
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier: 0nm82AHKgeNaH8gZFNO7SKfmfQxII8a9vCZMZP0aHKI=
Subject key identifier: B6:63:41:2D:D0:87:53:16:DB:AF:A5:1A:62:95:2A:A3:08:F2:A6:31
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 09D518E5B48C93520ECFD9E770F36343EBAF1606
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
Signing time: Fri 04 Jul 2025 09:21:14 +0000
ROA not before: Fri 04 Jul 2025 09:16:14 +0000
ROA not after: Fri 03 Jul 2026 09:21:14 +0000
asID: 60900
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d5:18:e5:b4:8c:93:52:0e:cf:d9:e7:70:f3:63:43:eb:af:16:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jul 4 09:16:14 2025 GMT
Not After : Jul 3 09:21:14 2026 GMT
Subject: CN=B663412DD0875316DBAFA51A62952AA308F2A631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:88:46:2d:2c:24:d0:7f:f2:62:28:7e:2d:
6a:f7:f8:6b:a2:cf:4b:72:40:ff:30:ce:20:f2:52:
a9:4f:af:44:95:bc:8e:17:e1:27:c9:1f:85:da:e6:
24:05:3a:28:ca:a9:02:6d:6c:9f:b3:98:65:23:7a:
d9:55:6f:36:27:de:34:32:ca:54:ac:f5:52:41:9a:
ed:1e:58:c1:6a:73:a1:2d:61:d0:03:6e:8a:15:eb:
44:09:d2:a0:3b:f9:3d:09:d6:f3:a3:ae:14:5b:60:
53:21:a7:3b:2c:b8:46:a7:8d:a8:13:71:c4:2e:44:
72:45:01:50:bb:e0:54:c2:d0:ad:be:18:ea:b9:67:
89:e6:3f:89:22:eb:88:eb:c9:34:59:2f:47:62:5a:
1b:6d:1a:94:a0:19:f2:8f:ac:67:ab:ec:7e:f2:b7:
90:45:f1:5f:ad:33:1a:2c:82:0e:18:9e:e3:ec:6d:
4f:d2:77:3a:e5:85:4b:36:9b:1a:f4:c7:d1:55:c4:
97:8a:35:dc:43:c3:82:e6:41:2b:83:60:ae:8f:a6:
0c:18:24:1b:22:c6:e9:c2:8c:71:0e:f3:89:a3:bd:
d7:07:d5:b8:3b:ee:89:92:7c:88:eb:df:72:3f:3b:
0d:35:bd:b5:c2:bd:a1:c7:88:e6:66:38:91:71:65:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:63:41:2D:D0:87:53:16:DB:AF:A5:1A:62:95:2A:A3:08:F2:A6:31
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
66:8a:42:e8:9a:9f:a7:51:c4:24:69:12:1c:b3:9b:b4:cb:93:
e6:d3:e4:dc:6c:02:e9:3b:9a:23:5e:03:01:57:e3:09:2a:69:
e7:19:45:8d:3a:e9:f4:14:75:17:d1:39:37:e7:21:ea:67:ee:
dd:72:f6:33:d8:96:8a:39:26:b4:f6:83:37:5a:71:40:cd:c4:
12:65:39:bd:81:62:3f:0e:91:a6:7a:17:c9:2b:4c:c7:18:c0:
bf:a9:e3:c3:05:9a:14:cc:ed:f6:4b:63:cf:35:c6:0c:c0:30:
5c:e9:94:15:52:f6:55:bc:71:d3:68:aa:f4:07:65:74:8c:d5:
cd:88:08:fe:89:00:79:0f:bb:21:52:17:ce:91:9d:7f:96:fa:
02:70:13:c6:d2:20:0f:90:6b:1f:bb:d3:46:d3:0b:79:8d:7c:
e3:35:b9:b0:32:44:40:5e:e8:9c:0a:05:52:60:db:c0:9e:e2:
a3:96:8b:3f:50:94:a6:ad:1c:75:df:29:4a:6c:23:e7:e6:b1:
89:10:1d:1f:12:7c:f4:3a:81:7e:75:cc:4e:8d:ea:86:3f:e3:
81:a7:d9:96:ec:19:d3:c9:4d:b3:9f:0c:a0:7c:68:2b:01:b9:
3f:a6:d8:87:0b:53:f7:2f:d3:f2:ed:cc:b2:c4:c5:62:54:22:
a7:d8:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:54:47 2025 by rpki-client