$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214818.roa File: AS214818.roa (raw, json) Hash identifier: FJ9A+qdkctGyKTpQtUtC6uW8XCuVH85490P/rH1J8mg= Subject key identifier: 0B:A7:2B:BA:40:A1:78:AF:A5:8F:02:F7:04:2E:CE:F2:C0:95:1B:9B Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 653461917A1239FF0578DFD0E77691D6458CCD6F Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214818.roa Signing time: Tue 28 Apr 2026 13:22:47 +0000 ROA not before: Tue 28 Apr 2026 13:17:47 +0000 ROA not after: Tue 27 Apr 2027 13:22:47 +0000 asID: 214818 IP address blocks: 2a0b:4e07:dc::/46 maxlen: 48 2a0b:4e07:c68::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:34:61:91:7a:12:39:ff:05:78:df:d0:e7:76:91:d6:45:8c:cd:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:47 2026 GMT Not After : Apr 27 13:22:47 2027 GMT Subject: CN=0BA72BBA40A178AFA58F02F7042ECEF2C0951B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6d:07:1f:f9:09:eb:8e:7d:ea:82:f6:f5:e2: 4c:49:e9:23:88:dd:4f:e6:30:60:61:bb:6c:5a:45: 84:23:49:8f:1e:c6:6a:57:3c:03:b0:f2:a6:0d:20: 73:15:3f:2b:34:89:c8:d4:f2:2e:e7:99:d9:45:ba: ca:a0:18:54:de:34:3e:ec:19:81:dd:cd:84:b6:b7: 0c:0f:f8:64:13:6b:49:e7:5a:78:10:27:e5:60:5e: 88:20:55:0e:0d:cb:67:55:6d:9f:53:54:9e:0a:da: a2:44:a4:f1:8d:fd:e5:ee:e2:10:78:0e:fb:8a:9b: 10:a8:4a:32:98:da:fd:ee:82:f9:cc:95:a2:69:85: 20:2b:80:3e:fa:9a:71:8d:c3:dc:6b:d8:a0:b3:ad: 9d:7e:cb:b7:bc:62:02:14:f1:fb:7b:5a:74:8b:87: 2f:90:65:bc:35:15:62:bb:37:be:36:ee:ef:97:e6: 06:41:e9:0f:67:27:e2:96:d4:f6:cd:92:79:39:ae: 5c:99:d0:e0:5a:e7:75:0e:a2:d9:d6:c8:1f:81:e3: 4a:d9:29:87:c6:d3:a7:ce:16:3f:47:63:5f:0a:75: b4:68:aa:e8:50:2f:3f:9e:03:5c:1e:eb:26:64:12: 3e:ff:d8:90:63:0f:41:7c:d2:95:30:5c:ba:bd:a4: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A7:2B:BA:40:A1:78:AF:A5:8F:02:F7:04:2E:CE:F2:C0:95:1B:9B X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214818.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:dc::/46 2a0b:4e07:c68::/46 Signature Algorithm: sha256WithRSAEncryption 38:c5:cd:3a:ac:44:45:f2:b5:f5:9c:ef:88:26:ba:2d:d5:f5: f6:d3:b6:ab:57:a0:fb:06:1e:6c:da:26:3e:01:2c:25:ad:70: 52:ad:f8:ba:ea:58:20:bf:0f:8d:07:5a:16:36:32:63:08:da: 76:2f:17:d0:9a:24:17:47:9b:02:df:c7:07:79:ae:38:06:61: b8:2c:ae:de:c8:4d:02:cd:ee:aa:8c:17:c6:f1:46:1c:cf:1c: 01:cb:c8:28:b5:9e:0e:d6:a3:35:46:bb:bc:6e:dc:7d:0c:70: dc:3f:0a:cd:2d:7e:a9:12:bd:3c:07:e6:8b:a9:f7:7f:6c:e5: b5:38:e9:4c:a8:fc:23:00:19:f7:08:ff:b5:37:28:08:35:9f: 90:8f:1c:51:af:4f:f0:3f:cf:dc:5d:76:44:54:4a:38:fa:1b: 8a:31:26:f2:00:e8:a8:34:2a:dc:ef:a0:ce:0d:ad:85:5c:4b: dc:d6:f5:2b:79:8e:e9:20:20:37:d1:8d:06:55:f2:8e:bc:69: d4:c7:a3:cb:2e:e3:2b:a9:f9:c4:b4:f4:f0:3a:5f:5a:96:17: 42:e2:8d:e5:c7:e8:4d:f0:1c:4a:3e:05:03:56:ab:e5:91:24: 38:a5:fa:4d:41:af:7d:51:2a:2b:6a:5c:96:21:92:7c:6c:4c: 44:0c:6e:6f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZTRhkXoSOf8FeN/Q53aR1kWMzW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDdaFw0yNzA0MjcxMzIyNDdaMDMxMTAvBgNV BAMTKDBCQTcyQkJBNDBBMTc4QUZBNThGMDJGNzA0MkVDRUYyQzA5NTFCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDubQcf+Qnrjn3qgvb14kxJ6SOI 3U/mMGBhu2xaRYQjSY8exmpXPAOw8qYNIHMVPys0icjU8i7nmdlFusqgGFTeND7s GYHdzYS2twwP+GQTa0nnWngQJ+VgXoggVQ4Ny2dVbZ9TVJ4K2qJEpPGN/eXu4hB4 DvuKmxCoSjKY2v3ugvnMlaJphSArgD76mnGNw9xr2KCzrZ1+y7e8YgIU8ft7WnSL hy+QZbw1FWK7N7427u+X5gZB6Q9nJ+KW1PbNknk5rlyZ0OBa53UOotnWyB+B40rZ KYfG06fOFj9HY18KdbRoquhQLz+eA1we6yZkEj7/2JBjD0F80pUwXLq9pKXjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUC6crukCheK+ljwL3BC7O8sCVG5swHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTQ4MTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwIqC04HANwDBwIqC04HDGgwDQYJ KoZIhvcNAQELBQADggEBADjFzTqsREXytfWc74gmui3V9fbTtqtXoPsGHmzaJj4B LCWtcFKt+LrqWCC/D40HWhY2MmMI2nYvF9CaJBdHmwLfxwd5rjgGYbgsrt7ITQLN 7qqMF8bxRhzPHAHLyCi1ng7WozVGu7xu3H0McNw/Cs0tfqkSvTwH5oup939s5bU4 6Uyo/CMAGfcI/7U3KAg1n5CPHFGvT/A/z9xddkRUSjj6G4oxJvIA6Kg0KtzvoM4N rYVcS9zW9St5jukgIDfRjQZV8o68adTHo8su4yup+cS09PA6X1qWF0LijeXH6E3w HEo+BQNWq+WRJDil+k1Br31RKitqXJYhknxsTEQMbm8= -----END CERTIFICATE-----Generated at Tue May 12 22:17:23 2026 by rpki-client