$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3130303a3a2f34302d3430203d3e20313439303230.roa File: 326130623a346530373a3130303a3a2f34302d3430203d3e20313439303230.roa (raw, json) Hash identifier: AMPNmhVdMsJztqItYy+nXqT1u4T+u2w/uNP1uNP32fc= Subject key identifier: 0F:B7:71:E1:6F:5B:C1:C8:83:A5:4F:5A:2B:27:65:51:C9:F7:57:36 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 62AE9A6EF378787F5FA6EE15E3F99D67C86FE347 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3130303a3a2f34302d3430203d3e20313439303230.roa Signing time: Fri 13 Mar 2026 19:36:57 +0000 ROA not before: Fri 13 Mar 2026 19:31:57 +0000 ROA not after: Fri 12 Mar 2027 19:36:57 +0000 asID: 149020 IP address blocks: 2a0b:4e07:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 07:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ae:9a:6e:f3:78:78:7f:5f:a6:ee:15:e3:f9:9d:67:c8:6f:e3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Mar 13 19:31:57 2026 GMT Not After : Mar 12 19:36:57 2027 GMT Subject: CN=0FB771E16F5BC1C883A54F5A2B276551C9F75736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:24:30:44:71:fc:bc:ea:4c:91:9b:11:c9: fe:df:8a:50:fa:f6:73:57:c9:2f:e7:e8:03:0c:a0: 48:de:52:18:50:d3:18:2d:fa:58:53:61:63:f2:b4: b3:2a:46:fc:08:a7:da:51:dd:e4:9f:77:ea:84:b1: eb:2d:c7:c2:cf:b8:ca:6b:da:1f:48:91:de:68:1b: 42:2a:32:ce:ab:aa:84:b6:55:05:a6:5f:3c:92:63: d4:40:f1:16:dd:89:09:75:51:b9:19:59:89:bb:29: 1c:5d:85:a0:a6:2d:d1:8a:46:b6:ff:70:77:47:36: bb:1e:9d:41:d2:39:6b:11:43:6a:8b:88:07:71:97: 99:17:7c:ee:c6:a9:ea:29:51:4f:1c:51:ea:0c:87: 54:77:f0:4d:f9:e0:d8:9f:65:e8:cf:0f:4a:3c:d6: 69:53:79:1b:82:d2:f7:06:6b:d4:cb:c9:3b:2e:5c: f5:ed:b8:be:0b:59:23:73:d5:a2:c5:c4:9c:30:e5: 23:6c:5b:3f:f5:c0:90:64:60:fe:ef:a1:c2:7a:29: 4c:67:1e:34:bf:46:85:b6:99:89:13:90:1d:82:ce: e6:dd:15:2d:5b:3e:5a:b2:d7:f4:4f:95:9e:ce:50: b2:e8:ce:9a:56:99:f9:3e:7d:58:43:f9:0d:15:6c: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B7:71:E1:6F:5B:C1:C8:83:A5:4F:5A:2B:27:65:51:C9:F7:57:36 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3130303a3a2f34302d3430203d3e20313439303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:100::/40 Signature Algorithm: sha256WithRSAEncryption 9c:0f:e3:8a:5f:01:26:bc:0f:c6:b1:68:f2:eb:a9:d6:ca:10: 3e:eb:c6:52:11:f2:66:b5:cd:a2:8e:ed:2f:ed:82:1c:88:6d: bf:57:4d:48:33:06:62:c5:fe:af:b4:e1:a5:bd:aa:6f:a7:2b: 28:a2:0a:85:09:5b:ac:77:7d:13:95:67:ec:d4:b6:4d:35:77: dd:ff:ce:b0:2f:6e:1a:56:6b:c2:06:94:d2:94:76:6f:6f:1d: 98:f3:6b:e2:1c:36:64:81:e1:ee:3b:54:15:fc:71:58:d7:17: 53:0e:77:85:5a:ee:b8:1a:f3:bf:bd:49:3a:6a:49:0e:6a:06: 67:ec:5e:7c:71:6e:6b:a1:e1:dd:b5:3f:53:e1:88:93:28:78: 09:7a:80:b9:4f:fa:14:95:54:4b:80:22:fb:f2:2a:a1:a4:2d: b3:df:31:33:b5:d4:01:fd:6e:ca:71:7a:49:ef:27:93:89:e7: 47:7f:c0:fb:5f:1d:1b:29:ab:7c:cf:74:a6:8b:07:58:cc:4f: e2:fa:22:a3:89:93:1f:c8:76:3a:b6:e4:21:d3:43:4f:40:23: 09:26:9c:1f:f5:76:26:91:50:98:9e:92:da:f8:d9:4c:52:3e: 3d:bb:da:d1:d9:07:b8:9d:70:dc:d3:ef:d8:40:0e:b8:0e:93: 4d:e0:62:d4 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUYq6abvN4eH9fpu4V4/mdZ8hv40cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAzMTMxOTMxNTdaFw0yNzAzMTIxOTM2NTdaMDMxMTAvBgNV BAMTKDBGQjc3MUUxNkY1QkMxQzg4M0E1NEY1QTJCMjc2NTUxQzlGNzU3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgyQwRHH8vOpMkZsRyf7filD6 9nNXyS/n6AMMoEjeUhhQ0xgt+lhTYWPytLMqRvwIp9pR3eSfd+qEsestx8LPuMpr 2h9Ikd5oG0IqMs6rqoS2VQWmXzySY9RA8RbdiQl1UbkZWYm7KRxdhaCmLdGKRrb/ cHdHNrsenUHSOWsRQ2qLiAdxl5kXfO7GqeopUU8cUeoMh1R38E354NifZejPD0o8 1mlTeRuC0vcGa9TLyTsuXPXtuL4LWSNz1aLFxJww5SNsWz/1wJBkYP7vocJ6KUxn HjS/RoW2mYkTkB2CzubdFS1bPlqy1/RPlZ7OULLozppWmfk+fVhD+Q0VbNLPAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUD7dx4W9bwciDpU9aKydlUcn3VzYwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMxMzAzMDNhM2EyZjM0 MzAyZDM0MzAyMDNkM2UyMDMxMzQzOTMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoLTgcBMA0G CSqGSIb3DQEBCwUAA4IBAQCcD+OKXwEmvA/GsWjy66nWyhA+68ZSEfJmtc2iju0v 7YIciG2/V01IMwZixf6vtOGlvapvpysoogqFCVusd30TlWfs1LZNNXfd/86wL24a VmvCBpTSlHZvbx2Y82viHDZkgeHuO1QV/HFY1xdTDneFWu64GvO/vUk6akkOagZn 7F58cW5roeHdtT9T4YiTKHgJeoC5T/oUlVRLgCL78iqhpC2z3zEztdQB/W7KcXpJ 7yeTiedHf8D7Xx0bKat8z3SmiwdYzE/i+iKjiZMfyHY6tuQh00NPQCMJJpwf9XYm kVCYnpLa+NlMUj49u9rR2Qe4nXDc0+/YQA64DpNN4GLU -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:27 2026 by rpki-client