$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219251.roa File: AS219251.roa (raw, json) Hash identifier: +RA8Y2MKCSQatHS5YmiyIipkqzCqTo/WxqtIAQRmbSg= Subject key identifier: 3F:33:E5:97:A4:8F:57:07:78:99:80:C4:EC:AC:24:44:14:CE:EE:19 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 2BE461412F5005634DBC768D90D9080392E5E12D Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219251.roa Signing time: Tue 21 Jul 2026 20:46:45 +0000 ROA not before: Tue 21 Jul 2026 20:41:45 +0000 ROA not after: Tue 20 Jul 2027 20:46:45 +0000 asID: 219251 IP address blocks: 2a0b:4e07:260::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e4:61:41:2f:50:05:63:4d:bc:76:8d:90:d9:08:03:92:e5:e1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jul 21 20:41:45 2026 GMT Not After : Jul 20 20:46:45 2027 GMT Subject: CN=3F33E597A48F5707789980C4ECAC244414CEEE19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:69:fc:79:89:a9:b0:16:8f:c4:7e:49:07:7f: f4:59:f9:f9:42:68:71:af:c7:43:7a:4f:e5:ac:02: 52:10:b9:68:43:db:07:db:7a:59:06:46:ba:b2:3f: e9:3e:a7:96:51:be:b6:c0:63:9f:80:66:f7:8c:d9: fc:b5:b1:da:a9:b9:8c:84:e6:a2:8d:f1:34:58:f1: b9:95:d6:90:4a:a3:c7:14:ce:82:2f:45:e4:ea:5c: d0:81:94:1b:0e:1e:89:3e:b7:f5:1e:0e:5b:a6:5f: 34:eb:26:1c:eb:f8:7e:1d:7a:95:ee:ea:a2:2b:f7: e5:e5:44:ad:ae:7b:16:63:06:e3:b0:f9:e0:cb:df: ef:cb:55:b4:ea:9a:9a:53:e1:36:ef:79:c5:11:25: 86:d0:7e:58:43:31:35:e0:f2:b7:9b:e2:77:f4:f7: 18:e3:c6:8c:55:3a:ab:b4:20:3e:fc:36:33:e3:1b: e0:42:cc:4f:24:5e:49:66:c7:b5:c9:43:34:e3:67: 1a:c2:2a:8c:db:76:61:fc:88:99:84:6d:57:24:da: 93:ae:5a:fe:51:95:6e:8a:50:72:f4:80:23:e8:74: 3f:14:33:4a:96:36:87:fd:b0:a7:fc:85:92:35:c5: 50:7d:f0:82:b7:b7:eb:6d:20:1c:ca:2e:b9:7b:98: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:33:E5:97:A4:8F:57:07:78:99:80:C4:EC:AC:24:44:14:CE:EE:19 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219251.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:260::/44 Signature Algorithm: sha256WithRSAEncryption 67:e5:95:ee:82:b0:00:c9:cb:b9:d4:90:00:f6:4d:12:e4:f6: c6:78:b2:16:b3:aa:10:44:93:a5:08:70:ad:13:33:0e:24:22: f9:cf:a2:84:ba:1e:5b:f0:ca:d7:7a:80:87:8a:5f:a3:b1:dd: 9e:15:12:a7:c4:fc:16:13:bf:95:f6:33:25:e8:95:2b:aa:18: 38:8c:c6:08:22:1d:47:ba:8c:5d:28:5e:4c:89:70:82:f3:9d: 72:b8:ca:5e:2b:e2:82:db:6d:0d:da:2c:c9:35:f1:80:96:af: 31:e8:1e:20:33:3a:ec:15:a3:6c:e0:ea:53:55:8e:9e:ad:4d: 48:61:b8:11:f3:61:bb:a0:cc:32:c8:3f:18:48:6d:ef:67:68: 5d:1c:66:86:61:e2:90:83:b4:79:90:bf:35:c4:c9:c2:a5:0a: 87:61:cb:0d:fd:09:e3:8d:e9:12:51:94:36:08:38:5a:93:11: 85:25:15:cb:62:c3:6c:cd:9d:33:e3:07:5d:b5:4c:e4:1b:47: f4:63:1c:10:01:20:b7:2e:41:d8:55:cf:e2:36:d5:7e:d5:e2: df:df:97:ca:18:5b:a1:fe:c2:99:3a:ea:c2:66:d3:df:b0:ec: d8:a9:36:0a:91:71:50:92:16:f1:59:50:4d:ae:01:b5:84:95: 1d:6d:06:7c -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUK+RhQS9QBWNNvHaNkNkIA5Ll4S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA3MjEyMDQxNDVaFw0yNzA3MjAyMDQ2NDVaMDMxMTAvBgNV BAMTKDNGMzNFNTk3QTQ4RjU3MDc3ODk5ODBDNEVDQUMyNDQ0MTRDRUVFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHafx5iamwFo/EfkkHf/RZ+flC aHGvx0N6T+WsAlIQuWhD2wfbelkGRrqyP+k+p5ZRvrbAY5+AZveM2fy1sdqpuYyE 5qKN8TRY8bmV1pBKo8cUzoIvReTqXNCBlBsOHok+t/UeDlumXzTrJhzr+H4depXu 6qIr9+XlRK2uexZjBuOw+eDL3+/LVbTqmppT4TbvecURJYbQflhDMTXg8reb4nf0 9xjjxoxVOqu0ID78NjPjG+BCzE8kXklmx7XJQzTjZxrCKozbdmH8iJmEbVck2pOu Wv5RlW6KUHL0gCPodD8UM0qWNof9sKf8hZI1xVB98IK3t+ttIBzKLrl7mGijAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUPzPll6SPVwd4mYDE7KwkRBTO7hkwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTkyNTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04HAmAwDQYJKoZIhvcNAQEL BQADggEBAGflle6CsADJy7nUkAD2TRLk9sZ4shazqhBEk6UIcK0TMw4kIvnPooS6 Hlvwytd6gIeKX6Ox3Z4VEqfE/BYTv5X2MyXolSuqGDiMxggiHUe6jF0oXkyJcILz nXK4yl4r4oLbbQ3aLMk18YCWrzHoHiAzOuwVo2zg6lNVjp6tTUhhuBHzYbugzDLI PxhIbe9naF0cZoZh4pCDtHmQvzXEycKlCodhyw39CeON6RJRlDYIOFqTEYUlFcti w2zNnTPjB121TOQbR/RjHBABILcuQdhVz+I21X7V4t/fl8oYW6H+wpk66sJm09+w 7NipNgqRcVCSFvFZUE2uAbWElR1tBnw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:11:18 2026 by rpki-client