
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230343a3a2f34382d3438203d3e20323032343030.roa
File: 323630323a666161383a3230343a3a2f34382d3438203d3e20323032343030.roa (raw, json)
Hash identifier: ZDz12REqTPtaJG/DPWZaPgO2xDv+TPV5eX5GkuKxKXE=
Subject key identifier: 60:6E:9D:66:36:1F:76:5B:6A:F2:9F:15:EF:8F:21:5A:30:38:2A:71
Certificate issuer: /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial: 37F6AF7D332DE0075B543358CD7AF5FCB1CD3192
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230343a3a2f34382d3438203d3e20323032343030.roa
Signing time: Mon 09 Mar 2026 13:20:39 +0000
ROA not before: Mon 09 Mar 2026 13:15:39 +0000
ROA not after: Mon 08 Mar 2027 13:20:39 +0000
asID: 202400
IP address blocks: 2602:faa8:204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 22:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f6:af:7d:33:2d:e0:07:5b:54:33:58:cd:7a:f5:fc:b1:cd:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Validity
Not Before: Mar 9 13:15:39 2026 GMT
Not After : Mar 8 13:20:39 2027 GMT
Subject: CN=606E9D66361F765B6AF29F15EF8F215A30382A71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:22:94:84:37:92:c1:d1:d4:8b:fc:74:c5:
72:49:bf:30:19:c7:b5:7d:ae:9e:07:a8:52:c7:71:
1f:99:49:a2:62:aa:90:6d:d0:ae:37:c6:6c:e4:af:
b7:e8:a1:11:e7:3f:26:82:d8:32:5a:f2:7d:4b:6f:
49:7a:61:e0:a1:30:cb:e4:af:e4:d0:f6:e8:bc:84:
90:9a:f2:da:ac:d6:01:9f:aa:89:1d:a1:ce:45:56:
07:3b:c1:da:41:06:98:6f:f8:9f:cc:80:b9:d5:6a:
4c:52:8b:e6:6f:88:d1:bb:8a:fb:49:b1:04:a4:48:
90:f5:88:83:39:95:3e:6c:27:92:96:a8:73:49:1d:
12:f0:1c:d3:fb:62:69:ef:77:63:a9:41:e3:77:5b:
b4:d9:9e:ed:bd:2b:64:85:ff:14:ac:47:a6:8b:9a:
d8:69:62:1b:67:4b:63:f2:23:15:0f:60:74:77:82:
33:b4:f8:83:03:e7:60:ba:ce:77:cc:29:d8:51:43:
e3:17:2d:72:a0:fe:b3:f8:c1:ff:95:b8:43:22:f5:
e7:86:44:b5:69:ac:3d:bb:98:70:15:e0:cf:cc:59:
6d:43:ba:e2:e5:29:cc:e6:a7:a2:6b:e2:3e:b6:a7:
af:7b:df:47:55:3e:f6:c0:b0:2f:f0:99:81:d6:7e:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:9D:66:36:1F:76:5B:6A:F2:9F:15:EF:8F:21:5A:30:38:2A:71
X509v3 Authority Key Identifier:
keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230343a3a2f34382d3438203d3e20323032343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:faa8:204::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ad:19:41:ff:ea:8f:20:01:90:8a:8c:7e:9a:a3:57:d5:ca:
c3:49:a3:07:df:7f:1c:d3:24:82:27:12:85:e9:d0:5d:7a:cf:
05:41:27:6d:5e:25:ab:75:6d:41:59:cd:1c:95:38:67:2a:e7:
97:48:d6:96:14:e5:e3:3d:90:8c:57:06:e3:a5:99:d6:b0:27:
9e:8e:e8:56:6c:aa:29:22:73:7f:f4:97:e0:88:ee:29:74:ce:
0c:8b:d8:e0:02:57:3e:f4:2f:f8:6e:b4:11:0e:01:36:85:2b:
37:fa:6d:90:a8:71:44:a6:4b:cb:93:cb:7e:aa:6e:a6:71:5b:
23:93:78:6d:4b:ba:a4:09:33:97:d7:7e:78:e3:f0:3a:e9:6e:
3d:16:69:a1:de:31:7a:21:27:ab:f3:22:75:7f:13:e8:1c:fb:
20:de:a0:e0:65:3b:83:d7:fe:48:19:b6:14:c5:06:0a:a0:af:
fb:e5:f6:3d:07:d2:b5:1d:66:1d:1f:68:15:03:b6:cb:51:b6:
e3:57:dc:9e:22:ee:e6:10:8d:63:e5:15:69:ef:e7:70:f6:3e:
50:58:b1:1e:18:46:12:ac:5b:6b:0f:9c:77:c8:f4:6a:02:3a:
bd:ba:83:de:ea:1d:9c:d8:dc:e1:df:6c:d9:c1:91:3d:aa:32:
5f:1a:77:1f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUN/avfTMt4AdbVDNYzXr1/LHNMZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjA2YzRlMDBiYTM0OGVjY2RjOTRiZDRl
NzUxY2MzN2FkZmY2YjdkNDQwHhcNMjYwMzA5MTMxNTM5WhcNMjcwMzA4MTMyMDM5
WjAzMTEwLwYDVQQDEyg2MDZFOUQ2NjM2MUY3NjVCNkFGMjlGMTVFRjhGMjE1QTMw
MzgyQTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uwilIQ3ksHR
1Iv8dMVySb8wGce1fa6eB6hSx3EfmUmiYqqQbdCuN8Zs5K+36KER5z8mgtgyWvJ9
S29JemHgoTDL5K/k0PbovISQmvLarNYBn6qJHaHORVYHO8HaQQaYb/ifzIC51WpM
Uovmb4jRu4r7SbEEpEiQ9YiDOZU+bCeSlqhzSR0S8BzT+2Jp73djqUHjd1u02Z7t
vStkhf8UrEemi5rYaWIbZ0tj8iMVD2B0d4IztPiDA+dgus53zCnYUUPjFy1yoP6z
+MH/lbhDIvXnhkS1aaw9u5hwFeDPzFltQ7ri5SnM5qeia+I+tqeve99HVT72wLAv
8JmB1n7EKwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFGBunWY2H3ZbavKfFe+PIVow
OCpxMB8GA1UdIwQYMBaAFKNNW+y4AcKoWphbvD+edOQHepVHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzAv
QTM0RDVCRUNCODAxQzJBODVBOTg1QkJDM0Y5RTc0RTQwNzdBOTU0Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS8yYTVh
Zjc0ZGJiMDZjNGUwMGJhMzQ4ZWNjZGM5NGJkNGU3NTFjYzM3YWRmZjZiN2Q0NC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYw
MmE1MGEwMzkxMC8wLzMyMzYzMDMyM2E2NjYxNjEzODNhMzIzMDM0M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMDMyMzQzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6qAIEMA0G
CSqGSIb3DQEBCwUAA4IBAQBOrRlB/+qPIAGQiox+mqNX1crDSaMH338c0ySCJxKF
6dBdes8FQSdtXiWrdW1BWc0clThnKueXSNaWFOXjPZCMVwbjpZnWsCeejuhWbKop
InN/9JfgiO4pdM4Mi9jgAlc+9C/4brQRDgE2hSs3+m2QqHFEpkvLk8t+qm6mcVsj
k3htS7qkCTOX13544/A66W49Fmmh3jF6ISer8yJ1fxPoHPsg3qDgZTuD1/5IGbYU
xQYKoK/75fY9B9K1HWYdH2gVA7bLUbbjV9yeIu7mEI1j5RVp7+dw9j5QWLEeGEYS
rFtrD5x3yPRqAjq9uoPe6h2c2Nzh32zZwZE9qjJfGncf
-----END CERTIFICATE-----
Generated at Sun Mar 22 12:12:47 2026 by rpki-client