$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213661.roa File: AS213661.roa (raw, json) Hash identifier: LoK1lXY56/iwF3ZGdnWxfW3H8uU7fBOOhy46YuX61cI= Subject key identifier: 8F:0D:38:1E:30:F9:64:A3:82:74:34:CD:2F:33:E4:A5:0E:AB:68:01 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: B184A29775B08189BB4866372B2AD0DCB50E4F Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213661.roa Signing time: Tue 28 Apr 2026 13:22:49 +0000 ROA not before: Tue 28 Apr 2026 13:17:49 +0000 ROA not after: Tue 27 Apr 2027 13:22:49 +0000 asID: 213661 IP address blocks: 2a0b:4e07:b6::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b1:84:a2:97:75:b0:81:89:bb:48:66:37:2b:2a:d0:dc:b5:0e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:49 2026 GMT Not After : Apr 27 13:22:49 2027 GMT Subject: CN=8F0D381E30F964A3827434CD2F33E4A50EAB6801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:34:24:04:a3:5c:47:cf:51:af:e1:8c:e5: 0a:71:3f:f6:8e:d9:d2:61:e9:95:c6:90:c2:b1:3d: 16:0a:8a:26:b0:01:70:b4:17:99:43:6c:cc:eb:fd: d0:aa:ea:14:ec:7f:4f:92:13:91:85:ec:d9:2b:bf: c2:2c:e6:c1:f2:6a:6b:10:f9:53:08:6e:c3:e1:31: 83:98:01:2f:5b:3c:ae:95:6c:0d:19:03:c9:51:a9: ff:1d:7e:d8:90:01:71:23:01:00:a0:1c:86:89:f8: a8:bc:88:5d:a8:41:95:fd:c0:f3:21:59:12:fc:b2: 33:09:a5:b5:0a:25:78:53:be:16:08:44:69:9a:96: b5:d5:72:88:a0:da:f3:4e:8e:b6:47:de:bc:a7:37: 6d:8c:a3:e6:d3:fb:4f:be:91:f9:e5:9c:95:46:c7: 0a:bf:cb:19:f5:8e:36:d1:f0:e9:94:22:7e:ac:55: 99:71:da:9f:e4:bc:d0:6b:48:8e:33:b3:87:54:cd: 10:e8:85:97:7d:ef:1b:ef:69:52:63:5f:65:b5:48: 61:19:a5:81:8d:ce:e3:63:3c:38:a6:bb:ac:6e:e8: 81:ad:97:a4:d5:02:27:70:4e:35:26:7c:d0:88:b1: e1:d8:f4:59:ec:e0:c2:09:59:7c:6d:4b:83:a2:99: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:38:1E:30:F9:64:A3:82:74:34:CD:2F:33:E4:A5:0E:AB:68:01 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b6::/47 Signature Algorithm: sha256WithRSAEncryption 13:11:e3:ef:f2:e1:13:02:17:55:39:1a:b7:d4:05:11:11:e8: bb:ab:33:78:35:5c:a4:bf:70:d9:6c:8d:69:4e:b0:83:ab:51: 1d:2c:da:cd:7a:70:04:d5:6a:10:10:61:ac:b2:ef:e9:9c:7d: f5:b2:18:15:dd:3b:e7:15:63:85:ff:2f:3c:c1:93:23:99:ab: 11:d0:4a:3e:96:34:c3:a5:59:53:29:75:a5:34:55:f1:de:50: ab:38:57:a0:6a:a6:9c:26:89:97:b4:9c:d5:9f:ea:23:3b:63: db:73:fc:f1:a4:39:11:07:62:b9:75:9e:bb:66:03:c0:25:cc: 20:94:46:d9:a9:c8:92:0f:a6:a1:a1:d8:b8:96:dd:d1:59:47: 61:28:f9:e3:52:a3:08:e5:ee:d5:a4:ec:d2:37:72:06:ae:a6: 70:1b:28:4a:50:d6:cf:a7:cc:0a:bc:93:48:3c:aa:66:54:b5: 83:6e:02:f0:00:5a:ba:dd:19:d6:3f:7c:06:bd:5f:9c:a5:cd: 04:14:e9:9b:21:08:bd:8e:28:ad:f6:ae:2d:eb:16:ec:8a:4f: 79:41:60:ad:8e:6d:01:d8:cd:7f:b2:05:c8:2a:6d:8c:3a:57: f1:54:f7:4f:7f:53:ec:9c:d2:32:74:40:40:68:f4:ab:d0:ca: d7:99:16:be -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUALGEopd1sIGJu0hmNysq0Ny1Dk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDlaFw0yNzA0MjcxMzIyNDlaMDMxMTAvBgNV BAMTKDhGMEQzODFFMzBGOTY0QTM4Mjc0MzRDRDJGMzNFNEE1MEVBQjY4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMDQkBKNcR89Rr+GM5QpxP/aO 2dJh6ZXGkMKxPRYKiiawAXC0F5lDbMzr/dCq6hTsf0+SE5GF7Nkrv8Is5sHyamsQ +VMIbsPhMYOYAS9bPK6VbA0ZA8lRqf8dftiQAXEjAQCgHIaJ+Ki8iF2oQZX9wPMh WRL8sjMJpbUKJXhTvhYIRGmalrXVcoig2vNOjrZH3rynN22Mo+bT+0++kfnlnJVG xwq/yxn1jjbR8OmUIn6sVZlx2p/kvNBrSI4zs4dUzRDohZd97xvvaVJjX2W1SGEZ pYGNzuNjPDimu6xu6IGtl6TVAidwTjUmfNCIseHY9Fns4MIJWXxtS4OimYyZAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUjw04HjD5ZKOCdDTNLzPkpQ6raAEwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTM2NjEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEqC04HALYwDQYJKoZIhvcNAQEL BQADggEBABMR4+/y4RMCF1U5GrfUBRER6LurM3g1XKS/cNlsjWlOsIOrUR0s2s16 cATVahAQYayy7+mcffWyGBXdO+cVY4X/LzzBkyOZqxHQSj6WNMOlWVMpdaU0VfHe UKs4V6BqppwmiZe0nNWf6iM7Y9tz/PGkOREHYrl1nrtmA8AlzCCURtmpyJIPpqGh 2LiW3dFZR2Eo+eNSowjl7tWk7NI3cgaupnAbKEpQ1s+nzAq8k0g8qmZUtYNuAvAA WrrdGdY/fAa9X5ylzQQU6ZshCL2OKK32ri3rFuyKT3lBYK2ObQHYzX+yBcgqbYw6 V/FU909/U+yc0jJ0QEBo9KvQyteZFr4= -----END CERTIFICATE-----Generated at Wed May 13 04:55:11 2026 by rpki-client