
$ rpki-client -vvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/323630343a3763303a3a2f33362d3336203d3e20333935383431.roa
File: 323630343a3763303a3a2f33362d3336203d3e20333935383431.roa (raw, json)
Hash identifier: XGho5DUZJaOCRudnWUm7Ox361ieU93hOu80zjDkT8Go=
Subject key identifier: F2:A4:E3:15:08:CD:17:63:07:58:4F:35:35:0F:26:A7:9E:AA:13:8F
Certificate issuer: /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Certificate serial: 69A394183115410564757B2F2D064B49E221D996
Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/323630343a3763303a3a2f33362d3336203d3e20333935383431.roa
Signing time: Tue 23 Jun 2026 12:14:23 +0000
ROA not before: Tue 23 Jun 2026 12:09:23 +0000
ROA not after: Tue 22 Jun 2027 12:14:23 +0000
asID: 395841
IP address blocks: 2604:7c0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Jul 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a3:94:18:31:15:41:05:64:75:7b:2f:2d:06:4b:49:e2:21:d9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Validity
Not Before: Jun 23 12:09:23 2026 GMT
Not After : Jun 22 12:14:23 2027 GMT
Subject: CN=F2A4E31508CD176307584F35350F26A79EAA138F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:d0:6f:65:16:54:b1:91:67:fd:1e:8a:65:
5a:ae:30:b1:cb:a8:4b:d8:02:f6:59:c1:ec:9f:34:
bd:cc:99:ef:23:8b:60:26:4d:4b:18:f9:5b:61:66:
72:57:2d:fe:8d:a5:2b:82:c9:93:bd:a3:e1:70:cf:
e2:79:5a:e1:b0:df:8a:a1:b6:4a:14:82:d9:28:7f:
c0:05:dd:fd:6a:bc:7e:b0:d0:71:da:1e:e8:4f:95:
94:c1:29:2e:87:65:6a:f8:fc:db:c7:95:47:d4:07:
91:78:8d:96:c2:b4:81:ea:53:f0:ae:0f:4e:2c:d5:
7c:48:47:53:7b:98:17:2d:3e:1a:0a:8a:a4:aa:47:
af:e3:eb:66:a0:ff:a6:00:bb:d3:15:fe:7a:e0:30:
e1:49:df:f6:d9:d3:15:2f:33:69:99:39:ac:06:30:
dc:33:65:09:85:37:ed:58:c0:de:de:9f:d2:f8:0d:
01:5a:18:fb:71:ca:35:7f:71:87:ed:ae:ad:d0:63:
13:4d:f8:f5:ce:53:95:27:93:af:03:90:d4:1e:23:
78:85:cd:87:db:c0:6e:fb:03:29:76:37:40:65:24:
86:4e:94:c9:5f:8d:55:50:e1:95:0b:d5:08:22:da:
b9:74:17:86:f2:a4:cb:bb:2d:5d:92:88:8e:e1:93:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:E3:15:08:CD:17:63:07:58:4F:35:35:0F:26:A7:9E:AA:13:8F
X509v3 Authority Key Identifier:
keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/323630343a3763303a3a2f33362d3336203d3e20333935383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:7c0::/36
Signature Algorithm: sha256WithRSAEncryption
5c:b6:78:9c:16:d4:8f:30:dc:88:1c:12:3f:6d:62:e6:c5:88:
8f:9a:a8:0d:46:98:1d:bd:8f:57:4b:53:a2:4c:ab:cd:03:9f:
f6:0a:5e:0a:34:b8:9c:b9:e3:f3:d4:f4:e9:5e:59:44:de:92:
bf:59:e6:98:24:c3:d4:3a:11:cf:af:cf:d8:55:77:29:e5:e7:
54:1a:65:14:c3:74:ee:73:3e:29:24:33:2e:0a:ef:98:62:fc:
fa:13:ba:78:f3:14:af:67:a2:61:3d:a0:cd:dd:51:aa:e5:1c:
7d:96:f9:52:18:59:51:e1:4e:ed:67:74:69:f5:f4:5b:69:d8:
0f:96:c8:b2:d9:64:a2:93:52:cc:8e:3d:8b:87:c2:ca:0e:cb:
9e:57:a5:90:0a:3b:18:19:cd:92:d2:d3:25:5f:cd:a2:1a:6b:
73:2b:e0:d9:9c:9a:64:b7:94:12:d8:c8:b7:04:c1:9d:5a:ae:
d7:1a:fa:b1:e4:ed:2c:25:4a:4f:33:77:05:18:d9:b1:a4:07:
f2:8f:1a:40:5c:21:33:db:2e:c7:0c:94:74:91:77:a2:22:93:
11:5f:f4:ad:9b:ec:df:e6:77:3d:16:25:d2:f4:91:23:90:cc:
6f:a6:f6:42:87:c9:f8:8b:45:55:90:b5:da:ec:c3:99:e1:cc:
e2:fe:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:53:52 2026 by rpki-client