
$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203138383534.roa
File: 323630363a616563303a333030303a3a2f33362d3336203d3e203138383534.roa (raw, json)
Hash identifier: nGlnZYVGul4sGW5QTKVNYPVtngzuUfVGtXFYrsDrhIs=
Subject key identifier: 8A:D2:79:E0:1B:17:E4:42:0D:35:AC:B7:E7:7D:11:6D:17:43:D0:27
Certificate issuer: /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial: 13A1EA185E188C23DC367224419738F993C619ED
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203138383534.roa
Signing time: Wed 22 Apr 2026 06:11:03 +0000
ROA not before: Wed 22 Apr 2026 06:06:03 +0000
ROA not after: Wed 21 Apr 2027 06:11:03 +0000
asID: 18854
IP address blocks: 2606:aec0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 08:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a1:ea:18:5e:18:8c:23:dc:36:72:24:41:97:38:f9:93:c6:19:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Validity
Not Before: Apr 22 06:06:03 2026 GMT
Not After : Apr 21 06:11:03 2027 GMT
Subject: CN=8AD279E01B17E4420D35ACB7E77D116D1743D027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:31:34:47:1a:2a:d9:e1:e3:33:56:32:89:
4b:2d:20:73:29:38:dd:74:41:6d:98:3b:bf:44:bb:
b4:4b:b0:68:fb:a8:54:79:f4:07:da:56:9a:f6:8d:
35:63:e0:99:c3:e7:52:5a:b3:48:cc:30:5a:c7:5b:
8d:04:51:2b:8d:8c:71:31:18:d6:38:03:d0:94:a4:
dc:c9:03:2c:07:dd:9f:4d:a9:b9:6c:66:99:1d:af:
8c:99:70:ec:0e:5d:3c:cd:64:c3:ba:37:e9:50:12:
2e:83:af:65:93:2d:2f:17:89:d2:2d:de:ba:6d:0b:
7a:52:21:98:6d:ff:90:c6:67:6f:de:9d:84:b4:af:
45:a7:2b:10:68:1d:40:1e:79:b9:9e:f5:3c:5e:13:
3d:2b:b5:69:8f:eb:9e:a1:a9:95:3d:6a:67:72:ea:
dd:e4:7d:43:07:0c:a8:b0:0e:e8:03:ef:92:99:48:
39:97:57:86:64:63:d0:8e:da:7a:ec:f5:09:7f:12:
ba:69:9a:06:52:47:b8:f9:ba:41:53:e7:65:69:fc:
64:bf:6a:95:f8:58:f8:64:ce:41:1c:c5:b0:b1:23:
84:29:08:9d:e3:da:67:a6:0d:aa:d4:78:c5:c1:f0:
19:4f:72:c5:38:08:42:bb:dd:8f:70:a4:9a:fa:d4:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:79:E0:1B:17:E4:42:0D:35:AC:B7:E7:7D:11:6D:17:43:D0:27
X509v3 Authority Key Identifier:
keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203138383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:aec0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:ff:3a:cb:c1:f4:39:52:d0:2d:1c:a7:bd:4b:fa:3c:ee:a0:
bd:59:62:7b:54:0e:2f:f4:65:e8:9c:fd:8c:dd:e2:7b:32:02:
47:74:a0:2c:0b:36:b8:bb:4d:9d:bc:fb:64:53:1a:c5:bc:21:
7e:4c:c2:ea:f0:32:16:c7:62:a4:28:80:fc:91:b5:c6:d5:2c:
8e:56:1b:df:86:e4:03:16:3c:19:e2:c0:c3:b9:c3:dc:79:92:
39:f7:d6:c3:ce:8b:71:7c:fc:af:b9:35:cf:96:50:e9:15:82:
e1:00:cd:ab:9d:8c:42:c2:f5:c9:8a:69:94:75:d6:8f:b9:2e:
08:18:74:26:3e:29:39:57:33:e3:38:ce:66:5d:27:a6:8a:05:
a4:db:39:56:39:a8:a2:cb:65:26:ef:e8:5d:e0:44:be:a1:d0:
02:85:ff:2a:2f:4d:2e:94:88:f2:ae:70:00:1f:fb:f4:d1:ca:
6d:02:04:dd:67:40:3e:f7:57:ac:7e:e5:39:74:cc:3e:a8:9d:
5d:86:7f:ec:3c:1d:a5:a8:44:2a:ce:8f:cb:51:56:d2:0f:f7:
f3:b6:aa:6e:17:3a:b0:a2:7e:e2:63:33:e8:c6:37:d1:2f:54:
71:1f:cf:a2:a2:5f:68:ce:88:da:8d:31:ed:3c:1e:07:f8:37:
54:15:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:37 2026 by rpki-client