$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214372.roa File: AS214372.roa (raw, json) Hash identifier: 6fyW0WzExx81XHC2sGbNcvzk1FJFCML8H3qaEa8gung= Subject key identifier: C5:2F:04:4F:18:2D:C1:41:68:1E:F3:A2:A8:88:CE:E0:2B:F1:7D:A3 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 557AD6F79A22048666BA6AFF4659460B3AEB1C7F Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214372.roa Signing time: Tue 28 Apr 2026 13:22:50 +0000 ROA not before: Tue 28 Apr 2026 13:17:50 +0000 ROA not after: Tue 27 Apr 2027 13:22:50 +0000 asID: 214372 IP address blocks: 2a0b:4e07:c25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7a:d6:f7:9a:22:04:86:66:ba:6a:ff:46:59:46:0b:3a:eb:1c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:50 2026 GMT Not After : Apr 27 13:22:50 2027 GMT Subject: CN=C52F044F182DC141681EF3A2A888CEE02BF17DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:52:81:76:3e:d8:36:6c:20:52:c5:fe:8c: 48:ed:95:07:b0:8c:39:f5:a3:a7:64:f0:a6:f6:41: 4f:bd:c7:8b:be:7e:53:3b:c7:dc:35:ed:38:78:bf: 2a:b6:97:f9:e6:e1:cd:b5:3b:3d:3d:b7:f0:ed:3d: d6:86:fc:3c:cf:87:79:cd:ca:64:e6:ce:25:c0:e5: cf:55:1c:8d:ec:65:7d:de:51:f4:7a:07:78:e9:7c: 33:04:35:e0:85:00:31:cf:84:56:9c:fc:20:b0:f4: bd:3a:36:eb:3f:cb:43:ea:68:a7:9b:47:21:19:42: 77:e2:10:85:0b:34:75:6a:bf:8e:12:97:0f:10:f0: fd:d6:2a:71:ab:b7:80:d6:01:b8:57:34:9d:94:90: d3:39:24:b4:a3:5a:23:d1:75:37:2d:d8:91:fc:85: d7:88:46:93:8f:6c:89:73:d7:45:2a:04:d9:ec:51: 38:0c:de:76:96:32:7b:4b:53:f5:85:58:ec:26:11: 3b:09:45:73:07:bb:d1:ef:2a:85:df:34:8c:bc:3c: 69:33:86:0e:bb:a7:fc:8d:91:48:6e:d4:cd:56:f5: da:19:90:df:c0:e8:f2:13:56:03:4b:e7:e3:4b:38: cf:e0:e8:e0:08:d8:75:bf:15:9f:2b:11:be:5f:21: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2F:04:4F:18:2D:C1:41:68:1E:F3:A2:A8:88:CE:E0:2B:F1:7D:A3 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214372.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c25::/48 Signature Algorithm: sha256WithRSAEncryption 78:1c:ce:22:97:38:56:e8:fc:2a:b0:86:7a:ed:03:47:63:c3: 3e:50:9c:3e:4d:33:aa:00:ff:71:10:e1:ca:6a:a1:db:d9:36: 51:18:a8:7b:24:16:21:66:f4:bc:16:4b:43:88:84:2c:53:b6: 75:75:2c:a8:fa:0d:aa:d1:eb:f1:ce:74:5d:14:d5:dd:4a:cd: 04:7e:19:e1:87:f2:e2:db:46:ac:50:aa:cb:5a:6d:6e:2e:ef: b5:a7:80:d5:0b:88:8a:2a:b0:77:35:c6:3b:b3:a0:62:29:27: db:6d:a1:c8:43:f9:df:72:dd:5b:eb:50:06:9f:9e:d2:54:e8: d3:51:cf:0d:ec:e0:72:6e:dc:d9:5a:6c:57:7e:3c:4c:3f:7b: 4d:a9:78:3c:9c:bb:93:8b:1f:11:4b:72:cf:70:86:97:1a:1a: 40:ac:16:3a:b9:0c:73:48:1f:89:fe:90:d0:5b:e7:1c:b6:8e: 6e:10:24:e5:63:ea:a9:87:6a:03:cd:59:d4:57:a0:71:8b:2b: 03:b5:06:4a:cf:5a:a4:c9:c5:1d:cd:32:cd:73:cb:a0:e9:53: b1:83:b7:26:46:2c:ce:41:dc:8d:4a:2c:b5:6c:5d:64:d9:1e: 56:b3:40:24:f4:e8:f8:63:6d:8c:ee:89:dd:12:8c:68:74:fc: e4:7d:4a:58 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUVXrW95oiBIZmumr/RllGCzrrHH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NTBaFw0yNzA0MjcxMzIyNTBaMDMxMTAvBgNV BAMTKEM1MkYwNDRGMTgyREMxNDE2ODFFRjNBMkE4ODhDRUUwMkJGMTdEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUXVKBdj7YNmwgUsX+jEjtlQew jDn1o6dk8Kb2QU+9x4u+flM7x9w17Th4vyq2l/nm4c21Oz09t/DtPdaG/DzPh3nN ymTmziXA5c9VHI3sZX3eUfR6B3jpfDMENeCFADHPhFac/CCw9L06Nus/y0PqaKeb RyEZQnfiEIULNHVqv44Slw8Q8P3WKnGrt4DWAbhXNJ2UkNM5JLSjWiPRdTct2JH8 hdeIRpOPbIlz10UqBNnsUTgM3naWMntLU/WFWOwmETsJRXMHu9HvKoXfNIy8PGkz hg67p/yNkUhu1M1W9doZkN/A6PITVgNL5+NLOM/g6OAI2HW/FZ8rEb5fITOvAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUxS8ETxgtwUFoHvOiqIjO4CvxfaMwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTQzNzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HDCUwDQYJKoZIhvcNAQEL BQADggEBAHgcziKXOFbo/CqwhnrtA0djwz5QnD5NM6oA/3EQ4cpqodvZNlEYqHsk FiFm9LwWS0OIhCxTtnV1LKj6DarR6/HOdF0U1d1KzQR+GeGH8uLbRqxQqstabW4u 77WngNULiIoqsHc1xjuzoGIpJ9ttochD+d9y3VvrUAafntJU6NNRzw3s4HJu3Nla bFd+PEw/e02peDycu5OLHxFLcs9whpcaGkCsFjq5DHNIH4n+kNBb5xy2jm4QJOVj 6qmHagPNWdRXoHGLKwO1BkrPWqTJxR3NMs1zy6DpU7GDtyZGLM5B3I1KLLVsXWTZ HlazQCT06PhjbYzuid0SjGh0/OR9Slg= -----END CERTIFICATE-----Generated at Tue May 12 22:17:21 2026 by rpki-client