$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211281.roa File: AS211281.roa (raw, json) Hash identifier: Yp/XMLtl41FUvu8AE8J8EYoTnZ6qAEHvCxSTjfPLXqU= Subject key identifier: B2:D5:00:2A:86:CE:62:2A:D0:7A:06:0F:B0:72:F3:28:88:73:C0:33 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4DE654F1FE349E51629CA928E8E1210CBC8405E7 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211281.roa Signing time: Tue 28 Apr 2026 13:22:48 +0000 ROA not before: Tue 28 Apr 2026 13:17:48 +0000 ROA not after: Tue 27 Apr 2027 13:22:48 +0000 asID: 211281 IP address blocks: 2a0b:4e07:28::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e6:54:f1:fe:34:9e:51:62:9c:a9:28:e8:e1:21:0c:bc:84:05:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:48 2026 GMT Not After : Apr 27 13:22:48 2027 GMT Subject: CN=B2D5002A86CE622AD07A060FB072F3288873C033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:81:6c:2d:3d:ab:4a:d1:09:e3:d1:75:d1:91: 32:49:11:83:66:7e:0a:3f:4f:48:bf:4e:96:ab:e6: 9c:4f:af:74:29:0f:e1:f4:bc:96:1a:af:0e:f4:9f: 96:04:7a:73:91:0a:1f:82:f7:d5:1e:b5:25:cb:bb: bf:a0:3e:d7:d5:c1:39:75:d9:23:01:ee:82:df:db: 16:11:27:4d:5f:0e:7d:78:e7:f9:16:6f:5d:d2:6f: 75:a8:e1:4b:51:00:ee:7f:c2:21:bf:29:5a:8b:b2: 1f:28:7d:1f:16:7a:55:61:8a:31:4b:3d:41:1c:5b: ae:a9:b3:f9:8b:ec:8e:fa:9d:36:bf:80:f1:8f:7e: 06:59:61:ae:4b:6b:af:c9:e2:4c:f4:e7:ee:33:93: d4:41:78:66:70:85:34:67:62:7e:0e:55:5b:79:5e: 65:14:e6:3a:59:8c:d1:5d:9c:66:91:cb:0d:a6:e5: ff:b8:25:a5:af:66:8f:78:28:cf:ea:dd:21:e9:a7: da:a6:14:01:6b:71:8f:b4:da:7d:5a:d3:1e:60:81: 05:9a:2b:40:f3:c3:a6:8a:93:a9:3d:b5:64:4d:f6: 64:75:2b:8f:85:91:e7:74:e8:30:1b:a6:79:4b:53: e1:11:e0:e0:95:f3:85:b7:c1:7f:84:fd:c6:b9:28: 50:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D5:00:2A:86:CE:62:2A:D0:7A:06:0F:B0:72:F3:28:88:73:C0:33 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:28::/47 Signature Algorithm: sha256WithRSAEncryption 58:92:15:36:49:5c:e2:24:e9:2c:70:89:07:1b:90:57:ba:2e: b5:4c:96:c3:41:1f:f3:76:a8:de:06:c1:03:c9:bc:13:50:e2: 35:90:70:4d:51:9e:0d:7e:21:b2:1f:d7:c2:2d:ce:67:6f:5a: d7:34:4a:5b:b6:fd:e0:04:a2:d7:b7:9e:67:49:f1:c2:38:8f: dd:d2:5b:8b:01:2f:56:fa:94:94:3b:f6:aa:08:37:f1:29:04: 48:0d:90:24:8c:ae:e1:92:e4:63:d8:06:f4:15:1e:2c:06:c2: 68:44:d0:49:18:1e:d3:c2:14:56:d5:b5:37:39:a3:ac:50:27: 5c:56:6e:6d:f2:bd:18:10:43:82:a9:98:8e:e4:f3:59:ab:ed: 79:c0:90:93:e6:5c:3f:8a:8a:76:92:e0:23:58:61:55:9d:f4: e1:cf:d4:e3:e2:60:8b:be:59:b0:13:b6:25:5f:c6:41:3f:e0: d3:1e:da:a2:82:94:76:39:53:bb:da:c1:43:b9:62:14:eb:d2: e9:9c:9e:34:77:1c:44:5c:a7:37:f2:1b:d6:07:e2:80:02:5d: d8:cb:6c:02:8e:6d:c5:e2:61:4c:c6:f4:ca:8a:73:77:29:fe: e6:5f:08:16:d3:7d:4e:7e:b8:bc:1b:6d:5d:f4:d2:7c:7c:b0: ca:4d:10:a1 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUTeZU8f40nlFinKko6OEhDLyEBecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDhaFw0yNzA0MjcxMzIyNDhaMDMxMTAvBgNV BAMTKEIyRDUwMDJBODZDRTYyMkFEMDdBMDYwRkIwNzJGMzI4ODg3M0MwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4gWwtPatK0Qnj0XXRkTJJEYNm fgo/T0i/Tpar5pxPr3QpD+H0vJYarw70n5YEenORCh+C99UetSXLu7+gPtfVwTl1 2SMB7oLf2xYRJ01fDn145/kWb13Sb3Wo4UtRAO5/wiG/KVqLsh8ofR8WelVhijFL PUEcW66ps/mL7I76nTa/gPGPfgZZYa5La6/J4kz05+4zk9RBeGZwhTRnYn4OVVt5 XmUU5jpZjNFdnGaRyw2m5f+4JaWvZo94KM/q3SHpp9qmFAFrcY+02n1a0x5ggQWa K0Dzw6aKk6k9tWRN9mR1K4+Fked06DAbpnlLU+ER4OCV84W3wX+E/ca5KFDTAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUstUAKobOYirQegYPsHLzKIhzwDMwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTEyODEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEqC04HACgwDQYJKoZIhvcNAQEL BQADggEBAFiSFTZJXOIk6SxwiQcbkFe6LrVMlsNBH/N2qN4GwQPJvBNQ4jWQcE1R ng1+IbIf18ItzmdvWtc0Slu2/eAEote3nmdJ8cI4j93SW4sBL1b6lJQ79qoIN/Ep BEgNkCSMruGS5GPYBvQVHiwGwmhE0EkYHtPCFFbVtTc5o6xQJ1xWbm3yvRgQQ4Kp mI7k81mr7XnAkJPmXD+KinaS4CNYYVWd9OHP1OPiYIu+WbATtiVfxkE/4NMe2qKC lHY5U7vawUO5YhTr0umcnjR3HERcpzfyG9YH4oACXdjLbAKObcXiYUzG9MqKc3cp /uZfCBbTfU5+uLwbbV300nx8sMpNEKE= -----END CERTIFICATE-----Generated at Wed May 13 06:38:31 2026 by rpki-client