
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32353a3a2f34382d3438203d3e203131393637.roa
File: 326130623a346530373a32353a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier: zuSkGyOnJKX4f1z0AJOwwRYX12/W8EE5bKRMBC8oEr8=
Subject key identifier: 99:FB:03:E3:C4:25:41:57:EC:69:5D:C6:10:00:AB:D1:83:D4:48:1E
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 5543410C939425A126A2453FFD458E339178A10E
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32353a3a2f34382d3438203d3e203131393637.roa
Signing time: Wed 15 Oct 2025 20:44:43 +0000
ROA not before: Wed 15 Oct 2025 20:39:43 +0000
ROA not after: Wed 14 Oct 2026 20:44:43 +0000
asID: 11967
IP address blocks: 2a0b:4e07:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:43:41:0c:93:94:25:a1:26:a2:45:3f:fd:45:8e:33:91:78:a1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Oct 15 20:39:43 2025 GMT
Not After : Oct 14 20:44:43 2026 GMT
Subject: CN=99FB03E3C4254157EC695DC61000ABD183D4481E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:a9:c7:1d:d8:45:ed:b0:8b:9f:0f:70:fb:
92:2b:53:96:69:9b:09:86:d7:66:1e:ba:42:34:c7:
17:b6:b6:86:3a:da:84:fc:3e:e6:af:80:1e:8b:f4:
72:86:42:13:cc:20:8d:05:ce:a2:64:6e:05:72:33:
b1:d9:10:29:43:27:67:4b:ce:76:d6:83:77:a6:f5:
90:b3:1d:51:52:e9:9a:d6:3e:1b:0f:23:7f:03:62:
a1:82:dc:67:85:bd:b5:e1:ed:df:3e:62:ff:b4:43:
9d:e1:80:a1:5b:f4:f1:f1:eb:f5:1a:0e:48:97:b6:
43:bb:d2:c0:18:27:d2:13:f5:bc:1f:97:72:0e:54:
ec:ed:da:41:c7:ec:f7:b9:c6:36:20:5e:2e:8d:f2:
04:e5:b4:da:89:21:03:bb:be:80:b9:e1:a2:5b:67:
45:e0:24:1b:70:bd:e9:32:22:47:2f:71:88:0a:15:
d2:c4:cf:f2:4c:d0:c0:0b:a5:9f:d0:d6:b2:a6:65:
b1:a7:33:a1:5f:88:6a:be:7b:f7:be:94:46:11:eb:
1b:9a:e5:c2:d7:a5:41:f7:40:52:f2:e2:4b:ad:52:
0a:3d:b2:49:91:e4:35:45:4e:d7:d0:9f:2c:bc:e6:
f3:b3:98:a7:11:b2:78:ad:c4:8d:96:f0:bb:1b:26:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:03:E3:C4:25:41:57:EC:69:5D:C6:10:00:AB:D1:83:D4:48:1E
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32353a3a2f34382d3438203d3e203131393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:25::/48
Signature Algorithm: sha256WithRSAEncryption
11:60:11:f4:49:a4:d6:ad:15:aa:48:bf:eb:24:84:43:5d:10:
b5:ca:bf:a5:46:24:c4:51:0d:61:fe:51:75:57:4f:9b:25:c9:
8c:df:27:43:f9:27:19:de:de:49:c9:92:eb:eb:d0:ad:78:20:
53:12:6e:bf:8c:29:4e:1e:84:e2:16:e9:75:6c:91:58:f6:f5:
c5:d9:5a:22:75:5f:95:c3:95:b4:66:12:09:66:4c:c4:95:eb:
96:ef:cc:d4:ad:48:7f:44:8f:c5:f7:7c:e8:bc:42:18:f9:97:
a7:4e:f6:51:31:db:38:a0:81:bd:24:d8:e8:c2:8e:61:e4:12:
57:14:13:4f:2e:72:ec:1d:f2:aa:3b:d3:a8:64:88:89:a9:38:
f8:a3:56:97:b9:7f:0a:83:46:7f:6c:ff:5e:94:34:b5:d0:54:
21:77:b5:29:ba:30:96:23:67:de:1f:34:b8:8c:12:6e:7f:0e:
e3:11:38:12:63:52:b1:ff:76:fc:f2:7b:71:8b:43:4a:f2:9f:
73:b8:6c:bb:84:87:55:59:f4:ad:75:a4:fd:74:a9:20:2e:a4:
21:0e:cb:2d:12:70:82:8b:14:a0:dc:0d:5c:87:f6:b1:63:a6:
f2:3c:01:80:e8:06:f2:7b:81:2f:a6:53:72:7b:3e:f1:a6:9c:
d0:10:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:10 2025 by rpki-client