
$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365343a3a2f34382d3438203d3e20333936393933.roa
File: 323630323a663734333a3365343a3a2f34382d3438203d3e20333936393933.roa (raw, json)
Hash identifier: fWIH7q4/UcDNjt6OIVV04fRq4SNw4hDoAxkryiPvKdo=
Subject key identifier: 99:D2:00:CA:52:65:23:F9:99:7C:77:63:22:76:A8:85:8E:50:A1:F6
Certificate issuer: /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial: 1F0A1C222D34F9EF433A3A28B7C675A9CA12A28C
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365343a3a2f34382d3438203d3e20333936393933.roa
Signing time: Thu 14 May 2026 00:39:59 +0000
ROA not before: Thu 14 May 2026 00:34:59 +0000
ROA not after: Thu 13 May 2027 00:39:59 +0000
asID: 396993
IP address blocks: 2602:f743:3e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 10:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0a:1c:22:2d:34:f9:ef:43:3a:3a:28:b7:c6:75:a9:ca:12:a2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Validity
Not Before: May 14 00:34:59 2026 GMT
Not After : May 13 00:39:59 2027 GMT
Subject: CN=99D200CA526523F9997C77632276A8858E50A1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:22:ab:c7:e4:5c:5e:41:2f:19:fb:6e:b8:
d9:5f:73:55:50:8a:93:40:3e:dd:d6:b0:f9:4a:e4:
38:0d:ed:49:6e:a9:b3:2e:eb:de:da:80:13:f0:a4:
c6:b9:b2:d1:e1:d9:5e:d9:7c:eb:11:28:5e:29:25:
fb:74:10:f8:44:e7:77:92:9f:d8:de:c7:1d:9a:60:
87:65:a4:32:33:0e:d5:1d:dd:8f:c4:39:22:c0:69:
7d:0e:05:b7:08:20:bf:3c:f0:b0:4a:6b:00:cb:b8:
4a:5d:10:33:b5:ce:79:b1:8d:b5:c3:fb:4a:36:91:
38:a8:b6:a2:46:67:ce:66:72:80:e5:b7:6f:64:0d:
93:75:5b:99:7b:ee:cd:10:73:34:db:2e:84:fc:1b:
44:aa:59:dd:16:b0:94:82:3b:e8:0b:95:64:34:28:
19:e5:d0:88:9e:57:e3:cb:59:15:47:b5:dc:6a:bc:
d6:82:a9:7f:63:7d:3b:7a:46:78:e4:97:a7:78:ca:
59:05:7e:8f:83:5b:5a:a7:f5:7c:9a:b9:49:cd:e0:
4e:0a:eb:73:08:c6:8b:67:fc:38:c4:da:86:61:df:
37:9e:d5:5c:64:b8:38:e2:8e:b3:54:9c:f8:7c:af:
29:6d:10:8e:e4:9f:c2:54:8e:70:86:22:39:d7:ab:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:00:CA:52:65:23:F9:99:7C:77:63:22:76:A8:85:8E:50:A1:F6
X509v3 Authority Key Identifier:
keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365343a3a2f34382d3438203d3e20333936393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f743:3e4::/48
Signature Algorithm: sha256WithRSAEncryption
15:82:96:61:b2:47:e5:0f:ca:83:b5:79:f3:59:0b:81:85:3c:
40:bb:2d:f0:ee:09:58:f6:8c:fb:6e:f3:c4:af:58:9e:27:e6:
6f:fb:a9:1b:54:3f:5c:25:e2:aa:35:35:e3:9a:fa:71:f2:c6:
d9:7c:ca:c4:6b:86:9c:9c:22:db:cd:63:56:96:5e:0f:98:3d:
ed:3c:70:76:62:5c:a4:95:ed:a3:1a:39:53:a6:3a:58:fd:e1:
2e:f9:3c:9f:f8:c4:95:0c:61:09:9e:65:ba:76:64:63:00:1f:
91:c6:90:93:12:28:cb:30:29:24:f1:8a:23:d3:0b:87:81:90:
51:12:93:c3:80:75:a1:75:52:cb:db:50:ee:cd:d7:ed:9b:70:
ad:28:c9:fb:7f:20:ed:ac:20:4a:ec:2a:2c:b7:79:6b:0f:0d:
64:26:82:02:ae:1e:86:31:56:05:f5:b5:48:d7:a0:04:48:b9:
fe:6b:22:27:94:02:5c:40:69:03:7d:f8:c7:7d:f9:94:96:a6:
b3:49:fc:20:a9:d5:d7:6b:d7:b8:6c:7f:1d:42:9d:8b:d3:1c:
8a:1b:02:00:bd:f4:0c:3f:e5:97:a4:75:f7:42:b8:9b:48:32:
be:f6:3e:5b:82:cf:bc:e4:c5:52:06:94:b8:6b:14:24:57:f7:
ef:22:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:16 2026 by rpki-client