
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier: 7ABUd2taHG8932lIWK0dScnix4cE5RbXgmShCF8u5E0=
Subject key identifier: E6:8B:28:DF:BC:40:93:02:2A:E7:24:F1:23:9F:C1:F1:DA:64:37:A4
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 1500A908BA14FC7AB8831A19D4CEA91AA79EE3F5
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
Signing time: Fri 04 Jul 2025 09:21:13 +0000
ROA not before: Fri 04 Jul 2025 09:16:13 +0000
ROA not after: Fri 03 Jul 2026 09:21:13 +0000
asID: 203619
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:00:a9:08:ba:14:fc:7a:b8:83:1a:19:d4:ce:a9:1a:a7:9e:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jul 4 09:16:13 2025 GMT
Not After : Jul 3 09:21:13 2026 GMT
Subject: CN=E68B28DFBC4093022AE724F1239FC1F1DA6437A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:1a:d8:e3:ab:ea:a7:d8:78:98:36:22:a7:
ae:5a:d1:be:e6:ff:8c:1c:43:84:e0:7c:d2:92:08:
8d:de:1e:ed:f4:63:0f:e5:c7:23:66:41:0d:60:ed:
69:90:e3:4a:0b:6a:04:d7:32:43:04:63:ef:8f:87:
a2:55:69:c2:e0:3e:ca:08:f0:84:08:02:31:a4:07:
25:33:d7:79:2d:17:e4:c5:5b:d3:ac:78:11:5a:34:
77:83:72:eb:12:92:98:cc:87:d0:01:8c:e9:0b:7f:
05:29:7a:a6:ca:87:c9:39:13:b8:96:df:f9:83:32:
71:75:2f:2c:c1:ec:af:19:19:9c:15:a5:18:37:17:
24:3c:e9:e6:b8:ab:44:68:a4:d4:f0:10:98:16:5f:
04:29:9b:fd:1c:7d:84:78:0a:b1:58:85:52:31:85:
17:c7:7f:af:ed:00:c3:31:c7:08:8a:d9:57:a4:41:
7c:43:40:9b:3b:5a:c0:bf:6a:b5:ba:0a:1a:ed:b2:
74:5d:7a:cc:42:15:84:bc:26:f2:ce:e5:03:6d:a1:
58:7b:16:dc:8a:71:35:e7:c3:3b:65:88:c1:ca:22:
13:df:b4:6b:df:27:3e:a6:41:52:f6:de:c5:56:3f:
df:1a:35:b9:ad:40:45:92:b2:ba:04:4a:b6:c7:aa:
3e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8B:28:DF:BC:40:93:02:2A:E7:24:F1:23:9F:C1:F1:DA:64:37:A4
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
b5:a8:2f:81:37:d1:0c:e7:99:37:ba:d1:b5:62:48:03:fb:d3:
ee:bc:8c:ed:cc:e7:47:b8:41:92:c1:31:9c:6b:e5:48:66:3d:
6e:a8:41:48:4b:c1:50:5c:35:38:00:36:ef:35:77:5f:cf:b1:
e1:3b:97:90:13:6c:f0:a8:7e:1c:4b:7e:df:07:09:cd:1b:c1:
78:f5:86:74:aa:3f:47:b5:1a:0c:2d:0e:99:18:4e:11:86:f0:
60:a5:8b:0f:7e:85:7a:e7:49:9a:18:af:18:c7:74:be:38:a8:
d8:8b:85:d5:2f:4f:e7:e7:c9:16:cd:0c:6e:4a:c2:67:8c:bd:
49:0e:bc:bc:36:47:24:95:29:1b:27:50:c7:c7:78:2d:12:de:
70:d8:17:70:91:91:65:f3:32:dd:eb:60:21:51:58:88:f8:98:
6b:ee:2f:7f:fc:4b:cb:5a:79:9e:4c:da:6d:b9:5d:cb:69:66:
de:e1:f6:be:6b:90:18:32:e3:48:90:30:c8:8a:84:a0:5e:d4:
5a:cf:6f:4d:f2:23:c7:09:ef:c7:5f:1c:9e:cb:dc:fd:b3:d0:
28:4a:fc:96:96:62:f9:f2:6e:97:3c:cb:e3:87:a2:00:12:1b:
43:b3:0b:7e:df:b7:5a:59:9d:56:6c:17:29:3f:1e:14:83:25:
bd:ff:8c:41
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFQCpCLoU/Hq4gxoZ1M6pGqee4/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNTA3MDQwOTE2MTNaFw0yNjA3MDMwOTIxMTNaMDMxMTAvBgNV
BAMTKEU2OEIyOERGQkM0MDkzMDIyQUU3MjRGMTIzOUZDMUYxREE2NDM3QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEhrY46vqp9h4mDYip65a0b7m
/4wcQ4TgfNKSCI3eHu30Yw/lxyNmQQ1g7WmQ40oLagTXMkMEY++Ph6JVacLgPsoI
8IQIAjGkByUz13ktF+TFW9OseBFaNHeDcusSkpjMh9ABjOkLfwUpeqbKh8k5E7iW
3/mDMnF1LyzB7K8ZGZwVpRg3FyQ86ea4q0RopNTwEJgWXwQpm/0cfYR4CrFYhVIx
hRfHf6/tAMMxxwiK2VekQXxDQJs7WsC/arW6ChrtsnRdesxCFYS8JvLO5QNtoVh7
FtyKcTXnwztliMHKIhPftGvfJz6mQVL23sVWP98aNbmtQEWSsroESrbHqj7nAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU5oso37xAkwIq5yTxI5/B8dpkN6QwHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMDMzMzYzMTM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQC1qC+BN9EM55k3utG1YkgD+9PuvIztzOdHuEGS
wTGca+VIZj1uqEFIS8FQXDU4ADbvNXdfz7HhO5eQE2zwqH4cS37fBwnNG8F49YZ0
qj9HtRoMLQ6ZGE4RhvBgpYsPfoV650maGK8Yx3S+OKjYi4XVL0/n58kWzQxuSsJn
jL1JDry8NkcklSkbJ1DHx3gtEt5w2BdwkZFl8zLd62AhUViI+Jhr7i9//EvLWnme
TNptuV3LaWbe4fa+a5AYMuNIkDDIioSgXtRaz29N8iPHCe/HXxyey9z9s9AoSvyW
lmL58m6XPMvjh6IAEhtDswt+37daWZ1WbBcpPx4UgyW9/4xB
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:33 2025 by rpki-client