$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS216418.roa File: AS216418.roa (raw, json) Hash identifier: hM1oAoYNdRESqLcDkqyQRc3Vp3KReH4P0S9/6e9SLlg= Subject key identifier: 8E:68:76:3B:8B:28:FD:02:FD:9E:A1:5E:5E:0A:0F:4F:AF:C6:7B:81 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1A0CA3568C5AB74BEC9D73D07D13BF016C878D2B Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS216418.roa Signing time: Mon 04 May 2026 10:34:33 +0000 ROA not before: Mon 04 May 2026 10:29:33 +0000 ROA not after: Mon 03 May 2027 10:34:33 +0000 asID: 216418 IP address blocks: 2a0b:4e07:98::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0c:a3:56:8c:5a:b7:4b:ec:9d:73:d0:7d:13:bf:01:6c:87:8d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: May 4 10:29:33 2026 GMT Not After : May 3 10:34:33 2027 GMT Subject: CN=8E68763B8B28FD02FD9EA15E5E0A0F4FAFC67B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:2c:aa:5e:9e:ce:22:8d:8f:7e:3c:80:39: f4:9d:c1:11:30:b8:7f:1f:04:3b:2c:41:22:57:94: 2e:3f:09:11:32:4c:e3:c2:19:bb:2e:35:48:54:51: d4:ee:b2:24:e1:4b:42:ea:46:42:a1:69:22:bc:54: 6e:78:c3:58:8b:f6:f2:4f:16:4b:ac:ae:04:a4:d3: ce:79:5b:c1:e4:b1:44:81:9d:76:72:8a:c0:dd:80: 0a:f0:13:8c:ea:48:af:24:ec:ba:43:1d:b8:66:42: 41:5d:e5:e4:a1:5c:10:ea:89:f6:83:3c:f2:81:8d: 16:24:d2:3d:4a:bc:fc:4e:7c:68:64:03:d9:18:ef: db:62:24:51:78:26:e9:bd:80:36:e9:4e:9a:65:b8: e3:08:66:a0:53:35:1a:5d:a1:5f:98:24:8b:b9:b7: 35:8b:2e:df:6f:19:7c:61:5d:68:e6:58:73:bd:57: c7:df:a4:fd:04:9f:1e:b5:41:0f:71:01:b1:e3:ab: 0c:72:ea:f2:30:5b:0c:7f:70:28:8b:2f:76:36:4a: 66:8c:c8:73:35:76:e6:45:0d:6b:c5:90:0a:33:7a: 5a:d7:cb:6f:ea:66:ce:65:3a:d5:58:b3:63:5a:66: 92:29:92:f4:69:b2:c6:ce:4c:22:c0:50:18:62:b6: 71:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:68:76:3B:8B:28:FD:02:FD:9E:A1:5E:5E:0A:0F:4F:AF:C6:7B:81 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS216418.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:98::/46 Signature Algorithm: sha256WithRSAEncryption 9b:57:2a:2e:5e:04:60:7c:26:58:00:16:eb:be:46:ac:22:be: 73:ea:ac:34:4c:f1:aa:7d:d1:a2:e6:1b:43:13:1f:ca:b2:bd: cc:16:66:86:3d:9a:a7:3f:a9:b9:b9:e9:0b:2a:c7:02:f1:3c: fb:10:5f:9a:1d:22:a6:c9:10:33:93:2d:4a:18:a4:1b:18:52: 81:08:6c:07:c2:07:c4:5c:d2:11:46:1a:24:7d:3c:da:ca:19: 66:73:82:24:5a:17:df:4f:e9:7c:70:1d:63:93:65:88:53:cd: 74:e3:72:66:86:d9:fc:7b:fb:00:9e:ec:3c:2d:fe:b2:9f:31: 49:89:4a:50:83:b6:9a:5a:0e:95:4f:4c:ee:9b:01:6a:8f:f5: 68:92:86:1e:e3:e2:e6:db:14:b3:68:1e:73:52:4d:96:64:69: e5:9f:bf:54:9e:ed:2f:df:42:9f:ee:a4:20:3e:8e:38:4f:05: db:e8:6d:7b:57:64:6f:d1:52:af:ec:28:8a:b9:92:77:15:af: 44:f3:07:24:8e:4f:66:52:2e:4f:c9:bf:14:73:d2:c1:6e:f9: f4:cc:59:0d:b5:46:d1:6b:93:68:f5:26:bf:c2:92:3a:f8:7f: ad:4a:a4:de:fa:e2:0c:4b:47:4a:02:29:8e:e4:64:0b:b2:0d: 16:69:a5:b9 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUGgyjVoxat0vsnXPQfRO/AWyHjSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA1MDQxMDI5MzNaFw0yNzA1MDMxMDM0MzNaMDMxMTAvBgNV BAMTKDhFNjg3NjNCOEIyOEZEMDJGRDlFQTE1RTVFMEEwRjRGQUZDNjdCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshSyqXp7OIo2PfjyAOfSdwREw uH8fBDssQSJXlC4/CREyTOPCGbsuNUhUUdTusiThS0LqRkKhaSK8VG54w1iL9vJP FkusrgSk0855W8HksUSBnXZyisDdgArwE4zqSK8k7LpDHbhmQkFd5eShXBDqifaD PPKBjRYk0j1KvPxOfGhkA9kY79tiJFF4Jum9gDbpTppluOMIZqBTNRpdoV+YJIu5 tzWLLt9vGXxhXWjmWHO9V8ffpP0Enx61QQ9xAbHjqwxy6vIwWwx/cCiLL3Y2SmaM yHM1duZFDWvFkAozelrXy2/qZs5lOtVYs2NaZpIpkvRpssbOTCLAUBhitnEZAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUjmh2O4so/QL9nqFeXgoPT6/Ge4EwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTY0MTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAJgwDQYJKoZIhvcNAQEL BQADggEBAJtXKi5eBGB8JlgAFuu+RqwivnPqrDRM8ap90aLmG0MTH8qyvcwWZoY9 mqc/qbm56QsqxwLxPPsQX5odIqbJEDOTLUoYpBsYUoEIbAfCB8Rc0hFGGiR9PNrK GWZzgiRaF99P6XxwHWOTZYhTzXTjcmaG2fx7+wCe7Dwt/rKfMUmJSlCDtppaDpVP TO6bAWqP9WiShh7j4ubbFLNoHnNSTZZkaeWfv1Se7S/fQp/upCA+jjhPBdvobXtX ZG/RUq/sKIq5kncVr0TzBySOT2ZSLk/JvxRz0sFu+fTMWQ21RtFrk2j1Jr/Ckjr4 f61KpN764gxLR0oCKY7kZAuyDRZppbk= -----END CERTIFICATE-----Generated at Wed May 13 06:38:30 2026 by rpki-client