$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62383a3a2f34372d3437203d3e20323135303037.roa File: 326130623a346530373a62383a3a2f34372d3437203d3e20323135303037.roa (raw, json) Hash identifier: k/B3Idl81YqqwkgQ92u8DP4XISoJHZZB3omI/G99S2I= Subject key identifier: 7E:6C:36:CA:29:B5:B4:07:B9:A5:8B:F9:73:C6:F1:E7:F6:E1:CE:45 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 79636D9F5C6CA02078D977CF6F0FBF382D7A3C4E Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62383a3a2f34372d3437203d3e20323135303037.roa Signing time: Fri 13 Mar 2026 14:36:57 +0000 ROA not before: Fri 13 Mar 2026 14:31:57 +0000 ROA not after: Fri 12 Mar 2027 14:36:57 +0000 asID: 215007 IP address blocks: 2a0b:4e07:b8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:6d:9f:5c:6c:a0:20:78:d9:77:cf:6f:0f:bf:38:2d:7a:3c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Mar 13 14:31:57 2026 GMT Not After : Mar 12 14:36:57 2027 GMT Subject: CN=7E6C36CA29B5B407B9A58BF973C6F1E7F6E1CE45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:d0:0f:10:2f:e1:f0:bb:3f:bd:a3:15:4a: 12:fc:07:92:0a:80:25:bc:d7:59:99:45:97:51:09: 08:66:58:4a:a8:87:7c:34:99:c9:b0:e0:5c:82:df: e0:93:3c:bb:24:97:38:fa:49:c5:45:54:ad:de:13: 50:10:81:0a:9d:41:3f:61:86:f1:70:82:fd:9c:e8: 7e:fd:c3:8b:9f:08:bf:a1:4b:79:94:a8:aa:75:47: 31:1c:de:74:d3:36:86:76:df:0b:ca:47:f7:66:fc: 63:cd:9a:17:e5:04:bc:77:f4:66:4c:31:ca:10:3d: 0c:5b:99:3f:9e:0f:34:0e:3a:b3:02:0c:85:7c:91: 8f:04:0b:d2:29:57:f0:43:d6:b5:11:7d:e3:a9:b1: 8e:3d:10:a8:38:8b:3b:d2:fd:85:17:5b:0c:0d:12: 61:65:48:4d:03:14:48:b3:fb:88:60:a3:02:43:59: b8:8e:9a:18:60:d0:b8:da:dc:36:19:e6:35:d5:94: 8e:7d:6e:fe:ed:42:90:b1:ba:14:30:8c:aa:e3:ce: cf:23:83:a7:be:f9:36:fa:0c:98:fa:57:e4:c1:64: c0:c7:64:b0:b5:a1:5a:fa:0d:e5:d7:57:f1:fc:85: a6:86:75:bc:64:88:dd:5b:9a:5b:2a:39:29:d6:13: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6C:36:CA:29:B5:B4:07:B9:A5:8B:F9:73:C6:F1:E7:F6:E1:CE:45 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62383a3a2f34372d3437203d3e20323135303037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b8::/47 Signature Algorithm: sha256WithRSAEncryption 44:7d:e6:8a:88:e8:b8:b4:8d:92:a8:a2:3b:9e:b5:44:f5:f9: 56:32:6a:4d:c9:4b:cf:31:6b:fb:d6:cc:3a:42:b7:e5:b5:1c: 8e:f7:0f:28:37:1c:59:7c:a3:e9:73:ec:95:cb:80:95:d2:56: e0:ac:8b:03:83:d2:35:2d:7f:ba:81:80:22:88:19:aa:65:ca: 4b:de:a5:85:5f:5e:79:f5:52:b5:f1:ba:b2:d7:3a:de:f9:c1: bc:01:57:81:e5:c3:33:73:ce:34:6a:e3:a6:3c:39:ae:74:f1: c7:b2:5a:d9:c0:f4:17:a0:be:45:06:72:ea:2a:77:b8:2d:b5: 2c:c1:4a:26:cb:6c:9e:42:e5:d7:34:58:6e:e9:08:c5:28:5f: 5a:2e:b3:78:7c:c2:74:79:7d:c2:55:52:95:68:06:0c:41:da: f5:64:ac:50:a9:49:ad:de:30:f4:9a:ae:80:d1:5f:4a:36:65: 0c:a8:c0:f4:1d:4a:2c:0f:f7:9a:f7:ff:65:fe:70:0d:ea:95: a7:d3:bb:ee:b7:e5:1d:47:37:f9:11:5b:7e:fa:12:42:65:40: f0:3d:fb:71:cb:28:67:57:55:c7:5b:bb:51:fd:ab:d9:ad:94: e6:03:75:29:96:cc:e4:94:c1:f6:62:2d:b2:3e:4d:fd:21:e7: 1f:59:d4:ee -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUeWNtn1xsoCB42XfPbw+/OC16PE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAzMTMxNDMxNTdaFw0yNzAzMTIxNDM2NTdaMDMxMTAvBgNV BAMTKDdFNkMzNkNBMjlCNUI0MDdCOUE1OEJGOTczQzZGMUU3RjZFMUNFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdidAPEC/h8Ls/vaMVShL8B5IK gCW811mZRZdRCQhmWEqoh3w0mcmw4FyC3+CTPLsklzj6ScVFVK3eE1AQgQqdQT9h hvFwgv2c6H79w4ufCL+hS3mUqKp1RzEc3nTTNoZ23wvKR/dm/GPNmhflBLx39GZM McoQPQxbmT+eDzQOOrMCDIV8kY8EC9IpV/BD1rURfeOpsY49EKg4izvS/YUXWwwN EmFlSE0DFEiz+4hgowJDWbiOmhhg0Lja3DYZ5jXVlI59bv7tQpCxuhQwjKrjzs8j g6e++Tb6DJj6V+TBZMDHZLC1oVr6DeXXV/H8haaGdbxkiN1bmlsqOSnWE/+dAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUfmw2yim1tAe5pYv5c8bx5/bhzkUwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYyMzgzYTNhMmYzNDM3 MmQzNDM3MjAzZDNlMjAzMjMxMzUzMDMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEqC04HALgwDQYJ KoZIhvcNAQELBQADggEBAER95oqI6Li0jZKoojuetUT1+VYyak3JS88xa/vWzDpC t+W1HI73Dyg3HFl8o+lz7JXLgJXSVuCsiwOD0jUtf7qBgCKIGaplykvepYVfXnn1 UrXxurLXOt75wbwBV4HlwzNzzjRq46Y8Oa508ceyWtnA9BegvkUGcuoqd7gttSzB SibLbJ5C5dc0WG7pCMUoX1ous3h8wnR5fcJVUpVoBgxB2vVkrFCpSa3eMPSaroDR X0o2ZQyowPQdSiwP95r3/2X+cA3qlafTu+635R1HN/kRW376EkJlQPA9+3HLKGdX Vcdbu1H9q9mtlOYDdSmWzOSUwfZiLbI+Tf0h5x9Z1O4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:22:49 2026 by rpki-client