
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: TZ2JCPwsvmIJjlzDI1t5I/7/KQGM/H8wVOsQEhmXClc=
Subject key identifier: A1:2A:AD:C2:B3:7F:E4:8E:12:05:BB:60:5D:FC:1E:EF:BC:20:4D:05
Certificate issuer: /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial: 0F1F62AA141C6DBF6CE15E3458EA0B3E2E6FAA47
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Fri 01 May 2026 21:21:21 +0000
ROA not before: Fri 01 May 2026 21:16:21 +0000
ROA not after: Fri 30 Apr 2027 21:21:21 +0000
asID: 401682
IP address blocks: 2604:ca0:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1f:62:aa:14:1c:6d:bf:6c:e1:5e:34:58:ea:0b:3e:2e:6f:aa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Validity
Not Before: May 1 21:16:21 2026 GMT
Not After : Apr 30 21:21:21 2027 GMT
Subject: CN=A12AADC2B37FE48E1205BB605DFC1EEFBC204D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:36:64:2e:8f:04:e0:02:14:48:44:2a:51:
ff:96:3f:3d:8b:9d:38:10:a0:0e:f6:68:d5:03:a8:
ec:7a:f7:5f:67:ea:c8:69:8b:b3:30:56:6c:58:12:
19:3b:13:40:b9:56:39:64:cf:07:3d:35:1a:88:60:
43:ef:c8:39:af:5e:74:f7:6d:0c:88:dc:92:ef:cf:
00:ff:07:2e:4d:18:93:24:0b:e4:36:e6:44:d6:66:
73:f9:fc:72:4e:65:0d:1d:91:38:b3:ae:0b:95:e8:
77:04:93:53:8b:17:f0:93:4c:0b:4f:64:bb:3d:70:
cd:0d:90:c1:32:90:6a:33:2f:54:09:42:43:62:52:
b3:99:25:9a:e8:41:2f:64:6b:48:7a:98:8d:48:16:
09:67:59:73:94:4c:8e:b9:c1:ba:03:f2:c0:b7:07:
98:1e:d2:53:ed:15:77:ad:30:a2:7b:af:eb:a8:fe:
1b:a6:9f:80:f1:e4:c5:50:24:4e:97:73:0c:14:a3:
f4:ed:3b:27:d2:5b:d3:89:ad:ae:4b:b1:d5:5d:1d:
30:6c:57:b3:9b:3e:ec:54:9b:07:d9:38:3e:9e:1c:
e2:a7:01:3e:09:f1:89:5b:35:bb:ec:7a:bc:11:8b:
21:1a:77:f6:96:e3:d7:d0:70:ad:c2:57:ef:27:eb:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:AD:C2:B3:7F:E4:8E:12:05:BB:60:5D:FC:1E:EF:BC:20:4D:05
X509v3 Authority Key Identifier:
keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:100::/40
Signature Algorithm: sha256WithRSAEncryption
27:19:11:e4:ad:25:60:da:e4:00:56:55:20:4b:50:54:96:e2:
9d:46:10:05:35:75:c5:ea:3a:86:c1:6f:8b:7c:ac:7e:4d:08:
5b:71:08:d0:96:26:b2:37:0c:ae:0c:b1:90:1a:3c:c2:2e:f2:
91:5a:85:70:de:8e:33:a8:c0:18:85:2a:fe:a2:d3:cf:40:4e:
25:54:cd:44:8a:a3:24:af:e1:25:26:ae:cf:aa:26:9f:6f:0f:
17:52:f3:9f:ed:c6:be:60:a0:13:49:22:68:e2:31:59:b4:3e:
9c:25:0d:b4:23:ae:44:4b:d5:0e:70:80:0c:de:bb:ca:1e:78:
2f:aa:23:a5:23:66:9d:8e:09:d2:b6:3e:13:4e:4c:b9:9c:8a:
2d:d3:e4:50:8a:06:07:c8:8b:68:86:a1:19:5e:28:3f:f0:32:
fc:53:67:ad:f4:08:d4:6e:a6:49:69:29:19:a6:4e:ea:6c:de:
67:88:80:3e:9c:27:59:92:74:4b:74:42:eb:17:97:b4:b5:5e:
52:a9:0b:25:56:8d:28:5c:57:6f:e3:b9:b2:e1:86:24:27:14:
f4:ce:89:6f:34:95:a1:9f:d9:11:ab:e7:12:45:55:52:01:88:
32:89:3c:44:81:f3:ce:a4:f6:65:84:69:37:c6:9e:e8:a6:c4:
4f:6a:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:51 2026 by rpki-client