
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa
File: 326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa (raw, json)
Hash identifier: UAr9f8DVbX/N1BXREmwdylDL0TN2MvCIU+uECjIE3wA=
Subject key identifier: 8F:46:AB:F5:E0:2E:36:52:1C:C2:D0:59:D1:09:0C:17:94:29:6B:F9
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 42177E00C37FF3CFB787DB9EEBF0FEDD7C36C45B
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa
Signing time: Fri 13 Mar 2026 14:36:56 +0000
ROA not before: Fri 13 Mar 2026 14:31:56 +0000
ROA not after: Fri 12 Mar 2027 14:36:56 +0000
asID: 214818
IP address blocks: 2a0b:4e07:c68::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:17:7e:00:c3:7f:f3:cf:b7:87:db:9e:eb:f0:fe:dd:7c:36:c4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 13 14:31:56 2026 GMT
Not After : Mar 12 14:36:56 2027 GMT
Subject: CN=8F46ABF5E02E36521CC2D059D1090C1794296BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:a4:2f:5e:6c:14:4a:6a:7e:8f:56:e7:46:
16:85:de:6f:5c:fe:1d:81:7c:23:28:39:e6:a3:1c:
56:4a:9c:1d:9c:91:53:2e:89:fa:e4:79:1b:c3:66:
c8:6a:1d:80:89:8a:c2:45:02:19:1a:ad:97:b4:9c:
11:8e:9f:70:fe:57:d0:5d:3c:d9:79:6a:7f:15:cc:
b5:75:bd:ea:00:0f:6d:66:ed:d7:b9:67:47:22:ec:
7e:09:cf:60:e1:fd:bf:7f:97:5e:5e:39:86:4d:18:
b3:27:35:26:f7:4c:25:d1:a9:01:b6:12:ab:e5:d8:
d6:8d:eb:b1:89:e8:0a:00:31:00:48:25:71:89:a5:
e3:1c:cb:7d:07:7c:13:0e:9f:5d:9f:ef:92:64:c2:
d9:c4:cc:06:ad:a2:1d:9a:26:9e:8d:23:36:d7:37:
84:e4:df:a2:cd:82:0d:11:79:53:b3:4b:8b:fa:0b:
62:92:9e:d4:a3:6e:a4:89:d5:54:50:5e:50:13:04:
73:74:13:9f:0c:a0:c3:c2:b1:4d:5c:3b:19:f1:fd:
56:84:b6:1a:44:78:eb:d3:ab:61:95:e7:e9:3f:a0:
dc:df:c1:f3:5d:2a:5a:0e:09:ba:20:de:37:fa:be:
b9:e4:70:b3:5c:ed:13:c8:3b:e3:96:e5:74:a1:4c:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:46:AB:F5:E0:2E:36:52:1C:C2:D0:59:D1:09:0C:17:94:29:6B:F9
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:c68::/46
Signature Algorithm: sha256WithRSAEncryption
9a:65:eb:b7:e2:c7:07:c2:b8:93:76:1a:71:ba:c0:f7:41:e7:
e8:d4:34:02:d8:79:e5:eb:52:b3:23:d8:58:3b:17:76:b8:00:
14:ab:e9:7e:5f:1c:9d:1e:35:0a:27:2b:10:6a:9e:eb:a0:c7:
3c:cc:ba:15:3d:4d:9f:3c:88:c7:1a:20:5a:9b:3f:7b:4f:bd:
5e:44:d5:66:dd:2d:ca:29:00:44:dd:25:e5:c3:00:79:28:71:
bc:97:30:36:86:24:40:16:e2:c8:c4:7a:cc:1a:bc:36:12:27:
d2:76:b5:c3:d5:52:8b:41:9b:80:3a:c1:f2:e6:73:6a:aa:e2:
0c:05:2c:1b:0b:a0:38:41:b1:f2:ad:b2:49:4c:94:21:e1:c8:
0f:d8:bd:d7:1f:3a:32:1e:d1:05:1c:75:1c:fb:97:b0:5b:c5:
8f:ae:34:73:25:44:9c:db:86:60:ad:13:93:0e:3d:c0:57:16:
56:2c:f9:40:cd:d6:08:3e:af:e1:b1:36:47:05:93:ce:58:b5:
33:90:ce:1e:4b:17:03:13:4b:2b:01:c6:4e:dd:44:c5:ed:78:
ef:02:5f:1e:19:0b:9f:14:29:d8:71:fb:78:a2:7d:65:78:a0:
4e:6b:ae:73:32:8b:6c:25:54:e2:f4:b6:fd:bb:e8:6b:ba:aa:
cb:37:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:36 2026 by rpki-client