
$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203138383534.roa
File: 323630363a616563303a323030303a3a2f33362d3336203d3e203138383534.roa (raw, json)
Hash identifier: tKywoXJ/dFK7psjWunb6Tdn/rv3eTS1tgNWiLdP5vdw=
Subject key identifier: E0:D0:43:D6:59:D4:13:A8:9A:21:CE:A0:39:AF:0E:E6:96:74:07:F0
Certificate issuer: /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial: 433591558697AB6A11A0F1C2324991BD3CA4483D
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203138383534.roa
Signing time: Wed 22 Apr 2026 06:10:51 +0000
ROA not before: Wed 22 Apr 2026 06:05:51 +0000
ROA not after: Wed 21 Apr 2027 06:10:51 +0000
asID: 18854
IP address blocks: 2606:aec0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 08:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:35:91:55:86:97:ab:6a:11:a0:f1:c2:32:49:91:bd:3c:a4:48:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Validity
Not Before: Apr 22 06:05:51 2026 GMT
Not After : Apr 21 06:10:51 2027 GMT
Subject: CN=E0D043D659D413A89A21CEA039AF0EE6967407F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:b9:24:44:9f:f3:f5:58:16:f6:8f:46:0a:
4d:b4:0b:9e:c7:e6:ce:64:5f:91:68:50:14:e7:03:
58:69:0a:88:36:5d:85:30:15:76:02:d3:2e:cb:32:
1f:ed:1b:f6:57:1b:8c:16:05:c4:e6:2a:9c:b2:3a:
1d:90:c2:24:4a:3c:16:2f:35:32:45:2f:58:ce:cb:
f4:67:af:39:06:92:89:76:aa:e4:e4:41:bb:7d:9c:
b7:9c:1e:20:7a:69:b4:f3:59:e6:b8:d8:0e:b6:3d:
42:87:dc:f9:63:86:37:cc:3c:6e:4c:0a:d1:d1:88:
c0:27:41:73:e7:65:ce:a1:12:48:86:a0:2d:58:4a:
63:f8:fe:31:a4:0d:e9:6a:9a:5b:2b:95:b6:83:b5:
b4:39:27:ed:bb:1c:2c:3f:25:a0:3b:09:f7:bf:d4:
40:56:ce:0c:4c:01:ad:fe:3e:ee:84:c1:f0:d1:11:
ba:a0:c5:70:07:46:9a:2c:9c:b9:c3:de:35:e0:e0:
15:4c:b3:22:12:e3:df:9a:90:ed:f8:67:a9:a1:d2:
a5:86:ef:d3:5d:cb:87:ec:05:61:5c:16:ba:ca:47:
25:fc:10:b9:96:5e:67:ab:f9:c5:83:28:0a:12:aa:
78:02:a2:fe:b2:8f:b1:bb:13:1f:e4:7a:85:35:06:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:43:D6:59:D4:13:A8:9A:21:CE:A0:39:AF:0E:E6:96:74:07:F0
X509v3 Authority Key Identifier:
keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203138383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:aec0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
10:af:d6:b7:82:df:c0:54:82:9f:14:b0:bc:c7:28:c8:9b:98:
21:e9:b4:20:87:f5:33:10:a3:38:59:d1:68:23:7b:8e:18:6a:
e8:af:4d:ad:89:1e:d1:6a:02:8b:94:95:9e:1c:04:ee:c6:4b:
4d:de:ea:b1:47:ba:8d:b0:28:ea:53:84:68:55:56:c4:d4:75:
4a:71:ac:f3:c3:a2:27:47:a2:ed:fb:48:22:ea:f5:49:5a:1f:
cd:a3:6a:27:43:f5:fb:d6:6a:07:96:e4:7a:e3:35:c1:3d:ec:
48:c9:b9:3a:91:e4:b7:47:69:c3:9b:1e:0f:03:44:31:00:10:
28:e4:c0:42:40:e0:e0:1e:a3:b3:fb:66:e4:5c:0f:c2:f1:56:
d1:8f:36:4a:8e:d7:31:44:7a:fa:2d:18:58:b3:ef:ad:1b:53:
d4:12:51:0d:a8:7b:eb:0c:e9:8a:bf:fb:9c:bb:f4:c1:ff:f9:
40:9f:bb:56:0a:7c:8d:09:66:a6:fc:5a:ad:6a:c7:68:ac:57:
02:a6:f5:7c:53:74:26:76:5c:1f:46:eb:1d:bf:b8:59:22:2a:
7c:fc:aa:09:3e:b7:c8:c0:10:f9:57:ce:05:a4:92:4c:6f:60:
dc:9f:ba:21:f6:88:9d:37:d7:8c:a8:87:90:b7:cf:ad:5a:44:
4c:b0:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:38 2026 by rpki-client