$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214946.roa File: AS214946.roa (raw, json) Hash identifier: 0TVyFjWxycGi90i5l5Iw3Z7XHAtA3mlWhhjtbUmJPCc= Subject key identifier: 42:01:2C:14:04:E0:47:7B:2B:D7:4B:83:34:E5:00:5E:21:9D:A1:3E Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 5F929913FD9526B714914A9DCA25D98F6BE88D71 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214946.roa Signing time: Tue 28 Apr 2026 13:22:47 +0000 ROA not before: Tue 28 Apr 2026 13:17:47 +0000 ROA not after: Tue 27 Apr 2027 13:22:47 +0000 asID: 214946 IP address blocks: 2a0b:4e07:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:92:99:13:fd:95:26:b7:14:91:4a:9d:ca:25:d9:8f:6b:e8:8d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:47 2026 GMT Not After : Apr 27 13:22:47 2027 GMT Subject: CN=42012C1404E0477B2BD74B8334E5005E219DA13E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:f8:fe:4c:95:ad:3a:95:6f:7a:3c:6e:5d: d8:99:7e:5d:99:43:ae:22:67:54:70:53:e4:17:32: 29:e6:96:38:62:49:85:12:4d:6c:5b:b3:63:ba:d8: 31:7a:38:d7:59:db:cc:ce:4e:37:dd:ea:47:df:ed: 6f:14:2c:e1:2a:89:25:02:80:2f:a2:3c:c6:2c:b3: c7:f8:33:0b:d0:d5:df:6c:43:2b:a0:d6:f0:d9:21: 80:35:a9:e7:a3:22:3c:16:db:19:a7:53:11:60:ab: 3d:fa:13:20:31:cd:6e:69:ed:1c:4f:0c:ae:9d:44: 78:f3:d9:99:2e:d3:55:4b:47:af:af:4c:91:48:35: e9:0d:66:9d:09:eb:d6:7f:9b:4f:45:3c:b4:f7:ba: 0a:01:65:f7:db:5a:6c:1c:1e:22:49:a6:04:41:08: 1c:5b:f8:86:55:fd:c7:5b:f0:93:2f:31:e3:8f:0b: ee:08:38:7a:ea:87:17:d8:0d:fc:ca:65:46:9c:60: 51:74:bf:0e:c6:0c:5b:68:4e:8b:02:85:c4:75:ef: bd:66:c3:8c:3b:b8:b9:b7:0f:d9:c1:c4:60:ca:d0: 18:4f:29:09:d5:81:a8:01:04:81:4f:b5:47:6e:b0: 62:70:18:25:71:fd:23:03:d0:62:bb:87:a0:b3:3a: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:2C:14:04:E0:47:7B:2B:D7:4B:83:34:E5:00:5E:21:9D:A1:3E X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3d::/48 Signature Algorithm: sha256WithRSAEncryption 97:58:28:57:55:3d:74:0a:cc:69:75:50:55:40:78:6c:fe:27: fe:63:c0:61:c0:e1:8d:ee:9a:5a:6f:b5:64:ce:23:95:b7:10: 86:74:b1:e1:6a:60:6a:d8:de:eb:3a:60:9d:9d:6b:5e:b5:d7: 2e:5d:3a:fb:d8:5f:a1:9b:c3:13:1f:d8:83:58:4d:8f:71:db: 92:93:29:8f:1b:e6:9c:db:03:15:d6:73:bb:fa:23:15:03:51: 90:85:ce:d9:40:e0:68:76:a9:db:5b:52:20:6b:89:da:50:a1: d7:2d:90:37:7e:a5:d5:ac:83:e5:7a:7d:e4:ca:dc:58:a3:05: c9:5e:8c:4b:1f:14:90:71:15:af:15:8a:be:1e:a0:7e:4a:32: 17:36:31:90:97:a5:d3:b5:1f:15:02:96:0a:b8:0e:ef:56:39: b6:cf:fe:62:8b:9b:90:36:5e:da:17:ab:f2:20:80:3e:69:1d: ed:6b:da:f4:49:a5:f2:25:23:8c:7b:4b:92:9c:0b:87:9b:54: df:41:f1:c8:b4:ba:26:12:57:da:42:f9:7a:30:7f:5d:86:4d: 9d:bf:28:ad:22:7d:dd:04:8a:23:c8:70:63:8d:46:de:c0:ad: 7f:f4:be:94:de:c2:35:8e:63:bf:75:5b:28:0d:74:84:a3:d3: 80:60:f0:ca -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUX5KZE/2VJrcUkUqdyiXZj2vojXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDdaFw0yNzA0MjcxMzIyNDdaMDMxMTAvBgNV BAMTKDQyMDEyQzE0MDRFMDQ3N0IyQkQ3NEI4MzM0RTUwMDVFMjE5REExM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEM/j+TJWtOpVvejxuXdiZfl2Z Q64iZ1RwU+QXMinmljhiSYUSTWxbs2O62DF6ONdZ28zOTjfd6kff7W8ULOEqiSUC gC+iPMYss8f4MwvQ1d9sQyug1vDZIYA1qeejIjwW2xmnUxFgqz36EyAxzW5p7RxP DK6dRHjz2Zku01VLR6+vTJFINekNZp0J69Z/m09FPLT3ugoBZffbWmwcHiJJpgRB CBxb+IZV/cdb8JMvMeOPC+4IOHrqhxfYDfzKZUacYFF0vw7GDFtoTosChcR1771m w4w7uLm3D9nBxGDK0BhPKQnVgagBBIFPtUdusGJwGCVx/SMD0GK7h6CzOhFdAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUQgEsFATgR3sr10uDNOUAXiGdoT4wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTQ5NDYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAD0wDQYJKoZIhvcNAQEL BQADggEBAJdYKFdVPXQKzGl1UFVAeGz+J/5jwGHA4Y3umlpvtWTOI5W3EIZ0seFq YGrY3us6YJ2da1611y5dOvvYX6GbwxMf2INYTY9x25KTKY8b5pzbAxXWc7v6IxUD UZCFztlA4Gh2qdtbUiBridpQodctkDd+pdWsg+V6feTK3FijBclejEsfFJBxFa8V ir4eoH5KMhc2MZCXpdO1HxUClgq4Du9WObbP/mKLm5A2XtoXq/IggD5pHe1r2vRJ pfIlI4x7S5KcC4ebVN9B8ci0uiYSV9pC+Xowf12GTZ2/KK0ifd0EiiPIcGONRt7A rX/0vpTewjWOY791WygNdISj04Bg8Mo= -----END CERTIFICATE-----Generated at Wed May 13 06:38:32 2026 by rpki-client