
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64323a3a2f34382d3438203d3e20323034363034.roa
File: 326130623a346530373a64323a3a2f34382d3438203d3e20323034363034.roa (raw, json)
Hash identifier: 3l+S4ALjMDOMBuxzu22IYsxo8+h796FXT+h34l37gcc=
Subject key identifier: 93:22:09:75:63:EE:F8:50:55:4D:08:9C:3F:CE:F1:32:EA:B6:E2:CA
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 5515D8CB44492373EC15F5B128B5949CE1C1662A
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64323a3a2f34382d3438203d3e20323034363034.roa
Signing time: Wed 11 Mar 2026 14:55:40 +0000
ROA not before: Wed 11 Mar 2026 14:50:40 +0000
ROA not after: Wed 10 Mar 2027 14:55:40 +0000
asID: 204604
IP address blocks: 2a0b:4e07:d2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:15:d8:cb:44:49:23:73:ec:15:f5:b1:28:b5:94:9c:e1:c1:66:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 11 14:50:40 2026 GMT
Not After : Mar 10 14:55:40 2027 GMT
Subject: CN=9322097563EEF850554D089C3FCEF132EAB6E2CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:93:e1:11:ba:0f:e6:c4:ab:94:e0:d5:f7:
28:df:39:12:96:e2:6a:53:65:87:a1:b4:3e:f6:18:
85:36:67:96:2e:91:ad:28:35:07:51:ad:79:9a:36:
80:6c:e9:f9:3a:86:ed:11:bf:bd:ae:61:84:30:2e:
9b:3a:8c:5f:6f:27:1e:75:fd:15:eb:9b:ff:b2:22:
47:0d:c5:f3:1e:34:9c:88:9b:60:55:39:89:b2:b5:
1e:7c:63:2f:44:fa:8e:f1:a3:02:d2:ef:6f:8b:06:
e4:67:d9:a6:66:45:47:cd:d2:31:4c:8b:7f:b4:3e:
6c:cb:9a:19:90:a5:e2:9d:d0:41:8e:ca:af:07:3a:
27:1c:97:7c:20:e6:b9:76:28:47:f9:99:63:17:f1:
68:be:30:8b:59:74:91:2c:a7:a2:37:5f:3c:52:e6:
9d:5f:7c:8a:14:46:08:87:90:85:d4:59:ca:9e:30:
dc:36:2a:f6:21:9e:eb:42:e2:65:3f:ec:a0:ad:81:
a1:ad:70:19:ce:0d:6e:e9:d6:72:d7:7f:4f:57:76:
f5:89:ed:68:5b:58:d7:d7:4b:ca:5f:48:dc:44:17:
10:01:c4:ed:62:f5:a5:03:57:3f:5f:f3:58:3d:d7:
db:bb:8b:37:a7:77:a5:1b:7b:3a:d0:5a:98:35:ee:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:09:75:63:EE:F8:50:55:4D:08:9C:3F:CE:F1:32:EA:B6:E2:CA
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64323a3a2f34382d3438203d3e20323034363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:d2::/48
Signature Algorithm: sha256WithRSAEncryption
44:22:f2:bb:39:bf:75:8f:e2:2e:6c:cd:a9:da:b9:b1:ac:2a:
9d:31:b6:4f:07:11:29:32:d8:a8:4f:d2:c4:66:ae:8f:c1:eb:
5d:2c:bf:94:1e:15:64:6a:f3:de:f3:61:3b:58:ca:9f:a8:17:
78:11:93:fa:8c:8c:97:aa:4f:ab:62:ad:6d:fb:0d:26:ae:3c:
8d:b1:9d:0e:a3:af:62:01:b3:08:f3:ca:da:27:50:49:bf:2c:
8a:54:6e:83:39:21:e8:74:7a:df:13:10:11:6c:9b:f6:aa:42:
28:52:61:dc:79:36:d5:f0:5c:5e:b4:0b:b9:a1:a5:07:86:b4:
28:96:ca:0b:24:d8:08:03:51:7e:b2:87:97:c6:08:e7:ec:30:
77:f0:77:42:78:2a:25:2c:7f:20:47:48:2c:ce:00:60:54:4a:
1e:16:ed:b6:51:14:54:0a:7f:16:dc:e1:c7:76:47:57:f0:d9:
63:b2:f1:e5:f2:d5:73:f6:21:42:4b:67:12:2b:1c:87:26:5c:
d0:6c:1b:ee:fa:93:e0:44:0e:4a:dc:b9:cf:e1:dc:4b:d6:bc:
ef:e4:82:be:66:79:24:7e:d8:c5:28:db:19:56:e3:33:80:19:
58:09:58:8c:9d:61:0e:83:eb:dd:87:40:d3:df:ec:e7:21:d4:
8b:10:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:31:53 2026 by rpki-client