$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215939.roa File: AS215939.roa (raw, json) Hash identifier: FK1cCdbzj+LaxYMXszAWvOkrnKxrPjxH6WxcutGOwLY= Subject key identifier: 45:42:54:9A:A0:4D:67:78:0F:F8:DE:37:8D:F2:0F:B6:12:10:14:74 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 46940B6BA65234152EFD92EC28CA78408DD2C1AD Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215939.roa Signing time: Tue 28 Apr 2026 13:22:48 +0000 ROA not before: Tue 28 Apr 2026 13:17:48 +0000 ROA not after: Tue 27 Apr 2027 13:22:48 +0000 asID: 215939 IP address blocks: 2a0b:4e07:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:94:0b:6b:a6:52:34:15:2e:fd:92:ec:28:ca:78:40:8d:d2:c1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:48 2026 GMT Not After : Apr 27 13:22:48 2027 GMT Subject: CN=4542549AA04D67780FF8DE378DF20FB612101474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:4f:0d:ad:50:4b:7e:42:e8:78:7d:ec:85: 23:aa:0e:94:5d:15:ce:60:d1:e4:41:5d:35:4b:97: a3:b7:95:b9:73:f5:63:6d:e8:f5:94:60:c1:f1:24: 95:ee:8a:27:d4:87:2b:7f:7e:99:c9:41:90:17:5f: 95:c0:8a:d8:45:e2:39:c7:80:1c:6b:7a:26:47:d6: dd:56:40:d2:3d:b2:4a:79:08:5e:8f:67:5c:5c:dc: d5:c3:16:c6:97:81:ad:55:b8:aa:06:00:f9:ab:6f: fb:bb:bf:c1:40:51:f9:a9:c3:45:f8:94:96:39:86: 78:92:ab:b9:a8:35:3b:b0:ec:bb:f3:29:3a:21:67: 40:54:ea:f4:03:f2:01:82:b1:7b:06:5c:05:ce:27: c9:7c:47:71:a3:9a:23:61:03:f3:9d:d8:30:5a:69: d2:ed:ea:7d:e7:d5:4f:51:ca:b8:c9:a7:ec:41:ad: 07:6e:e3:7a:38:08:09:fd:0d:4a:88:d3:31:a9:71: c2:3d:25:bc:9a:a4:d4:af:0c:5e:74:14:14:56:a0: fc:4c:20:8c:a0:8e:57:2f:a8:22:16:b4:59:70:dc: c8:63:8f:9f:3e:c6:af:2c:47:d1:95:4d:53:d9:4c: 69:3b:f6:30:08:42:a5:00:14:fe:ad:8d:ed:88:bd: 67:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:42:54:9A:A0:4D:67:78:0F:F8:DE:37:8D:F2:0F:B6:12:10:14:74 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c0::/48 Signature Algorithm: sha256WithRSAEncryption 69:cf:eb:9f:37:db:0a:3a:85:52:f7:76:fe:6e:74:23:37:b5: 5c:66:8c:2d:09:9b:4f:d4:c4:50:a1:c7:f6:86:fe:c0:ea:9b: c4:6d:ff:ea:3a:54:f6:cb:45:1c:b0:17:6f:11:d0:f4:9f:de: 8b:85:74:19:fd:7b:a9:07:b2:ab:3e:f3:b8:5c:5a:ef:6c:b2: fc:53:34:6f:e1:2c:10:d8:b7:7a:06:17:7b:76:36:43:e2:e5: c6:a2:cf:90:2d:c0:36:a6:d3:90:6f:d0:b4:74:53:c9:78:76: b0:10:a1:12:47:03:1d:e3:b6:c3:4f:a9:dd:94:7b:ef:21:45: 6a:28:2d:27:f8:05:e5:df:b1:b2:09:a0:16:10:63:da:00:5b: 11:ff:05:13:8b:96:2b:a3:c6:b5:ca:fa:ca:42:80:57:01:af: 7e:33:9a:66:80:cf:c7:f4:f0:ab:a7:4c:d1:21:5f:19:42:45: d2:d6:fd:90:04:08:af:e1:56:df:86:c0:35:ec:f4:3c:83:d8: 39:3b:92:63:a3:b4:85:6b:ca:70:b7:52:2d:af:ed:b6:e0:13: 33:53:41:2f:59:24:8d:71:42:7d:fb:37:36:78:c1:88:32:f8: bc:b8:f1:0a:36:6a:2e:4f:eb:c5:6f:bd:8a:91:a3:38:b2:d2: b3:30:0d:bf -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIURpQLa6ZSNBUu/ZLsKMp4QI3Swa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDhaFw0yNzA0MjcxMzIyNDhaMDMxMTAvBgNV BAMTKDQ1NDI1NDlBQTA0RDY3NzgwRkY4REUzNzhERjIwRkI2MTIxMDE0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSk8NrVBLfkLoeH3shSOqDpRd Fc5g0eRBXTVLl6O3lblz9WNt6PWUYMHxJJXuiifUhyt/fpnJQZAXX5XAithF4jnH gBxreiZH1t1WQNI9skp5CF6PZ1xc3NXDFsaXga1VuKoGAPmrb/u7v8FAUfmpw0X4 lJY5hniSq7moNTuw7LvzKTohZ0BU6vQD8gGCsXsGXAXOJ8l8R3GjmiNhA/Od2DBa adLt6n3n1U9RyrjJp+xBrQdu43o4CAn9DUqI0zGpccI9JbyapNSvDF50FBRWoPxM IIygjlcvqCIWtFlw3Mhjj58+xq8sR9GVTVPZTGk79jAIQqUAFP6tje2IvWfRAgMB AAGjggItMIICKTAdBgNVHQ4EFgQURUJUmqBNZ3gP+N43jfIPthIQFHQwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTU5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAMAwDQYJKoZIhvcNAQEL BQADggEBAGnP65832wo6hVL3dv5udCM3tVxmjC0Jm0/UxFChx/aG/sDqm8Rt/+o6 VPbLRRywF28R0PSf3ouFdBn9e6kHsqs+87hcWu9ssvxTNG/hLBDYt3oGF3t2NkPi 5caiz5AtwDam05Bv0LR0U8l4drAQoRJHAx3jtsNPqd2Ue+8hRWooLSf4BeXfsbIJ oBYQY9oAWxH/BROLliujxrXK+spCgFcBr34zmmaAz8f08KunTNEhXxlCRdLW/ZAE CK/hVt+GwDXs9DyD2Dk7kmOjtIVrynC3Ui2v7bbgEzNTQS9ZJI1xQn37NzZ4wYgy +Ly48Qo2ai5P68VvvYqRoziy0rMwDb8= -----END CERTIFICATE-----Generated at Wed May 13 06:38:31 2026 by rpki-client