
$ rpki-client -vvvf rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a6666643a3a2f34382d3438203d3e20323138393935.roa
File: 323630323a666138363a6666643a3a2f34382d3438203d3e20323138393935.roa (raw, json)
Hash identifier: ACtHNxt6JiY77S/V5r6TIByTaAxQn8e5iBFePwZKFM4=
Subject key identifier: 2C:FE:6D:B0:A3:5F:3D:FD:2A:C7:F6:31:BF:38:24:97:C3:1A:05:DA
Certificate issuer: /CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Certificate serial: 3EB9DD624F822A468685D263C69398EFE1C10289
Authority key identifier: A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a6666643a3a2f34382d3438203d3e20323138393935.roa
Signing time: Fri 30 Oct 2026 19:07:48 +0000
ROA not before: Fri 30 Oct 2026 19:02:48 +0000
ROA not after: Fri 29 Oct 2027 19:07:48 +0000
asID: 218995
IP address blocks: 2602:fa86:ffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 15:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b9:dd:62:4f:82:2a:46:86:85:d2:63:c6:93:98:ef:e1:c1:02:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Validity
Not Before: Oct 30 19:02:48 2026 GMT
Not After : Oct 29 19:07:48 2027 GMT
Subject: CN=2CFE6DB0A35F3DFD2AC7F631BF382497C31A05DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:b5:66:f5:62:b9:10:55:0d:fa:a9:62:ef:
48:f7:04:75:86:25:82:d0:b0:c5:b6:8f:72:e6:98:
1f:38:d4:7d:1f:b5:9a:ea:3a:4d:80:f3:fa:5f:70:
13:d5:50:3c:06:e6:07:1b:b6:30:e9:b7:bf:bc:f9:
52:66:9a:42:2a:7f:86:e1:28:dc:f5:fb:f4:1a:7c:
ac:5f:7b:e3:a5:2d:c3:32:ad:5e:5e:e1:ba:28:50:
23:4b:6b:27:d4:a2:50:74:d4:27:47:3f:ca:51:5d:
49:3d:6b:99:0a:5d:19:f6:c8:a0:af:43:fe:93:1c:
41:06:24:4b:69:0f:ec:28:79:7f:14:d3:5c:17:c6:
e2:64:ca:1d:b3:e3:64:65:c4:7e:c6:31:39:ab:62:
9e:c3:e4:83:c5:13:c1:9e:e3:23:4e:48:f0:bf:66:
c8:f3:9a:ed:3b:58:64:26:a6:52:c4:74:ae:1f:fe:
b8:39:99:84:04:22:57:e0:f5:5f:b2:e3:05:c4:30:
03:38:1f:0c:bc:9b:2a:e4:e3:b5:6d:c0:9b:dc:8c:
49:13:e2:8a:e4:8f:a6:a8:49:80:6a:29:4b:40:29:
62:a5:84:d0:5c:55:1b:a5:a6:e4:23:bc:66:7e:22:
a0:80:8a:b4:41:40:2b:48:27:bb:ed:67:5d:41:ba:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:6D:B0:A3:5F:3D:FD:2A:C7:F6:31:BF:38:24:97:C3:1A:05:DA
X509v3 Authority Key Identifier:
keyid:A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a6666643a3a2f34382d3438203d3e20323138393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa86:ffd::/48
Signature Algorithm: sha256WithRSAEncryption
c9:88:ca:fb:f6:95:55:6b:5c:4a:3b:ac:ee:e3:fb:25:39:2a:
49:17:79:cf:e3:32:0c:ff:06:1d:bd:ad:cc:72:5c:78:75:0d:
a2:1f:13:a4:b8:a7:61:74:92:51:93:13:5f:60:b3:45:7d:ed:
5b:48:0a:45:04:80:a4:2c:a6:e3:fb:e4:e1:ff:0d:a0:ec:6a:
4b:0a:3f:10:20:53:82:75:73:bc:ea:17:02:4e:67:e9:ba:f7:
35:69:f1:93:a5:ae:e7:d2:f1:85:b4:8d:74:0b:09:99:b4:20:
51:fd:68:4f:5c:40:7f:fc:cc:1f:f3:76:81:4d:57:6b:fe:4c:
01:e2:1c:f6:3a:c2:ff:d2:58:c0:8e:29:9f:5e:4f:8e:0d:11:
e6:14:66:e8:72:bd:f9:df:2c:f8:eb:92:18:b7:da:df:ef:fe:
9b:e3:60:1c:23:d6:2b:21:bf:16:8a:1f:24:77:a3:a6:a1:ce:
cc:0e:a2:ae:c9:14:10:b6:ad:b4:b9:ac:4c:82:f7:7d:e9:9f:
c8:cf:4f:cb:5a:1f:80:40:15:93:01:74:b0:eb:51:63:53:6d:
a9:a9:72:b7:08:ac:12:27:f4:bb:3c:bd:e5:c1:22:05:26:cb:
a2:a8:af:14:8e:d8:a4:be:14:99:55:31:22:eb:5e:03:c1:79:
d8:40:68:c0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPrndYk+CKkaGhdJjxpOY7+HBAokwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQzNmFkOWIzZDhkNDYwODAwYjNkZDUwYzYyMGIxZDQz
ZWNmOGM3ZGQwMWFlYjBjYzIwHhcNMjYxMDMwMTkwMjQ4WhcNMjcxMDI5MTkwNzQ4
WjAzMTEwLwYDVQQDEygyQ0ZFNkRCMEEzNUYzREZEMkFDN0Y2MzFCRjM4MjQ5N0Mz
MUEwNURBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZG1ZvViuRBV
DfqpYu9I9wR1hiWC0LDFto9y5pgfONR9H7Wa6jpNgPP6X3AT1VA8BuYHG7Yw6be/
vPlSZppCKn+G4Sjc9fv0GnysX3vjpS3DMq1eXuG6KFAjS2sn1KJQdNQnRz/KUV1J
PWuZCl0Z9sigr0P+kxxBBiRLaQ/sKHl/FNNcF8biZMods+NkZcR+xjE5q2Kew+SD
xRPBnuMjTkjwv2bI85rtO1hkJqZSxHSuH/64OZmEBCJX4PVfsuMFxDADOB8MvJsq
5OO1bcCb3IxJE+KK5I+mqEmAailLQClipYTQXFUbpabkI7xmfiKggIq0QUArSCe7
7WddQbpHSwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFCz+bbCjXz39Ksf2Mb84JJfD
GgXaMB8GA1UdIwQYMBaAFKK06dBhbLYXKWJpKndKOVBeEnlUMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JmNGM5YzhiNWQwMDQwYjk4MDhkMGE5OTFkMmMzZGM3LzEv
QTJCNEU5RDA2MTZDQjYxNzI5NjI2OTJBNzc0QTM5NTA1RTEyNzk1NC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzNjZTg0ODExLTgxN2YtNDUxZi04MTZmLTQyNjQ5YTY5NDBjYy84ZDM2
YWQ5YjNkOGQ0NjA4MDBiM2RkNTBjNjIwYjFkNDNlY2Y4YzdkZDAxYWViMGNjMi5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iZjRjOWM4YjVkMDA0MGI5ODA4ZDBh
OTkxZDJjM2RjNy8xLzMyMzYzMDMyM2E2NjYxMzgzNjNhNjY2NjY0M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMTM4MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6hg/9MA0G
CSqGSIb3DQEBCwUAA4IBAQDJiMr79pVVa1xKO6zu4/slOSpJF3nP4zIM/wYdva3M
clx4dQ2iHxOkuKdhdJJRkxNfYLNFfe1bSApFBICkLKbj++Th/w2g7GpLCj8QIFOC
dXO86hcCTmfpuvc1afGTpa7n0vGFtI10CwmZtCBR/WhPXEB//Mwf83aBTVdr/kwB
4hz2OsL/0ljAjimfXk+ODRHmFGbocr353yz465IYt9rf7/6b42AcI9YrIb8Wih8k
d6Omoc7MDqKuyRQQtq20uaxMgvd96Z/Iz0/LWh+AQBWTAXSw61FjU22pqXK3CKwS
J/S7PL3lwSIFJsuiqK8UjtikvhSZVTEi614DwXnYQGjA
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:28:28 2026 by rpki-client