
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3531313a3a2f34382d3438203d3e20323134353433.roa
File: 326130623a346530373a3531313a3a2f34382d3438203d3e20323134353433.roa (raw, json)
Hash identifier: AaPIPr33vXgXCjIj6rSAR9CFXBNknqzyIaVi3ayPKUM=
Subject key identifier: B5:95:A7:EC:EF:D3:A2:B9:23:E7:03:74:84:7F:08:95:97:D3:51:F2
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 15AB073A46FE405C5ED43D33453DC51A737DA31F
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3531313a3a2f34382d3438203d3e20323134353433.roa
Signing time: Fri 13 Mar 2026 21:36:57 +0000
ROA not before: Fri 13 Mar 2026 21:31:57 +0000
ROA not after: Fri 12 Mar 2027 21:36:57 +0000
asID: 214543
IP address blocks: 2a0b:4e07:511::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ab:07:3a:46:fe:40:5c:5e:d4:3d:33:45:3d:c5:1a:73:7d:a3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 13 21:31:57 2026 GMT
Not After : Mar 12 21:36:57 2027 GMT
Subject: CN=B595A7ECEFD3A2B923E70374847F089597D351F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:75:e1:ed:d5:f3:85:db:2b:d4:9e:c6:33:
da:ce:6e:77:42:25:86:a1:6a:1c:01:22:8d:b8:06:
a7:bf:55:2a:ec:8d:1d:4f:65:24:8f:9c:1a:9a:e9:
a5:ff:2b:36:1c:f8:51:56:f6:ed:ba:d2:4d:63:a2:
5b:d4:3b:6b:60:0f:c7:6a:9d:58:c6:fc:74:fd:19:
a2:68:39:f4:85:55:62:f8:4a:b6:3a:a1:95:e4:0b:
28:de:d3:3c:9b:6c:09:4a:90:4e:13:3f:3f:99:e5:
15:e0:2b:6d:a5:8b:99:32:21:20:d6:ec:68:f7:ab:
11:82:08:03:82:61:b4:74:53:49:6d:48:6f:d2:b4:
49:a5:99:72:90:d5:1e:bb:06:b3:93:0f:e9:e9:6b:
a7:5f:16:f8:ca:3c:25:08:0b:7c:5a:45:cb:bc:95:
7e:88:59:85:8b:16:a0:3c:fd:a4:5a:c0:90:30:40:
ff:0a:19:09:04:c9:d1:72:4d:b0:f9:bf:9e:99:96:
5c:4e:e8:c4:43:51:cf:5e:65:97:ec:b3:7c:df:f8:
45:5e:a6:0c:40:90:20:90:75:61:ae:fc:94:6e:aa:
e5:44:b2:b1:b5:54:d1:d4:53:d8:4a:a4:73:01:0f:
02:07:a1:a9:c9:3d:97:d1:54:59:42:95:29:dc:4b:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:95:A7:EC:EF:D3:A2:B9:23:E7:03:74:84:7F:08:95:97:D3:51:F2
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3531313a3a2f34382d3438203d3e20323134353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:511::/48
Signature Algorithm: sha256WithRSAEncryption
29:26:3f:59:16:51:24:31:62:99:92:a3:18:9a:e0:b8:90:7e:
ad:b7:c0:53:cf:90:1b:79:39:2c:2e:ee:fc:c9:94:21:07:0d:
ed:ad:25:15:7a:1d:c0:8a:f4:a6:52:a8:95:61:85:d3:fc:6d:
c0:16:34:42:92:82:18:09:2d:ed:cb:46:d0:01:93:bd:3a:5b:
27:de:14:f9:50:12:66:60:b0:57:3c:9f:0d:2e:c5:b3:58:b8:
b3:1a:54:04:99:b0:28:7c:62:ea:20:92:0d:b3:4d:38:47:af:
19:1f:4f:72:61:9c:31:35:1d:11:d5:46:8b:30:71:a9:e2:e9:
3f:1e:04:32:d9:ae:85:ab:dd:f2:f4:df:d2:86:02:a2:5b:9b:
32:c8:9a:68:cf:11:28:a8:bc:68:9c:09:89:62:7e:4c:c2:9f:
02:92:47:6c:5a:1c:d1:fe:92:7d:21:0a:e5:de:bf:c5:04:00:
a3:48:60:73:56:0c:1f:8b:8a:19:78:75:0c:01:82:da:4c:11:
6d:0e:29:db:5f:78:5f:41:be:a9:ad:31:59:58:d3:c6:96:1b:
69:2b:53:1d:4e:d5:f6:9f:ee:e2:c9:e5:1b:3f:21:82:52:6a:
5c:98:29:08:75:b9:8a:ac:65:43:58:08:f9:08:72:43:f5:2c:
1a:0e:1e:42
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFasHOkb+QFxe1D0zRT3FGnN9ox8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAzMTMyMTMxNTdaFw0yNzAzMTIyMTM2NTdaMDMxMTAvBgNV
BAMTKEI1OTVBN0VDRUZEM0EyQjkyM0U3MDM3NDg0N0YwODk1OTdEMzUxRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDHXh7dXzhdsr1J7GM9rObndC
JYahahwBIo24Bqe/VSrsjR1PZSSPnBqa6aX/KzYc+FFW9u260k1jolvUO2tgD8dq
nVjG/HT9GaJoOfSFVWL4SrY6oZXkCyje0zybbAlKkE4TPz+Z5RXgK22li5kyISDW
7Gj3qxGCCAOCYbR0U0ltSG/StEmlmXKQ1R67BrOTD+npa6dfFvjKPCUIC3xaRcu8
lX6IWYWLFqA8/aRawJAwQP8KGQkEydFyTbD5v56ZllxO6MRDUc9eZZfss3zf+EVe
pgxAkCCQdWGu/JRuquVEsrG1VNHUU9hKpHMBDwIHoanJPZfRVFlClSncS0Y3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUtZWn7O/Torkj5wN0hH8IlZfTUfIwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM1MzEzMTNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLTgcFETAN
BgkqhkiG9w0BAQsFAAOCAQEAKSY/WRZRJDFimZKjGJrguJB+rbfAU8+QG3k5LC7u
/MmUIQcN7a0lFXodwIr0plKolWGF0/xtwBY0QpKCGAkt7ctG0AGTvTpbJ94U+VAS
ZmCwVzyfDS7Fs1i4sxpUBJmwKHxi6iCSDbNNOEevGR9PcmGcMTUdEdVGizBxqeLp
Px4EMtmuhavd8vTf0oYColubMsiaaM8RKKi8aJwJiWJ+TMKfApJHbFoc0f6SfSEK
5d6/xQQAo0hgc1YMH4uKGXh1DAGC2kwRbQ4p2194X0G+qa0xWVjTxpYbaStTHU7V
9p/u4snlGz8hglJqXJgpCHW5iqxlQ1gI+QhyQ/UsGg4eQg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:53 2026 by rpki-client