$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa File: 326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa (raw, json) Hash identifier: z3dCVQlqSUzzpim1Ftnnqp9HUkz85nHjAYqG6I6mIEk= Subject key identifier: 9D:AC:BB:53:44:93:4C:57:50:5C:7C:BA:1E:7E:4E:BB:6D:69:9B:1E Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 61B67719E4FB82E050B9E97A8421CC326AD06C4F Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa Signing time: Fri 13 Mar 2026 14:36:57 +0000 ROA not before: Fri 13 Mar 2026 14:31:57 +0000 ROA not after: Fri 12 Mar 2027 14:36:57 +0000 asID: 397658 IP address blocks: 2a0b:4e07:aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b6:77:19:e4:fb:82:e0:50:b9:e9:7a:84:21:cc:32:6a:d0:6c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Mar 13 14:31:57 2026 GMT Not After : Mar 12 14:36:57 2027 GMT Subject: CN=9DACBB5344934C57505C7CBA1E7E4EBB6D699B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:1c:5f:25:ca:a7:53:dd:88:ba:d3:e8:d6: e6:d6:87:5c:f1:29:57:77:bc:36:2a:c3:31:fb:14: af:9e:7d:ca:27:fa:5d:49:1f:e3:fb:e2:4f:e9:b1: 3e:74:5d:a9:c7:c3:11:70:79:55:f4:22:c5:75:27: 51:e9:c4:70:a1:ce:67:eb:81:38:70:7c:af:3d:98: 21:9f:fb:69:cb:17:ce:a7:3f:7c:57:a1:d9:41:9e: 3a:47:08:03:ec:80:23:51:57:c3:47:31:64:69:2a: 18:f4:02:3d:6a:ab:3a:17:67:b9:94:4d:2b:7b:ab: 66:97:31:78:86:3b:11:2a:ba:d0:c0:17:ca:ad:4b: 51:8c:4a:94:62:8c:a5:34:15:6e:43:26:e9:4a:43: 27:6c:33:a5:b6:cb:84:39:3a:3a:b6:45:41:13:8c: b8:7b:50:fa:4d:17:81:6a:ae:7f:98:35:b5:7f:21: f8:1f:dc:6a:58:ea:31:95:07:e2:29:7e:ea:71:34: e7:b8:5e:45:0c:6e:9d:bc:48:83:7d:c1:bd:d5:af: 4e:14:51:47:14:81:9b:1e:8f:7e:01:1a:b5:ac:53: 21:f8:5f:d9:3d:cb:de:03:af:ba:e7:d4:6c:dd:f2: eb:ef:6e:a1:3d:1d:97:eb:ed:bc:79:2f:8b:a7:d8: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AC:BB:53:44:93:4C:57:50:5C:7C:BA:1E:7E:4E:BB:6D:69:9B:1E X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:aa::/48 Signature Algorithm: sha256WithRSAEncryption 3f:d4:40:e0:f4:f8:61:55:1a:c1:6c:44:df:8c:b4:dd:8e:25: 4c:a3:0c:26:25:0b:2f:71:0c:28:a0:38:29:2f:90:a0:85:5f: 2b:f4:32:e7:c0:93:3b:c8:4b:05:c1:6e:ce:10:8c:a7:19:61: 55:16:f8:86:ea:9e:b6:32:2a:04:8f:3f:c0:d5:af:25:7b:14: aa:39:13:66:51:3e:7a:96:fc:da:69:5a:68:43:39:c6:53:27: 18:c5:bb:83:06:fb:91:b0:68:39:1c:c1:78:5f:31:0d:e1:62: cf:d1:27:6f:e6:3c:ed:c4:64:3f:e7:8f:d0:c4:68:cf:7b:64: cc:84:7c:9e:4f:23:78:71:f4:a0:d8:5c:52:4e:ca:04:00:4e: b3:d0:a3:17:49:77:b7:d9:05:81:2f:63:38:dc:e5:25:04:3f: d5:5b:66:b0:80:8c:59:72:d4:83:80:1a:3c:3b:be:6f:e1:11: 71:a9:9b:84:01:23:bb:69:eb:5c:4d:4a:96:71:54:39:87:7d: 14:23:95:0d:66:19:13:6f:39:32:d0:2f:c6:f9:d6:28:00:dd: 29:e5:a6:1d:5e:fd:03:48:52:13:00:2c:b8:fe:f9:8a:7d:68: 2f:04:3a:d5:5b:bc:c5:36:f1:97:b7:4c:1c:80:a8:da:a8:32: 9b:92:17:15 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUYbZ3GeT7guBQuel6hCHMMmrQbE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAzMTMxNDMxNTdaFw0yNzAzMTIxNDM2NTdaMDMxMTAvBgNV BAMTKDlEQUNCQjUzNDQ5MzRDNTc1MDVDN0NCQTFFN0U0RUJCNkQ2OTlCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkBxfJcqnU92IutPo1ubWh1zx KVd3vDYqwzH7FK+efcon+l1JH+P74k/psT50XanHwxFweVX0IsV1J1HpxHChzmfr gThwfK89mCGf+2nLF86nP3xXodlBnjpHCAPsgCNRV8NHMWRpKhj0Aj1qqzoXZ7mU TSt7q2aXMXiGOxEqutDAF8qtS1GMSpRijKU0FW5DJulKQydsM6W2y4Q5Ojq2RUET jLh7UPpNF4Fqrn+YNbV/Ifgf3GpY6jGVB+IpfupxNOe4XkUMbp28SIN9wb3Vr04U UUcUgZsej34BGrWsUyH4X9k9y94Dr7rn1Gzd8uvvbqE9HZfr7bx5L4un2Nu5AgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUnay7U0STTFdQXHy6Hn5Ou21pmx4wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYxNjEzYTNhMmYzNDM4 MmQzNDM4MjAzZDNlMjAzMzM5MzczNjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAKowDQYJ KoZIhvcNAQELBQADggEBAD/UQOD0+GFVGsFsRN+MtN2OJUyjDCYlCy9xDCigOCkv kKCFXyv0MufAkzvISwXBbs4QjKcZYVUW+IbqnrYyKgSPP8DVryV7FKo5E2ZRPnqW /NppWmhDOcZTJxjFu4MG+5GwaDkcwXhfMQ3hYs/RJ2/mPO3EZD/nj9DEaM97ZMyE fJ5PI3hx9KDYXFJOygQATrPQoxdJd7fZBYEvYzjc5SUEP9VbZrCAjFly1IOAGjw7 vm/hEXGpm4QBI7tp61xNSpZxVDmHfRQjlQ1mGRNvOTLQL8b51igA3Snlph1e/QNI UhMALLj++Yp9aC8EOtVbvMU28Ze3TByAqNqoMpuSFxU= -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:29 2026 by rpki-client