
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa
File: 326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier: +clvl4gpCwwzSnh8/UXiEhGui1ko2yUCsczkjnTxAj0=
Subject key identifier: 96:90:00:28:78:D9:4D:2E:6F:66:32:90:16:A0:42:0A:36:5F:1B:2D
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 2B8ADA5B1C05ECE1757CFB783A69F4F61CC8F0B2
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa
Signing time: Fri 13 Mar 2026 20:36:57 +0000
ROA not before: Fri 13 Mar 2026 20:31:57 +0000
ROA not after: Fri 12 Mar 2027 20:36:57 +0000
asID: 13852
IP address blocks: 2a0b:4e07:da::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8a:da:5b:1c:05:ec:e1:75:7c:fb:78:3a:69:f4:f6:1c:c8:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 13 20:31:57 2026 GMT
Not After : Mar 12 20:36:57 2027 GMT
Subject: CN=9690002878D94D2E6F66329016A0420A365F1B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:1c:c3:cb:42:47:cb:3e:45:58:19:73:35:
03:e3:08:6e:32:27:82:4e:6b:12:8f:e0:70:e2:a5:
31:b6:7c:31:06:b2:ce:c4:f0:f4:09:69:c4:21:a7:
c2:53:40:23:2c:88:f2:97:c4:18:f9:8a:c7:af:7c:
2b:d7:b2:50:71:26:e9:30:24:35:fc:d2:3e:4b:51:
6d:38:dc:78:e4:03:dd:80:3b:ff:e6:db:07:0c:76:
68:19:67:ba:48:fd:6f:9b:0d:97:8a:2d:e9:58:28:
e6:ea:63:eb:7f:28:c7:81:e3:21:01:77:3c:bf:bd:
dc:ed:fd:69:76:24:b7:b1:bd:a0:ac:cd:98:c7:27:
3c:e6:10:2a:2b:3f:e9:27:9d:e1:79:9f:a9:48:c0:
53:6e:6c:33:b2:e7:03:16:43:28:c6:c1:6f:a5:62:
e5:68:65:61:a2:4e:bc:90:7a:40:6d:9d:5f:bb:2a:
6b:df:be:19:fb:7c:2b:f0:38:fa:b6:ee:7d:b1:16:
14:0a:5e:c6:06:74:c2:51:27:f9:45:a6:45:5c:68:
5e:1d:f3:84:0e:d1:76:35:a9:e4:56:2f:17:3d:92:
5e:f2:ce:73:28:1f:b3:83:ef:0e:d2:16:71:7a:10:
28:9b:0e:66:36:37:98:93:52:f2:4f:54:b4:aa:6d:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:00:28:78:D9:4D:2E:6F:66:32:90:16:A0:42:0A:36:5F:1B:2D
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:da::/48
Signature Algorithm: sha256WithRSAEncryption
77:bd:29:73:27:9c:09:8c:b2:af:2f:e5:e5:ad:cc:b7:8a:11:
25:65:6d:8f:ed:f4:f9:90:47:e4:ec:8b:3e:95:ff:85:08:b1:
c0:26:fe:8e:e7:ec:6c:c1:24:d2:19:b9:21:0b:1d:7f:b8:68:
0f:8f:11:21:c7:d9:cd:dd:20:eb:3c:10:05:cd:f8:71:36:be:
61:13:b2:56:2b:89:d4:6c:e2:23:6a:ba:4a:b4:e4:a7:19:9e:
39:b9:14:77:3a:01:ad:07:5d:37:1d:dc:f7:68:a2:37:58:99:
9e:0e:8e:78:af:ae:7d:e8:bf:c9:6e:d9:16:b6:b4:e8:6f:33:
1e:bd:66:04:1f:52:27:8d:09:f4:ab:3e:d8:79:16:84:e3:69:
8b:23:fe:ac:0a:18:74:3a:81:ca:e1:54:e5:56:15:cc:1d:95:
a3:89:7b:d9:31:3d:5e:ea:b6:7c:9f:b6:bd:07:06:88:a9:18:
25:2a:69:e7:6c:ca:dd:69:b6:7e:6f:14:8d:7a:e2:34:6c:30:
64:fe:bc:ef:b6:10:0e:b1:be:15:af:ac:f1:ff:d6:e7:ad:1f:
72:4a:81:ae:7a:51:8b:0a:d6:3c:cf:cd:48:f9:b4:25:36:e4:
37:5f:3f:5b:42:a7:ab:0f:9d:45:ff:a2:8e:b2:19:87:99:ae:
a9:18:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:54 2026 by rpki-client