
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
File: 323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier: H84uPsYUM7SJ5bR4M8HvNBVCs7XG4eKlypqPiZoBdMw=
Subject key identifier: FB:5B:A7:6E:5D:D0:8B:32:E7:3A:7F:38:BC:76:0F:53:93:11:EA:89
Certificate issuer: /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial: 5C9D8DEA9CD8284AED01AB7F3B1DDA6850EC892F
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
Signing time: Thu 05 Feb 2026 18:19:49 +0000
ROA not before: Thu 05 Feb 2026 18:14:49 +0000
ROA not after: Thu 04 Feb 2027 18:19:49 +0000
asID: 10103
IP address blocks: 2607:74c0:120::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 22:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9d:8d:ea:9c:d8:28:4a:ed:01:ab:7f:3b:1d:da:68:50:ec:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Validity
Not Before: Feb 5 18:14:49 2026 GMT
Not After : Feb 4 18:19:49 2027 GMT
Subject: CN=FB5BA76E5DD08B32E73A7F38BC760F539311EA89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:98:b2:d9:ef:da:f0:44:1c:eb:35:ff:cc:
5a:7c:fc:0e:a6:9a:4f:0f:54:44:c1:71:75:f1:5e:
7f:a4:f0:bc:e0:69:86:c4:a0:05:ed:1e:7f:16:48:
35:13:3b:3c:e8:50:60:52:1a:30:5c:5e:2c:fe:1f:
3a:97:a9:6d:ac:c7:10:2b:f1:8b:dd:c2:51:ab:58:
84:5a:7f:18:6b:ed:41:23:98:d5:4a:0a:a3:ed:28:
eb:b5:cb:bf:7e:ed:f5:28:bc:08:d5:8b:78:88:f0:
e9:19:32:71:ea:fe:57:e4:ef:f6:a5:e9:86:b0:25:
4d:78:37:98:20:64:1b:49:ba:49:18:b5:f5:7f:eb:
57:a9:de:6e:dc:97:cf:fb:06:38:e2:bf:50:ec:b2:
51:e3:c9:52:8a:57:f4:f2:3b:f9:36:ba:2d:0c:f8:
33:c9:88:9e:c6:71:66:f7:f2:c6:c3:0f:e5:c3:43:
0c:45:5b:b5:3d:c2:a3:a7:92:13:0c:83:e9:c2:4e:
fb:9d:f9:09:d2:06:93:e4:8e:11:57:29:93:a5:8e:
d6:f7:12:d8:fa:38:b0:0e:21:2f:9c:17:ac:2b:95:
2e:ef:6a:62:48:ce:3d:7e:9d:31:fa:33:02:a5:05:
c1:e7:15:84:0c:d6:94:f4:b7:3c:62:55:c7:b8:98:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:A7:6E:5D:D0:8B:32:E7:3A:7F:38:BC:76:0F:53:93:11:EA:89
X509v3 Authority Key Identifier:
keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:74c0:120::/44
Signature Algorithm: sha256WithRSAEncryption
47:40:93:38:ba:2f:18:d2:ae:ca:aa:b4:0f:e3:9b:5e:e1:ba:
f9:1b:e9:ac:62:ea:9a:6e:73:c0:4e:7c:17:b8:2a:10:d9:da:
65:7d:3d:d1:19:b1:33:2f:a1:af:ae:02:0f:bc:b9:1c:24:76:
dc:6a:bb:b2:aa:9d:9a:8d:8f:50:34:ef:a5:a5:5e:6d:0c:63:
83:5d:b6:af:ad:e3:7c:1e:bf:7a:64:b9:cb:50:dc:0b:51:bf:
4f:9d:6f:45:ea:d2:81:64:f7:f8:f9:39:8d:85:f8:9f:92:73:
22:e3:bf:24:0c:40:1a:de:62:d6:96:02:e2:6a:eb:4d:17:b1:
d8:52:4f:f4:44:4f:f0:89:26:4d:bd:6f:01:26:0f:85:76:b6:
03:d6:e9:2c:95:e6:82:a5:86:cd:cf:dc:70:9f:79:9c:dc:30:
43:39:54:8e:0f:cd:27:03:b6:02:82:6b:1d:a4:3d:93:ed:07:
24:64:fa:66:be:53:90:77:45:c4:b2:75:be:0a:d5:aa:55:34:
a5:27:37:c7:45:0f:3d:30:dc:a4:c8:7f:c2:5f:c3:1f:7d:d7:
79:3f:eb:88:78:6f:a2:42:48:ea:c1:8e:b5:a0:da:ee:a4:d8:
c9:0b:33:f3:6b:58:f2:fb:2f:82:c4:64:c2:4a:e7:1e:af:a0:
ba:df:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:11 2026 by rpki-client