
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213293.roa
File: AS213293.roa (raw, json)
Hash identifier: r+xaXob3CBkngKL0uGp/TtUqUxLvzzT61J6t6ZCgluE=
Subject key identifier: CF:D4:6C:49:08:E3:B2:42:16:E5:76:BC:91:36:21:1F:F5:11:E9:9E
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 2AD4C46FEB336733EBD42E8F4EA2DA9C4F06A23F
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213293.roa
Signing time: Tue 28 Apr 2026 13:22:46 +0000
ROA not before: Tue 28 Apr 2026 13:17:46 +0000
ROA not after: Tue 27 Apr 2027 13:22:46 +0000
asID: 213293
IP address blocks: 2a0b:4e07:40::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d4:c4:6f:eb:33:67:33:eb:d4:2e:8f:4e:a2:da:9c:4f:06:a2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Apr 28 13:17:46 2026 GMT
Not After : Apr 27 13:22:46 2027 GMT
Subject: CN=CFD46C4908E3B24216E576BC9136211FF511E99E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:46:7b:d6:e2:88:44:f4:12:d2:ae:e7:d8:
7f:a1:74:25:7c:da:e9:ee:76:9e:1c:34:33:63:35:
d5:52:d7:62:58:7d:6c:5b:ee:90:1c:2b:cf:91:13:
cb:fb:d7:53:6f:d4:22:c5:76:26:b7:f9:0a:e6:a5:
21:98:de:b0:26:1e:68:fc:d0:de:6b:5d:cb:a0:bc:
30:66:b2:34:d8:65:30:1b:ca:bd:23:c6:1c:b0:80:
98:ee:92:9a:9b:ff:37:1c:b1:55:60:2d:2f:89:f2:
94:85:21:ef:f0:55:c4:2b:b0:34:a8:52:c7:0a:bb:
c9:f6:f5:0f:ef:1f:be:84:81:e8:c2:7d:09:f5:03:
22:cb:10:f1:64:44:df:c2:22:e7:82:c2:ae:51:0a:
a1:2f:fd:3b:d9:10:94:08:88:21:43:bd:da:92:2f:
2a:ca:8f:30:9b:1b:cd:2a:ca:db:aa:a8:86:52:30:
cb:78:43:76:7a:ff:23:cb:5a:94:90:84:6a:2f:be:
e8:82:c6:20:67:3b:51:aa:98:69:24:ac:73:48:1c:
b3:85:6c:6c:b0:ef:56:0c:30:e1:5a:f8:eb:7d:48:
e7:39:c6:cd:f5:08:1c:cc:14:b3:05:e6:b8:d6:f9:
96:0f:ce:fc:89:68:51:9b:89:a2:82:b6:fd:a6:d1:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D4:6C:49:08:E3:B2:42:16:E5:76:BC:91:36:21:1F:F5:11:E9:9E
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:40::/47
Signature Algorithm: sha256WithRSAEncryption
2c:35:4f:d3:0b:83:fd:86:11:7c:8b:60:5a:2d:2a:62:9c:3b:
ed:8d:48:2c:94:02:3d:5c:80:a5:f4:27:e1:b5:c2:5b:04:27:
ae:8d:bb:c5:4f:15:4c:e4:74:33:45:ff:a8:01:42:fe:ea:d0:
78:96:4b:f8:8c:2b:b1:d5:60:19:83:b9:35:ad:4e:c1:ee:3a:
54:eb:95:84:ac:70:e2:ff:d9:de:f5:e6:92:e6:fd:f2:89:6a:
61:0c:d3:f9:c1:5b:8b:cd:f4:9c:19:c8:11:be:01:43:b4:dd:
bd:ee:ad:31:58:4c:ef:56:d6:6b:3a:ad:b9:f7:32:93:e3:da:
a2:76:58:5c:b1:f8:dd:d3:9c:2d:50:12:27:7a:97:6b:e2:38:
83:b3:30:96:7f:fe:04:46:4e:54:ee:d2:34:7c:db:7c:2e:fd:
56:de:7d:51:f5:19:ec:97:95:93:b6:74:b7:ac:d5:f9:37:3f:
48:b6:15:58:3b:1c:1c:88:81:83:81:61:42:6c:31:24:aa:ef:
11:5d:72:94:4e:9b:dd:14:af:b6:d8:a5:06:63:3e:40:cd:a5:
87:4f:7c:bb:53:73:5f:09:bd:d1:dc:e5:fd:ba:05:41:13:92:
26:86:44:a9:89:9c:2b:f9:69:ef:69:83:08:b3:c4:5d:96:0f:
f6:6e:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:55 2026 by rpki-client