$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214369.roa File: AS214369.roa (raw, json) Hash identifier: JZKVX5aK3gYF0RrxubHXTWTbpECW6rGklwj+1xcaB2g= Subject key identifier: EA:AF:D7:F4:39:1C:30:9B:9F:1E:BD:44:89:55:55:05:10:A4:A5:CF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1FF793C1C68848D931435E3BA2DA2178F4B24B3E Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214369.roa Signing time: Tue 28 Apr 2026 13:22:49 +0000 ROA not before: Tue 28 Apr 2026 13:17:49 +0000 ROA not after: Tue 27 Apr 2027 13:22:49 +0000 asID: 214369 IP address blocks: 2a0b:4e07:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f7:93:c1:c6:88:48:d9:31:43:5e:3b:a2:da:21:78:f4:b2:4b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:49 2026 GMT Not After : Apr 27 13:22:49 2027 GMT Subject: CN=EAAFD7F4391C309B9F1EBD448955550510A4A5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ee:93:09:4c:4f:04:a0:2a:a9:a9:86:3f:23: d9:b5:d7:ed:2a:c4:1a:03:ca:44:ef:3c:9f:4e:cc: 02:a6:2b:e0:0e:fd:4f:c3:0e:d1:5b:2e:be:79:6b: 4d:33:5b:30:6e:a2:a2:8c:e9:07:d6:a3:4f:fa:09: 5b:84:6c:46:24:0c:f5:7c:77:ca:ec:26:66:bb:5e: 6e:30:16:51:62:4a:88:41:49:bc:90:f6:c4:12:58: e3:d3:e5:4c:0d:4d:b9:4c:17:6d:07:0c:26:f8:62: 37:81:16:ee:f7:b7:10:fd:a1:74:54:b3:91:9b:5a: f3:bc:78:87:ea:ef:de:0e:5e:c4:e9:18:d7:b6:56: 53:39:f0:7e:bb:a5:c5:e5:85:a3:9f:1d:86:cd:35: d3:31:76:45:e9:30:79:eb:9f:c0:5b:07:45:ca:a6: df:c7:56:f4:3b:f9:9c:14:29:e8:f5:09:59:db:9c: 69:ea:90:b7:ad:bd:16:3d:8f:cf:51:33:01:ad:22: ac:a7:da:dd:a8:27:c5:90:12:ed:ca:9d:96:b0:ac: 95:6c:2c:c7:6f:f0:0f:07:d0:cd:f6:df:f9:b6:41: ef:6b:74:b6:3b:b0:b0:70:d8:8f:40:3b:5b:eb:e6: 05:ae:22:c9:47:f3:6a:f9:82:93:7d:26:e2:d7:d6: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AF:D7:F4:39:1C:30:9B:9F:1E:BD:44:89:55:55:05:10:A4:A5:CF X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3a::/48 Signature Algorithm: sha256WithRSAEncryption 66:27:4c:db:61:39:31:9a:1b:88:22:c1:e6:e8:2f:3e:34:80: ce:b5:44:08:ad:59:b7:ec:86:f8:a8:fb:f2:bb:99:e2:52:8f: 08:4c:4c:c0:f8:96:42:f6:3a:75:d9:9b:10:32:c1:28:fd:b9: 0b:b5:fb:f5:7d:48:76:dd:16:a4:12:e4:f8:a5:ff:63:5a:29: 6e:65:cd:c8:87:77:1c:46:7d:11:87:ed:13:61:b0:21:6f:73: 0a:ef:54:cf:1a:49:48:4f:9c:31:2a:ba:77:60:95:08:c6:6f: ae:7b:09:a3:76:ef:85:6e:7d:19:05:e4:28:3d:97:35:6a:84: 9d:b1:2e:54:14:48:51:56:21:1c:58:01:84:70:7c:e9:f8:8b: dc:36:fc:23:76:a8:ad:08:50:8d:c0:01:49:c8:8c:28:4c:6f: d8:b2:c8:0b:49:35:d0:bb:48:e0:97:a2:c1:93:89:b1:61:c4: ca:89:b6:86:5c:8b:5c:78:49:e5:54:b3:7f:50:cd:a2:b4:d8: e5:2f:31:d0:4e:e9:c7:eb:11:37:60:e7:37:75:e6:16:9b:8b: 99:05:72:ca:0a:de:ac:ee:3c:df:ec:82:bf:5a:ff:4b:e2:88: 4c:47:25:32:52:6a:bd:88:52:73:e5:58:88:43:11:9f:9f:b9: 78:58:9d:74 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUH/eTwcaISNkxQ147otohePSySz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDlaFw0yNzA0MjcxMzIyNDlaMDMxMTAvBgNV BAMTKEVBQUZEN0Y0MzkxQzMwOUI5RjFFQkQ0NDg5NTU1NTA1MTBBNEE1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD57pMJTE8EoCqpqYY/I9m11+0q xBoDykTvPJ9OzAKmK+AO/U/DDtFbLr55a00zWzBuoqKM6QfWo0/6CVuEbEYkDPV8 d8rsJma7Xm4wFlFiSohBSbyQ9sQSWOPT5UwNTblMF20HDCb4YjeBFu73txD9oXRU s5GbWvO8eIfq794OXsTpGNe2VlM58H67pcXlhaOfHYbNNdMxdkXpMHnrn8BbB0XK pt/HVvQ7+ZwUKej1CVnbnGnqkLetvRY9j89RMwGtIqyn2t2oJ8WQEu3KnZawrJVs LMdv8A8H0M323/m2Qe9rdLY7sLBw2I9AO1vr5gWuIslH82r5gpN9JuLX1j8JAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU6q/X9DkcMJufHr1EiVVVBRCkpc8wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTQzNjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HADowDQYJKoZIhvcNAQEL BQADggEBAGYnTNthOTGaG4giweboLz40gM61RAitWbfshvio+/K7meJSjwhMTMD4 lkL2OnXZmxAywSj9uQu1+/V9SHbdFqQS5Pil/2NaKW5lzciHdxxGfRGH7RNhsCFv cwrvVM8aSUhPnDEqundglQjGb657CaN274VufRkF5Cg9lzVqhJ2xLlQUSFFWIRxY AYRwfOn4i9w2/CN2qK0IUI3AAUnIjChMb9iyyAtJNdC7SOCXosGTibFhxMqJtoZc i1x4SeVUs39QzaK02OUvMdBO6cfrETdg5zd15habi5kFcsoK3qzuPN/sgr9a/0vi iExHJTJSar2IUnPlWIhDEZ+fuXhYnXQ= -----END CERTIFICATE-----Generated at Wed May 13 06:38:31 2026 by rpki-client