
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa
File: 323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: 2/xs19Zx3wChm/Yg6o1wRWRsmVkPWnGR+SUw9j7I41o=
Subject key identifier: 8F:14:72:F3:4F:69:22:38:A8:B5:2B:2D:DC:07:6D:06:E9:CD:A9:52
Certificate issuer: /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial: 7BDC16F5F2086C7B506AF3B95CBCC0D99937FB6C
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa
Signing time: Thu 17 Sep 2026 12:36:20 +0000
ROA not before: Thu 17 Sep 2026 12:31:20 +0000
ROA not after: Thu 16 Sep 2027 12:36:20 +0000
asID: 9009
IP address blocks: 2602:fad4:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 15:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:dc:16:f5:f2:08:6c:7b:50:6a:f3:b9:5c:bc:c0:d9:99:37:fb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Validity
Not Before: Sep 17 12:31:20 2026 GMT
Not After : Sep 16 12:36:20 2027 GMT
Subject: CN=8F1472F34F692238A8B52B2DDC076D06E9CDA952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:d1:ba:49:2e:a0:b1:26:2b:0d:f7:78:c9:
7f:23:2d:ae:df:17:27:00:ef:79:de:1b:3b:b7:72:
b8:16:23:6b:b6:57:85:06:8e:45:48:4f:ec:ff:c3:
74:53:ac:9c:64:73:63:77:62:25:30:0a:b5:99:15:
d7:62:1b:92:b8:6d:f7:87:4e:05:51:26:22:32:99:
9b:28:41:22:42:17:ba:b2:7f:e6:6a:0c:07:bd:2a:
1f:cd:94:ea:60:34:e6:8f:08:a8:9b:cc:21:38:17:
cf:f2:7c:f8:d0:96:98:02:4d:71:e9:27:37:73:22:
47:4e:fd:5a:1f:8c:26:b2:c8:64:81:0b:38:8f:c4:
42:d7:51:b8:a9:fe:b4:34:89:60:23:1f:c6:6c:ab:
51:fc:e9:4a:18:51:6e:fb:2e:9d:a7:84:4f:eb:ba:
8d:e2:fa:39:71:5e:a1:41:bc:00:d2:9e:95:26:ff:
ec:8f:e4:cf:65:4a:f3:94:1a:99:84:31:42:02:95:
64:e1:ec:72:41:a8:d3:2f:d5:06:8f:95:fe:73:68:
b7:3f:13:86:a3:ab:89:3e:b8:df:11:99:81:ec:f8:
33:b7:3f:12:b3:54:69:aa:b9:ea:af:07:44:8a:a7:
00:af:19:1f:16:eb:5e:15:f5:8c:37:0e:0d:9e:37:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:14:72:F3:4F:69:22:38:A8:B5:2B:2D:DC:07:6D:06:E9:CD:A9:52
X509v3 Authority Key Identifier:
keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fad4:13::/48
Signature Algorithm: sha256WithRSAEncryption
7b:3e:6e:a3:6b:22:25:ff:6e:68:1f:d6:d4:c9:b3:21:ad:74:
3d:43:ae:c4:98:a6:5e:14:1f:19:0d:67:01:47:41:86:d2:02:
2d:b8:60:86:2b:f8:f8:fe:dd:94:9a:97:85:6e:c4:a1:68:6d:
3a:9e:9f:fc:c1:27:11:2f:0b:b1:c7:b3:16:7b:50:52:3f:ff:
4e:de:46:a9:9c:71:74:83:fb:a2:ef:22:87:17:d9:82:fc:2e:
8b:0a:ec:88:62:a4:76:60:d8:84:4e:8d:bd:0b:82:37:95:df:
d1:ee:cd:24:0a:48:cc:c7:e4:d6:35:eb:9f:c0:61:16:69:52:
b2:34:2c:d0:27:0b:a2:bb:60:d3:bb:f8:15:41:91:67:7e:74:
50:2a:c5:89:fb:dd:0b:21:23:0f:37:3c:50:9c:8c:45:15:18:
55:00:a5:9d:cc:22:6c:83:ff:72:0d:ea:56:fd:3a:49:a5:65:
f8:ca:a3:3d:4b:8f:59:b3:61:19:de:72:00:57:f3:0b:86:b6:
c3:c9:21:fa:48:d0:ab:81:bb:ef:47:b3:5d:83:38:23:b2:31:
86:9f:08:b9:3c:51:e4:8d:b3:23:b9:ea:e5:03:16:57:6e:41:
f0:38:88:6d:90:5c:39:a2:4a:f7:29:10:1a:af:dd:b7:ba:73:
8e:99:2d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:36:46 2026 by rpki-client