
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa
File: 323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa (raw, json)
Hash identifier: T91d+5q2XKqEL/D8xZczHamSuDXdMuG0UZh44fMqV7I=
Subject key identifier: 3E:3C:0A:F6:30:33:38:E5:30:F4:52:A2:42:84:DB:82:13:32:93:77
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 37CA4542509D15A960E561790B041509212B6747
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa
Signing time: Tue 28 Jul 2026 19:29:13 +0000
ROA not before: Tue 28 Jul 2026 19:24:13 +0000
ROA not after: Tue 27 Jul 2027 19:29:13 +0000
asID: 36236
IP address blocks: 2403:2500:500::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ca:45:42:50:9d:15:a9:60:e5:61:79:0b:04:15:09:21:2b:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Jul 28 19:24:13 2026 GMT
Not After : Jul 27 19:29:13 2027 GMT
Subject: CN=3E3C0AF6303338E530F452A24284DB8213329377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:e3:95:6d:f2:d6:36:bd:72:8c:68:2a:3a:
51:a7:13:b3:a3:72:04:aa:c3:93:89:18:ad:72:c0:
06:62:72:18:fc:b2:68:29:12:80:48:6b:01:31:6d:
e9:b4:83:6f:c3:d0:a0:65:cf:2c:f9:cc:83:3f:bd:
69:08:65:41:cf:a5:47:60:a8:14:2b:8f:f1:24:b2:
9b:87:17:e8:4e:16:6d:fe:29:58:fc:f5:9b:63:cd:
7c:51:a7:78:62:86:ec:b8:ff:9c:b7:49:93:23:56:
c1:80:64:26:ec:38:ef:2b:85:78:cf:c3:78:d5:26:
15:df:ab:8f:84:32:af:05:cf:1f:43:58:11:f9:eb:
80:1b:28:58:4f:6b:07:d3:52:d2:57:66:5f:ff:de:
34:8e:45:a3:5f:f9:81:70:17:4a:5b:58:22:6b:d7:
c5:a8:52:93:56:f0:03:0a:39:7c:25:6b:eb:39:b3:
cb:08:9d:fb:46:6e:b4:21:7a:f1:ee:d6:65:cb:f2:
e2:ac:5a:65:46:87:7a:71:38:19:e6:73:93:22:33:
71:4d:40:07:68:a1:14:d8:66:b0:a1:29:3c:37:0a:
2c:7c:cd:5d:0c:7a:20:dc:72:d6:e5:b5:46:20:b4:
a5:ff:bd:b6:a1:da:41:cb:6e:67:a3:9c:a1:fb:df:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3C:0A:F6:30:33:38:E5:30:F4:52:A2:42:84:DB:82:13:32:93:77
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2500:500::/41
Signature Algorithm: sha256WithRSAEncryption
b1:13:4b:74:08:65:c8:34:22:f6:8b:ca:ae:af:00:81:85:df:
e4:d5:c4:d4:a0:6f:05:42:85:1c:a4:a0:67:ab:36:53:c1:ea:
0b:1d:56:a5:ab:72:72:0e:b0:31:99:00:08:32:00:33:ee:59:
be:1c:54:93:c1:b9:d5:60:bf:46:c8:ce:28:72:2c:7f:d6:30:
7b:f5:e5:f1:8f:88:d1:33:d8:c0:69:f6:f5:1f:10:86:28:3f:
39:87:f3:c1:fd:0d:0d:e3:02:ce:94:08:b0:26:ed:5d:4a:8e:
b2:9d:29:42:c9:c4:6f:c4:fe:a5:ec:d7:d9:8c:a8:a4:e3:db:
0d:fd:b1:20:a4:1f:43:b6:8e:92:b3:8c:6b:39:7c:81:e1:2c:
4a:39:df:5a:78:0b:80:40:15:3e:9a:fc:9d:f9:75:b5:88:b5:
b7:75:bf:6f:36:97:98:6b:21:12:f1:c9:0b:e3:0e:2a:a5:99:
e1:00:61:3a:29:0a:0b:44:6a:7d:1e:c5:52:7a:ec:e4:25:ac:
d8:6f:5b:57:b8:c4:7f:8f:b0:a1:4e:af:4f:d0:e4:05:f6:8a:
87:cd:23:0a:be:b4:7f:68:c5:54:16:5f:c1:3b:c6:33:30:4b:
ef:c6:fd:7d:7c:8d:c9:d2:12:e3:18:f4:c9:50:18:0a:30:e4:
13:20:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:53 2026 by rpki-client