
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63343a3a2f34362d3436203d3e20323134383231.roa
File: 326130623a346530373a63343a3a2f34362d3436203d3e20323134383231.roa (raw, json)
Hash identifier: d7cSJeym382SYQvVfUvPf+/U1MYtirj1IBechHhDvsM=
Subject key identifier: E7:AC:A5:68:74:2D:AB:50:8A:86:74:B5:22:52:B4:9D:BF:9A:31:98
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 59AD1CFEB85DE41E47B41D4F792CC8D8CBEB56AA
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63343a3a2f34362d3436203d3e20323134383231.roa
Signing time: Fri 13 Mar 2026 14:36:56 +0000
ROA not before: Fri 13 Mar 2026 14:31:56 +0000
ROA not after: Fri 12 Mar 2027 14:36:56 +0000
asID: 214821
IP address blocks: 2a0b:4e07:c4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ad:1c:fe:b8:5d:e4:1e:47:b4:1d:4f:79:2c:c8:d8:cb:eb:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 13 14:31:56 2026 GMT
Not After : Mar 12 14:36:56 2027 GMT
Subject: CN=E7ACA568742DAB508A8674B52252B49DBF9A3198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:60:55:d0:16:cc:63:d8:ad:72:3e:40:dd:
d0:e2:f3:9b:e3:05:25:2b:ca:d9:14:58:cd:42:ae:
53:7c:a3:a8:02:fd:9c:97:fa:51:cf:7b:c7:00:30:
57:e3:8d:ac:4e:42:a1:53:c2:38:e1:53:35:ec:48:
da:7b:3c:cf:66:9f:ea:ba:ae:f3:07:6d:75:1c:cf:
9b:02:7c:3b:aa:bf:19:a3:7e:bc:72:1d:7c:74:4f:
08:0b:9e:49:78:5c:80:7e:37:78:bf:0b:38:cb:1f:
bb:54:78:37:e7:17:d5:5d:cf:72:41:7d:b5:5a:57:
cd:ef:fe:ed:84:20:c3:84:83:63:19:ab:19:c0:64:
4a:af:bf:04:4b:d4:b7:74:a4:6a:39:6c:15:c5:9c:
a5:1e:98:ff:e7:2a:a7:7b:8d:e4:26:68:4a:96:e2:
88:a2:d1:24:49:41:1b:c5:82:02:88:ed:9a:00:d7:
04:e0:5d:ea:5d:dc:fc:af:d9:1a:71:62:9b:c1:2c:
58:f8:57:47:6a:d4:01:1c:f7:3e:ff:93:d4:a0:dd:
31:37:cb:26:5d:04:8e:0c:bb:d5:75:8f:c6:76:d0:
36:ed:8b:44:0f:a9:fb:3f:af:5d:6a:f6:7f:9a:92:
88:5c:03:a5:96:2d:e3:5e:85:8e:c6:23:b9:52:9a:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AC:A5:68:74:2D:AB:50:8A:86:74:B5:22:52:B4:9D:BF:9A:31:98
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63343a3a2f34362d3436203d3e20323134383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:c4::/46
Signature Algorithm: sha256WithRSAEncryption
17:b8:32:28:8a:d9:f6:a9:5d:47:c9:d5:aa:77:34:25:5e:9d:
51:fe:b4:2d:97:7d:13:7c:07:1e:8a:49:d0:a9:b1:09:4d:4d:
89:70:f6:8b:b5:d6:56:d1:4e:15:94:e3:ee:a2:59:ee:e5:1e:
01:ae:b0:5c:6f:98:dc:61:72:2e:9c:c9:eb:dc:95:c1:c2:1b:
be:be:b6:38:b7:31:15:5b:1e:b7:71:a8:67:a7:ea:c2:34:47:
f1:c2:41:c9:82:6c:6c:91:7a:17:34:5d:ed:04:f5:06:3d:b9:
77:ac:96:ab:ff:a0:46:ac:55:7a:fa:b8:a0:41:dc:99:cd:78:
78:15:f0:79:7b:2d:0f:c5:2c:40:0c:d6:fb:c3:6b:dc:54:18:
78:3d:ee:be:a3:8d:5b:b4:2c:ce:0e:0e:53:4b:0a:c3:b8:08:
36:46:57:fb:a8:7a:5f:44:1b:a1:a4:8e:f6:3d:c8:2b:cb:ff:
7c:6d:3a:95:6c:20:e2:5c:ad:0f:8c:f6:f3:b7:fb:e4:61:83:
eb:9e:ab:32:87:40:9a:08:35:df:98:d9:bc:7a:a5:14:0c:02:
e7:0e:97:e4:0d:bb:5c:83:98:9f:a9:3b:a1:21:f3:7d:4b:73:
51:4e:97:bf:32:9e:dc:19:ab:28:9d:35:c5:f2:da:22:95:34:
10:09:6c:6a
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUWa0c/rhd5B5HtB1PeSzI2MvrVqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAzMTMxNDMxNTZaFw0yNzAzMTIxNDM2NTZaMDMxMTAvBgNV
BAMTKEU3QUNBNTY4NzQyREFCNTA4QTg2NzRCNTIyNTJCNDlEQkY5QTMxOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY1GBV0BbMY9itcj5A3dDi85vj
BSUrytkUWM1CrlN8o6gC/ZyX+lHPe8cAMFfjjaxOQqFTwjjhUzXsSNp7PM9mn+q6
rvMHbXUcz5sCfDuqvxmjfrxyHXx0TwgLnkl4XIB+N3i/CzjLH7tUeDfnF9Vdz3JB
fbVaV83v/u2EIMOEg2MZqxnAZEqvvwRL1Ld0pGo5bBXFnKUemP/nKqd7jeQmaEqW
4oii0SRJQRvFggKI7ZoA1wTgXepd3Pyv2RpxYpvBLFj4V0dq1AEc9z7/k9Sg3TE3
yyZdBI4Mu9V1j8Z20Dbti0QPqfs/r11q9n+akohcA6WWLeNehY7GI7lSmpwlAgMB
AAGjggJmMIICYjAdBgNVHQ4EFgQU56ylaHQtq1CKhnS1IlK0nb+aMZgwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYzMzQzYTNhMmYzNDM2
MmQzNDM2MjAzZDNlMjAzMjMxMzQzODMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAMQwDQYJ
KoZIhvcNAQELBQADggEBABe4MiiK2fapXUfJ1ap3NCVenVH+tC2XfRN8Bx6KSdCp
sQlNTYlw9ou11lbRThWU4+6iWe7lHgGusFxvmNxhci6cyevclcHCG76+tji3MRVb
HrdxqGen6sI0R/HCQcmCbGyRehc0Xe0E9QY9uXeslqv/oEasVXr6uKBB3JnNeHgV
8Hl7LQ/FLEAM1vvDa9xUGHg97r6jjVu0LM4ODlNLCsO4CDZGV/uoel9EG6GkjvY9
yCvL/3xtOpVsIOJcrQ+M9vO3++Rhg+ueqzKHQJoINd+Y2bx6pRQMAucOl+QNu1yD
mJ+pO6Eh831Lc1FOl78yntwZqyidNcXy2iKVNBAJbGo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:14 2026 by rpki-client