
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62613a3a2f34372d3438203d3e20323132343730.roa
File: 326130623a346530373a62613a3a2f34372d3438203d3e20323132343730.roa (raw, json)
Hash identifier: GBYliGFwBtYabbCo9VpyrKzVfSkFR3fvLh5CMVZ8EEw=
Subject key identifier: BE:D3:2C:EC:E4:CE:E4:C5:9F:01:F6:0E:D7:15:BC:74:CE:74:94:10
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 3FDA1E3571C8B5C1150FB01DA2D2959B6F045EDB
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62613a3a2f34372d3438203d3e20323132343730.roa
Signing time: Fri 13 Mar 2026 20:36:57 +0000
ROA not before: Fri 13 Mar 2026 20:31:57 +0000
ROA not after: Fri 12 Mar 2027 20:36:57 +0000
asID: 212470
IP address blocks: 2a0b:4e07:ba::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:da:1e:35:71:c8:b5:c1:15:0f:b0:1d:a2:d2:95:9b:6f:04:5e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 13 20:31:57 2026 GMT
Not After : Mar 12 20:36:57 2027 GMT
Subject: CN=BED32CECE4CEE4C59F01F60ED715BC74CE749410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:ba:d4:13:cc:97:19:46:03:eb:e6:58:0c:
b4:2c:61:48:20:10:1b:89:c6:50:f8:7a:ce:6b:f3:
7b:11:9b:43:56:1c:8f:2a:55:06:2a:c9:7e:2e:7c:
3b:42:39:27:86:1c:5e:3c:dd:8f:68:f2:63:95:b6:
73:87:82:5f:6f:e4:97:d6:57:a6:35:11:e0:52:98:
d2:b0:6f:3f:84:89:25:b2:df:30:43:ee:55:19:1f:
b7:4a:40:e4:00:87:4e:01:1e:a9:15:b3:b0:7f:1a:
46:6d:be:e2:06:47:d9:56:09:d6:40:2b:6f:96:1a:
2e:1e:ee:fd:cb:fd:69:8b:80:4b:e1:a9:4c:60:35:
f5:60:d8:b1:3b:63:41:22:e3:b8:d2:67:f9:75:00:
af:01:bb:3c:64:e2:12:98:e0:e8:25:2a:16:c4:8b:
df:f6:fa:51:b4:7a:a8:36:93:30:12:b8:15:6b:98:
6d:98:64:dc:ca:8d:32:a7:bd:14:fd:06:72:25:27:
0f:57:8a:f6:3d:02:8c:c8:83:2a:07:f1:6d:d5:70:
85:6c:3b:fe:a7:13:da:95:97:b9:a7:b4:2c:0e:7f:
f9:c7:f9:ef:3c:82:6a:f8:b6:d8:c2:38:7b:51:bc:
19:4b:20:f5:04:25:4d:11:ec:1e:a9:7b:6b:2d:03:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:2C:EC:E4:CE:E4:C5:9F:01:F6:0E:D7:15:BC:74:CE:74:94:10
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62613a3a2f34372d3438203d3e20323132343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:ba::/47
Signature Algorithm: sha256WithRSAEncryption
07:05:f8:8f:03:5f:76:34:a2:39:d7:8f:6a:be:06:56:3a:97:
92:51:97:4b:f7:a0:cf:97:4b:b3:00:b3:01:5d:ca:96:0b:68:
ca:06:aa:2e:49:15:dd:16:83:26:ac:dd:a8:b5:b6:0f:05:2c:
a0:6b:56:f3:13:55:ee:d6:78:bd:56:7d:65:98:03:a9:66:3e:
b3:0d:f8:81:39:75:87:6d:56:e5:14:85:4c:2f:44:b9:1b:b6:
58:09:92:0d:dd:71:58:65:77:84:f7:6a:24:af:bb:bf:c1:db:
a3:ae:9b:86:7a:31:d6:85:7a:b4:80:71:e7:4e:93:33:04:7e:
dc:01:fb:84:c0:bb:57:a5:d2:88:20:59:5e:87:4a:56:9d:4d:
81:39:57:a0:f5:d4:36:2a:61:b8:11:c1:aa:8e:81:82:4e:b9:
53:d6:17:d6:99:01:95:5b:83:59:28:02:09:53:30:18:d5:84:
46:e9:c6:50:a2:20:c2:2f:de:5a:af:87:15:f6:b8:1d:7a:e5:
c8:6a:4b:cc:60:8b:64:cc:ed:d1:32:b6:4a:78:96:ce:88:b8:
e3:ad:e8:7c:eb:09:08:66:b3:a8:a3:28:7d:ec:c4:6a:51:91:
d1:33:e3:83:02:81:7e:0d:91:78:15:bc:24:bd:c3:e9:71:24:
e9:27:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:30 2026 by rpki-client