$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211411.roa File: AS211411.roa (raw, json) Hash identifier: hXSPKJ/LvD4/HKjjSE/Wj/iOLaCEtbGGoXaBVrWw6P0= Subject key identifier: 29:B9:6F:12:88:24:A0:C0:CD:DA:0F:91:D8:E4:84:50:19:86:A3:3C Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 0DF2B209EF52789F625D515856BA2559B2F2CBE1 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211411.roa Signing time: Tue 28 Apr 2026 13:22:46 +0000 ROA not before: Tue 28 Apr 2026 13:17:46 +0000 ROA not after: Tue 27 Apr 2027 13:22:46 +0000 asID: 211411 IP address blocks: 2a0b:4e07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f2:b2:09:ef:52:78:9f:62:5d:51:58:56:ba:25:59:b2:f2:cb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:46 2026 GMT Not After : Apr 27 13:22:46 2027 GMT Subject: CN=29B96F128824A0C0CDDA0F91D8E484501986A33C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:3b:2f:cf:36:e7:f6:74:c0:72:65:a1:64: 3f:09:56:e9:f3:ed:d8:ed:25:66:1f:af:58:62:22: bc:3c:84:02:8f:9d:4a:5e:3d:25:47:d1:0f:07:8c: 19:be:d9:8a:b1:bf:fc:4c:1e:97:99:b4:4f:e8:02: 61:30:29:70:6d:59:c0:fc:85:0c:2d:91:a9:d5:0a: 3e:7e:06:53:91:54:e1:be:d7:50:a6:95:1f:16:ce: 5d:44:ab:9e:c2:9e:7e:9f:e4:68:bb:da:6c:02:df: 8e:2f:0e:42:84:f1:a1:77:4b:9f:a7:b1:42:6f:27: 0b:49:77:be:11:62:cd:22:d2:71:f6:a7:6f:22:77: 8c:7f:c9:49:39:c7:5a:05:40:f0:4a:85:e0:cf:91: 00:19:db:5d:70:4a:18:2d:a8:42:20:64:40:f5:14: b6:67:40:78:82:82:a4:37:8f:e4:b0:ce:6d:23:34: 9d:78:f8:c5:ec:8f:e1:82:f8:e6:97:b8:bd:d1:6c: 31:5f:33:ab:b9:82:60:31:30:6d:3f:11:8f:42:a7: 6b:8c:67:57:94:fd:8c:da:46:bd:59:01:f3:df:15: e8:eb:a6:cd:66:e4:37:3b:13:f7:51:72:53:9f:5d: e8:b4:18:45:d1:33:8f:9c:43:be:f9:27:55:2b:0e: 9f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B9:6F:12:88:24:A0:C0:CD:DA:0F:91:D8:E4:84:50:19:86:A3:3C X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211411.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07::/48 Signature Algorithm: sha256WithRSAEncryption 3b:5a:dc:0f:55:f1:fd:df:d2:ec:54:59:68:84:d2:1e:d9:82: 9c:a9:78:ef:6e:1c:1c:b9:e8:25:18:50:54:97:db:2a:2d:16: 97:f0:6c:f6:51:39:84:4d:52:06:a2:44:c7:ea:a0:c4:2c:aa: 96:66:0b:05:e0:1f:60:92:11:82:5a:2f:36:50:be:56:52:bf: e4:a9:3f:73:6f:d3:e4:f4:a2:4e:1a:6e:98:bc:12:3f:29:92: ac:f2:53:79:cd:72:49:4d:a8:9f:ab:56:97:e6:8e:1a:19:9b: b5:fd:5b:06:4a:3e:ae:44:18:fb:fa:73:41:21:54:51:c2:0d: 3d:f7:68:3d:f7:20:3a:f4:c3:ca:87:bd:b9:e8:e1:cd:b1:1a: 17:4e:30:e2:9c:d4:f0:73:0c:62:2b:29:f7:5b:36:0c:e5:72: 25:6a:35:c2:f3:a9:47:08:2a:25:0f:80:33:5a:e2:d2:18:f5: ec:9e:ae:03:42:7c:20:47:f3:09:8b:d5:08:d3:ba:9a:83:62: 72:9b:96:ae:57:1d:be:d8:1c:ab:f2:3a:8a:93:ef:07:38:b9: c9:a1:a9:03:db:62:7f:45:4c:12:79:ce:4c:a4:3c:6b:44:fa: fb:1b:49:27:3b:dd:b3:a4:c9:11:44:44:28:23:3f:27:ba:fb: e8:1f:19:66 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUDfKyCe9SeJ9iXVFYVrolWbLyy+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDZaFw0yNzA0MjcxMzIyNDZaMDMxMTAvBgNV BAMTKDI5Qjk2RjEyODgyNEEwQzBDRERBMEY5MUQ4RTQ4NDUwMTk4NkEzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYjsvzzbn9nTAcmWhZD8JVunz 7djtJWYfr1hiIrw8hAKPnUpePSVH0Q8HjBm+2Yqxv/xMHpeZtE/oAmEwKXBtWcD8 hQwtkanVCj5+BlORVOG+11CmlR8Wzl1Eq57Cnn6f5Gi72mwC344vDkKE8aF3S5+n sUJvJwtJd74RYs0i0nH2p28id4x/yUk5x1oFQPBKheDPkQAZ211wShgtqEIgZED1 FLZnQHiCgqQ3j+Swzm0jNJ14+MXsj+GC+OaXuL3RbDFfM6u5gmAxMG0/EY9Cp2uM Z1eU/YzaRr1ZAfPfFejrps1m5Dc7E/dRclOfXei0GEXRM4+cQ775J1UrDp9FAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUKblvEogkoMDN2g+R2OSEUBmGozwwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTE0MTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAAAwDQYJKoZIhvcNAQEL BQADggEBADta3A9V8f3f0uxUWWiE0h7ZgpypeO9uHBy56CUYUFSX2yotFpfwbPZR OYRNUgaiRMfqoMQsqpZmCwXgH2CSEYJaLzZQvlZSv+SpP3Nv0+T0ok4abpi8Ej8p kqzyU3nNcklNqJ+rVpfmjhoZm7X9WwZKPq5EGPv6c0EhVFHCDT33aD33IDr0w8qH vbno4c2xGhdOMOKc1PBzDGIrKfdbNgzlciVqNcLzqUcIKiUPgDNa4tIY9eyergNC fCBH8wmL1QjTupqDYnKblq5XHb7YHKvyOoqT7wc4ucmhqQPbYn9FTBJ5zkykPGtE +vsbSSc73bOkyRFERCgjPye6++gfGWY= -----END CERTIFICATE-----Generated at Tue May 12 22:17:20 2026 by rpki-client