
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3a2f33322d3438203d3e203535323031.roa
File: 323630373a373463303a3a2f33322d3438203d3e203535323031.roa (raw, json)
Hash identifier: QX0tdyYSZ2EGk4MO6epXulcuR5gFujpPQKTsqO23Bwo=
Subject key identifier: 94:40:DA:B1:E1:23:7A:27:E4:4B:0D:A0:8B:39:1F:1A:40:0F:FA:FF
Certificate issuer: /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial: 36C25628A58AC4B05250121B796AE337D5017226
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3a2f33322d3438203d3e203535323031.roa
Signing time: Thu 05 Feb 2026 18:19:49 +0000
ROA not before: Thu 05 Feb 2026 18:14:49 +0000
ROA not after: Thu 04 Feb 2027 18:19:49 +0000
asID: 55201
IP address blocks: 2607:74c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 22:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c2:56:28:a5:8a:c4:b0:52:50:12:1b:79:6a:e3:37:d5:01:72:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Validity
Not Before: Feb 5 18:14:49 2026 GMT
Not After : Feb 4 18:19:49 2027 GMT
Subject: CN=9440DAB1E1237A27E44B0DA08B391F1A400FFAFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:24:11:61:41:fa:55:51:ae:3d:2e:93:77:
89:87:f0:01:bc:4f:e4:13:9b:49:ea:ec:c0:1e:8a:
63:22:ea:15:67:33:bc:84:59:9e:26:3b:1c:ea:25:
7d:ef:8c:4a:5f:0c:11:a4:f6:d4:6b:ee:ed:b3:8b:
4b:9d:1c:b2:35:48:60:da:f2:1c:35:25:0e:23:52:
e4:af:5e:1a:c4:d8:80:93:de:0e:2b:49:b1:38:e2:
c4:fd:9d:f9:ab:b7:15:ab:70:91:be:a2:40:97:58:
0f:7d:54:21:fa:70:7c:78:55:da:9f:50:59:db:76:
69:c5:bc:1e:56:6c:ff:00:73:de:4c:5e:cd:d0:ce:
fa:4d:6b:df:0d:14:2e:04:96:d9:99:79:60:87:a3:
0a:32:81:0a:9c:95:d3:a8:7a:59:2e:67:74:ee:61:
e8:94:8b:ab:01:34:68:dc:90:1e:11:db:da:99:60:
4f:48:3a:e7:37:fc:7b:5e:85:8e:57:16:fc:b5:c5:
7e:53:db:f8:94:1f:c4:52:28:04:38:05:61:52:71:
e3:83:df:e8:7c:5f:bf:96:e9:d3:06:49:8d:80:c6:
29:f0:4d:7d:b3:16:67:95:57:f9:a3:cc:99:e5:d3:
02:d1:e1:f4:dc:70:f6:eb:50:dc:87:30:f4:24:d8:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:40:DA:B1:E1:23:7A:27:E4:4B:0D:A0:8B:39:1F:1A:40:0F:FA:FF
X509v3 Authority Key Identifier:
keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3a2f33322d3438203d3e203535323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:74c0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:ca:c5:58:a3:39:42:53:d3:f2:9f:ea:6e:54:8d:17:b2:14:
10:05:5e:52:9d:fa:40:2d:2d:63:6d:0f:17:ed:46:b1:0e:ae:
32:cc:9a:ba:12:b5:e5:2d:fb:1a:55:c2:5c:f5:5a:ef:de:c4:
85:3d:67:05:18:9b:b2:76:03:23:cc:1b:10:42:84:6e:1a:f2:
42:bc:76:7f:20:4f:23:62:7a:ed:02:a7:c2:26:47:c7:00:3d:
d6:cc:f6:87:27:e7:94:61:f2:1a:23:72:a9:b8:b4:18:1f:90:
d7:78:79:f7:44:b3:37:29:ba:83:47:13:59:d0:69:b0:5b:25:
35:af:94:ba:04:ab:4a:5d:2e:b2:3d:6b:11:5f:bd:98:c0:42:
e8:53:c0:c0:3f:ea:86:94:3f:5b:ef:6f:d8:c2:64:bf:01:5d:
f8:34:27:34:9e:db:8d:65:e6:83:4e:60:8f:74:07:f1:0a:e5:
af:9e:32:13:4a:15:f4:c9:54:67:6d:49:fa:5c:1d:c8:19:3f:
13:2f:5d:10:b0:d9:18:c8:7e:86:4a:3c:a8:5a:7a:91:e1:57:
04:a9:f9:89:32:40:fe:40:6e:f1:b8:50:60:85:3f:a2:99:e9:
31:d7:0d:87:40:d2:40:c6:60:a3:5f:fe:06:31:bf:de:6b:9d:
d1:2f:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:40 2026 by rpki-client