
$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa
File: 323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa (raw, json)
Hash identifier: DvmdL0xTv6HeLZrQ7dLuK33f6EXSTxGj++sY2iJvstA=
Subject key identifier: CD:D1:67:A1:37:24:86:0C:9C:F9:D0:F7:D8:80:04:5B:E1:9B:69:01
Certificate issuer: /CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
Certificate serial: 4C5A766D19824E9D538A9D5AD62372A2075352D0
Authority key identifier: 9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
Subject info access: rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa
Signing time: Wed 16 Jul 2025 09:13:33 +0000
ROA not before: Wed 16 Jul 2025 09:08:33 +0000
ROA not after: Wed 15 Jul 2026 09:13:33 +0000
asID: 19330
IP address blocks: 2602:291:aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl
rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 22:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5a:76:6d:19:82:4e:9d:53:8a:9d:5a:d6:23:72:a2:07:53:52:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
Validity
Not Before: Jul 16 09:08:33 2025 GMT
Not After : Jul 15 09:13:33 2026 GMT
Subject: CN=CDD167A13724860C9CF9D0F7D880045BE19B6901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:7c:3c:b2:22:92:11:c5:63:73:ba:00:16:
a6:da:41:08:69:d9:7c:7e:bc:33:02:5b:ab:1d:46:
9a:3b:b0:4c:80:03:24:f3:f8:e9:a3:84:38:ff:b8:
5d:b8:27:25:73:c0:55:f6:f4:98:b2:23:70:b5:8d:
b9:f9:13:ea:33:a1:16:0a:87:b9:02:0e:83:e4:c5:
ec:f0:83:0e:5d:62:91:27:f2:ff:e8:39:13:84:2e:
7b:37:33:78:d0:7d:7b:5a:1a:f0:cc:e6:e7:44:7a:
c8:d8:bf:58:70:1d:d3:ff:ca:41:de:9a:a2:f2:7d:
1b:20:7b:e0:81:2c:4b:6c:8e:ef:db:e9:e8:b6:65:
d7:97:9a:57:ff:55:bf:05:6c:74:53:02:ef:fd:6b:
10:6e:24:6d:82:5e:f8:21:96:2b:bf:c5:78:86:2a:
58:50:dc:0f:d2:5e:a0:89:77:92:5d:35:94:5a:90:
dc:34:a7:62:34:b1:38:7b:cd:ac:e2:a1:a1:b1:60:
98:ce:f5:97:05:d9:f3:7d:ee:8d:90:3b:21:2d:03:
ae:e5:b8:58:b3:7b:6f:5d:17:26:fa:f8:ce:67:4f:
0a:5d:30:49:fd:ee:cf:5b:b9:32:06:83:60:2c:c7:
57:90:3a:a5:8e:a1:1b:40:bc:24:ca:7c:f2:b5:60:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:67:A1:37:24:86:0C:9C:F9:D0:F7:D8:80:04:5B:E1:9B:69:01
X509v3 Authority Key Identifier:
keyid:9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:291:aa::/48
Signature Algorithm: sha256WithRSAEncryption
45:b9:13:f4:38:62:91:eb:90:7b:c8:8d:40:cc:f0:9e:6f:50:
b0:f0:44:51:db:e3:6f:46:ec:67:5e:c4:08:e4:e9:f6:ea:8e:
33:54:12:ac:12:c3:17:6a:30:30:3c:3d:da:4e:f8:87:1d:25:
ec:28:a1:4a:2a:e1:c8:2b:68:f9:41:d0:cd:34:81:a6:55:b5:
b9:fb:50:06:5c:b7:4d:db:5c:16:d9:9c:80:b0:0c:fc:f3:7f:
46:f1:6d:a8:4f:d1:3e:7b:20:3c:e1:b3:5b:3a:1d:45:03:56:
4e:a4:d2:90:a0:29:ab:2d:fb:67:56:c8:88:96:45:51:16:d3:
0f:a3:6e:1c:5c:ef:35:cc:30:ce:e2:d5:98:f5:3c:03:76:88:
ea:e1:a0:18:30:aa:8f:16:74:c7:7e:67:87:96:cd:be:45:be:
7a:a8:3d:99:36:d2:ef:99:da:de:e0:a2:cf:db:d2:29:bd:95:
ca:8c:46:db:a0:b3:44:c0:61:9c:15:27:cb:55:69:74:d7:d4:
5e:7a:75:77:d8:67:bf:41:a6:0a:aa:fc:e0:9b:88:b9:a6:f5:
d0:6c:01:f5:4c:3c:82:c0:39:8f:d2:83:64:68:49:84:17:34:
e6:6b:80:15:b5:04:6b:ae:f8:42:e1:4b:a2:b1:29:ec:0b:b8:
8a:da:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:23:37 2025 by rpki-client