
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: gqlVD7DVyIKMNeFBL4WRdgPF0KLqOWUzX3ICdIOWXEc=
Subject key identifier: C6:73:CB:FF:23:93:05:9B:9E:DE:1C:8A:31:B8:AB:F7:78:EA:B3:EE
Certificate issuer: /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial: 41A4F56FD51F9ED40327F6AE5EDFE4F32734F73B
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Fri 01 May 2026 21:21:20 +0000
ROA not before: Fri 01 May 2026 21:16:20 +0000
ROA not after: Fri 30 Apr 2027 21:21:20 +0000
asID: 401682
IP address blocks: 2604:ca0:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a4:f5:6f:d5:1f:9e:d4:03:27:f6:ae:5e:df:e4:f3:27:34:f7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Validity
Not Before: May 1 21:16:20 2026 GMT
Not After : Apr 30 21:21:20 2027 GMT
Subject: CN=C673CBFF2393059B9EDE1C8A31B8ABF778EAB3EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:9a:23:ac:aa:aa:7c:a0:fe:12:11:5a:48:
b0:41:db:90:45:46:bc:75:3c:17:ba:1b:47:9b:46:
e8:6d:72:7c:be:5a:1a:5d:b2:8a:49:71:6d:f3:88:
26:c9:8d:80:d4:11:d1:14:49:81:c0:26:44:dc:1e:
b4:74:37:2f:d0:2a:b5:24:fa:72:5c:55:06:e5:95:
52:0f:61:eb:2a:44:43:d5:bc:56:61:cf:f2:29:80:
a2:a7:9b:90:c2:83:eb:68:d9:57:03:f0:96:78:1d:
a1:42:33:a8:88:dd:58:4f:3c:cf:49:58:0c:31:60:
90:34:49:d7:27:4e:22:4c:58:f1:42:fa:73:fe:a1:
00:ae:df:21:82:66:1d:56:ae:00:f3:5e:99:40:db:
83:39:33:48:f9:65:ff:50:e9:f7:84:fe:f7:89:f8:
55:6d:bd:af:e7:6f:95:b8:a1:1b:f7:14:df:1c:7d:
3f:ce:6e:32:1d:80:b1:80:cb:69:38:23:2b:38:e9:
d0:72:9e:20:96:18:43:64:99:83:fa:cb:44:32:fb:
f8:e2:6e:e0:1e:b1:50:15:e0:be:89:94:d9:23:87:
ec:73:3f:4f:a9:55:73:a2:c8:ec:c2:0d:59:29:23:
6e:a2:48:73:5d:d4:22:29:bb:92:92:41:d4:0d:b4:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:CB:FF:23:93:05:9B:9E:DE:1C:8A:31:B8:AB:F7:78:EA:B3:EE
X509v3 Authority Key Identifier:
keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:900::/40
Signature Algorithm: sha256WithRSAEncryption
25:08:b4:aa:fa:af:b8:e5:1c:40:6e:ac:fd:95:6d:61:66:ae:
14:31:50:42:88:31:0a:90:2a:e1:ea:cd:66:04:9e:3d:7b:b4:
31:b3:46:86:d8:03:1d:93:e8:99:fe:e8:e9:e7:5a:5d:77:d1:
2e:11:b5:73:e4:8f:4c:40:a5:ef:c3:ac:df:8b:37:54:3b:2d:
5a:d3:47:c2:ef:b4:9d:29:9b:e0:23:15:05:02:99:b0:47:50:
7f:51:51:b1:f4:81:60:b3:23:f7:8d:4b:60:8e:96:d5:72:ff:
2d:8f:9e:1d:05:6b:8c:49:bc:9b:2a:d2:7e:f2:65:94:c8:6f:
57:1d:1c:a1:bb:8f:77:bb:a7:0a:97:4e:23:9c:0f:35:24:61:
a0:1a:1a:57:bd:e4:ef:fe:50:f3:e8:25:34:64:06:95:a5:5c:
9c:6c:69:32:33:7d:0e:17:f9:fd:d9:c8:06:26:37:67:41:ea:
b5:11:cb:5a:70:82:98:0b:07:07:fe:75:64:b3:ea:fc:1f:61:
6f:91:32:37:ac:0d:34:1a:9d:cb:fa:1d:d2:00:18:5b:24:db:
38:7b:e0:04:5f:37:b2:4b:e8:7f:bd:d9:e7:98:a8:6e:53:0f:
e1:55:b8:5f:c0:00:7f:06:12:e6:d4:25:40:5a:8d:6d:7b:d4:
50:00:c9:c1
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUQaT1b9UfntQDJ/auXt/k8yc09zswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll
NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjYwNTAxMjExNjIwWhcNMjcwNDMwMjEyMTIw
WjAzMTEwLwYDVQQDEyhDNjczQ0JGRjIzOTMwNTlCOUVERTFDOEEzMUI4QUJGNzc4
RUFCM0VFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgKaI6yqqnyg
/hIRWkiwQduQRUa8dTwXuhtHm0bobXJ8vloaXbKKSXFt84gmyY2A1BHRFEmBwCZE
3B60dDcv0Cq1JPpyXFUG5ZVSD2HrKkRD1bxWYc/yKYCip5uQwoPraNlXA/CWeB2h
QjOoiN1YTzzPSVgMMWCQNEnXJ04iTFjxQvpz/qEArt8hgmYdVq4A816ZQNuDOTNI
+WX/UOn3hP73ifhVbb2v52+VuKEb9xTfHH0/zm4yHYCxgMtpOCMrOOnQcp4glhhD
ZJmD+stEMvv44m7gHrFQFeC+iZTZI4fscz9PqVVzosjswg1ZKSNuokhzXdQiKbuS
kkHUDbSQpQIDAQABo4ICujCCArYwHQYDVR0OBBYEFMZzy/8jkwWbnt4cijG4q/d4
6rPuMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv
N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTM5MzAzMDNhM2EyZjM0MzAy
ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAJMA0GCSqG
SIb3DQEBCwUAA4IBAQAlCLSq+q+45RxAbqz9lW1hZq4UMVBCiDEKkCrh6s1mBJ49
e7Qxs0aG2AMdk+iZ/ujp51pdd9EuEbVz5I9MQKXvw6zfizdUOy1a00fC77SdKZvg
IxUFApmwR1B/UVGx9IFgsyP3jUtgjpbVcv8tj54dBWuMSbybKtJ+8mWUyG9XHRyh
u493u6cKl04jnA81JGGgGhpXveTv/lDz6CU0ZAaVpVycbGkyM30OF/n92cgGJjdn
Qeq1EctacIKYCwcH/nVks+r8H2FvkTI3rA00Gp3L+h3SABhbJNs4e+AEXzeyS+h/
vdnnmKhuUw/hVbhfwAB/BhLm1CVAWo1te9RQAMnB
-----END CERTIFICATE-----
Generated at Wed May 13 04:07:51 2026 by rpki-client