72:15:E8:C3:D1:2C:7A:63:81:3E:A4:33
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 2DD85213235B0B73134275047256266F63C000D2
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3438203d3e203133353237.roa
Signing time: Fri 20 Feb 2026 21:37:48 +0000
ROA not before: Fri 20 Feb 2026 21:32:48 +0000
ROA not after: Fri 19 Feb 2027 21:37:48 +0000
asID: 13527
IP address blocks: 2602:f83d::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d8:52:13:23:5b:0b:73:13:42:75:04:72:56:26:6f:63:c0:00:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Feb 20 21:32:48 2026 GMT
Not After : Feb 19 21:37:48 2027 GMT
Subject: CN=34F2EB79B76E0F227215E8C3D12C7A63813EA433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:6a:4c:cf:0c:13:12:ba:1d:a2:ab:6b:ce:
50:9c:ef:7e:49:14:cc:fc:fd:de:8c:d2:ad:5d:43:
88:65:1f:5f:3f:33:bc:3e:af:20:17:12:b7:eb:72:
31:c2:df:e3:ca:10:26:84:18:c7:eb:5d:a6:2b:8f:
29:10:91:f8:68:58:43:e2:32:5a:22:7e:11:85:a7:
d5:78:67:82:76:96:d5:3e:e4:31:79:f5:6f:b1:62:
22:74:fb:db:dd:d8:69:73:4f:e0:7b:5f:61:db:af:
32:f5:f3:b7:4a:9f:24:9a:ff:2e:4d:40:47:38:59:
ea:72:e0:0c:c6:32:66:b5:77:2c:48:f8:63:c3:44:
a4:4b:60:d9:7f:cb:d2:22:3e:0a:b5:7d:00:35:89:
12:f7:93:76:31:6f:22:2a:19:22:b3:81:65:49:fb:
60:af:09:e1:4f:04:3b:07:1c:b3:b9:22:db:11:b9:
29:02:e8:56:f7:c9:a0:09:25:46:e5:cd:3e:4c:40:
f0:cc:b3:f3:dd:bd:ae:b7:16:b6:2b:c5:38:32:4c:
37:7b:0f:b2:b8:ba:9f:cf:ea:54:25:42:74:f3:74:
cf:be:96:dc:c2:57:a1:fc:38:d9:6e:26:30:be:5b:
99:de:ff:eb:ae:ca:08:7a:63:96:38:b7:d2:da:da:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:EB:79:B7:6E:0F:22:72:15:E8:C3:D1:2C:7A:63:81:3E:A4:33
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3438203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/44
Signature Algorithm: sha256WithRSAEncryption
a0:42:ad:12:9d:5d:40:e2:9b:a4:9c:ca:a6:9c:0a:5a:41:bb:
d8:28:49:d0:8a:04:ba:7a:d3:6f:d9:99:bf:af:13:9d:c9:3b:
4f:ae:a0:27:d9:cd:8b:a2:ca:85:30:59:67:61:49:ae:ed:cd:
11:9d:2d:f3:af:fa:7f:47:64:58:c6:95:8d:a7:75:62:47:2b:
3b:3a:45:92:b5:b2:0a:65:76:e4:1a:aa:4d:b3:83:99:7d:03:
c3:40:09:48:06:3a:2c:12:3b:77:d1:e2:6d:2b:fa:d5:03:5e:
43:f8:53:c9:5f:ee:bb:27:f9:59:44:28:9a:bb:cc:1a:2c:a7:
c4:e8:c3:33:37:5b:de:3f:2c:d1:51:0a:8f:b9:45:71:7b:17:
c6:21:26:62:aa:8f:92:0e:64:6b:32:10:31:4a:52:7e:11:fa:
23:74:14:3c:73:34:0c:68:5b:9a:b3:19:73:08:86:e1:7d:59:
da:4c:ec:10:ed:5a:4a:b4:3e:7c:1b:36:b5:82:ca:47:66:b2:
4e:bc:9e:94:e1:3b:bf:3c:78:7e:f5:6c:b7:a7:97:7c:c7:c4:
84:91:6d:32:a3:65:46:22:30:eb:05:9a:5f:06:00:33:9b:ee:
c2:2b:a9:55:ab:16:3e:60:3d:7b:c9:d0:90:7f:b3:64:00:41:
23:1d:10:93
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIULdhSEyNbC3MTQnUEclYmb2PAANIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODZkZTk2NWQ3MTBhZWVlMTk4MTQyZjQ2MGY4MmQzMWJj
NWE4YWFlMmIyZjQ4ZTBjNWQwHhcNMjYwMjIwMjEzMjQ4WhcNMjcwMjE5MjEzNzQ4
WjAzMTEwLwYDVQQDEygzNEYyRUI3OUI3NkUwRjIyNzIxNUU4QzNEMTJDN0E2Mzgx
M0VBNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnehqTM8MExK6
HaKra85QnO9+SRTM/P3ejNKtXUOIZR9fPzO8Pq8gFxK363Ixwt/jyhAmhBjH612m
K48pEJH4aFhD4jJaIn4RhafVeGeCdpbVPuQxefVvsWIidPvb3dhpc0/ge19h268y
9fO3Sp8kmv8uTUBHOFnqcuAMxjJmtXcsSPhjw0SkS2DZf8vSIj4KtX0ANYkS95N2
MW8iKhkis4FlSftgrwnhTwQ7BxyzuSLbEbkpAuhW98mgCSVG5c0+TEDwzLPz3b2u
txa2K8U4Mkw3ew+yuLqfz+pUJUJ083TPvpbcwleh/DjZbiYwvluZ3v/rrsoIemOW
OLfS2trd8QIDAQABo4ICXzCCAlswHQYDVR0OBBYEFDTy63m3bg8ichXow9EsemOB
PqQzMB8GA1UdIwQYMBaAFNRgaubxiDjiJX1Vq7UAY29QkjbjMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2ktcHAuY29tL3JlcG8v
R09PRkwvMC9ENDYwNkFFNkYxODgzOEUyMjU3RDU1QUJCNTAwNjM2RjUwOTIzNkUz
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYtYmYz
Mi1jOTQ5MjI4NmYxOTUvN2M5YjE5NDctYjgxMy00M2IzLTkxNTItYzRjY2JmZjFj
ZGU3Lzg2ZGU5NjVkNzEwYWVlZTE5ODE0MmY0NjBmODJkMzFiYzVhOGFhZTJiMmY0
OGUwYzVkLmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5jOi8v
cnBraS1wcC5jb20vcmVwby9HT09GTC8wLzMyMzYzMDMyM2E2NjM4MzM2NDNhM2Ey
ZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzMzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvg9AAAw
DQYJKoZIhvcNAQELBQADggEBAKBCrRKdXUDim6ScyqacClpBu9goSdCKBLp602/Z
mb+vE53JO0+uoCfZzYuiyoUwWWdhSa7tzRGdLfOv+n9HZFjGlY2ndWJHKzs6RZK1
sgplduQaqk2zg5l9A8NACUgGOiwSO3fR4m0r+tUDXkP4U8lf7rsn+VlEKJq7zBos
p8TowzM3W94/LNFRCo+5RXF7F8YhJmKqj5IOZGsyEDFKUn4R+iN0FDxzNAxoW5qz
GXMIhuF9WdpM7BDtWkq0PnwbNrWCykdmsk68npThO788eH71bLenl3zHxISRbTKj
ZUYiMOsFml8GADOb7sIrqVWrFj5gPXvJ0JB/s2QAQSMdEJM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:19:03 2026 by rpki-client