$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa File: AS11967.roa (raw, json) Hash identifier: qfSa/J94/yyn50HzAh0ygXlAciV4QJWSTQultN/ltaQ= Subject key identifier: EF:8B:32:4E:80:B0:03:AA:5B:B2:80:D8:C3:90:36:6C:5D:D3:8E:66 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 79B69405B9AA73377CC4929E24937E2E4C7E7520 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa Signing time: Mon 11 May 2026 20:42:11 +0000 ROA not before: Mon 11 May 2026 20:37:11 +0000 ROA not after: Mon 10 May 2027 20:42:11 +0000 asID: 11967 IP address blocks: 2a0b:4e07:3::/48 maxlen: 48 2a0b:4e07:10::/44 maxlen: 44 2a0b:4e07:24::/48 maxlen: 48 2a0b:4e07:25::/48 maxlen: 48 2a0b:4e07:2c::/48 maxlen: 48 2a0b:4e07:2e::/48 maxlen: 48 2a0b:4e07:3c::/48 maxlen: 48 2a0b:4e07:3e::/48 maxlen: 48 2a0b:4e07:3f::/48 maxlen: 48 2a0b:4e07:47::/48 maxlen: 48 2a0b:4e07:80::/48 maxlen: 48 2a0b:4e07:b4::/48 maxlen: 48 2a0b:4e07:c1::/48 maxlen: 48 2a0b:4e07:bec::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b6:94:05:b9:aa:73:37:7c:c4:92:9e:24:93:7e:2e:4c:7e:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: May 11 20:37:11 2026 GMT Not After : May 10 20:42:11 2027 GMT Subject: CN=EF8B324E80B003AA5BB280D8C390366C5DD38E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:53:67:b6:aa:49:06:5a:59:10:d5:01:d8: c7:56:d2:2c:f1:8a:41:83:e7:43:e7:46:d4:f0:0a: 25:4c:dd:24:67:e0:37:70:fc:cf:68:d1:a1:4c:06: 4e:17:4c:10:1a:e0:8d:94:db:83:4f:35:6d:86:51: 02:e3:ad:80:10:0c:44:61:27:50:66:92:dd:72:e0: e9:79:6b:eb:73:b0:a4:6d:76:c6:20:cb:7e:7d:97: cf:c7:bf:1f:ab:0f:28:44:09:c1:4f:a2:54:9a:bc: 1d:db:79:7e:69:c6:0d:2f:88:8a:65:42:21:f9:d6: 91:6b:32:c7:a0:04:56:c5:2b:ab:6c:ce:87:fc:70: c1:09:46:74:75:e9:28:c5:ac:c0:5d:8a:03:c0:72: 72:32:af:c0:fa:1b:78:c2:7f:07:4e:d1:b5:84:b9: fd:32:10:5e:56:4a:13:dd:f3:e9:e7:d4:ca:7e:20: 63:c2:d1:9b:f2:af:14:f6:03:23:6c:ef:88:0a:b2: 3a:ca:ee:66:e5:c9:3c:4d:a8:d5:4d:a6:8c:6a:d7: 29:d2:a4:64:9f:40:51:4f:45:5a:34:70:68:15:6e: 5f:f0:98:bf:91:6a:c3:20:05:09:18:a2:ca:5c:52: 07:0d:b3:57:74:e9:45:5a:8e:a7:b1:20:58:b2:04: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8B:32:4E:80:B0:03:AA:5B:B2:80:D8:C3:90:36:6C:5D:D3:8E:66 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3::/48 2a0b:4e07:10::/44 2a0b:4e07:24::/47 2a0b:4e07:2c::/48 2a0b:4e07:2e::/48 2a0b:4e07:3c::/48 2a0b:4e07:3e::/47 2a0b:4e07:47::/48 2a0b:4e07:80::/48 2a0b:4e07:b4::/48 2a0b:4e07:c1::/48 2a0b:4e07:bec::/47 Signature Algorithm: sha256WithRSAEncryption 00:ba:d2:97:e0:96:ac:3b:7c:33:40:63:d2:79:c2:43:b1:b8: 5c:34:74:f2:14:23:b3:43:af:3e:a3:ea:0e:95:b3:45:17:d1: 41:bb:32:6e:0b:2a:d0:c0:a1:63:57:e4:fc:51:fb:17:c7:ee: 3e:03:5b:50:08:1d:af:e3:a3:08:ec:bb:e2:1c:62:71:1c:be: fc:89:f7:3e:0d:6d:71:3d:29:09:fe:03:f3:00:12:ad:9b:c7: 0e:e6:da:04:0c:56:4b:b2:94:65:dd:cc:c3:d8:56:54:d7:1c: 9a:c9:df:e5:31:7e:b7:2d:0f:ec:2c:75:08:58:42:f7:70:ce: ac:8d:17:c3:a5:2b:59:fa:cf:75:99:ac:12:91:02:82:1a:b1: dd:55:f0:36:d0:ca:06:75:79:29:b5:fa:a9:0f:9c:e3:dd:98: b6:da:4a:b8:da:80:08:62:79:42:aa:c4:ea:80:30:cb:9c:a7: ed:1d:a8:d3:ac:02:56:37:50:2c:b7:b2:55:78:37:15:ea:4c: b3:76:16:0c:33:19:27:67:2e:1b:bd:ca:90:e2:e9:90:f5:64: 83:76:a9:dd:88:48:0e:9e:71:b2:8f:71:81:3a:62:b7:84:91: 3f:d8:77:b6:69:97:b7:76:a7:42:33:9a:52:52:a0:aa:29:2d: a3:d2:06:46 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIUebaUBbmqczd8xJKeJJN+Lkx+dSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA1MTEyMDM3MTFaFw0yNzA1MTAyMDQyMTFaMDMxMTAvBgNV BAMTKEVGOEIzMjRFODBCMDAzQUE1QkIyODBEOEMzOTAzNjZDNUREMzhFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/D1NntqpJBlpZENUB2MdW0izx ikGD50PnRtTwCiVM3SRn4Ddw/M9o0aFMBk4XTBAa4I2U24NPNW2GUQLjrYAQDERh J1Bmkt1y4Ol5a+tzsKRtdsYgy359l8/Hvx+rDyhECcFPolSavB3beX5pxg0viIpl QiH51pFrMsegBFbFK6tszof8cMEJRnR16SjFrMBdigPAcnIyr8D6G3jCfwdO0bWE uf0yEF5WShPd8+nn1Mp+IGPC0ZvyrxT2AyNs74gKsjrK7mblyTxNqNVNpoxq1ynS pGSfQFFPRVo0cGgVbl/wmL+RasMgBQkYospcUgcNs1d06UVajqexIFiyBJzrAgMB AAGjggKQMIICjDAdBgNVHQ4EFgQU74syToCwA6pbsoDYw5A2bF3TjmYwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMxMTk2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB hQYIKwYBBQUHAQcBAf8EdjB0MHIEAgACMGwDBwAqC04HAAMDBwQqC04HABADBwEq C04HACQDBwAqC04HACwDBwAqC04HAC4DBwAqC04HADwDBwEqC04HAD4DBwAqC04H AEcDBwAqC04HAIADBwAqC04HALQDBwAqC04HAMEDBwEqC04HC+wwDQYJKoZIhvcN AQELBQADggEBAAC60pfglqw7fDNAY9J5wkOxuFw0dPIUI7NDrz6j6g6Vs0UX0UG7 Mm4LKtDAoWNX5PxR+xfH7j4DW1AIHa/jowjsu+IcYnEcvvyJ9z4NbXE9KQn+A/MA Eq2bxw7m2gQMVkuylGXdzMPYVlTXHJrJ3+UxfrctD+wsdQhYQvdwzqyNF8OlK1n6 z3WZrBKRAoIasd1V8DbQygZ1eSm1+qkPnOPdmLbaSrjagAhieUKqxOqAMMucp+0d qNOsAlY3UCy3slV4NxXqTLN2FgwzGSdnLhu9ypDi6ZD1ZIN2qd2ISA6ecbKPcYE6 YreEkT/Yd7Zpl7d2p0IzmlJSoKopLaPSBkY= -----END CERTIFICATE-----Generated at Tue May 12 21:53:58 2026 by rpki-client