$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214556.roa File: AS214556.roa (raw, json) Hash identifier: F3jxMGuGKvwarkJvglhyn/X+XDAJHvg9p2PM6U5Vk4o= Subject key identifier: C3:EA:CD:ED:0A:5A:D4:B7:65:F1:11:37:57:3D:56:16:5C:41:09:4F Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 576CA8A7316C9A7FFD637CBBA2909A44AF108111 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214556.roa Signing time: Tue 28 Apr 2026 13:22:49 +0000 ROA not before: Tue 28 Apr 2026 13:17:49 +0000 ROA not after: Tue 27 Apr 2027 13:22:49 +0000 asID: 214556 IP address blocks: 2a0b:4e07:34::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6c:a8:a7:31:6c:9a:7f:fd:63:7c:bb:a2:90:9a:44:af:10:81:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:49 2026 GMT Not After : Apr 27 13:22:49 2027 GMT Subject: CN=C3EACDED0A5AD4B765F11137573D56165C41094F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:68:95:fc:28:f0:9f:03:a3:e2:87:50:6b: 71:6e:50:14:f4:37:db:66:3d:4e:dd:60:20:a3:fa: ab:4a:be:41:67:73:de:5d:7a:72:18:d2:34:8e:be: d9:a8:ea:6d:db:ca:60:79:23:20:eb:03:91:ac:b2: cc:69:88:67:39:42:ed:01:89:45:8d:49:ca:9d:e3: cf:f7:c6:54:2e:9e:59:ae:a9:d5:7b:00:6b:73:01: cd:81:d7:1d:9c:45:8c:8d:67:b2:c5:13:7c:77:82: 73:86:0b:e7:65:73:db:f1:8c:7d:c3:21:b6:ee:f3: b9:7b:fb:04:3c:45:cb:d4:fc:77:f3:fc:20:13:94: d0:89:7c:bd:4f:17:56:f7:49:e0:c5:01:f2:e9:47: 0a:1d:22:b8:12:ae:9c:37:90:1d:e1:32:a7:b3:70: c1:8d:1a:5b:3e:7c:1e:de:53:e2:ca:06:c6:c7:33: dc:49:a5:35:85:e6:86:b4:56:e8:77:3a:20:77:53: 05:96:d4:70:6e:19:e6:fc:4f:34:40:65:c7:26:79: a7:f8:5a:cd:53:35:a0:37:94:49:27:12:b4:e4:5c: a9:56:8d:58:13:fc:4e:83:02:0f:06:0c:cf:6a:f4: fb:ae:0f:44:ba:2e:0d:e6:f0:7a:f7:3c:46:64:6d: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EA:CD:ED:0A:5A:D4:B7:65:F1:11:37:57:3D:56:16:5C:41:09:4F X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214556.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:34::/46 Signature Algorithm: sha256WithRSAEncryption 29:d3:89:ac:39:7c:a5:a3:f3:02:a8:f1:67:76:df:98:db:82: bf:02:05:65:aa:03:a1:b7:02:e0:b2:fc:ef:f3:f8:ce:81:a7: 51:a9:bc:16:32:3e:f5:b3:0f:b0:f0:a9:dc:0e:78:a2:a6:8e: 1f:24:7d:6c:c5:7f:a8:41:c6:2e:b6:06:cf:52:c5:cc:b0:60: ce:8c:33:ed:d0:43:93:58:df:a1:86:27:d3:9c:c7:10:e3:e5: b4:fa:53:66:f1:f0:81:d6:dd:56:3f:4d:f3:1f:cd:0d:54:e0: 83:38:8e:9d:ca:2b:5d:0e:03:d1:ae:2a:50:ce:bd:26:e6:d4: 32:ea:41:3e:08:b2:c4:d2:3e:ac:2b:98:6a:08:91:2d:a4:98: 99:0f:c3:7c:de:6d:64:ee:3a:b4:7e:f6:da:83:cb:aa:e4:8d: 5a:fb:e2:46:eb:2b:d6:7d:8c:bf:86:23:a7:e2:5e:eb:d2:13: 0e:ec:17:cf:0b:ba:50:5b:84:b3:b5:a5:94:7c:64:11:4a:97: 78:5a:cb:50:fe:68:d6:59:d8:e3:72:89:8a:da:aa:c6:2c:a8: 74:5c:62:d0:a2:e8:86:1b:07:35:41:c0:01:9f:93:45:12:0e: f2:2c:a8:fc:71:47:93:0a:91:b2:aa:36:83:19:41:7d:bb:43: 38:2b:6b:a1 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUV2yopzFsmn/9Y3y7opCaRK8QgREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDlaFw0yNzA0MjcxMzIyNDlaMDMxMTAvBgNV BAMTKEMzRUFDREVEMEE1QUQ0Qjc2NUYxMTEzNzU3M0Q1NjE2NUM0MTA5NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+GiV/CjwnwOj4odQa3FuUBT0 N9tmPU7dYCCj+qtKvkFnc95denIY0jSOvtmo6m3bymB5IyDrA5GsssxpiGc5Qu0B iUWNScqd48/3xlQunlmuqdV7AGtzAc2B1x2cRYyNZ7LFE3x3gnOGC+dlc9vxjH3D Ibbu87l7+wQ8RcvU/Hfz/CATlNCJfL1PF1b3SeDFAfLpRwodIrgSrpw3kB3hMqez cMGNGls+fB7eU+LKBsbHM9xJpTWF5oa0Vuh3OiB3UwWW1HBuGeb8TzRAZccmeaf4 Ws1TNaA3lEknErTkXKlWjVgT/E6DAg8GDM9q9PuuD0S6Lg3m8Hr3PEZkbZVTAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUw+rN7Qpa1Ldl8RE3Vz1WFlxBCU8wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTQ1NTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HADQwDQYJKoZIhvcNAQEL BQADggEBACnTiaw5fKWj8wKo8Wd235jbgr8CBWWqA6G3AuCy/O/z+M6Bp1GpvBYy PvWzD7DwqdwOeKKmjh8kfWzFf6hBxi62Bs9SxcywYM6MM+3QQ5NY36GGJ9OcxxDj 5bT6U2bx8IHW3VY/TfMfzQ1U4IM4jp3KK10OA9GuKlDOvSbm1DLqQT4IssTSPqwr mGoIkS2kmJkPw3zebWTuOrR+9tqDy6rkjVr74kbrK9Z9jL+GI6fiXuvSEw7sF88L ulBbhLO1pZR8ZBFKl3hay1D+aNZZ2ONyiYraqsYsqHRcYtCi6IYbBzVBwAGfk0US DvIsqPxxR5MKkbKqNoMZQX27Qzgra6E= -----END CERTIFICATE-----Generated at Wed May 13 02:52:26 2026 by rpki-client