$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214769.roa File: AS214769.roa (raw, json) Hash identifier: tU4qz+IwHLus1l/V4vahGJQXJ8oevbdxjBBsoIYE4tU= Subject key identifier: BB:DA:D1:44:08:CB:4A:46:B2:D9:DB:2C:46:66:F3:B2:7B:02:5D:C5 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 5D79E0B2582128F1F707BDD970A0CC79A9F65149 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214769.roa Signing time: Tue 28 Apr 2026 13:22:47 +0000 ROA not before: Tue 28 Apr 2026 13:17:47 +0000 ROA not after: Tue 27 Apr 2027 13:22:47 +0000 asID: 214769 IP address blocks: 2a0b:4e07:b5::/48 maxlen: 48 2a0b:4e07:cc::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:79:e0:b2:58:21:28:f1:f7:07:bd:d9:70:a0:cc:79:a9:f6:51:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:47 2026 GMT Not After : Apr 27 13:22:47 2027 GMT Subject: CN=BBDAD14408CB4A46B2D9DB2C4666F3B27B025DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:6e:79:7c:66:84:7c:75:2c:46:3f:9d:fb: 02:51:19:44:b5:9f:23:ef:1a:26:6f:07:ad:14:ec: 60:42:d4:91:08:c6:4c:dd:68:9c:fc:3f:95:5f:83: a5:14:d2:16:f7:7b:c1:c9:3f:d2:31:a1:8c:4e:12: e7:d4:39:34:98:9c:e9:59:36:3d:81:d9:cb:91:2c: ca:3e:50:4d:65:ea:e7:81:b7:f8:1d:94:2c:7f:7f: 1e:5f:b6:94:fe:19:c5:00:76:c4:56:5e:c7:a7:21: 9d:26:d2:1c:c5:b7:18:7c:f4:37:d2:15:74:da:63: 10:4b:87:16:fa:05:27:81:ad:c9:18:d9:3e:4b:91: c2:ff:4a:cb:93:be:05:ea:9b:96:62:ba:08:3e:a2: 74:5c:7a:88:f8:09:93:7f:31:b4:3f:26:23:9d:58: 57:c8:6b:c6:fc:66:d2:cf:f1:c5:a1:5e:21:4a:88: 82:de:ba:40:a3:1c:b4:c0:2c:41:45:fe:7f:82:f1: 3c:02:39:ee:c5:8e:77:ce:b8:99:fe:0a:c6:fa:bb: 61:38:d8:b1:66:79:e2:be:66:ac:e4:78:44:bb:db: bc:37:b6:e7:6a:7f:75:4c:7a:e8:a3:71:cb:25:b9: c4:07:ee:87:60:42:eb:de:e9:5a:93:39:31:0b:40: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DA:D1:44:08:CB:4A:46:B2:D9:DB:2C:46:66:F3:B2:7B:02:5D:C5 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b5::/48 2a0b:4e07:cc::/46 Signature Algorithm: sha256WithRSAEncryption 62:49:0a:92:60:87:2a:d1:67:b2:2e:68:2d:5b:f6:53:1f:7c: 3e:83:3a:07:60:e5:46:11:bf:a3:16:90:5a:8a:82:75:cb:30: 87:12:59:f2:c1:a7:37:41:de:cc:d9:7d:33:54:24:f7:67:c6: dc:7b:2a:64:12:45:47:8a:91:84:47:c6:7f:7d:a4:20:87:d7: ad:08:b9:b0:18:cc:05:96:67:d0:f4:d5:89:54:bc:9a:c6:b8: 1d:a2:35:20:ea:45:28:ea:c1:91:89:eb:5b:a6:d1:fb:62:e7: 43:3e:af:e0:e9:38:b7:76:ca:c4:bc:19:24:56:3c:13:5a:93: 25:1b:3f:43:3a:4d:d0:4d:a2:1b:2c:3c:05:62:91:61:c9:7f: 3e:37:a9:23:cb:02:62:78:e4:0e:8e:2d:ce:c0:0d:95:93:d0: f9:a9:c7:72:9d:0b:94:8d:0f:71:b9:8f:5d:7e:ae:e1:36:63: 58:8b:30:4d:45:4b:1f:49:a3:17:67:65:76:29:d3:94:20:07: ec:cd:9a:11:d0:9e:9c:7c:9d:af:8a:e2:99:bd:03:8b:47:2b: 91:9e:e0:9e:9c:b1:ab:04:99:d6:69:8f:87:3f:7e:1c:6c:83: ef:f6:f3:96:4d:24:54:a5:f5:58:56:17:ce:fa:a9:ad:13:e4: 23:b8:0c:f5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXXngslghKPH3B73ZcKDMean2UUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDdaFw0yNzA0MjcxMzIyNDdaMDMxMTAvBgNV BAMTKEJCREFEMTQ0MDhDQjRBNDZCMkQ5REIyQzQ2NjZGM0IyN0IwMjVEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSW55fGaEfHUsRj+d+wJRGUS1 nyPvGiZvB60U7GBC1JEIxkzdaJz8P5Vfg6UU0hb3e8HJP9IxoYxOEufUOTSYnOlZ Nj2B2cuRLMo+UE1l6ueBt/gdlCx/fx5ftpT+GcUAdsRWXsenIZ0m0hzFtxh89DfS FXTaYxBLhxb6BSeBrckY2T5LkcL/SsuTvgXqm5Ziugg+onRceoj4CZN/MbQ/JiOd WFfIa8b8ZtLP8cWhXiFKiILeukCjHLTALEFF/n+C8TwCOe7FjnfOuJn+Csb6u2E4 2LFmeeK+ZqzkeES727w3tudqf3VMeuijccslucQH7odgQuve6VqTOTELQAXtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUu9rRRAjLSkay2dssRmbzsnsCXcUwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTQ3Njkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqC04HALUDBwIqC04HAMwwDQYJ KoZIhvcNAQELBQADggEBAGJJCpJghyrRZ7IuaC1b9lMffD6DOgdg5UYRv6MWkFqK gnXLMIcSWfLBpzdB3szZfTNUJPdnxtx7KmQSRUeKkYRHxn99pCCH160IubAYzAWW Z9D01YlUvJrGuB2iNSDqRSjqwZGJ61um0fti50M+r+DpOLd2ysS8GSRWPBNakyUb P0M6TdBNohssPAVikWHJfz43qSPLAmJ45A6OLc7ADZWT0Pmpx3KdC5SND3G5j11+ ruE2Y1iLME1FSx9JoxdnZXYp05QgB+zNmhHQnpx8na+K4pm9A4tHK5Ge4J6csasE mdZpj4c/fhxsg+/285ZNJFSl9VhWF876qa0T5CO4DPU= -----END CERTIFICATE-----Generated at Tue May 12 22:17:23 2026 by rpki-client