
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa
File: 323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: KgxxpJACmfDiOhxeQj58E13G2Y8KhoU807uutw/0rPw=
Subject key identifier: C8:9C:9C:91:B5:76:E6:95:33:E8:17:DB:73:58:8B:7C:54:D5:2D:83
Certificate issuer: /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial: 20A698B8D5AA0813B1B3BFF32CD10A5FEE6CA0B9
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa
Signing time: Tue 07 Apr 2026 12:35:55 +0000
ROA not before: Tue 07 Apr 2026 12:30:55 +0000
ROA not after: Tue 06 Apr 2027 12:35:55 +0000
asID: 9009
IP address blocks: 2602:ff62:218::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 18:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a6:98:b8:d5:aa:08:13:b1:b3:bf:f3:2c:d1:0a:5f:ee:6c:a0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Validity
Not Before: Apr 7 12:30:55 2026 GMT
Not After : Apr 6 12:35:55 2027 GMT
Subject: CN=C89C9C91B576E69533E817DB73588B7C54D52D83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:4d:57:e1:8f:d8:d7:2d:cb:77:8e:24:12:
1e:c0:e7:df:e9:01:90:35:fa:3d:58:96:48:cc:24:
74:02:a0:2c:11:cd:be:d5:7a:66:f9:5c:85:21:b0:
ce:47:b1:38:7f:cb:59:5d:6c:90:a4:a7:5e:65:e1:
e8:9d:5f:b4:38:0d:ed:2a:d0:8a:74:9a:70:29:85:
06:ea:c6:da:b5:c0:15:90:df:63:dd:1f:2f:c0:71:
42:37:80:23:28:8a:1c:8b:d5:06:ea:f9:71:67:06:
79:19:a1:f2:86:7c:9b:c7:d2:c7:80:44:7e:a5:b0:
bc:f4:65:8c:30:32:f5:10:b9:ea:84:24:83:46:e5:
1f:21:f3:d0:86:e5:08:5d:a8:01:f5:55:96:85:3d:
d4:08:1d:c4:c7:d7:0c:f5:92:d6:ca:57:0f:fe:a1:
e6:78:34:e3:9c:d7:d4:25:c2:98:7a:fb:42:c5:ec:
ae:f4:c8:ec:7f:67:9b:e3:2a:19:0e:8f:21:74:b5:
19:82:ca:da:15:3c:64:2f:ee:7b:84:45:a3:9a:6e:
7e:05:64:b5:a9:0d:ad:0c:89:88:d3:79:9d:ca:33:
aa:d9:97:7c:b4:0b:6c:fd:51:a6:d7:5f:39:ab:cd:
97:c2:cf:7f:98:01:21:b4:81:44:ac:fe:43:2b:39:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:9C:91:B5:76:E6:95:33:E8:17:DB:73:58:8B:7C:54:D5:2D:83
X509v3 Authority Key Identifier:
keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:ff62:218::/48
Signature Algorithm: sha256WithRSAEncryption
1a:45:30:85:5d:eb:fd:f9:55:f4:09:2e:62:a9:6a:5b:01:73:
94:dc:ee:1c:c3:1e:c3:37:2d:3a:e7:a3:77:da:02:e7:31:52:
69:47:60:da:4d:eb:49:88:44:cf:d6:0f:1b:93:48:8c:ab:f0:
dd:eb:be:e4:0e:a1:9b:5d:f9:c8:6c:62:cd:a7:00:d6:f0:53:
29:c2:45:a6:e5:c1:90:6d:96:14:a6:80:53:cd:15:ec:44:e3:
ea:4f:11:ed:72:ca:ea:fa:83:f8:a4:8d:25:56:e7:51:c8:4e:
0c:ca:fc:23:90:46:4a:18:2b:d8:48:2b:61:06:b7:b5:f5:e6:
dc:38:71:5b:2a:73:3e:cf:8d:87:b0:2b:e3:26:13:cf:0f:24:
08:e7:e8:30:c5:e2:f9:0a:53:6f:ac:6c:f8:f0:91:64:96:7b:
d9:a3:61:27:91:82:25:f8:73:b0:25:ba:15:ee:dc:c7:2b:15:
1f:dc:d4:0e:51:1d:c0:fd:21:47:1d:e4:d7:97:d8:10:0d:38:
d5:d2:cb:13:9e:b7:80:55:d5:ee:32:fd:6d:82:75:42:14:b4:
1d:c4:d3:9c:38:44:65:11:9b:0f:73:1f:a2:a4:99:e8:45:62:
9d:e2:79:69:32:e8:0a:9c:66:61:95:68:05:c1:a9:a2:a1:dd:
6b:cb:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:11 2026 by rpki-client