
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa
File: 323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier: iDhZHM2FjD1ksaMLu94zff9k7a59lrbZOclpD7V31pU=
Subject key identifier: 56:A8:53:6D:3F:AA:20:C8:86:BF:C6:87:C0:E7:66:80:0F:2F:FE:90
Certificate issuer: /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial: 5C4E61A8377C118AB90734685788AB9DD8236173
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa
Signing time: Thu 25 Sep 2025 21:45:11 +0000
ROA not before: Thu 25 Sep 2025 21:40:11 +0000
ROA not after: Thu 24 Sep 2026 21:45:11 +0000
asID: 54148
IP address blocks: 2602:fa43:82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 14:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4e:61:a8:37:7c:11:8a:b9:07:34:68:57:88:ab:9d:d8:23:61:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Validity
Not Before: Sep 25 21:40:11 2025 GMT
Not After : Sep 24 21:45:11 2026 GMT
Subject: CN=56A8536D3FAA20C886BFC687C0E766800F2FFE90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:a0:2a:21:a8:e5:c1:c4:5b:5c:47:97:70:
72:03:5f:e1:33:4b:fa:a4:42:2f:33:54:15:82:9d:
2d:ba:a3:ae:17:b4:7d:a0:53:51:a8:77:04:32:85:
57:6b:1b:dd:d8:96:2b:94:4a:77:15:58:02:16:44:
b0:fe:39:ac:cc:e5:8a:c4:52:3c:aa:c7:88:29:ac:
56:49:85:f7:4b:9e:a0:ce:cf:81:f5:dd:d9:24:eb:
33:3a:08:45:54:f9:ec:34:af:e1:e3:20:c4:46:0e:
0e:3f:95:74:76:d4:d5:0a:0f:4e:34:cb:7f:74:75:
8c:19:0c:78:f6:2d:d8:ce:d4:29:bc:cc:cb:e3:8e:
6b:37:e7:bc:05:fa:44:59:7d:20:42:6a:d0:ae:da:
e9:04:ba:80:31:ea:52:d0:e6:44:b5:15:eb:d4:7a:
f7:a0:6a:92:23:ea:ce:46:6d:0d:ee:74:9a:e0:50:
70:56:14:09:40:29:c6:e9:2e:97:2d:3e:30:ab:6c:
cb:69:a7:4f:45:a0:58:c3:00:21:33:d7:2a:95:5a:
44:6f:c9:60:ca:e8:4f:5e:38:30:4a:6a:6a:aa:3b:
e0:a3:55:16:0e:d3:5f:94:10:ac:4d:68:53:7f:2e:
e1:06:62:ed:73:52:65:cb:22:c4:1c:3f:1e:16:a0:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:53:6D:3F:AA:20:C8:86:BF:C6:87:C0:E7:66:80:0F:2F:FE:90
X509v3 Authority Key Identifier:
keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa43:82::/48
Signature Algorithm: sha256WithRSAEncryption
53:06:6d:03:4e:79:84:a1:ba:5f:63:01:4b:c5:90:f0:5a:b4:
05:c7:7c:ed:e8:f3:ad:04:9f:99:ed:0b:e3:eb:e4:85:e7:d1:
56:71:dc:ef:7c:e0:90:af:05:8e:ae:d6:cf:fe:98:08:b9:ab:
40:ec:72:40:c3:6e:d1:ec:d2:3f:dd:6c:70:b1:86:40:07:39:
a4:73:45:d3:3f:f7:05:35:44:b2:a1:1b:a8:9d:b7:2d:f1:60:
e8:bf:1a:73:7b:4e:33:0d:59:30:ce:fd:ed:68:3a:1a:91:f3:
93:b0:88:04:d5:e4:11:0c:89:de:c1:95:d3:21:56:a9:f8:c7:
a5:57:b3:c7:65:fb:56:0c:36:15:4f:8e:6f:42:4c:8e:2d:21:
33:24:74:54:ec:4a:58:f3:aa:5c:fa:e0:e0:90:01:a6:df:46:
53:2d:60:eb:80:f6:54:7d:da:a3:13:64:37:a4:a9:9a:d3:91:
d3:80:39:ca:fb:df:97:e0:0a:45:18:3d:9d:fe:12:25:3c:68:
2c:72:f7:53:e6:e5:95:a4:d2:bd:14:9c:99:f9:ab:5e:48:71:
85:3b:ff:55:d3:b9:a6:3c:07:db:39:47:e7:ce:14:58:63:9b:
e4:15:4b:51:7b:0f:e3:0c:65:4d:54:44:a1:cb:37:fa:a7:9a:
46:f5:42:3f
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUXE5hqDd8EYq5BzRoV4irndgjYXMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjUwOTI1MjE0MDExWhcNMjYwOTI0MjE0NTEx
WjAzMTEwLwYDVQQDEyg1NkE4NTM2RDNGQUEyMEM4ODZCRkM2ODdDMEU3NjY4MDBG
MkZGRTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAOgKiGo5cHE
W1xHl3ByA1/hM0v6pEIvM1QVgp0tuqOuF7R9oFNRqHcEMoVXaxvd2JYrlEp3FVgC
FkSw/jmszOWKxFI8qseIKaxWSYX3S56gzs+B9d3ZJOszOghFVPnsNK/h4yDERg4O
P5V0dtTVCg9ONMt/dHWMGQx49i3YztQpvMzL445rN+e8BfpEWX0gQmrQrtrpBLqA
MepS0OZEtRXr1Hr3oGqSI+rORm0N7nSa4FBwVhQJQCnG6S6XLT4wq2zLaadPRaBY
wwAhM9cqlVpEb8lgyuhPXjgwSmpqqjvgo1UWDtNflBCsTWhTfy7hBmLtc1JlyyLE
HD8eFqCyWwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFFaoU20/qiDIhr/Gh8DnZoAP
L/6QMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhMzgzMjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM1MzQzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvpDAIIwDQYJKoZI
hvcNAQELBQADggEBAFMGbQNOeYShul9jAUvFkPBatAXHfO3o860En5ntC+Pr5IXn
0VZx3O984JCvBY6u1s/+mAi5q0DsckDDbtHs0j/dbHCxhkAHOaRzRdM/9wU1RLKh
G6idty3xYOi/GnN7TjMNWTDO/e1oOhqR85OwiATV5BEMid7BldMhVqn4x6VXs8dl
+1YMNhVPjm9CTI4tITMkdFTsSljzqlz64OCQAabfRlMtYOuA9lR92qMTZDekqZrT
kdOAOcr735fgCkUYPZ3+EiU8aCxy91Pm5ZWk0r0UnJn5q15IcYU7/1XTuaY8B9s5
R+fOFFhjm+QVS1F7D+MMZU1URKHLN/qnmkb1Qj8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:51 2025 by rpki-client