
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214630.roa
File: AS214630.roa (raw, json)
Hash identifier: K1q2HZ5pbwcaKL0P2LYehQ53lMM1BmQ8VUwWl7LYam0=
Subject key identifier: F5:B9:12:6C:5F:81:EE:88:AA:25:97:BD:C8:75:49:C5:48:D1:D7:9E
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 7CF368EB3329283F71078F26D29E5A32E2E49705
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214630.roa
Signing time: Tue 28 Apr 2026 13:22:51 +0000
ROA not before: Tue 28 Apr 2026 13:17:51 +0000
ROA not after: Tue 27 Apr 2027 13:22:51 +0000
asID: 214630
IP address blocks: 2a0b:4e07:1::/48 maxlen: 48
2a0b:4e07:70::/44 maxlen: 48
2a0b:4e07:d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f3:68:eb:33:29:28:3f:71:07:8f:26:d2:9e:5a:32:e2:e4:97:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Apr 28 13:17:51 2026 GMT
Not After : Apr 27 13:22:51 2027 GMT
Subject: CN=F5B9126C5F81EE88AA2597BDC87549C548D1D79E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:48:8e:b7:15:67:18:02:55:03:86:bc:66:
4d:4a:72:72:0d:86:c4:9d:14:01:75:e3:5d:54:1f:
9f:4d:ad:8d:1a:d3:08:db:81:39:f6:b1:a7:a0:50:
89:24:d8:e3:67:64:d1:d6:2e:2a:d8:df:f2:e1:58:
20:ad:17:66:d9:f2:1c:61:c4:53:21:7c:89:fd:34:
88:07:b9:79:01:94:b6:6d:e8:bf:dd:5c:a0:f5:79:
a3:33:ad:7c:02:97:72:78:af:5e:01:0b:77:eb:8b:
c6:da:74:63:be:24:82:b2:1b:7e:f2:f1:d9:7c:fe:
9b:64:f7:43:50:54:42:ac:1a:f8:ab:e5:f4:22:ee:
09:10:9c:2a:ea:15:09:bb:11:3e:be:f5:2b:50:97:
ec:6f:21:76:4f:9c:7a:1d:98:d5:d5:1c:e2:03:c6:
2f:20:5c:1f:2d:5e:0b:22:8b:29:fb:9a:17:be:e1:
a8:2d:fe:7e:86:fe:05:f6:b8:32:24:3b:14:ab:29:
94:1c:72:05:aa:21:43:96:09:e4:24:a1:d3:8b:e3:
7f:20:32:c1:37:25:e0:9f:38:ff:2c:b3:c8:d4:40:
5e:1b:25:75:be:35:c1:95:58:58:c1:18:e7:84:9e:
88:e3:11:a2:a6:df:ca:43:fe:12:16:19:37:7a:7a:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B9:12:6C:5F:81:EE:88:AA:25:97:BD:C8:75:49:C5:48:D1:D7:9E
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:1::/48
2a0b:4e07:70::/44
2a0b:4e07:d1::/48
Signature Algorithm: sha256WithRSAEncryption
80:a3:1d:7e:63:c8:1f:45:5c:3c:0e:fc:fe:04:10:36:fe:a4:
8f:e6:4e:22:82:36:ff:fd:4f:f2:89:c5:15:e1:5e:ba:ec:78:
6a:3b:b7:22:85:d6:23:8e:53:24:26:3e:6c:f5:c8:d1:13:90:
f5:36:b9:7b:fb:63:fb:c2:b2:4d:6b:e9:8a:b3:d0:89:38:82:
cf:12:ee:03:7b:01:1c:87:27:3a:0c:5d:38:e1:bd:94:12:7e:
78:41:3b:41:55:89:7f:d4:db:f1:3d:22:02:c5:5a:7f:63:f8:
0c:15:e2:d0:d0:d1:5c:8c:63:44:73:34:2d:17:be:d9:8b:48:
2c:48:d8:c3:e5:05:73:e5:15:24:60:e8:21:36:0f:69:ab:7f:
0f:de:6d:99:63:6e:5d:38:c1:61:28:fb:e3:8c:31:9b:37:32:
cc:74:a4:11:c9:34:7a:4d:3d:9a:d1:5c:d2:88:bd:dd:cd:41:
ca:02:2e:8d:28:19:89:5b:17:87:2c:dc:c4:1e:07:8d:c6:7c:
41:52:4d:b8:6f:c2:88:56:e4:1f:f8:89:30:c1:c7:03:1b:a1:
33:02:90:ef:db:0b:d3:00:78:28:5c:21:cb:56:e7:5c:a1:0e:
ef:84:5e:99:56:a3:e2:2a:69:9b:1f:17:f6:87:45:49:51:82:
88:b0:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:40:07 2026 by rpki-client