
$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
File: 323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa (raw, json)
Hash identifier: CawC+CslC0ktsZTRarwOhsMH/I/Kb5OJgJ287edm/H0=
Subject key identifier: CB:D6:07:E9:D6:5A:9B:D5:1B:D8:3D:D3:1B:32:B0:25:A5:39:0D:D2
Certificate issuer: /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial: 36E233092A7E9DB7C4A7A75846BA860519600AF1
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
Signing time: Wed 16 Jul 2025 09:13:36 +0000
ROA not before: Wed 16 Jul 2025 09:08:36 +0000
ROA not after: Wed 15 Jul 2026 09:13:36 +0000
asID: 137908
IP address blocks: 2602:f9ba:a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 22:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e2:33:09:2a:7e:9d:b7:c4:a7:a7:58:46:ba:86:05:19:60:0a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Validity
Not Before: Jul 16 09:08:36 2025 GMT
Not After : Jul 15 09:13:36 2026 GMT
Subject: CN=CBD607E9D65A9BD51BD83DD31B32B025A5390DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:ba:d8:7e:94:08:d3:5a:bb:c8:61:bb:da:
cf:2b:55:5a:80:c7:8c:47:3d:71:a3:5d:e7:e7:84:
e3:83:65:2f:f5:63:1d:0f:9e:2f:62:2f:e2:c1:93:
11:14:a1:3b:5b:56:ab:1e:0c:95:5b:94:8c:df:67:
5b:fe:03:53:0a:10:ce:44:a4:83:7e:43:49:66:6d:
85:9a:be:15:e2:5d:5b:bb:e2:6b:b3:09:37:d9:c8:
13:49:85:af:5c:b4:9f:4e:74:a5:65:0d:ce:a8:56:
29:f8:27:6d:ac:fb:da:b8:71:22:23:81:54:0a:9b:
73:a5:e7:21:e6:af:d7:fa:ca:88:3e:f5:85:fc:88:
36:b8:00:2e:ab:92:6c:5c:bf:dc:05:d6:f0:44:29:
b6:c7:07:15:37:d0:a5:4a:f6:4f:85:5a:4c:c6:b5:
c0:d2:e6:0e:cf:52:f4:30:4b:4d:d2:05:97:e1:fd:
fd:4d:05:15:63:1a:3a:c7:3f:88:33:cb:d8:9d:50:
7c:cb:8b:58:9c:78:fd:6c:45:46:ed:81:f8:09:39:
99:46:e7:47:5f:55:ad:56:f0:c4:2c:0f:1d:69:97:
8c:a5:82:d6:c2:2c:e2:fe:ee:07:32:0d:46:4a:da:
fd:57:bc:de:20:6e:ca:87:a2:5b:bc:5e:42:e6:59:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:07:E9:D6:5A:9B:D5:1B:D8:3D:D3:1B:32:B0:25:A5:39:0D:D2
X509v3 Authority Key Identifier:
keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f9ba:a8::/48
Signature Algorithm: sha256WithRSAEncryption
88:a8:f8:ca:c8:29:e9:c8:3a:48:14:af:74:e0:e0:3a:1c:62:
cd:11:9d:a2:80:67:96:52:90:5e:3a:d3:59:62:94:a7:60:fb:
f2:b7:03:e2:ec:57:3a:e3:a8:0d:56:d0:28:21:21:94:91:ff:
61:8b:52:11:f9:a0:5f:07:78:ab:a9:f5:36:c3:01:54:11:74:
ea:e2:90:88:e8:6e:bb:43:cd:35:7f:3a:57:ef:a8:ee:af:62:
4e:f7:ea:75:86:53:e0:ca:9f:5a:d4:e0:74:3f:15:c9:2b:3c:
21:3d:07:33:a6:ac:2e:e0:ac:4e:0f:24:24:19:0f:9f:d6:53:
90:20:a5:dc:93:61:f2:2d:d6:b9:1b:e6:e9:0e:63:5f:30:1a:
ec:43:2c:03:d2:77:f2:62:c1:e1:f6:c8:ed:06:1b:58:09:1f:
83:6e:b6:c7:68:ef:fb:f2:68:ee:20:39:f4:e4:f6:4a:b9:44:
09:af:48:78:f3:da:57:36:62:7e:65:b4:c8:09:29:c2:41:84:
86:53:00:21:40:f3:69:39:16:d7:10:91:77:99:d4:e2:d1:e2:
21:02:e9:37:91:76:1a:91:b2:b4:4c:fb:f0:a3:61:fa:52:86:
cd:4c:6e:a8:82:63:84:a5:38:cc:be:4d:a2:12:2f:91:85:9c:
9d:cf:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:17:20 2025 by rpki-client