$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS212470.roa File: AS212470.roa (raw, json) Hash identifier: Pd7g6/qKcgFlc9cp33kOU/DTm1XlqE4Y+M9FwoNwiXg= Subject key identifier: 33:63:A5:7F:A0:B7:59:07:0E:4B:D0:33:E6:90:86:73:C2:20:CF:DC Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 07AD466FED79B6011BB2669C5C18B2D50EFB7DAF Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS212470.roa Signing time: Tue 28 Apr 2026 13:22:50 +0000 ROA not before: Tue 28 Apr 2026 13:17:50 +0000 ROA not after: Tue 27 Apr 2027 13:22:50 +0000 asID: 212470 IP address blocks: 2a0b:4e07:ba::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ad:46:6f:ed:79:b6:01:1b:b2:66:9c:5c:18:b2:d5:0e:fb:7d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:50 2026 GMT Not After : Apr 27 13:22:50 2027 GMT Subject: CN=3363A57FA0B759070E4BD033E6908673C220CFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:64:f6:25:17:fa:5a:45:ca:2d:22:68:e3: 03:5a:f3:d1:3e:67:f1:d0:ff:6f:3f:10:d5:80:7d: bf:19:7a:4c:5e:8c:56:6a:04:f3:00:b2:78:aa:98: 45:c5:74:5a:90:66:cb:69:17:15:89:49:44:3e:fe: b0:44:3c:ab:2c:71:60:07:9e:18:9f:98:87:c9:d8: 2e:71:42:4f:04:7f:6d:26:28:bb:ca:a7:a0:ba:82: b7:a0:76:de:e2:4a:58:71:b2:b3:5c:c0:32:db:4d: 1c:9a:5b:ce:f0:92:ec:3f:c0:d8:ea:d6:4a:68:bf: 72:22:85:78:9f:0a:d8:b7:cd:69:34:60:97:8e:3e: 35:77:8d:9c:eb:35:03:76:d7:c0:61:f1:87:03:25: 06:36:7d:1e:1e:ab:32:5d:8a:36:12:b1:25:37:13: 90:2a:a8:81:55:e8:67:0c:a1:71:16:12:53:4c:fc: b1:73:16:95:d5:99:d5:27:9d:10:ec:3f:33:27:7d: 26:f1:2c:35:11:41:8c:ce:2f:7d:2d:3b:0e:da:5f: dc:22:97:06:01:5d:e1:38:a7:48:6d:ae:1b:75:49: a1:79:ed:9a:30:0a:07:e8:b3:27:5a:c4:9d:1f:66: c5:7c:b2:9a:e1:d6:76:6a:30:f3:e2:50:32:c2:27: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:63:A5:7F:A0:B7:59:07:0E:4B:D0:33:E6:90:86:73:C2:20:CF:DC X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS212470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:ba::/47 Signature Algorithm: sha256WithRSAEncryption 73:d8:0e:ee:e7:b0:e9:27:60:5e:0c:dd:2a:b9:c9:cc:18:16: f8:b4:3e:c3:4d:3c:69:24:7d:ad:5b:39:f7:e0:5f:63:92:c4: 40:4f:15:be:ac:84:74:d2:b3:7c:d7:ab:3f:c6:d4:8b:9d:8b: 15:ef:ec:7e:14:dd:96:e4:43:07:d8:f6:dc:06:68:d0:3d:98: b6:21:5d:43:e8:39:eb:c8:8d:a4:48:b9:0a:15:c4:33:df:77: 36:a9:0a:8a:91:7b:4f:3b:88:b3:35:b5:44:e2:4c:ea:4b:66: 52:1a:db:c6:c4:b7:d3:61:0d:71:27:3f:c3:90:41:78:c9:fe: 8d:45:a8:1e:71:6b:33:38:71:11:b7:20:40:35:8d:c3:84:b1: 08:be:bb:35:c8:fa:0a:87:02:65:e6:38:96:cc:80:9c:aa:43: f7:e8:3a:49:ad:19:8c:6d:bb:eb:a4:9a:06:a7:59:40:ee:3d: 0b:12:84:d4:16:0d:50:84:8b:62:1b:6a:f7:d6:48:a4:08:f4: 31:fc:a1:c8:5b:76:e9:d5:f3:43:90:08:4a:bd:ef:83:1a:dd: 9f:47:88:31:79:8c:f1:3e:17:eb:36:61:9d:14:c7:ae:38:f6: 08:18:f5:e7:89:00:2b:65:2f:54:62:d0:91:a8:f5:ee:af:9a: 96:dd:3c:16 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUB61Gb+15tgEbsmacXBiy1Q77fa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NTBaFw0yNzA0MjcxMzIyNTBaMDMxMTAvBgNV BAMTKDMzNjNBNTdGQTBCNzU5MDcwRTRCRDAzM0U2OTA4NjczQzIyMENGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOGT2JRf6WkXKLSJo4wNa89E+ Z/HQ/28/ENWAfb8ZekxejFZqBPMAsniqmEXFdFqQZstpFxWJSUQ+/rBEPKsscWAH nhifmIfJ2C5xQk8Ef20mKLvKp6C6gregdt7iSlhxsrNcwDLbTRyaW87wkuw/wNjq 1kpov3IihXifCti3zWk0YJeOPjV3jZzrNQN218Bh8YcDJQY2fR4eqzJdijYSsSU3 E5AqqIFV6GcMoXEWElNM/LFzFpXVmdUnnRDsPzMnfSbxLDURQYzOL30tOw7aX9wi lwYBXeE4p0htrht1SaF57ZowCgfosydaxJ0fZsV8sprh1nZqMPPiUDLCJzADAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUM2Olf6C3WQcOS9Az5pCGc8Igz9wwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTI0NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEqC04HALowDQYJKoZIhvcNAQEL BQADggEBAHPYDu7nsOknYF4M3Sq5ycwYFvi0PsNNPGkkfa1bOffgX2OSxEBPFb6s hHTSs3zXqz/G1IudixXv7H4U3ZbkQwfY9twGaNA9mLYhXUPoOevIjaRIuQoVxDPf dzapCoqRe087iLM1tUTiTOpLZlIa28bEt9NhDXEnP8OQQXjJ/o1FqB5xazM4cRG3 IEA1jcOEsQi+uzXI+gqHAmXmOJbMgJyqQ/foOkmtGYxtu+ukmganWUDuPQsShNQW DVCEi2IbavfWSKQI9DH8ochbdunV80OQCEq974Ma3Z9HiDF5jPE+F+s2YZ0Ux644 9ggY9eeJACtlL1Ri0JGo9e6vmpbdPBY= -----END CERTIFICATE-----Generated at Tue May 12 22:40:05 2026 by rpki-client