$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32383a3a2f34372d3438203d3e20323131323831.roa File: 326130623a346530373a32383a3a2f34372d3438203d3e20323131323831.roa (raw, json) Hash identifier: jhrkA6pLuMQXjzmqBa5Vz8qE1E9EINYhkL21aIgds0A= Subject key identifier: 0C:6C:D8:AC:CD:A5:BE:7C:56:FA:56:24:CC:06:00:D7:10:85:DB:56 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 61ABE6B0BE887E3272154D3BA5E93FF0FC469E73 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32383a3a2f34372d3438203d3e20323131323831.roa Signing time: Fri 12 Sep 2025 11:21:57 +0000 ROA not before: Fri 12 Sep 2025 11:16:57 +0000 ROA not after: Fri 11 Sep 2026 11:21:57 +0000 asID: 211281 IP address blocks: 2a0b:4e07:28::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 07:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ab:e6:b0:be:88:7e:32:72:15:4d:3b:a5:e9:3f:f0:fc:46:9e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Sep 12 11:16:57 2025 GMT Not After : Sep 11 11:21:57 2026 GMT Subject: CN=0C6CD8ACCDA5BE7C56FA5624CC0600D71085DB56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2f:36:7a:fc:dd:b8:a9:90:4c:b2:cc:f1:c9: c2:46:8f:08:85:ee:8f:50:fc:a3:04:fa:c4:56:b8: bd:c0:52:c1:b2:3f:0e:9c:6f:ad:b5:43:df:14:ec: 69:42:e2:55:c6:9c:ba:d4:2f:d5:2a:18:35:1f:8e: c1:4a:64:3d:5a:57:d4:36:17:31:3c:2c:9b:51:d7: 3e:7c:f4:60:66:0f:77:08:a6:41:07:f1:c9:a0:2c: aa:46:ca:03:d4:c1:a8:32:f8:c6:39:33:ba:4d:dc: e3:c6:9f:0b:92:f5:d8:03:2d:a4:9a:ae:58:05:8a: c2:41:a1:eb:8a:a8:97:fc:39:70:c2:53:0a:98:55: 61:21:32:1d:b2:f7:b4:08:ee:45:38:7f:38:8b:b6: 7e:98:6d:91:2f:7b:1e:2c:d8:48:68:25:77:d7:3a: 77:1f:95:16:97:ce:53:1c:85:6d:08:43:51:a8:de: c1:80:08:3b:b3:f7:97:ed:d8:61:45:44:2d:e7:f6: dd:74:cf:a5:52:56:81:5d:a2:93:0a:27:f7:0d:a4: e7:18:b5:6b:18:d0:d1:54:aa:51:6f:cc:cd:75:2e: c4:40:74:6c:0c:13:ae:84:11:04:0a:dd:73:65:b4: 06:3d:c3:19:db:b7:09:63:a2:e9:2f:24:e5:70:10: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6C:D8:AC:CD:A5:BE:7C:56:FA:56:24:CC:06:00:D7:10:85:DB:56 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32383a3a2f34372d3438203d3e20323131323831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:28::/47 Signature Algorithm: sha256WithRSAEncryption 28:33:40:2d:a2:0d:26:d0:8f:e7:9a:20:5c:6d:1d:02:26:6d: e2:20:5f:05:72:ae:cc:50:21:dd:19:64:72:85:d4:7e:b0:74: 95:19:61:0d:44:6e:ee:b2:aa:81:26:99:e2:e9:15:f7:77:e8: 81:82:d9:fa:4b:8a:52:ef:bb:73:72:10:39:77:76:fa:36:7d: cb:82:56:a8:28:11:9d:e9:3d:65:47:ac:7f:e5:03:07:84:3f: 42:5b:e9:a4:ab:d9:be:1b:0f:8b:7d:13:97:d7:f1:1a:e4:7c: b7:09:c2:5b:c1:7e:85:a4:36:56:b1:a2:e7:ff:75:6a:1f:3e: 5e:50:bd:2e:c1:dd:80:57:aa:41:8e:45:5e:f0:98:e5:65:17: e3:8c:d4:b8:25:a3:a4:54:83:ea:70:5d:51:ec:9c:7d:50:9c: ab:51:80:ba:ba:dd:e6:4a:f6:f0:fe:ec:eb:ba:32:a9:ec:6f: f0:02:fe:2c:c3:e3:eb:c5:be:0d:65:ea:97:f9:f6:1b:af:3e: 50:1c:7d:54:be:22:b0:fa:aa:47:21:0d:c0:aa:1c:f8:2c:44: b2:a8:18:09:56:1c:a2:80:6e:fb:bd:d1:5c:f7:5d:98:03:b2: 28:16:10:de:a5:26:f8:61:ca:4c:e0:86:5c:28:db:e4:90:d1: fc:49:4a:f6 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUYavmsL6IfjJyFU07pek/8PxGnnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA5MTIxMTE2NTdaFw0yNjA5MTExMTIxNTdaMDMxMTAvBgNV BAMTKDBDNkNEOEFDQ0RBNUJFN0M1NkZBNTYyNENDMDYwMEQ3MTA4NURCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTLzZ6/N24qZBMsszxycJGjwiF 7o9Q/KME+sRWuL3AUsGyPw6cb621Q98U7GlC4lXGnLrUL9UqGDUfjsFKZD1aV9Q2 FzE8LJtR1z589GBmD3cIpkEH8cmgLKpGygPUwagy+MY5M7pN3OPGnwuS9dgDLaSa rlgFisJBoeuKqJf8OXDCUwqYVWEhMh2y97QI7kU4fziLtn6YbZEvex4s2EhoJXfX OncflRaXzlMchW0IQ1Go3sGACDuz95ft2GFFRC3n9t10z6VSVoFdopMKJ/cNpOcY tWsY0NFUqlFvzM11LsRAdGwME66EEQQK3XNltAY9wxnbtwljoukvJOVwEDRTAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUDGzYrM2lvnxW+lYkzAYA1xCF21YwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMyMzgzYTNhMmYzNDM3 MmQzNDM4MjAzZDNlMjAzMjMxMzEzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEqC04HACgwDQYJ KoZIhvcNAQELBQADggEBACgzQC2iDSbQj+eaIFxtHQImbeIgXwVyrsxQId0ZZHKF 1H6wdJUZYQ1Ebu6yqoEmmeLpFfd36IGC2fpLilLvu3NyEDl3dvo2fcuCVqgoEZ3p PWVHrH/lAweEP0Jb6aSr2b4bD4t9E5fX8RrkfLcJwlvBfoWkNlaxouf/dWofPl5Q vS7B3YBXqkGORV7wmOVlF+OM1Lglo6RUg+pwXVHsnH1QnKtRgLq63eZK9vD+7Ou6 Mqnsb/AC/izD4+vFvg1l6pf59huvPlAcfVS+IrD6qkchDcCqHPgsRLKoGAlWHKKA bvu90Vz3XZgDsigWEN6lJvhhykzghlwo2+SQ0fxJSvY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:06 2025 by rpki-client