$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3561313a3a2f34382d3438203d3e20323134353433.roa File: 326130623a346530373a3561313a3a2f34382d3438203d3e20323134353433.roa (raw, json) Hash identifier: R1XFof+yY2mcC4uWKTl8hxE1v25y2DAPQ2vYVOfLKkg= Subject key identifier: 69:29:14:AD:E9:4C:42:28:FD:6D:9E:51:E2:1E:98:6C:37:DE:EF:17 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1C8CCAADA8436BE857981571C73D7273C4907157 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3561313a3a2f34382d3438203d3e20323134353433.roa Signing time: Fri 13 Mar 2026 21:36:57 +0000 ROA not before: Fri 13 Mar 2026 21:31:57 +0000 ROA not after: Fri 12 Mar 2027 21:36:57 +0000 asID: 214543 IP address blocks: 2a0b:4e07:5a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 07:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8c:ca:ad:a8:43:6b:e8:57:98:15:71:c7:3d:72:73:c4:90:71:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Mar 13 21:31:57 2026 GMT Not After : Mar 12 21:36:57 2027 GMT Subject: CN=692914ADE94C4228FD6D9E51E21E986C37DEEF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:26:2c:cc:d5:90:c8:89:69:0c:35:0e:aa: ba:f3:6b:4a:89:e3:95:83:6e:22:ef:3e:df:05:f6: e7:17:0f:e2:66:f9:f0:6a:0e:e3:5a:e4:fe:76:5c: 2c:0f:81:ac:2a:00:2f:87:10:5a:9a:59:26:fd:15: a1:67:db:5d:64:39:21:3b:5c:fa:fc:60:41:a5:5b: 38:f1:0c:23:e4:dc:fb:7d:c0:e3:d6:66:a6:28:99: 19:8d:ff:62:a0:78:e8:31:b5:95:1f:79:79:3a:ef: 02:ad:d5:39:5d:29:06:d2:ff:3d:5e:0c:38:fd:ac: a1:e4:62:75:7c:d2:d8:f9:27:b4:7a:5f:6e:fd:c6: ee:83:d6:0c:03:1e:1f:b6:bf:64:b7:53:44:5d:ef: 3a:38:cf:0c:33:a9:69:ba:42:9f:79:40:ea:e1:bb: ea:5d:ab:c1:7c:57:2d:87:0d:22:2a:be:ba:11:dc: 51:76:34:fc:26:1a:9c:e8:34:c9:80:77:6f:56:cb: 81:02:56:a8:b2:5f:81:0f:57:93:c9:62:10:6e:9b: 95:93:a7:bc:cb:b9:7e:fc:8d:4a:b7:0a:2b:be:7e: 69:13:5f:57:9c:16:c9:cc:9e:b8:c9:69:85:7b:7c: 01:cd:da:31:7a:cd:53:c5:cb:e2:bf:e4:0b:e5:bd: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:29:14:AD:E9:4C:42:28:FD:6D:9E:51:E2:1E:98:6C:37:DE:EF:17 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3561313a3a2f34382d3438203d3e20323134353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:5a1::/48 Signature Algorithm: sha256WithRSAEncryption 52:32:0d:25:47:9f:eb:9d:21:63:14:af:ba:17:6e:3b:9b:24: 4a:09:78:fb:10:a2:64:09:b4:17:f1:f1:67:27:80:6b:db:36: df:05:9c:a4:19:f8:cb:3e:aa:a5:e8:5e:d7:7f:51:fc:a0:e3: 5a:ee:7d:48:da:92:a7:6a:63:b8:a7:4a:43:c9:ab:51:c7:9d: db:8b:6b:0e:94:ad:c6:42:3b:66:68:76:63:02:7c:09:be:aa: 8b:62:2a:4c:38:da:a5:c0:ff:c4:cb:e4:0a:89:dd:16:a8:20: 8f:af:2d:c5:70:9f:0d:a9:13:81:45:c3:cc:1d:b7:41:55:f1: ee:1f:55:6b:91:03:c7:49:44:fa:30:81:3c:ba:f5:c7:78:0e: ff:7a:a7:7a:5a:4f:ae:67:92:71:22:23:df:1c:e0:47:ee:97: a1:8e:3a:89:f9:f4:a5:fc:90:a6:1a:0b:8b:a2:93:85:ef:69: b5:c4:89:8e:ff:f5:e0:69:e4:b4:dd:64:71:f8:cf:ba:4c:c2: 75:ba:8a:6f:f1:99:19:5e:b7:37:de:90:9a:12:d0:c1:87:55: 0a:3b:1b:c4:c9:2b:3b:67:75:f0:48:e9:fd:7c:3f:6e:d9:a5: af:19:31:27:52:39:22:9b:0d:29:19:0a:3d:53:65:f3:59:73: 92:9b:8c:83 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUHIzKrahDa+hXmBVxxz1yc8SQcVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAzMTMyMTMxNTdaFw0yNzAzMTIyMTM2NTdaMDMxMTAvBgNV BAMTKDY5MjkxNEFERTk0QzQyMjhGRDZEOUU1MUUyMUU5ODZDMzdERUVGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8liYszNWQyIlpDDUOqrrza0qJ 45WDbiLvPt8F9ucXD+Jm+fBqDuNa5P52XCwPgawqAC+HEFqaWSb9FaFn211kOSE7 XPr8YEGlWzjxDCPk3Pt9wOPWZqYomRmN/2KgeOgxtZUfeXk67wKt1TldKQbS/z1e DDj9rKHkYnV80tj5J7R6X279xu6D1gwDHh+2v2S3U0Rd7zo4zwwzqWm6Qp95QOrh u+pdq8F8Vy2HDSIqvroR3FF2NPwmGpzoNMmAd29Wy4ECVqiyX4EPV5PJYhBum5WT p7zLuX78jUq3Ciu+fmkTX1ecFsnMnrjJaYV7fAHN2jF6zVPFy+K/5AvlvW8XAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUaSkUrelMQij9bZ5R4h6YbDfe7xcwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM1NjEzMTNhM2EyZjM0 MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLTgcFoTAN BgkqhkiG9w0BAQsFAAOCAQEAUjINJUef650hYxSvuhduO5skSgl4+xCiZAm0F/Hx ZyeAa9s23wWcpBn4yz6qpehe139R/KDjWu59SNqSp2pjuKdKQ8mrUced24trDpSt xkI7Zmh2YwJ8Cb6qi2IqTDjapcD/xMvkCondFqggj68txXCfDakTgUXDzB23QVXx 7h9Va5EDx0lE+jCBPLr1x3gO/3qnelpPrmeScSIj3xzgR+6XoY46ifn0pfyQphoL i6KThe9ptcSJjv/14GnktN1kcfjPukzCdbqKb/GZGV63N96QmhLQwYdVCjsbxMkr O2d18Ejp/Xw/btmlrxkxJ1I5IpsNKRkKPVNl81lzkpuMgw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:58 2026 by rpki-client