$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34353a3a2f34382d3438203d3e20323133393035.roa File: 326130623a346530373a34353a3a2f34382d3438203d3e20323133393035.roa (raw, json) Hash identifier: i2hMlO9YzFlBH2MIVIp5l4efVLTgl0WgVsunqH5nWf4= Subject key identifier: 23:2E:CE:6C:EA:78:0B:48:DE:62:3F:EB:A4:E1:F7:4E:5B:1E:D6:D5 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4BA6BF90247A683A3FAA6501219B4AAA4303F514 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34353a3a2f34382d3438203d3e20323133393035.roa Signing time: Thu 09 Oct 2025 18:53:08 +0000 ROA not before: Thu 09 Oct 2025 18:48:08 +0000 ROA not after: Thu 08 Oct 2026 18:53:08 +0000 asID: 213905 IP address blocks: 2a0b:4e07:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 07:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a6:bf:90:24:7a:68:3a:3f:aa:65:01:21:9b:4a:aa:43:03:f5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 9 18:48:08 2025 GMT Not After : Oct 8 18:53:08 2026 GMT Subject: CN=232ECE6CEA780B48DE623FEBA4E1F74E5B1ED6D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:17:76:55:de:15:34:da:3a:11:e7:cb:80: ea:7c:86:71:96:b5:63:88:a7:10:49:5f:a0:33:1b: 13:ea:f5:09:79:3e:c2:ec:f4:41:ee:41:02:dc:e3: bd:1a:db:d1:2c:5b:5f:f0:08:27:59:ed:91:50:b9: 7a:9e:f8:39:84:c2:8d:70:49:c3:5a:77:87:c7:a9: fb:a3:33:5c:5e:2a:0a:28:f8:1b:e1:14:df:89:39: 08:06:a0:0f:20:fd:57:2a:b3:33:d1:fc:52:81:7e: c0:33:1c:47:67:58:a4:1b:dc:8c:95:7c:93:c1:a0: d1:40:9d:22:c8:82:3b:a6:83:ed:d0:e4:79:eb:a9: 20:00:cf:8a:dd:f7:5a:82:0b:3a:df:22:45:dc:6b: 9f:98:54:38:09:f6:97:15:85:0f:c3:74:50:03:c4: 92:22:b0:47:8a:17:96:eb:b1:2e:60:8f:4e:98:50: 9f:31:55:14:b2:74:a4:ac:ab:a8:2f:5c:32:de:4f: d1:c5:91:33:4f:bc:f7:05:e5:a1:29:8a:3d:b6:f0: a0:14:c4:2a:a4:f8:37:1e:81:79:40:12:ff:49:f4: 10:02:13:c5:b6:03:79:96:eb:d3:a6:35:d7:a6:18: 5b:94:06:cc:1b:ec:5a:da:39:53:4d:d0:ee:e3:15: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2E:CE:6C:EA:78:0B:48:DE:62:3F:EB:A4:E1:F7:4E:5B:1E:D6:D5 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34353a3a2f34382d3438203d3e20323133393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:45::/48 Signature Algorithm: sha256WithRSAEncryption 16:41:30:97:bf:35:d6:59:dc:3c:19:f9:2b:ae:61:a8:06:68: ea:05:ca:58:c9:25:b3:91:1d:00:87:10:a5:53:d5:a8:04:e2: 15:1c:97:0e:63:22:2c:c2:0a:19:31:02:61:d6:1a:68:f2:e8: 48:42:e0:dc:0c:9d:52:a9:8c:93:f3:b5:8d:7b:5d:54:35:d6: 21:32:87:fc:42:ee:ed:6b:25:53:4c:87:cf:e6:44:67:a7:3a: 11:66:e1:08:85:a3:d3:77:a6:59:48:97:c7:f7:d9:d5:e5:be: 6a:59:38:b0:5e:20:21:21:e2:63:4a:57:e9:c0:19:ea:88:42: c8:9f:3d:de:d0:e6:61:79:a7:60:e8:af:68:57:7b:20:49:17: 7f:82:b7:a2:c9:b1:bf:7a:0e:86:d2:15:fc:a1:f5:61:6d:ba: 0a:f2:9a:67:37:0e:38:7b:1c:67:c6:c4:4e:a5:be:d9:c2:71: 38:df:c0:10:f9:e1:24:8d:47:a2:6c:ba:3b:0b:fe:ee:8c:af: 59:d3:32:2f:33:06:86:75:38:73:d5:f9:08:6b:eb:42:8b:f6: 97:b1:df:88:d9:8b:69:3e:45:4c:c1:77:5c:ee:fe:cd:c2:b2: b1:7e:14:85:c6:ba:23:56:68:30:64:ba:1f:37:96:22:21:23: 68:22:12:26 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUS6a/kCR6aDo/qmUBIZtKqkMD9RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTEwMDkxODQ4MDhaFw0yNjEwMDgxODUzMDhaMDMxMTAvBgNV BAMTKDIzMkVDRTZDRUE3ODBCNDhERTYyM0ZFQkE0RTFGNzRFNUIxRUQ2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViRd2Vd4VNNo6EefLgOp8hnGW tWOIpxBJX6AzGxPq9Ql5PsLs9EHuQQLc470a29EsW1/wCCdZ7ZFQuXqe+DmEwo1w ScNad4fHqfujM1xeKgoo+BvhFN+JOQgGoA8g/VcqszPR/FKBfsAzHEdnWKQb3IyV fJPBoNFAnSLIgjumg+3Q5HnrqSAAz4rd91qCCzrfIkXca5+YVDgJ9pcVhQ/DdFAD xJIisEeKF5brsS5gj06YUJ8xVRSydKSsq6gvXDLeT9HFkTNPvPcF5aEpij228KAU xCqk+DcegXlAEv9J9BACE8W2A3mW69OmNdemGFuUBswb7FraOVNN0O7jFaj5AgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUIy7ObOp4C0jeYj/rpOH3Tlse1tUwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM0MzUzYTNhMmYzNDM4 MmQzNDM4MjAzZDNlMjAzMjMxMzMzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAEUwDQYJ KoZIhvcNAQELBQADggEBABZBMJe/NdZZ3DwZ+SuuYagGaOoFyljJJbORHQCHEKVT 1agE4hUclw5jIizCChkxAmHWGmjy6EhC4NwMnVKpjJPztY17XVQ11iEyh/xC7u1r JVNMh8/mRGenOhFm4QiFo9N3pllIl8f32dXlvmpZOLBeICEh4mNKV+nAGeqIQsif Pd7Q5mF5p2Dor2hXeyBJF3+Ct6LJsb96DobSFfyh9WFtugrymmc3Djh7HGfGxE6l vtnCcTjfwBD54SSNR6JsujsL/u6Mr1nTMi8zBoZ1OHPV+Qhr60KL9pex34jZi2k+ RUzBd1zu/s3CsrF+FIXGuiNWaDBkuh83liIhI2giEiY= -----END CERTIFICATE-----Generated at Mon Oct 20 23:03:55 2025 by rpki-client