
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3630363a3a2f34382d3438203d3e20323134353433.roa
File: 326130623a346530373a3630363a3a2f34382d3438203d3e20323134353433.roa (raw, json)
Hash identifier: xUZXUrGRMy6sc603m4bB+QhVY6yHbmj4LsStCHaVhk4=
Subject key identifier: 93:32:AD:78:6C:ED:E0:B4:7C:10:5B:7C:78:8E:68:13:08:70:FB:5F
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 722CA15944011F32A35545CDC8546E136A10FFBA
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3630363a3a2f34382d3438203d3e20323134353433.roa
Signing time: Fri 13 Mar 2026 14:36:57 +0000
ROA not before: Fri 13 Mar 2026 14:31:57 +0000
ROA not after: Fri 12 Mar 2027 14:36:57 +0000
asID: 214543
IP address blocks: 2a0b:4e07:606::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2c:a1:59:44:01:1f:32:a3:55:45:cd:c8:54:6e:13:6a:10:ff:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 13 14:31:57 2026 GMT
Not After : Mar 12 14:36:57 2027 GMT
Subject: CN=9332AD786CEDE0B47C105B7C788E68130870FB5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:10:2c:d4:aa:e5:86:8c:bd:83:0f:f2:76:
8a:b7:18:74:78:8e:3a:5d:4c:e3:d3:e6:e2:d9:66:
c5:da:6c:75:2d:5f:da:24:14:f4:9c:6d:22:8f:d5:
7d:ba:55:e2:19:54:89:c3:84:69:10:fe:43:90:cd:
4e:ca:8b:87:b2:78:dc:e1:d2:a7:6d:02:c8:1b:30:
c1:78:89:08:7c:aa:67:49:e0:01:80:8c:15:0b:90:
e3:0a:c9:61:47:04:a4:f8:90:fd:1a:cd:6a:f0:e6:
42:83:77:d9:49:44:11:8b:75:94:f9:b5:a7:d6:b1:
47:81:44:cd:04:8f:c5:8d:4b:2d:c5:23:30:6a:6a:
af:82:28:9a:cc:eb:b0:50:51:4d:58:a8:1d:49:2c:
14:b3:a6:c4:c6:44:00:a2:e7:bb:82:a6:e9:f2:25:
38:b5:44:5a:74:96:f8:90:1b:57:92:2e:d0:b0:6f:
df:1e:55:78:00:83:60:7c:6f:f4:a0:c0:4b:35:5b:
a3:18:2a:75:57:92:e9:71:25:a1:40:f6:e6:8b:6f:
b5:2e:bf:39:8a:05:a9:03:e0:f1:6f:d3:cf:83:4f:
ec:a8:5c:d0:66:71:9d:cb:f7:d0:b4:85:11:23:fa:
b3:5b:64:c3:8b:3a:37:e2:d8:61:a5:ce:ae:d1:ae:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:AD:78:6C:ED:E0:B4:7C:10:5B:7C:78:8E:68:13:08:70:FB:5F
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3630363a3a2f34382d3438203d3e20323134353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:606::/48
Signature Algorithm: sha256WithRSAEncryption
28:09:ca:65:ad:4f:2d:4c:7d:17:0a:60:ad:53:e4:3c:dc:2c:
b9:e5:77:e5:78:9a:2f:14:20:fe:fe:de:f9:f3:dc:4c:cf:94:
35:56:d0:8d:a5:cc:93:f1:06:25:16:64:6c:f1:bb:d5:52:61:
ee:bf:47:32:39:28:cb:a8:db:b0:b0:bb:a0:08:dc:c0:41:6d:
58:ca:3e:af:e7:6a:c5:8e:a6:22:d4:04:aa:ea:18:c7:76:84:
9d:e4:ca:84:af:62:dd:c4:2e:ea:e4:a3:ee:bc:52:83:17:69:
f0:10:82:8c:c5:20:e4:93:44:e5:ff:78:26:f2:3e:c7:80:33:
0a:29:8b:43:1c:ea:86:9a:82:a5:02:cb:65:50:91:01:62:3a:
d3:f0:3e:f3:21:98:bc:c8:87:75:82:8e:27:0e:6a:67:72:6c:
ca:a0:48:ca:df:c8:30:80:8b:09:3c:84:06:2a:64:cf:2c:a5:
e9:33:25:20:1c:0b:68:41:64:d2:79:93:9c:de:9c:96:f8:cd:
a4:4f:ea:75:d1:24:5e:cd:97:28:c9:77:df:99:6c:cb:d1:66:
8b:de:32:e0:68:9e:a4:46:45:03:88:c5:72:03:01:d8:57:e7:
52:8c:45:c6:be:6c:e7:b1:d9:dc:48:65:aa:39:f0:3d:8a:88:
eb:88:cb:45
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUciyhWUQBHzKjVUXNyFRuE2oQ/7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAzMTMxNDMxNTdaFw0yNzAzMTIxNDM2NTdaMDMxMTAvBgNV
BAMTKDkzMzJBRDc4NkNFREUwQjQ3QzEwNUI3Qzc4OEU2ODEzMDg3MEZCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MRAs1Krlhoy9gw/ydoq3GHR4
jjpdTOPT5uLZZsXabHUtX9okFPScbSKP1X26VeIZVInDhGkQ/kOQzU7Ki4eyeNzh
0qdtAsgbMMF4iQh8qmdJ4AGAjBULkOMKyWFHBKT4kP0azWrw5kKDd9lJRBGLdZT5
tafWsUeBRM0Ej8WNSy3FIzBqaq+CKJrM67BQUU1YqB1JLBSzpsTGRACi57uCpuny
JTi1RFp0lviQG1eSLtCwb98eVXgAg2B8b/SgwEs1W6MYKnVXkulxJaFA9uaLb7Uu
vzmKBakD4PFv08+DT+yoXNBmcZ3L99C0hREj+rNbZMOLOjfi2GGlzq7RrnBTAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUkzKteGzt4LR8EFt8eI5oEwhw+18wHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM2MzAzNjNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLTgcGBjAN
BgkqhkiG9w0BAQsFAAOCAQEAKAnKZa1PLUx9FwpgrVPkPNwsueV35XiaLxQg/v7e
+fPcTM+UNVbQjaXMk/EGJRZkbPG71VJh7r9HMjkoy6jbsLC7oAjcwEFtWMo+r+dq
xY6mItQEquoYx3aEneTKhK9i3cQu6uSj7rxSgxdp8BCCjMUg5JNE5f94JvI+x4Az
CimLQxzqhpqCpQLLZVCRAWI60/A+8yGYvMiHdYKOJw5qZ3JsyqBIyt/IMICLCTyE
Bipkzyyl6TMlIBwLaEFk0nmTnN6clvjNpE/qddEkXs2XKMl335lsy9Fmi94y4Gie
pEZFA4jFcgMB2FfnUoxFxr5s57HZ3EhlqjnwPYqI64jLRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:59 2026 by rpki-client