
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (raw, json)
Hash identifier: IqrBLwaB6Ud6y8cUbAdAosH8szEn0KkX5WONAY4aEDc=
Subject key identifier: D0:42:E8:D9:14:F1:D1:25:ED:31:4D:A4:E7:0E:A2:F5:84:6B:C9:AC
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 4272B206A21ECF7CE690FB61AC366DD3D48D3A62
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
Signing time: Fri 04 Jul 2025 09:21:14 +0000
ROA not before: Fri 04 Jul 2025 09:16:14 +0000
ROA not after: Fri 03 Jul 2026 09:21:14 +0000
asID: 59993
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:72:b2:06:a2:1e:cf:7c:e6:90:fb:61:ac:36:6d:d3:d4:8d:3a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jul 4 09:16:14 2025 GMT
Not After : Jul 3 09:21:14 2026 GMT
Subject: CN=D042E8D914F1D125ED314DA4E70EA2F5846BC9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:8a:6a:74:a2:d5:7a:8c:6e:27:38:1a:83:
56:40:f6:8c:8b:72:f8:e7:e3:b2:47:b6:3e:33:b1:
8a:68:b8:25:19:94:c1:f1:84:f0:e4:26:b6:94:54:
77:6a:57:2b:1c:a4:3a:72:ba:bf:25:29:49:ed:ea:
2e:9f:14:85:70:e6:f1:5e:8f:9b:33:8d:cb:65:5f:
85:fb:ae:c0:43:c4:63:cd:09:97:2e:c0:50:b2:5d:
20:5f:26:69:e1:9d:f0:5c:3c:8b:d8:0e:90:db:f9:
88:5b:c3:f6:2e:32:b0:2b:61:c4:f6:9e:ce:4d:aa:
e8:3e:65:9b:7d:f3:0e:0b:00:79:ab:04:d8:b8:88:
8f:6b:86:1a:69:1e:a6:50:7e:a2:26:7c:c2:4c:f4:
d8:3c:4b:17:88:ea:15:9e:4a:fb:22:04:39:2d:8a:
8b:b5:91:82:b6:e0:f9:1a:9e:67:45:26:84:03:20:
6c:f2:d1:6d:73:c9:ed:57:eb:8a:b5:03:14:0e:ca:
68:71:7f:c3:85:74:0c:92:c5:70:56:46:ca:54:57:
53:2a:29:64:b7:7f:68:fd:c7:1b:c1:e5:f0:a1:52:
bd:69:1e:c7:f9:0e:0a:56:66:8c:01:b2:86:87:13:
13:90:1e:bc:25:17:35:cd:39:9c:32:f0:ad:6c:2e:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:42:E8:D9:14:F1:D1:25:ED:31:4D:A4:E7:0E:A2:F5:84:6B:C9:AC
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
09:fd:57:34:29:ab:2b:0b:04:5c:70:ff:dc:ea:76:18:d5:c1:
82:9f:22:17:10:57:72:af:24:8a:aa:a1:16:b6:00:b7:69:c5:
53:f8:be:45:6e:a2:74:63:ff:71:bb:db:02:f8:0b:28:d9:0c:
95:64:a8:77:3a:31:2e:f2:5f:be:16:89:ac:f1:e9:f2:5a:42:
0e:44:1d:f6:dd:64:4c:3c:9f:d6:2d:63:d6:d5:c4:ee:63:f2:
76:f6:48:0f:1c:6c:d1:a7:94:fa:e2:58:33:8d:3a:17:31:21:
ed:f4:4b:b3:7d:b6:7c:82:da:1b:24:5c:f6:bd:07:ba:d9:d0:
40:62:d5:2d:4a:a4:ae:bf:24:6c:fb:18:a7:2d:3e:9a:20:10:
12:ae:cf:81:ce:09:c9:5f:0b:78:15:79:cf:d9:f1:9a:7c:eb:
87:9c:f1:ee:13:6c:72:94:c2:61:ae:1b:4a:fc:4a:5a:2e:a1:
df:02:ca:e8:48:bd:b6:19:63:fb:8c:98:43:15:96:f9:1f:26:
f5:2d:5c:f7:70:47:02:6d:71:75:3b:ae:89:de:70:d0:24:cc:
5c:3e:f2:fe:15:a1:70:11:7d:bb:43:3e:99:20:e0:50:3e:f6:
35:67:fe:af:43:be:6e:42:0a:aa:74:ce:cd:84:a8:2d:08:6d:
9f:b9:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:27 2025 by rpki-client