$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215685.roa File: AS215685.roa (raw, json) Hash identifier: 7Oa66qxZcYhPVIVJp9mk7023qNEGq/w+2uRKI013x58= Subject key identifier: 4E:69:2D:E6:64:DF:2E:0F:EA:BC:32:FC:F3:81:00:E2:A6:6F:01:D2 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 7E795A4A852E9F25A6E655F2E9A378207294C31C Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215685.roa Signing time: Tue 28 Apr 2026 13:22:47 +0000 ROA not before: Tue 28 Apr 2026 13:17:47 +0000 ROA not after: Tue 27 Apr 2027 13:22:47 +0000 asID: 215685 IP address blocks: 2a0b:4e07:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:79:5a:4a:85:2e:9f:25:a6:e6:55:f2:e9:a3:78:20:72:94:c3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:47 2026 GMT Not After : Apr 27 13:22:47 2027 GMT Subject: CN=4E692DE664DF2E0FEABC32FCF38100E2A66F01D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:53:f6:50:1a:a0:42:04:f1:1e:9f:dd:19: 42:7b:5f:dc:f2:9b:1b:c7:82:42:56:fc:13:19:65: 92:f0:ec:8e:1e:9f:2b:2e:6a:c6:8f:f8:32:4d:7a: c6:c0:a7:53:c9:5e:da:fe:c7:47:3a:89:20:39:63: aa:2f:7f:d3:28:3f:c8:42:8d:c9:07:1e:39:a6:6d: 88:b3:55:25:d2:8f:19:28:83:4e:6f:4e:a3:3d:00: 41:54:49:a2:e4:1d:53:6b:76:bc:d7:5c:7a:ff:7c: 63:0e:e7:03:79:e8:58:38:7e:4d:05:c1:4a:f6:d0: 18:ab:1b:e8:47:dc:c0:04:2a:e2:2f:37:29:b4:d4: ca:c0:73:fb:1b:6a:66:56:b6:e4:25:68:8e:d7:fe: 0a:6f:80:13:74:e2:54:1b:0c:7b:03:31:9f:67:00: ed:3f:21:01:a6:59:f8:07:ca:6f:38:03:7a:54:5a: 38:79:35:a5:93:b3:3a:0a:28:60:10:ac:bd:a4:6c: 10:eb:1d:2b:23:6c:28:b5:11:e9:f1:52:d4:47:6e: 58:db:b5:df:2e:07:e2:00:ac:cc:96:80:33:f2:48: c5:d0:bf:ed:b5:68:f5:4a:40:0e:65:74:ee:88:00: fc:7f:be:ae:18:be:88:49:59:cc:6b:36:7d:01:2b: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:69:2D:E6:64:DF:2E:0F:EA:BC:32:FC:F3:81:00:E2:A6:6F:01:D2 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215685.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:5000::/36 Signature Algorithm: sha256WithRSAEncryption 26:c9:2d:a6:00:db:e7:bb:30:40:9e:6f:83:a8:08:c8:62:60: 6e:2f:bc:27:06:a8:9c:27:b3:cf:3d:8a:fb:57:60:8c:58:3f: 9d:66:2a:d2:53:dc:34:49:6b:ea:e8:aa:40:45:d2:bd:e6:1f: 88:85:95:5b:80:18:45:93:2e:ce:f4:97:29:cd:b3:41:a4:91: e4:ff:46:2f:30:f8:72:cd:f2:12:86:ea:1d:9b:b6:d9:9b:73: da:30:9c:87:64:48:25:1a:f4:4d:98:fa:be:8b:b4:89:f9:2f: 68:d1:54:d7:05:99:12:3a:a7:b7:43:1f:da:de:28:6f:3b:06: 68:dd:65:3d:e3:da:e8:3d:a2:a6:c8:15:7e:5e:ad:19:49:18: a1:8e:c9:f4:1a:a5:71:6b:98:62:1f:ad:0d:99:1b:3c:a7:7a: b8:13:10:42:93:53:1d:84:9b:ac:d9:16:fa:e9:dd:e8:41:54: 42:6b:2f:21:5c:00:49:8e:9e:3f:6f:b4:fb:da:2e:77:37:6e: 13:8b:43:01:13:31:79:d5:e9:85:10:30:6e:3b:31:ed:ed:d6: cf:48:9e:12:65:84:03:1a:76:c7:3c:cb:ac:90:c8:e1:fe:85: 84:ec:f9:0b:e2:29:25:55:e0:5f:6c:86:34:b3:11:c0:3d:50: a8:ec:33:68 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUfnlaSoUunyWm5lXy6aN4IHKUwxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDdaFw0yNzA0MjcxMzIyNDdaMDMxMTAvBgNV BAMTKDRFNjkyREU2NjRERjJFMEZFQUJDMzJGQ0YzODEwMEUyQTY2RjAxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXL1P2UBqgQgTxHp/dGUJ7X9zy mxvHgkJW/BMZZZLw7I4enysuasaP+DJNesbAp1PJXtr+x0c6iSA5Y6ovf9MoP8hC jckHHjmmbYizVSXSjxkog05vTqM9AEFUSaLkHVNrdrzXXHr/fGMO5wN56Fg4fk0F wUr20BirG+hH3MAEKuIvNym01MrAc/sbamZWtuQlaI7X/gpvgBN04lQbDHsDMZ9n AO0/IQGmWfgHym84A3pUWjh5NaWTszoKKGAQrL2kbBDrHSsjbCi1EenxUtRHbljb td8uB+IArMyWgDPySMXQv+21aPVKQA5ldO6IAPx/vq4YvohJWcxrNn0BK3PBAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUTmkt5mTfLg/qvDL884EA4qZvAdIwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTU2ODUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqC04HUDANBgkqhkiG9w0BAQsF AAOCAQEAJsktpgDb57swQJ5vg6gIyGJgbi+8JwaonCezzz2K+1dgjFg/nWYq0lPc NElr6uiqQEXSveYfiIWVW4AYRZMuzvSXKc2zQaSR5P9GLzD4cs3yEobqHZu22Ztz 2jCch2RIJRr0TZj6vou0ifkvaNFU1wWZEjqnt0Mf2t4obzsGaN1lPePa6D2ipsgV fl6tGUkYoY7J9BqlcWuYYh+tDZkbPKd6uBMQQpNTHYSbrNkW+und6EFUQmsvIVwA SY6eP2+0+9oudzduE4tDARMxedXphRAwbjsx7e3Wz0ieEmWEAxp2xzzLrJDI4f6F hOz5C+IpJVXgX2yGNLMRwD1QqOwzaA== -----END CERTIFICATE-----Generated at Tue May 12 21:53:56 2026 by rpki-client