
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a323a3a2f34382d3438203d3e2030.roa
File: 323630323a663937653a323a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: 5/AKwfxtNonEeuZIOUPN9fwbQiYqebCxehaIauugNow=
Subject key identifier: FC:4F:F7:11:5C:D7:EC:7B:9A:52:71:38:67:B7:B6:A6:BA:2B:E0:8A
Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial: 5CB19DAFC8864EEED07AE688169BFE232FBF9EF1
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a323a3a2f34382d3438203d3e2030.roa
Signing time: Sat 04 Apr 2026 01:58:05 +0000
ROA not before: Sat 04 Apr 2026 01:53:05 +0000
ROA not after: Sat 03 Apr 2027 01:58:05 +0000
asID: 0
IP address blocks: 2602:f97e:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 16:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b1:9d:af:c8:86:4e:ee:d0:7a:e6:88:16:9b:fe:23:2f:bf:9e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Validity
Not Before: Apr 4 01:53:05 2026 GMT
Not After : Apr 3 01:58:05 2027 GMT
Subject: CN=FC4FF7115CD7EC7B9A52713867B7B6A6BA2BE08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:69:9d:da:a1:cb:1e:6b:09:a6:01:bd:d1:
03:ca:d6:c3:c6:7f:95:f3:c2:2d:bb:53:40:8f:d1:
e5:5e:96:da:c4:2c:1e:db:07:f6:7a:b7:3d:66:dd:
6c:87:fc:91:e9:b7:52:2a:39:9a:36:aa:e6:e6:82:
75:bf:ed:d2:14:2b:9b:6b:f2:d2:b8:81:99:31:63:
1e:a8:1e:aa:2e:d1:5b:f2:d3:c1:25:16:04:c0:e4:
06:e0:f8:9d:1a:20:28:a7:9c:9c:c3:5f:08:74:c3:
b9:86:93:31:7c:46:2e:38:a5:62:cf:4e:c5:45:0c:
c5:ce:2c:e9:9a:e4:eb:4a:e6:97:f6:10:46:0a:4d:
7e:bc:d8:70:fa:47:88:01:f0:da:50:78:db:c8:c5:
e2:55:30:20:44:9a:db:08:b9:90:47:e1:70:76:6c:
3f:a6:b1:81:64:19:bc:7f:dc:bc:e7:51:99:5a:42:
a3:9a:11:e0:c2:30:73:e2:f6:f4:3c:2f:d9:94:b1:
e0:d5:f1:3c:aa:b0:a1:c9:9a:bd:fa:87:4e:e1:a8:
ea:b4:31:7e:51:f4:e8:ee:62:af:a1:f3:c6:be:60:
44:97:c5:34:50:70:4e:36:5a:f9:1a:9e:fd:a1:8f:
81:ea:46:d5:e6:a4:c9:e4:08:15:c6:59:4c:be:0b:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:F7:11:5C:D7:EC:7B:9A:52:71:38:67:B7:B6:A6:BA:2B:E0:8A
X509v3 Authority Key Identifier:
keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a323a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f97e:2::/48
Signature Algorithm: sha256WithRSAEncryption
62:c1:71:fd:73:59:ef:20:2f:00:1b:cf:28:af:bf:3e:af:14:
48:90:64:68:de:22:1a:d7:70:08:d2:9f:e0:c3:fc:74:e1:a8:
f7:b6:e3:b4:72:af:5d:7c:fa:5b:f3:dc:b8:7e:9d:47:f8:08:
16:5a:17:d4:b7:bf:92:73:6a:13:a0:71:11:04:6e:9f:6e:cf:
01:84:03:6e:1e:a0:b3:50:b6:7e:7e:13:00:c7:67:13:3b:ed:
4f:38:a9:39:ee:5e:21:27:d6:e1:5e:8b:6b:4c:83:89:5c:ed:
4f:82:4d:a2:3f:74:76:8d:39:c9:29:f8:f0:4c:bc:85:90:2b:
85:4d:fa:5b:63:ca:3f:92:d1:a8:2e:b1:5f:4c:6a:98:55:42:
eb:25:5d:53:ed:39:7f:17:41:81:37:a4:41:9f:2e:2e:fe:df:
14:8c:ef:3b:03:34:fb:26:b2:db:6d:ab:64:76:03:ab:d7:70:
fa:17:a7:a1:52:5d:b8:04:e1:dd:ec:70:1a:e7:c1:d4:bc:58:
c1:9f:ce:77:3e:86:de:19:a7:ae:25:e5:49:f6:ff:62:af:e2:
9b:62:ed:05:3d:1a:2a:e7:f2:9d:3b:f6:19:95:cb:7e:74:99:
00:66:9b:e8:d0:74:7a:f2:78:a7:bc:80:af:cd:29:9a:6f:f0:
16:5b:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:16 2026 by rpki-client