
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa
File: 323630343a6361303a3a2f33322d3332203d3e20343031363832.roa (raw, json)
Hash identifier: wbY0gXNIT3xBuXxj5yTdAq9M36LwjxOPQCuisBPOa+c=
Subject key identifier: FF:88:0C:00:CD:CF:91:F9:DC:D3:E0:CD:AF:10:E8:D7:0E:49:1E:F0
Certificate issuer: /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial: 4D683CC71B602EA520A9D48B30D99816FCD157F6
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa
Signing time: Fri 01 May 2026 21:21:21 +0000
ROA not before: Fri 01 May 2026 21:16:21 +0000
ROA not after: Fri 30 Apr 2027 21:21:21 +0000
asID: 401682
IP address blocks: 2604:ca0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:68:3c:c7:1b:60:2e:a5:20:a9:d4:8b:30:d9:98:16:fc:d1:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Validity
Not Before: May 1 21:16:21 2026 GMT
Not After : Apr 30 21:21:21 2027 GMT
Subject: CN=FF880C00CDCF91F9DCD3E0CDAF10E8D70E491EF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:30:37:8e:8d:40:48:b4:36:ad:44:e6:fa:
18:69:23:46:29:39:9c:9d:9e:41:72:25:54:0a:0a:
0a:85:15:d7:a6:20:aa:74:86:fc:93:11:a2:ff:42:
08:2d:9b:7c:f5:d1:07:29:a3:4e:1c:75:9f:30:7f:
10:07:d2:c6:cd:d4:06:95:c6:23:12:88:7a:b8:4d:
a4:ca:1e:ce:d5:1f:12:5f:b8:4e:5e:dc:07:de:85:
d1:27:5d:ca:3a:8b:8a:d8:b0:4b:9d:fa:0a:7d:74:
97:ab:1e:b9:9d:61:d5:d0:cc:1b:79:eb:aa:d5:11:
24:b8:41:96:36:5b:8c:7e:55:bc:eb:7f:4f:8b:59:
f0:87:f6:54:6c:31:c4:54:35:90:60:cf:12:cb:30:
24:11:83:cc:32:a0:4e:5e:b0:c6:4f:b9:26:3c:6a:
47:83:3c:61:1e:c0:f8:a2:b9:3b:a7:0d:f9:5b:5d:
c0:30:e0:0b:2b:0f:69:2d:37:a4:30:66:7f:84:55:
4c:83:ac:86:e0:fd:cd:c8:c4:55:af:89:42:d7:fb:
6e:15:f6:0d:7d:d6:34:f5:be:f4:c4:4b:44:93:c1:
e8:a0:77:75:5a:aa:07:02:eb:57:87:18:8b:bb:27:
92:d0:65:71:84:8d:ff:c5:a3:7e:a6:b2:c7:55:f7:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:88:0C:00:CD:CF:91:F9:DC:D3:E0:CD:AF:10:E8:D7:0E:49:1E:F0
X509v3 Authority Key Identifier:
keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:84:1a:c1:95:4f:a4:0d:e0:85:23:07:25:55:e2:e1:81:07:
06:d5:30:fd:de:17:87:df:88:16:45:75:2b:b1:5e:97:cd:b6:
7f:1c:18:fc:76:26:49:67:e1:67:74:f0:a2:40:e5:f6:d8:6e:
92:5d:82:20:f0:12:19:ff:dd:18:cf:43:49:80:f8:e6:c8:98:
85:c9:00:b8:36:f9:86:3d:2b:15:2a:9a:74:8b:6d:25:9d:e8:
89:ad:40:bb:93:d5:c9:8d:01:6d:5f:ab:e2:ff:05:ae:c0:db:
d7:d5:e4:39:9e:bf:cf:89:d2:33:95:12:5d:f9:33:16:3f:b9:
7e:37:33:81:92:d5:2b:e5:2f:83:26:e4:4d:9f:86:73:bc:17:
d8:d5:9d:2f:54:da:30:26:ee:f7:68:24:dd:4d:d7:a6:ac:52:
0c:de:2a:7d:b7:fc:05:e4:0f:d2:8f:28:5e:1d:85:96:7e:70:
c7:25:94:29:8d:c4:50:7f:78:54:56:2e:1a:c5:a4:48:84:ea:
86:99:a2:28:7f:80:14:9d:2e:67:a2:b9:a3:bf:89:9e:35:30:
8b:42:a7:e1:f0:9f:c6:d5:28:1e:70:ba:7a:21:36:cd:94:ac:
cd:52:19:b3:79:66:b8:96:c2:f8:e6:90:17:0e:b3:0e:77:7a:
7b:c0:61:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:53 2026 by rpki-client