
$ rpki-client -vvf rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/323632303a64393a323030303a3a2f34382d3438203d3e20343031373630.roa
File: 323632303a64393a323030303a3a2f34382d3438203d3e20343031373630.roa (raw, json)
Hash identifier: 8cPnnYEXIJLCdlWfUy79K2LhqaM+LhE2rdws7KP1ppw=
Subject key identifier: 9A:5A:D6:7E:A1:18:0F:C5:5A:A7:61:20:77:60:07:62:6B:E2:91:39
Certificate issuer: /CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0
Certificate serial: 0D9258F0AEFE8075F21AB44709B1670CE60648CB
Authority key identifier: 4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/323632303a64393a323030303a3a2f34382d3438203d3e20343031373630.roa
Signing time: Mon 11 May 2026 14:29:07 +0000
ROA not before: Mon 11 May 2026 14:24:07 +0000
ROA not after: Mon 10 May 2027 14:29:07 +0000
asID: 401760
IP address blocks: 2620:d9:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl
rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 12:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:92:58:f0:ae:fe:80:75:f2:1a:b4:47:09:b1:67:0c:e6:06:48:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0
Validity
Not Before: May 11 14:24:07 2026 GMT
Not After : May 10 14:29:07 2027 GMT
Subject: CN=9A5AD67EA1180FC55AA76120776007626BE29139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:1a:77:4c:9d:cd:23:29:8a:d6:f2:8f:07:
56:e1:3e:e2:ac:0a:6b:60:32:ff:38:85:7b:3e:8a:
11:17:2c:ec:84:5c:7f:10:0d:83:5b:e7:b4:61:e6:
4e:eb:e9:59:fc:d7:8e:c9:88:64:16:fb:21:93:ec:
07:2a:16:2f:cc:cb:90:dc:2d:6d:44:ee:66:7b:e3:
de:9a:0e:75:03:8f:74:9f:01:8b:d1:73:e7:6f:73:
71:95:a6:ce:17:60:ab:8a:6a:fc:d0:75:0d:8a:d4:
e8:00:97:4b:6d:e5:55:0d:7a:f2:af:6f:6b:59:71:
68:5c:87:21:c4:4d:16:f8:51:61:04:e5:7d:4d:2e:
87:4f:c6:a7:bd:dd:7a:3c:5d:9a:f8:67:f6:b2:a7:
17:a8:c2:a8:96:a9:c4:52:70:1c:4e:2d:12:03:1a:
06:ba:ba:cf:a7:0a:4c:99:60:1e:88:94:87:45:78:
41:ca:f2:5a:ef:11:d4:4a:c3:83:a1:85:8c:94:f0:
3e:e8:37:34:e0:94:6f:37:20:9d:9e:27:23:09:56:
c6:12:f6:c5:11:b1:62:5d:a9:e1:92:9d:3a:44:79:
ee:a1:37:0d:38:67:5b:01:27:92:dc:c0:5c:22:b6:
76:12:46:04:40:2a:52:f7:7a:06:85:54:22:61:3c:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:D6:7E:A1:18:0F:C5:5A:A7:61:20:77:60:07:62:6B:E2:91:39
X509v3 Authority Key Identifier:
keyid:4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/323632303a64393a323030303a3a2f34382d3438203d3e20343031373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:d9:2000::/48
Signature Algorithm: sha256WithRSAEncryption
3b:cc:de:f6:80:31:85:10:80:2c:d9:2b:d6:3f:fd:38:51:50:
4b:ae:f4:e6:01:5c:d6:97:4f:f9:6c:a4:71:9d:7f:fa:65:d5:
a4:3d:16:da:5b:7e:8f:59:49:32:ce:d6:5f:06:8c:19:db:73:
58:f5:5c:f0:f3:9b:3e:7e:2b:f0:a9:2c:9c:8c:53:3d:c2:2a:
27:1d:d8:7e:3b:a7:67:f9:75:3d:84:15:97:b9:f4:00:00:69:
d6:6d:fb:0b:3e:4c:f6:02:c9:5e:96:5d:77:00:49:6a:9d:c9:
83:0f:3f:21:e3:a5:6f:a5:01:7d:32:11:0b:a3:5c:dd:32:7d:
bc:0a:69:dd:ff:28:0d:46:82:aa:08:a7:92:b8:58:00:78:f0:
90:2e:23:d7:97:b0:58:0e:40:f1:fe:78:28:58:bd:b4:fe:78:
58:8e:c6:0b:c8:65:56:40:0e:5a:aa:a9:9f:e0:d7:7e:52:cc:
4f:6e:7f:99:24:34:f3:98:c1:c4:6f:fa:73:68:5f:76:45:f5:
62:b9:30:94:3b:cb:6f:d6:ca:14:12:84:75:15:7a:7a:47:f6:
25:e4:0c:88:68:26:4b:cb:78:0a:3d:05:e4:3d:df:3c:18:f6:
b2:d6:62:98:31:54:4b:d1:db:43:2b:73:08:8d:d6:05:fd:8b:
bc:fb:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:23 2026 by rpki-client