
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33653a3a2f34382d3438203d3e203239383032.roa
File: 323630323a666164343a33653a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: xWdmTSxBeiPstEOIQRLC5JZisvF+xazQ9o0Pu5fb768=
Subject key identifier: D0:9D:B5:18:14:42:89:D3:C8:F3:10:67:B4:B4:99:E2:13:37:46:D9
Certificate issuer: /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial: 1FA20CF138ED128230801918DAA289976A299142
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33653a3a2f34382d3438203d3e203239383032.roa
Signing time: Wed 15 Jul 2026 13:58:10 +0000
ROA not before: Wed 15 Jul 2026 13:53:10 +0000
ROA not after: Wed 14 Jul 2027 13:58:10 +0000
asID: 29802
IP address blocks: 2602:fad4:3e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 01:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a2:0c:f1:38:ed:12:82:30:80:19:18:da:a2:89:97:6a:29:91:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Validity
Not Before: Jul 15 13:53:10 2026 GMT
Not After : Jul 14 13:58:10 2027 GMT
Subject: CN=D09DB518144289D3C8F31067B4B499E2133746D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:e0:02:53:4c:db:5d:34:86:e4:5a:e0:51:
5d:bb:a4:04:8d:5e:f7:e8:af:f9:00:ca:f2:d9:c9:
a0:81:50:e7:18:b2:63:3d:17:20:7e:6b:0e:40:eb:
c3:f7:92:e4:cd:e0:d5:2a:0c:16:1f:17:13:9e:e7:
40:74:6b:d6:e9:04:28:5f:37:45:24:13:fe:a1:48:
4f:da:6c:ee:1e:a1:dc:97:dc:79:4a:0c:15:ff:cd:
0d:c7:54:ab:d5:07:07:3b:70:4d:2f:8f:3a:48:91:
c6:a1:ad:dd:03:a8:ed:b7:6a:e9:7f:b3:39:cc:21:
81:8b:d7:2b:8b:7b:02:f9:83:98:2f:74:75:f7:c4:
26:08:56:f6:88:fc:b9:ca:2e:d3:f5:29:d8:29:b8:
5d:8a:43:d9:f2:2f:94:93:a7:f8:a8:29:00:67:74:
06:92:c6:ac:cc:4e:b2:71:c1:e1:ec:a0:6e:04:5d:
02:d4:31:06:1d:f2:d5:d2:f0:c1:3a:76:2d:af:c3:
e9:ca:45:46:d7:20:88:bc:83:76:a6:e8:34:e3:71:
8d:34:39:ff:0b:6b:c1:76:f7:4b:d2:c1:e4:df:e9:
ad:64:bc:7c:fe:09:1b:4c:39:5d:20:10:06:c9:f7:
8c:af:d2:29:b3:f4:35:76:ca:86:ff:70:ab:4a:b6:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9D:B5:18:14:42:89:D3:C8:F3:10:67:B4:B4:99:E2:13:37:46:D9
X509v3 Authority Key Identifier:
keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33653a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fad4:3e::/48
Signature Algorithm: sha256WithRSAEncryption
ae:89:1d:56:22:be:67:01:4e:08:f7:9b:fb:5e:d2:58:11:4c:
1a:7a:71:3e:a2:2d:87:9a:86:14:fb:d9:8a:bf:e1:ca:a6:e3:
26:d9:73:2a:28:d5:f5:b1:25:26:8b:f0:81:7b:c4:c1:da:02:
16:79:13:50:64:d2:54:ab:ad:dd:3c:c2:42:17:48:23:e4:43:
4a:1d:24:95:0b:a8:e4:42:47:78:6d:96:7f:e9:10:8b:6d:ca:
14:73:af:38:21:50:c7:ed:e5:0e:85:72:c0:34:04:9f:8e:cc:
19:61:c0:b2:ff:75:30:11:fa:34:27:d2:8e:39:92:40:d1:21:
b9:52:3e:05:36:cb:fe:c0:a7:a9:8c:81:aa:e9:d8:bc:48:e9:
1e:a4:28:71:24:5e:04:39:7f:0b:4e:f4:1b:48:78:87:a7:23:
10:4a:8b:c1:9d:46:e4:4f:7d:fa:fe:c1:93:31:d7:af:b5:12:
46:2e:c2:3d:cf:c0:bb:3f:d2:e0:19:d3:d1:89:22:ab:f1:33:
fd:49:cf:86:52:77:2a:f5:68:a7:9b:40:3d:ca:16:69:70:7a:
ee:22:ff:ad:0c:22:1d:40:5c:cc:aa:f2:5c:9c:01:2d:fa:78:
47:a4:3e:68:6d:99:33:32:fc:e8:08:02:b4:e4:93:47:51:f1:
fd:5d:63:c7
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUH6IM8TjtEoIwgBkY2qKJl2opkUIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjYwNzE1MTM1MzEwWhcNMjcwNzE0MTM1ODEw
WjAzMTEwLwYDVQQDEyhEMDlEQjUxODE0NDI4OUQzQzhGMzEwNjdCNEI0OTlFMjEz
Mzc0NkQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7zgAlNM2100
huRa4FFdu6QEjV736K/5AMry2cmggVDnGLJjPRcgfmsOQOvD95LkzeDVKgwWHxcT
nudAdGvW6QQoXzdFJBP+oUhP2mzuHqHcl9x5SgwV/80Nx1Sr1QcHO3BNL486SJHG
oa3dA6jtt2rpf7M5zCGBi9cri3sC+YOYL3R198QmCFb2iPy5yi7T9SnYKbhdikPZ
8i+Uk6f4qCkAZ3QGksaszE6yccHh7KBuBF0C1DEGHfLV0vDBOnYtr8PpykVG1yCI
vIN2pug043GNNDn/C2vBdvdL0sHk3+mtZLx8/gkbTDldIBAGyfeMr9Ips/Q1dsqG
/3CrSrZlzQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFNCdtRgUQonTyPMQZ7S0meIT
N0bZMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhMzM2NTNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvrUAD4wDQYJKoZI
hvcNAQELBQADggEBAK6JHVYivmcBTgj3m/te0lgRTBp6cT6iLYeahhT72Yq/4cqm
4ybZcyoo1fWxJSaL8IF7xMHaAhZ5E1Bk0lSrrd08wkIXSCPkQ0odJJULqORCR3ht
ln/pEIttyhRzrzghUMft5Q6FcsA0BJ+OzBlhwLL/dTAR+jQn0o45kkDRIblSPgU2
y/7Ap6mMgarp2LxI6R6kKHEkXgQ5fwtO9BtIeIenIxBKi8GdRuRPffr+wZMx16+1
EkYuwj3PwLs/0uAZ09GJIqvxM/1Jz4ZSdyr1aKebQD3KFmlweu4i/60MIh1AXMyq
8lycAS36eEekPmhtmTMy/OgIArTkk0dR8f1dY8c=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:17 2026 by rpki-client