
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa
File: 323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier: wqOMaQKHOUTAuY6Yk0+Rwb24E6X0S9UYnW8l5MERiVE=
Subject key identifier: 8F:3D:47:9D:34:50:88:07:4F:76:65:4F:77:A2:2B:D0:C5:26:4F:C5
Certificate issuer: /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial: 5F5BDC00F0263D0ECD09AE08345CF91C58EE846A
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa
Signing time: Wed 01 Apr 2026 10:35:54 +0000
ROA not before: Wed 01 Apr 2026 10:30:54 +0000
ROA not after: Wed 31 Mar 2027 10:35:54 +0000
asID: 13213
IP address blocks: 2602:fad4:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 05:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5b:dc:00:f0:26:3d:0e:cd:09:ae:08:34:5c:f9:1c:58:ee:84:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Validity
Not Before: Apr 1 10:30:54 2026 GMT
Not After : Mar 31 10:35:54 2027 GMT
Subject: CN=8F3D479D345088074F76654F77A22BD0C5264FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:2e:f9:d9:f4:a7:06:01:91:ad:de:43:44:
fd:f7:75:c2:95:e7:a3:8a:4e:5a:32:48:36:bd:54:
12:ba:e0:81:6a:c2:2c:6f:ca:b8:0b:de:d6:37:78:
2f:cf:71:64:89:83:2a:c8:f8:83:0f:7a:f9:48:35:
84:54:3e:f7:2f:f6:c8:7e:98:3e:e6:57:56:2d:33:
da:94:87:e4:b0:50:d6:93:51:65:a1:76:cc:e2:40:
13:99:ac:f9:9c:de:cf:cd:35:ab:43:fa:d9:fb:23:
c2:fd:de:a1:18:71:38:ee:1c:57:c3:e8:1b:e2:6a:
01:31:4b:0d:34:37:2f:e4:82:13:74:52:89:f5:cb:
41:21:7c:cd:69:49:95:eb:59:74:30:a3:e6:02:9f:
c7:bf:48:18:21:36:32:0f:cf:19:9a:20:08:85:4f:
d4:58:9a:7b:fe:b6:33:4f:01:e8:c2:49:54:26:79:
20:60:52:f0:9c:72:fb:c8:dc:93:de:d0:7d:33:06:
d2:c2:2f:99:0a:58:67:9e:4c:b8:33:6e:59:15:16:
b7:ae:a0:04:6e:61:44:74:93:d8:73:2a:5c:ac:3a:
c9:fb:7c:b1:10:e1:51:9d:62:59:f4:7f:79:0e:71:
59:6d:38:96:2c:ce:d1:40:17:74:0c:74:c5:a0:b5:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3D:47:9D:34:50:88:07:4F:76:65:4F:77:A2:2B:D0:C5:26:4F:C5
X509v3 Authority Key Identifier:
keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fad4:1::/48
Signature Algorithm: sha256WithRSAEncryption
a1:43:92:d6:88:20:fa:dc:36:60:fe:dd:f2:51:43:2f:9c:6c:
30:67:22:56:a9:50:07:2d:cd:01:4d:34:a9:9c:36:bb:29:56:
51:99:6f:30:8c:7c:52:cb:55:25:5f:9a:ba:2b:02:e1:70:c5:
62:ff:dd:99:d9:9e:dc:d6:e1:18:fd:ee:8f:bf:97:26:04:07:
83:54:61:aa:b0:b7:4d:73:5b:38:5a:61:e8:8c:52:56:ed:aa:
74:d2:0f:9c:f1:81:ff:2c:ae:7b:8c:63:fd:37:bd:7f:37:05:
df:8d:cc:e4:70:fe:8c:9f:e0:10:f5:ce:0d:06:24:2f:c2:6c:
8e:ca:89:43:63:81:53:1c:51:9d:e7:66:7b:f7:96:af:ac:91:
2c:60:56:a0:00:1e:22:e6:69:61:b8:fe:0d:0c:f0:4b:38:76:
d1:5c:9b:7e:50:6a:5f:14:c3:e4:c2:69:ae:dd:49:f6:55:a4:
dd:57:61:b1:24:9b:88:aa:3e:c4:42:b8:0d:d6:e5:92:2b:3c:
1a:b2:81:09:44:cf:8d:b1:4d:41:a0:8a:28:46:0b:a2:47:6a:
19:8a:6f:91:81:2c:03:c3:c1:4e:22:74:40:d5:8e:84:5e:f2:
e6:89:04:2d:f2:da:6b:bf:4d:52:45:d8:68:49:c3:a4:4f:7c:
3b:6b:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:56 2026 by rpki-client