
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier: 8R2JcWoytSLEkAmJo/iEjnbb3JAgqvMX892011pEYDM=
Subject key identifier: 5E:38:6B:51:B2:E5:11:57:44:11:43:07:C1:7E:43:FC:A8:EF:EE:2A
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 75FF946B87EE9D686E2EABFF805F96425108E1E0
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
Signing time: Fri 05 Jun 2026 10:01:10 +0000
ROA not before: Fri 05 Jun 2026 09:56:10 +0000
ROA not after: Fri 04 Jun 2027 10:01:10 +0000
asID: 211380
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ff:94:6b:87:ee:9d:68:6e:2e:ab:ff:80:5f:96:42:51:08:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:10 2026 GMT
Not After : Jun 4 10:01:10 2027 GMT
Subject: CN=5E386B51B2E5115744114307C17E43FCA8EFEE2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:9d:c5:4a:5c:12:d6:69:7e:ef:8e:2c:c4:
ca:ca:6f:a5:a4:ba:a2:a9:ad:09:bd:89:b5:5a:58:
8a:e9:ee:80:66:db:bb:2b:67:7f:ba:6a:dd:8c:85:
64:b7:e6:22:60:6a:d2:1a:fa:ef:f9:5b:97:d7:bb:
c4:f1:c4:9e:ed:f0:f6:63:bc:37:86:04:2b:4e:76:
44:22:9e:a4:89:43:6d:2e:cb:44:9c:92:de:0e:a5:
26:7c:a9:e3:3f:35:8a:2d:07:f9:be:ff:8a:51:e0:
e2:84:80:d9:d4:50:1d:54:02:74:09:ef:72:87:a7:
42:d6:43:27:fa:94:ab:fb:ac:59:56:3d:0f:10:55:
1f:bb:cf:e2:5b:76:c5:3c:34:78:8c:8b:f3:38:eb:
5c:5e:19:bc:da:a2:1d:46:72:db:8f:dc:4a:90:b0:
bc:02:24:45:6e:2a:14:1c:ab:d8:0c:9f:e8:fa:6d:
65:f5:25:4b:39:5d:54:12:79:33:dd:2f:2e:91:5f:
5d:a9:52:88:52:cd:49:1c:c6:ae:31:3e:f2:a6:f9:
c7:c5:ca:6c:b2:26:01:1e:34:35:cf:8b:6c:46:3b:
8a:4b:48:bc:d8:ea:dd:e1:9c:46:0b:e1:07:99:43:
99:f1:06:a1:dc:a5:a4:0a:93:4b:14:1a:f9:1b:f3:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:6B:51:B2:E5:11:57:44:11:43:07:C1:7E:43:FC:A8:EF:EE:2A
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
31:61:9e:ec:81:5d:2e:40:44:89:68:6d:ad:60:74:94:b3:bd:
69:5a:51:c4:23:46:ea:70:b8:ac:91:05:61:19:34:8f:93:fa:
e6:a4:80:65:63:84:42:ad:20:7e:b9:cd:1e:4f:c6:b6:fd:41:
2c:f0:a9:e2:09:f7:07:6e:36:79:2a:e3:fd:ea:cf:17:3a:2f:
e2:ef:e7:79:08:90:3e:c8:5b:4a:95:e8:39:bb:4f:86:b6:2a:
6f:10:ce:58:5c:bb:8d:9b:1a:33:00:c1:90:86:e0:5c:d2:b2:
52:a6:37:e0:4b:17:b8:8d:57:14:b1:8b:29:62:bb:f0:d5:a4:
3d:c9:09:54:3c:ea:1b:f6:3e:9a:bf:7f:5e:0c:79:17:ff:b7:
ff:18:57:8b:91:a6:a1:1a:c3:c3:4a:96:d6:30:b0:fd:23:42:
26:68:75:8b:90:4b:d3:36:e6:0d:df:6c:33:fc:4a:69:22:25:
2d:b1:a9:64:49:23:62:f9:eb:d8:32:ac:fc:d3:90:23:95:66:
dd:6e:90:95:ee:7d:f1:47:da:67:26:0b:40:94:c2:46:8d:8e:
88:60:ea:ec:c7:0d:71:92:b7:9a:9b:99:b1:f6:b8:de:24:fb:
6b:6c:f5:06:0c:5e:e5:ba:9e:c9:3b:30:02:84:c8:e8:af:22:
c2:fa:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:47:06 2026 by rpki-client