
$ rpki-client -vvvf rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a3a2f33362d3336203d3e203137323930.roa
File: 323630323a666138363a3a2f33362d3336203d3e203137323930.roa (raw, json)
Hash identifier: LAE1QpM5HWvF9vnonEUEGUQqxebQjs9IxXry4hKONFE=
Subject key identifier: 25:C0:0B:7E:42:78:51:72:2C:0B:A4:62:C1:68:94:CC:C0:AA:78:ED
Certificate issuer: /CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Certificate serial: 17A956CE17CE9A1ED8D76D69F6BFA636E2FDB3FD
Authority key identifier: A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a3a2f33362d3336203d3e203137323930.roa
Signing time: Thu 05 Nov 2026 15:49:41 +0000
ROA not before: Thu 05 Nov 2026 15:44:41 +0000
ROA not after: Thu 04 Nov 2027 15:49:41 +0000
asID: 17290
IP address blocks: 2602:fa86::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Nov 2026 11:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a9:56:ce:17:ce:9a:1e:d8:d7:6d:69:f6:bf:a6:36:e2:fd:b3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Validity
Not Before: Nov 5 15:44:41 2026 GMT
Not After : Nov 4 15:49:41 2027 GMT
Subject: CN=25C00B7E427851722C0BA462C16894CCC0AA78ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:18:be:42:b3:70:d7:8e:5b:27:db:92:1c:
a0:68:75:97:05:51:0f:89:b5:c0:07:17:d4:03:91:
fa:26:1b:54:fa:bc:34:0d:9e:33:22:db:27:af:4d:
a5:97:39:47:6c:35:1e:ba:1a:be:22:30:66:a3:ab:
3b:99:cd:d9:07:eb:b1:f4:d1:9f:d6:84:79:41:a5:
db:6e:d5:9b:b2:e0:2f:ee:69:c7:b4:1a:67:06:84:
de:9d:34:33:9e:e8:1c:0e:18:c4:6d:5e:46:bc:2f:
6b:f8:84:48:28:73:a6:64:8b:73:32:6a:0e:7a:dc:
20:bc:a7:46:b1:17:0f:0f:ac:22:73:0e:a1:e7:ed:
07:dc:22:ea:0e:b0:a0:b7:88:b2:b5:ac:40:f4:eb:
e7:69:94:ed:06:90:79:70:45:24:53:39:93:f5:02:
4c:b0:bf:23:01:09:5c:81:08:0e:f9:e9:4a:a1:6c:
e2:db:02:ee:64:54:54:3c:4f:90:46:18:fb:b5:08:
6f:0d:c1:8a:83:fb:fa:84:a3:9d:bf:0f:1c:01:6a:
2c:1d:ca:07:30:9f:12:8d:95:33:e7:07:22:1a:80:
d7:e1:6d:4b:dc:92:2d:15:41:8e:aa:37:96:7c:9c:
04:cb:6c:7d:26:fb:b8:88:33:c0:04:48:45:61:ba:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:0B:7E:42:78:51:72:2C:0B:A4:62:C1:68:94:CC:C0:AA:78:ED
X509v3 Authority Key Identifier:
keyid:A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a3a2f33362d3336203d3e203137323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa86::/36
Signature Algorithm: sha256WithRSAEncryption
8e:08:e2:71:68:a1:6d:c2:98:47:9f:20:e7:29:28:92:c9:ff:
c7:91:cc:4d:b0:d0:00:3d:38:06:fd:2b:67:02:8f:61:97:30:
ee:31:54:0d:d5:a4:4e:aa:fb:66:90:b2:8d:aa:3d:d8:4f:f0:
8d:14:00:d8:08:46:f4:49:b1:4c:12:fb:83:3f:05:e1:52:f3:
de:7a:4b:4d:44:15:8d:99:d5:a1:53:97:bd:e7:8a:bc:ce:fe:
ff:09:93:39:e7:d5:71:c4:fd:c2:d3:82:6d:9a:6a:ce:93:2d:
b9:06:8f:93:06:e1:f2:e8:86:d9:92:52:97:10:79:b8:b4:78:
fc:7a:20:63:cd:df:29:42:e2:f7:d0:91:33:ea:4e:f9:23:f9:
24:2b:e3:f1:05:e1:41:07:73:0d:63:50:a0:7a:84:98:01:e0:
cf:c0:53:77:c0:62:ae:96:4f:d9:0f:a8:67:db:66:06:c2:7e:
ab:86:cf:99:4d:cc:c2:72:eb:28:ea:f5:96:a6:bf:00:fc:34:
87:43:6b:4d:1a:94:de:16:0c:36:c7:12:c9:4a:c8:54:76:8f:
3f:6b:25:78:2c:cc:ae:b4:4d:46:f2:0f:11:e1:34:4b:a9:fc:
69:10:a9:6f:8b:40:0a:21:f4:07:01:fd:99:6f:5a:0f:10:64:
95:dc:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 19:11:06 2026 by rpki-client