
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
File: 323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier: VqtMKdg/PZEG1h7rlIy7c1/NqFVA8+MAZQW4DytSeVw=
Subject key identifier: D3:3E:99:A7:99:F6:D2:6D:51:C6:34:97:1F:D0:B9:0B:3B:F6:F0:B8
Certificate issuer: /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial: 72162DBB499C2373094CCF27EC6E9E864AC44DA1
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
Signing time: Thu 27 Aug 2026 21:45:56 +0000
ROA not before: Thu 27 Aug 2026 21:40:56 +0000
ROA not after: Thu 26 Aug 2027 21:45:56 +0000
asID: 54148
IP address blocks: 2602:fa43:90::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 10:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:16:2d:bb:49:9c:23:73:09:4c:cf:27:ec:6e:9e:86:4a:c4:4d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Validity
Not Before: Aug 27 21:40:56 2026 GMT
Not After : Aug 26 21:45:56 2027 GMT
Subject: CN=D33E99A799F6D26D51C634971FD0B90B3BF6F0B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:f5:10:c6:dd:9c:a9:79:f8:8a:14:b2:f8:
70:d1:cb:2a:b9:4e:86:e3:47:e9:c3:93:67:a2:1e:
ba:08:46:80:5e:4b:f0:f7:75:34:06:d1:94:46:52:
30:76:e4:fe:b4:a5:4d:65:c4:40:c1:3d:30:6f:8e:
a3:50:56:09:f0:74:13:d9:8f:cc:8e:7a:77:f9:4e:
82:7b:21:13:94:37:f0:cf:a2:3c:f4:40:75:42:68:
a1:93:57:b2:0a:56:54:4d:82:87:f8:ad:13:ba:12:
94:ad:32:c7:54:8e:01:c1:89:88:1a:b0:69:28:c7:
1d:8a:ff:ef:90:38:15:97:ab:52:6f:8e:cf:fa:a9:
f6:94:23:73:d4:8e:e0:c0:80:f6:13:7c:a4:b8:f3:
f4:86:8d:2e:e5:ae:ad:42:32:7b:52:6c:e0:26:a0:
59:b3:a6:e4:82:9e:a5:a6:7f:d0:c9:61:a3:b9:26:
15:41:20:ec:cb:c6:82:92:ec:1c:03:f9:de:5b:3f:
32:3b:4b:dd:27:05:e0:e1:dd:00:e8:e3:c8:34:7c:
c1:f1:71:03:66:94:a8:ec:1f:7d:fd:86:59:c3:7a:
76:2a:65:ac:39:fa:0b:ea:c0:83:a3:32:2f:89:44:
41:50:25:c5:eb:56:89:11:ea:69:a0:66:21:34:37:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:99:A7:99:F6:D2:6D:51:C6:34:97:1F:D0:B9:0B:3B:F6:F0:B8
X509v3 Authority Key Identifier:
keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa43:90::/46
Signature Algorithm: sha256WithRSAEncryption
54:ad:95:d9:5c:0c:68:b3:ab:ab:f8:9c:a4:b7:e5:18:a0:8b:
01:dc:7e:51:81:94:cd:64:24:c8:84:8a:f0:4b:ad:d7:dd:b4:
fe:6c:35:02:90:a0:2c:95:cc:77:5b:05:a3:aa:f1:43:3e:c3:
6a:71:70:e6:ca:57:8a:2b:ee:34:14:20:ff:f5:30:05:9c:f8:
d9:09:ff:fb:e7:93:ad:a0:12:24:6c:d0:66:cf:40:8c:1e:15:
57:a7:26:76:67:3d:4e:4a:bb:2d:ed:19:12:92:7c:f2:fc:15:
63:58:47:14:f8:d5:27:34:1a:12:8e:f3:4f:2e:fd:67:81:a5:
b6:5e:b3:2f:d5:e1:ab:20:8c:ab:2c:cc:e8:9f:89:da:18:a4:
78:d8:fc:fb:fc:ac:07:6a:3e:a0:36:13:5b:81:e1:eb:84:25:
76:8d:c1:13:0b:d2:cc:1d:87:f4:15:a9:12:5c:f5:74:38:f7:
8b:0f:92:95:4a:08:b2:f6:5e:0c:69:32:b5:dc:15:e7:bb:6b:
26:7c:7f:30:f5:ee:72:4f:35:62:d3:15:41:d1:10:1b:5b:45:
47:e2:63:93:01:0b:33:24:97:a5:c7:0f:34:37:b7:59:dd:0f:
91:b4:d7:68:6c:98:20:97:d1:35:59:ed:c4:80:7d:d8:88:d8:
d7:bc:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:10:10 2026 by rpki-client