
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier: RGY238ItPF6MbTAIz/6smYWJWxRauaXh4en1QUpHZts=
Subject key identifier: 43:AF:75:0F:1A:7B:08:B3:B2:A9:E1:43:71:0C:38:45:37:FE:1A:00
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 34F73535D96A31EFF85FAA5C1C72162683F4A0D9
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
Signing time: Fri 04 Jul 2025 09:21:13 +0000
ROA not before: Fri 04 Jul 2025 09:16:13 +0000
ROA not after: Fri 03 Jul 2026 09:21:13 +0000
asID: 57870
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f7:35:35:d9:6a:31:ef:f8:5f:aa:5c:1c:72:16:26:83:f4:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jul 4 09:16:13 2025 GMT
Not After : Jul 3 09:21:13 2026 GMT
Subject: CN=43AF750F1A7B08B3B2A9E143710C384537FE1A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:aa:1b:31:68:39:42:c3:8e:33:a0:0c:97:
1d:b5:9b:c0:18:0c:5b:b2:c1:06:f4:f0:40:d0:4f:
b7:f3:d2:3f:95:e7:49:51:37:bd:77:6e:d2:2f:ab:
c5:cf:72:64:af:28:c1:40:3f:6a:82:6b:89:f8:86:
18:97:3c:b6:fc:28:96:43:4a:4e:f7:98:c8:74:f2:
b5:bd:bf:0c:d1:be:34:b9:6e:e8:d2:e4:00:14:df:
cb:9b:95:55:87:8f:58:31:6b:08:7b:a5:fa:a1:56:
40:a0:ef:c9:fa:fe:1a:5c:1e:2d:0c:42:b0:36:dc:
93:38:25:90:cc:e0:15:c7:dc:75:27:dd:8c:bd:13:
78:fc:fe:52:cc:9c:6c:77:14:51:5f:89:87:02:bb:
50:06:9a:90:f4:9f:ad:8b:bb:28:3b:77:b9:89:80:
f0:d4:78:a7:2e:34:31:39:f0:b9:0f:16:8e:ad:76:
f5:e9:5d:1d:e2:02:48:76:4f:0f:55:61:17:64:ad:
86:f1:fd:aa:90:2e:02:50:2f:20:9e:98:7b:6b:8f:
56:8c:8a:71:b2:be:e0:12:f3:9a:ca:4f:dd:c3:15:
7f:76:b1:7e:c4:39:4a:3e:e0:16:24:38:3a:15:f1:
72:0e:c4:67:d8:83:64:ef:17:b4:50:bb:aa:15:d3:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AF:75:0F:1A:7B:08:B3:B2:A9:E1:43:71:0C:38:45:37:FE:1A:00
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
48:77:8c:69:7a:22:b1:22:af:5e:bb:40:7e:8c:ed:59:fa:27:
e5:e0:af:3f:11:df:79:b4:33:19:cd:97:c6:d9:08:fc:7e:ca:
9d:fc:9f:85:26:8c:58:8e:95:73:86:f4:53:d4:30:64:81:7e:
1c:b7:be:d2:28:3c:95:42:71:3e:e0:b0:d7:21:3f:17:a9:c3:
94:e0:e9:19:cc:94:b1:a9:74:36:61:cf:e6:0f:1a:ad:15:3c:
89:a9:c2:50:aa:f1:1e:8c:6c:a8:e3:7e:b7:53:db:40:b1:7b:
15:af:c4:40:92:c6:12:d0:dc:80:08:cc:d1:02:17:1f:8c:39:
b8:80:a9:5f:8a:0f:bd:79:00:57:64:82:b2:42:10:47:e6:07:
9d:cb:52:f9:c7:00:8f:50:64:07:14:f7:53:9a:65:3f:0c:26:
46:31:64:71:00:49:8f:f8:1d:33:44:ee:7b:c6:7d:b0:0d:78:
b8:b9:ef:86:ff:3d:7b:9e:eb:e9:b5:1a:3a:53:02:49:f8:6d:
f3:64:c3:9e:dc:72:ff:ed:4c:54:8a:df:78:e1:dc:28:d8:b4:
98:7c:38:e9:59:aa:ce:18:3e:1a:0d:6a:39:82:48:33:75:da:
39:a9:3a:00:55:2d:20:ea:27:c8:98:db:3d:0c:b2:d4:74:9e:
32:a8:73:3e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNPc1NdlqMe/4X6pcHHIWJoP0oNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNTA3MDQwOTE2MTNaFw0yNjA3MDMwOTIxMTNaMDMxMTAvBgNV
BAMTKDQzQUY3NTBGMUE3QjA4QjNCMkE5RTE0MzcxMEMzODQ1MzdGRTFBMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsEqobMWg5QsOOM6AMlx21m8AY
DFuywQb08EDQT7fz0j+V50lRN713btIvq8XPcmSvKMFAP2qCa4n4hhiXPLb8KJZD
Sk73mMh08rW9vwzRvjS5bujS5AAU38ublVWHj1gxawh7pfqhVkCg78n6/hpcHi0M
QrA23JM4JZDM4BXH3HUn3Yy9E3j8/lLMnGx3FFFfiYcCu1AGmpD0n62Luyg7d7mJ
gPDUeKcuNDE58LkPFo6tdvXpXR3iAkh2Tw9VYRdkrYbx/aqQLgJQLyCemHtrj1aM
inGyvuAS85rKT93DFX92sX7EOUo+4BYkODoV8XIOxGfYg2TvF7RQu6oV06eRAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUQ691Dxp7CLOyqeFDcQw4RTf+GgAwHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzUzNzM4MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEASHeMaXoisSKvXrtAfoztWfon5eCvPxHfebQzGc2X
xtkI/H7KnfyfhSaMWI6Vc4b0U9QwZIF+HLe+0ig8lUJxPuCw1yE/F6nDlODpGcyU
sal0NmHP5g8arRU8ianCUKrxHoxsqON+t1PbQLF7Fa/EQJLGEtDcgAjM0QIXH4w5
uICpX4oPvXkAV2SCskIQR+YHnctS+ccAj1BkBxT3U5plPwwmRjFkcQBJj/gdM0Tu
e8Z9sA14uLnvhv89e57r6bUaOlMCSfht82TDntxy/+1MVIrfeOHcKNi0mHw46Vmq
zhg+Gg1qOYJIM3XaOak6AFUtIOonyJjbPQyy1HSeMqhzPg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:21:14 2025 by rpki-client