
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: LCd3FE7TANz2kkDJHSwapTUff4/CEpS8pVcZ/+mVAdE=
Subject key identifier: EA:1C:D9:45:AC:DF:B1:02:8C:A0:4B:FC:54:09:CB:BF:10:2D:6F:96
Certificate issuer: /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial: 71DADA118E325B06190103237FA96455D450E94C
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Fri 01 May 2026 21:21:19 +0000
ROA not before: Fri 01 May 2026 21:16:19 +0000
ROA not after: Fri 30 Apr 2027 21:21:19 +0000
asID: 401682
IP address blocks: 2604:ca0:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:da:da:11:8e:32:5b:06:19:01:03:23:7f:a9:64:55:d4:50:e9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Validity
Not Before: May 1 21:16:19 2026 GMT
Not After : Apr 30 21:21:19 2027 GMT
Subject: CN=EA1CD945ACDFB1028CA04BFC5409CBBF102D6F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:fa:b3:cc:61:cd:7e:db:67:46:c8:c1:dd:
f6:48:0c:2a:ed:b3:3f:29:f2:9c:11:80:b6:3a:9e:
e0:cb:96:17:0c:51:62:94:50:f4:9d:30:3a:3a:e0:
5b:8a:43:87:df:d4:75:05:68:89:32:a9:a5:3f:a7:
45:26:e5:0f:44:99:e3:63:a3:f5:d6:e8:e8:9c:55:
03:c2:2a:be:c6:36:19:e6:42:5c:5d:e2:f1:96:f0:
8a:38:b4:da:8f:55:eb:2c:d9:ba:ea:53:2c:9a:18:
e6:69:d0:71:c7:ed:c5:96:40:48:09:ad:3c:a0:1d:
df:29:6d:b2:cf:6d:4c:a7:20:50:59:ab:cf:38:c7:
10:3f:2e:59:d3:df:70:6f:6e:09:b5:5e:64:e7:61:
98:56:f1:66:2d:0d:bc:dd:41:b7:62:b6:f0:e2:bf:
51:56:05:b5:b0:b8:a7:44:49:6a:0c:9c:ab:67:ef:
b7:36:99:f6:cb:e6:50:9d:bb:08:9b:1c:d8:e9:7c:
14:4d:6e:5a:6e:a1:2c:45:6e:e8:c6:47:8f:49:a4:
6c:52:1c:1d:0d:b5:38:24:ad:00:9c:74:11:7f:81:
42:28:04:22:1e:bd:b1:ba:99:66:63:37:08:54:77:
8f:1f:d6:a1:9e:ef:f8:4d:c9:6e:d1:d9:29:64:39:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1C:D9:45:AC:DF:B1:02:8C:A0:4B:FC:54:09:CB:BF:10:2D:6F:96
X509v3 Authority Key Identifier:
keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:500::/40
Signature Algorithm: sha256WithRSAEncryption
8e:a8:21:99:4a:ec:0b:68:dc:33:de:54:64:b2:9a:fc:0c:59:
80:a5:d7:27:81:86:49:13:a4:2d:2e:db:7e:e7:8c:87:f2:d1:
fb:85:32:b2:84:a8:21:62:cd:13:15:25:93:c5:2d:2e:5a:b5:
d7:bb:bc:77:73:59:71:21:43:8b:bb:e7:f8:11:c5:52:a7:79:
2d:46:68:91:5a:24:5a:5e:78:19:ed:a6:09:c5:f1:7d:8e:1b:
a4:ac:18:dd:50:5d:36:8d:5c:4b:65:79:88:7b:7b:79:4b:f4:
8e:6e:86:c0:de:ee:d9:66:a6:25:57:d6:fe:68:d7:80:8f:a6:
0a:e6:82:e6:76:98:a3:52:7d:6e:d7:8c:ba:8b:2c:60:cf:c9:
0c:b4:9b:30:33:13:f1:35:e8:02:9f:52:c3:32:84:07:dd:a9:
8d:f2:2f:53:a3:4a:3b:f8:f5:11:53:43:64:ac:87:75:5d:ab:
7a:e2:69:ae:21:98:84:cf:be:d6:58:68:cf:b8:e1:ad:3f:93:
8d:7a:29:f0:77:2e:33:c4:df:f6:d4:5c:98:d1:51:2f:6a:70:
89:a3:af:9b:15:2c:a5:b7:4b:e6:e1:53:f5:15:82:92:1a:4c:
73:7a:5c:49:52:32:0c:e3:63:c2:81:b8:df:ff:e4:8c:90:04:
97:a1:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:54 2026 by rpki-client