
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203239383032.roa
File: 323630323a666636323a3132613a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: Uu1SNLsQqfCxnDeEpcU7/qlJd/nY9lNLQeNcik/btQE=
Subject key identifier: 85:CC:76:9B:A8:29:42:A7:C7:42:15:DE:50:FE:3E:C1:FF:0A:49:46
Certificate issuer: /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial: 24D01B358CB12DE5306DD9D20AAF3677DD147221
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203239383032.roa
Signing time: Mon 06 Apr 2026 15:35:55 +0000
ROA not before: Mon 06 Apr 2026 15:30:55 +0000
ROA not after: Mon 05 Apr 2027 15:35:55 +0000
asID: 29802
IP address blocks: 2602:ff62:12a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 18:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d0:1b:35:8c:b1:2d:e5:30:6d:d9:d2:0a:af:36:77:dd:14:72:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Validity
Not Before: Apr 6 15:30:55 2026 GMT
Not After : Apr 5 15:35:55 2027 GMT
Subject: CN=85CC769BA82942A7C74215DE50FE3EC1FF0A4946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:a2:63:1e:81:70:51:1a:f0:43:66:18:bb:
c2:69:cf:05:91:50:b0:7b:ee:c8:1e:23:38:75:24:
83:76:f0:fc:5b:c0:8f:cf:5c:97:55:ed:90:1b:7e:
1c:fb:c0:96:6f:8b:cc:cd:dc:c6:bb:87:79:e7:4c:
08:06:4d:25:5a:b7:f5:80:81:66:17:4b:91:4e:ef:
40:7c:a8:16:83:c0:28:32:80:6d:c9:92:e1:b0:ec:
c7:85:34:9c:04:32:eb:03:4a:98:10:ee:83:cf:d5:
cf:24:a0:80:78:08:60:54:06:19:df:64:9c:df:41:
2e:14:ae:ab:16:aa:5b:de:75:ae:cd:3c:ed:f0:c3:
d3:f6:36:fe:f9:2b:ca:20:eb:a2:a1:42:76:8c:9b:
66:40:b7:fe:6d:ec:0a:e7:6b:19:0d:7d:8d:e9:2e:
2e:2c:37:3b:31:14:3a:5b:85:eb:4c:58:19:04:55:
05:13:67:96:57:7c:c7:ea:8e:59:16:6f:da:97:26:
f1:9a:d8:eb:ec:65:14:df:b4:f3:a2:b4:14:a2:9d:
44:3f:02:94:39:f5:02:d4:0f:5a:07:6d:cb:fa:a5:
49:12:21:28:32:80:72:e5:72:03:a2:22:a4:8c:cb:
02:25:3d:b1:5e:a0:32:d7:fe:22:b0:36:fb:54:2b:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CC:76:9B:A8:29:42:A7:C7:42:15:DE:50:FE:3E:C1:FF:0A:49:46
X509v3 Authority Key Identifier:
keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:ff62:12a::/48
Signature Algorithm: sha256WithRSAEncryption
13:fa:d2:b6:dc:59:90:b6:c0:db:6f:b3:25:97:c1:1a:75:6c:
19:50:6b:cd:27:21:89:47:d3:18:56:41:99:28:33:2f:7f:1a:
b8:81:26:13:45:cf:b2:17:f6:67:fa:aa:03:e9:d3:b0:30:e0:
d5:ef:91:df:50:24:d9:15:2a:b1:17:51:ec:40:fc:23:f7:a9:
f6:1a:c0:a6:d2:6f:d8:ad:26:29:eb:50:c8:4b:43:b3:02:71:
43:57:e1:37:05:a0:3b:d9:d9:a1:1f:10:a5:59:0d:a2:c3:2d:
f5:8e:d9:25:4f:e1:e6:a2:3d:4a:88:10:9a:a9:5f:fa:9d:8f:
f3:83:23:f0:9c:c2:4f:53:9f:42:a9:a9:c7:da:fc:ac:1a:fc:
69:5d:9c:a8:d5:6e:3e:fc:42:2f:59:72:6b:a4:a1:67:54:0e:
8d:31:57:8f:5e:66:02:f5:c5:2f:b4:b7:60:f6:f8:a2:da:9e:
2c:c6:68:b5:9a:00:fb:e5:f1:5a:66:fa:f5:a7:12:15:6b:9a:
54:fa:88:c2:ba:71:07:9d:89:f0:9b:f3:c7:49:74:b0:93:fc:
91:3c:87:86:75:e9:ee:6d:71:0b:d5:d0:d3:50:ef:ba:f2:97:
f4:51:8b:ce:b1:fa:92:8a:56:fd:9c:49:b0:2f:8d:74:0d:33:
78:11:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:16 2026 by rpki-client