
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
File: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (raw, json)
Hash identifier: f2gM3UesE68T+aD5ypH6YGRZOBTaYhvQPdDTPf2j/xk=
Subject key identifier: AB:02:86:FD:78:74:35:92:55:4A:EE:C0:BC:A7:18:96:D3:BD:63:B7
Certificate issuer: /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial: 387E25854453DD7B1ED67721F5F20E88E28A6748
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
Signing time: Fri 05 Jun 2026 23:58:54 +0000
ROA not before: Fri 05 Jun 2026 23:53:54 +0000
ROA not after: Fri 04 Jun 2027 23:58:54 +0000
asID: 151642
IP address blocks: 2001:df2:c1c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 15:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7e:25:85:44:53:dd:7b:1e:d6:77:21:f5:f2:0e:88:e2:8a:67:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Validity
Not Before: Jun 5 23:53:54 2026 GMT
Not After : Jun 4 23:58:54 2027 GMT
Subject: CN=AB0286FD78743592554AEEC0BCA71896D3BD63B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:a3:bf:8a:fa:83:e4:6a:a6:72:e9:c6:55:
53:96:c6:d9:d1:e4:42:56:ad:a0:92:40:a4:c6:3c:
3c:86:ed:d1:24:0c:24:8f:dd:cb:86:fe:d4:19:5f:
c3:76:9d:64:fc:dc:1d:d4:fd:dc:f9:11:a6:90:7b:
49:72:38:08:ad:71:fc:7c:e2:05:74:92:fd:ad:32:
1f:b9:93:36:f9:e0:bc:23:b7:f3:d9:7a:5c:04:52:
71:73:27:d0:a7:a2:a2:d3:fe:29:47:9b:f1:29:ee:
26:3f:de:df:8b:20:d8:a0:e0:a0:8c:90:f9:37:75:
a3:c6:14:01:80:ca:92:24:e1:36:b1:2f:f0:be:9f:
67:c9:b2:78:cf:85:3f:f1:0d:bb:9c:71:55:48:22:
fb:08:46:30:c7:0f:db:e0:39:d2:1c:9d:a5:84:39:
3f:5d:85:1b:87:39:d6:09:ba:33:36:72:90:87:07:
ea:ff:e1:4e:ba:6d:89:fe:90:78:77:c2:81:5a:79:
bb:5d:7d:f6:34:23:c9:2f:c0:86:e7:7e:09:15:92:
7e:89:77:a0:e9:97:f9:27:2e:92:3d:62:55:6a:68:
43:8c:27:c9:a6:88:88:b2:77:ed:19:b4:72:7f:e7:
91:c6:ef:c5:8a:7b:39:0b:a2:a7:32:7a:44:71:06:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:02:86:FD:78:74:35:92:55:4A:EE:C0:BC:A7:18:96:D3:BD:63:B7
X509v3 Authority Key Identifier:
keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:c1c0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:3a:63:9e:c2:c4:64:c9:da:85:b8:c7:d6:5f:70:f5:1b:bb:
b7:57:0b:a2:fa:11:24:c3:ba:77:f4:e0:a0:da:16:2a:da:4d:
7c:56:b9:51:ed:8f:f9:6f:ce:f9:b5:3b:7c:f2:f3:ee:73:df:
28:55:5b:9b:63:48:a8:a6:bd:48:94:12:ee:d8:4f:bd:0c:95:
45:5b:41:31:c0:2f:80:5a:ba:0e:85:c2:b9:27:cc:00:84:76:
a1:41:77:88:bb:21:ac:7f:d8:c4:cd:bb:29:11:24:ac:30:dc:
bb:47:f3:ac:1f:1e:fe:24:74:f9:3c:5e:45:85:da:0d:36:3b:
b4:f0:9d:10:5a:5f:fc:dc:fe:df:f1:c2:53:a0:42:d5:73:81:
6d:95:91:f1:08:a9:4d:1a:d5:1e:ca:68:9d:83:fb:44:91:8e:
04:08:d1:b9:2e:d1:0d:59:7e:c7:19:9d:6a:11:83:3e:c8:04:
67:c6:0c:87:14:8f:93:e5:2d:0c:c0:93:da:75:3d:48:c7:8f:
47:ff:af:56:c5:4b:51:a5:98:1e:33:92:95:ba:93:fa:96:c8:
1e:c2:d8:0c:4c:39:b8:0e:d0:f1:af:56:02:75:71:4f:3f:0a:
ea:6a:29:6e:da:72:42:82:aa:c2:d6:f7:76:d7:d5:9d:30:a2:
74:7e:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:06:38 2026 by rpki-client