$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3330303a3a2f34302d3438203d3e20323134363735.roa File: 326130623a346530373a3330303a3a2f34302d3438203d3e20323134363735.roa (raw, json) Hash identifier: bFPsEvxLwVrMxDCf8UnCOYCb8DgSqGBHMukj6XmkcZ8= Subject key identifier: 5C:87:9D:BF:79:C0:83:E2:E5:F6:0D:1F:30:78:C3:AC:6A:C6:99:E4 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 135D25DC8F70C1E712D164FB4655C24ED0184103 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3330303a3a2f34302d3438203d3e20323134363735.roa Signing time: Fri 13 Mar 2026 21:36:57 +0000 ROA not before: Fri 13 Mar 2026 21:31:57 +0000 ROA not after: Fri 12 Mar 2027 21:36:57 +0000 asID: 214675 IP address blocks: 2a0b:4e07:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5d:25:dc:8f:70:c1:e7:12:d1:64:fb:46:55:c2:4e:d0:18:41:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Mar 13 21:31:57 2026 GMT Not After : Mar 12 21:36:57 2027 GMT Subject: CN=5C879DBF79C083E2E5F60D1F3078C3AC6AC699E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:bc:de:36:1c:35:2a:6f:c3:62:1d:d9:a1: c9:98:75:3f:18:e7:26:6a:17:6e:ef:cc:89:9c:34: d6:ce:f6:38:5e:6e:6d:76:c4:d9:20:a1:20:6b:ee: 50:d0:41:c7:86:4b:66:7e:2b:05:12:81:4f:4f:b6: 9f:1c:ba:33:d8:96:c8:f7:1e:9e:63:5a:d0:37:a6: 98:e6:5a:fc:d3:f8:26:31:67:95:be:8a:39:35:c6: 4e:7e:2c:6e:52:f7:72:c0:fe:37:75:91:ce:32:7f: 48:6e:a5:4e:a8:98:47:0a:00:a7:0e:84:f3:fc:bb: 8a:56:03:18:6e:df:3f:de:98:b7:cd:e6:27:09:ee: 34:ca:57:e7:ad:5f:3f:d0:8f:ed:a9:06:7f:21:36: 05:0d:fb:ed:4f:a5:f6:82:dd:e5:26:11:21:7a:26: 7c:f7:a8:2e:60:7e:d1:7e:c1:35:6c:e1:68:3a:1f: 9e:51:b3:dc:fb:88:50:79:b2:fe:e0:8f:b4:c7:43: e0:89:cd:b1:6c:9f:a9:00:a8:e7:36:e7:d7:b0:d6: e4:52:53:53:0c:2f:12:f2:24:f3:5d:3f:70:1d:ab: 37:19:2d:4d:a4:99:35:93:9b:b7:73:35:b2:db:57: 4d:49:cb:f2:0b:dc:40:2d:d1:30:9c:47:36:d2:b9: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:87:9D:BF:79:C0:83:E2:E5:F6:0D:1F:30:78:C3:AC:6A:C6:99:E4 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3330303a3a2f34302d3438203d3e20323134363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:300::/40 Signature Algorithm: sha256WithRSAEncryption 85:52:62:78:5a:b7:93:0b:e0:aa:05:0c:59:eb:28:d5:b5:17: 7c:22:53:82:78:f3:b9:9f:2a:d6:87:77:06:f7:9a:11:a7:d5: 79:e3:09:cc:68:de:9d:44:c6:f0:31:c8:0a:68:63:8e:c2:bd: 07:6f:03:88:f0:e3:06:22:5b:05:ca:29:b4:0d:0d:de:4f:19: 04:5a:13:91:a2:f5:b7:3e:49:4b:e2:4c:35:17:60:7b:cc:2d: 80:90:14:e9:9b:32:b7:91:42:59:06:cb:a2:c8:d1:14:55:d6: 1b:64:08:7c:71:f6:e0:20:25:67:70:aa:1f:45:6f:ce:40:1c: 4d:fc:0a:73:b7:0e:e6:70:af:6d:07:92:a1:ba:a5:65:ab:cd: 23:cc:55:c8:fe:62:e8:ee:6c:fa:b2:af:43:95:ca:de:65:5c: ef:b6:26:b7:23:a5:d0:65:ed:b7:4c:9e:e4:c7:3a:e9:7b:e7: 47:80:dc:3f:72:42:07:6f:0c:d3:70:96:c7:e1:af:50:e5:41: 45:81:07:0b:b9:24:e8:86:3c:47:6d:82:f0:d4:23:63:75:57: 09:31:6a:df:b9:3c:d1:61:a1:15:f7:ad:a5:98:37:52:cc:51: 52:2b:08:ad:22:4d:f3:c9:fb:47:38:15:02:79:d9:75:94:bf: ca:27:bd:75 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUE10l3I9wwecS0WT7RlXCTtAYQQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAzMTMyMTMxNTdaFw0yNzAzMTIyMTM2NTdaMDMxMTAvBgNV BAMTKDVDODc5REJGNzlDMDgzRTJFNUY2MEQxRjMwNzhDM0FDNkFDNjk5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcObzeNhw1Km/DYh3ZocmYdT8Y 5yZqF27vzImcNNbO9jhebm12xNkgoSBr7lDQQceGS2Z+KwUSgU9Ptp8cujPYlsj3 Hp5jWtA3ppjmWvzT+CYxZ5W+ijk1xk5+LG5S93LA/jd1kc4yf0hupU6omEcKAKcO hPP8u4pWAxhu3z/emLfN5icJ7jTKV+etXz/Qj+2pBn8hNgUN++1PpfaC3eUmESF6 Jnz3qC5gftF+wTVs4Wg6H55Rs9z7iFB5sv7gj7THQ+CJzbFsn6kAqOc259ew1uRS U1MMLxLyJPNdP3AdqzcZLU2kmTWTm7dzNbLbV01Jy/IL3EAt0TCcRzbSuT8HAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUXIedv3nAg+Ll9g0fMHjDrGrGmeQwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMzMzAzMDNhM2EyZjM0 MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDM2MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoLTgcDMA0G CSqGSIb3DQEBCwUAA4IBAQCFUmJ4WreTC+CqBQxZ6yjVtRd8IlOCePO5nyrWh3cG 95oRp9V54wnMaN6dRMbwMcgKaGOOwr0HbwOI8OMGIlsFyim0DQ3eTxkEWhORovW3 PklL4kw1F2B7zC2AkBTpmzK3kUJZBsuiyNEUVdYbZAh8cfbgICVncKofRW/OQBxN /Apztw7mcK9tB5KhuqVlq80jzFXI/mLo7mz6sq9DlcreZVzvtia3I6XQZe23TJ7k xzrpe+dHgNw/ckIHbwzTcJbH4a9Q5UFFgQcLuSTohjxHbYLw1CNjdVcJMWrfuTzR YaEV962lmDdSzFFSKwitIk3zyftHOBUCedl1lL/KJ711 -----END CERTIFICATE-----Generated at Wed Mar 25 21:30:47 2026 by rpki-client