$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215953.roa File: AS215953.roa (raw, json) Hash identifier: BF68oe34e2Y7zQnNXg595KV8F+fmfnVIywT3bqKJmQs= Subject key identifier: 2B:93:1D:C2:E2:08:42:2F:02:F3:1C:49:A9:BC:B1:70:E5:77:F5:61 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 7053FE1456D2295CF320EAB9CB0A7CD422C73EDC Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215953.roa Signing time: Tue 28 Apr 2026 13:22:47 +0000 ROA not before: Tue 28 Apr 2026 13:17:47 +0000 ROA not after: Tue 27 Apr 2027 13:22:47 +0000 asID: 215953 IP address blocks: 2a0b:4e07:cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:53:fe:14:56:d2:29:5c:f3:20:ea:b9:cb:0a:7c:d4:22:c7:3e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:47 2026 GMT Not After : Apr 27 13:22:47 2027 GMT Subject: CN=2B931DC2E208422F02F31C49A9BCB170E577F561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:20:86:c1:70:68:9a:77:8f:a9:07:10:b0: 36:b4:3b:80:00:83:5e:97:a0:fc:c7:ce:0a:d6:f3: 2a:be:49:b4:9e:f5:7b:91:a5:f2:fe:29:d1:01:df: a2:ba:86:5b:8e:76:20:4a:36:ef:cc:50:06:57:84: f0:fc:8f:f3:03:58:ac:26:70:04:e4:1c:0a:7d:37: d9:4d:4c:3d:f8:12:0c:31:9a:53:de:ab:bf:87:51: f8:b5:44:31:e7:52:01:b0:d3:aa:e8:33:2a:9e:7a: df:c1:42:0b:6c:15:5e:6d:18:d8:ba:01:09:76:15: 73:6a:33:16:d7:61:6d:ff:05:71:7e:62:88:fb:52: 3d:71:36:49:de:f5:51:ed:ff:ed:69:c4:f5:43:9c: 84:f9:b1:56:dc:37:e4:63:21:7e:02:37:dd:a7:8f: 02:3c:36:40:4b:07:39:3c:c4:db:56:99:28:48:8e: ad:5c:69:f8:71:17:87:7a:c0:9b:ef:e0:18:1b:6b: e6:cf:60:00:1f:05:f7:6d:33:25:c5:0f:83:18:37: f2:03:b8:9f:bf:1d:98:85:b3:40:36:18:31:15:b4: 5a:f3:f6:06:0e:a8:5f:f3:96:9a:bc:55:81:71:8c: 46:f6:a4:14:39:b6:d1:70:96:68:e9:39:89:93:88: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:93:1D:C2:E2:08:42:2F:02:F3:1C:49:A9:BC:B1:70:E5:77:F5:61 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215953.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:cc::/48 Signature Algorithm: sha256WithRSAEncryption 2e:90:be:23:e4:4e:84:4d:56:3d:2e:6f:92:de:fe:92:97:81: 73:76:e2:17:79:1e:dc:d0:38:55:ec:af:49:d9:39:c8:c6:66: c8:c5:d3:bf:8c:12:27:b4:d3:f7:9b:fa:0a:8d:fe:d3:f0:79: b5:f3:fc:af:d1:c4:e9:7f:f1:2c:f2:62:74:10:9c:a3:5d:4a: 7a:8a:24:cb:62:17:38:76:83:96:ef:03:77:7a:14:fc:e0:09: 53:45:3e:f7:59:7b:83:7d:b1:51:2f:b2:1c:54:f5:56:83:64: aa:a5:4d:5f:f8:36:c7:e7:2d:28:65:a5:2d:4a:eb:bd:af:2e: a2:89:fc:f3:12:5f:4b:56:1a:6d:ec:0b:ee:b1:fc:f5:39:6d: de:c5:07:d9:c4:8e:3b:ee:31:7f:f7:76:d4:4a:60:12:bc:d5: a7:31:ec:93:16:a6:1a:e4:d3:2f:74:bc:8a:38:a6:34:10:78: 86:6e:70:16:e5:b8:0f:2e:6d:aa:95:a0:c3:99:8f:77:91:79: c9:18:ee:5c:88:64:8d:8d:4c:fc:90:71:65:58:37:ab:67:49: b7:43:f4:31:31:ad:e8:44:85:57:f9:7a:93:48:ab:00:e7:73: ab:ca:5e:5b:6a:a4:03:df:d8:c5:5d:f5:c3:3e:08:c1:ea:48: 02:a9:4c:83 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUcFP+FFbSKVzzIOq5ywp81CLHPtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDdaFw0yNzA0MjcxMzIyNDdaMDMxMTAvBgNV BAMTKDJCOTMxREMyRTIwODQyMkYwMkYzMUM0OUE5QkNCMTcwRTU3N0Y1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72SCGwXBomnePqQcQsDa0O4AA g16XoPzHzgrW8yq+SbSe9XuRpfL+KdEB36K6hluOdiBKNu/MUAZXhPD8j/MDWKwm cATkHAp9N9lNTD34EgwxmlPeq7+HUfi1RDHnUgGw06roMyqeet/BQgtsFV5tGNi6 AQl2FXNqMxbXYW3/BXF+Yoj7Uj1xNkne9VHt/+1pxPVDnIT5sVbcN+RjIX4CN92n jwI8NkBLBzk8xNtWmShIjq1cafhxF4d6wJvv4Bgba+bPYAAfBfdtMyXFD4MYN/ID uJ+/HZiFs0A2GDEVtFrz9gYOqF/zlpq8VYFxjEb2pBQ5ttFwlmjpOYmTiB3xAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUK5MdwuIIQi8C8xxJqbyxcOV39WEwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTU5NTMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAMwwDQYJKoZIhvcNAQEL BQADggEBAC6QviPkToRNVj0ub5Le/pKXgXN24hd5HtzQOFXsr0nZOcjGZsjF07+M Eie00/eb+gqN/tPwebXz/K/RxOl/8SzyYnQQnKNdSnqKJMtiFzh2g5bvA3d6FPzg CVNFPvdZe4N9sVEvshxU9VaDZKqlTV/4NsfnLShlpS1K672vLqKJ/PMSX0tWGm3s C+6x/PU5bd7FB9nEjjvuMX/3dtRKYBK81acx7JMWphrk0y90vIo4pjQQeIZucBbl uA8ubaqVoMOZj3eReckY7lyIZI2NTPyQcWVYN6tnSbdD9DExrehEhVf5epNIqwDn c6vKXltqpAPf2MVd9cM+CMHqSAKpTIM= -----END CERTIFICATE-----Generated at Wed May 13 06:38:32 2026 by rpki-client