
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa
File: 323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa (raw, json)
Hash identifier: GmxvwJcj3y4WgUTGiVQjlhqy7SBa7DIHEu9Y3tU2Lw4=
Subject key identifier: 82:8A:EA:C1:65:34:49:6B:18:7C:46:E0:AB:6C:33:B1:10:B9:DB:BF
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 6B54715FBD6A88D34444E05734D3DCAF45ED1B9A
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa
Signing time: Sat 10 Oct 2026 13:29:18 +0000
ROA not before: Sat 10 Oct 2026 13:24:18 +0000
ROA not after: Sat 09 Oct 2027 13:29:18 +0000
asID: 399170
IP address blocks: 2403:2500:9000:129::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:54:71:5f:bd:6a:88:d3:44:44:e0:57:34:d3:dc:af:45:ed:1b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Oct 10 13:24:18 2026 GMT
Not After : Oct 9 13:29:18 2027 GMT
Subject: CN=828AEAC16534496B187C46E0AB6C33B110B9DBBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:0d:8c:69:f9:4f:bf:bc:a5:5a:f6:ea:8b:
e6:09:3b:b0:b5:9a:fc:c7:e4:5b:3d:a1:5a:7a:65:
c8:41:6b:f4:45:91:06:85:00:cf:bd:11:ac:63:60:
47:d9:3c:9a:97:a4:89:9c:58:d9:53:8d:97:75:7a:
dc:49:00:d9:1b:e2:cf:91:a5:53:14:64:55:dc:3b:
b9:4c:88:15:31:b2:bb:86:b7:4a:87:49:d3:91:a2:
3e:d3:c1:9d:fa:c9:2f:22:e1:6d:2b:39:6d:1c:2e:
22:bb:07:1f:8b:fe:e3:32:d1:5c:2d:51:a0:49:3b:
a6:06:9d:0a:02:6a:24:9e:c7:37:f5:3d:ca:73:a8:
9d:92:3d:5c:b7:3a:c8:0f:a5:4a:9a:f0:97:c8:19:
72:d3:9a:ea:db:37:a9:0f:65:25:cf:fe:a7:b8:67:
ef:29:7a:a9:b5:83:90:38:8f:50:79:48:b0:6e:dd:
e8:f6:a9:d1:b5:25:cf:2f:53:61:a3:d7:41:f8:40:
89:1d:0e:2d:c4:5b:a1:42:78:a3:f3:ac:54:bd:84:
96:cb:30:c3:68:16:80:f4:c7:24:4c:0a:c0:41:fd:
8a:5e:c8:90:1b:f3:81:18:45:ed:43:d8:71:08:34:
56:95:c0:89:91:45:69:fb:cc:5a:3f:2e:3a:2b:bf:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8A:EA:C1:65:34:49:6B:18:7C:46:E0:AB:6C:33:B1:10:B9:DB:BF
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2500:9000:129::/64
Signature Algorithm: sha256WithRSAEncryption
d7:86:08:ee:0f:9a:34:e0:a5:62:b7:ee:61:4b:8a:1e:69:5a:
fa:e4:7d:54:43:70:15:20:e5:16:bd:52:96:87:4b:a0:93:f1:
39:88:f6:5a:0a:60:a1:31:fc:c6:f1:f7:0a:48:57:8e:fb:91:
7e:a9:96:19:c1:4e:74:d9:d7:59:6d:d6:2b:43:ce:e1:87:be:
62:a0:93:e9:6f:01:c9:a4:01:34:34:e3:fa:60:3f:25:b1:52:
16:fa:5d:c5:cf:eb:3b:1d:ba:28:2c:61:63:e3:2c:93:eb:73:
49:aa:45:2d:cc:e1:a0:82:c0:aa:b7:80:9a:3c:3e:c7:f7:aa:
e3:87:2b:cb:61:84:2e:cd:13:bd:05:6d:29:31:a0:17:d5:3a:
f2:fc:ad:11:13:59:af:46:5d:56:7a:a4:be:65:1b:f8:f9:e3:
81:ea:36:be:28:a3:27:10:ec:fa:f2:3c:20:fa:51:b2:12:43:
60:7b:4a:76:38:59:d0:f8:1e:ca:b8:d3:96:1b:1c:75:4d:d6:
05:47:d5:1d:1c:0d:90:56:e3:3c:01:60:e1:31:58:2b:ef:93:
82:63:e5:1e:68:6d:41:91:8e:c3:f8:82:a7:4e:a0:50:aa:28:
3b:c5:47:d0:d0:e0:e6:a6:dd:d5:1e:1e:26:9a:b2:59:63:61:
4b:d5:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:39:40 2026 by rpki-client