$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS31898.roa File: AS31898.roa (raw, json) Hash identifier: BnHKnqYeJvSbndD3TommFIC4DRIAm/vm22WYuLxMQu0= Subject key identifier: 68:AA:54:4E:17:21:D5:C8:2A:EF:4C:2E:F1:B4:92:A6:8A:30:CD:42 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 759D11B9160320D204FCE5ACB51F88F9DE3F3CD1 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS31898.roa Signing time: Tue 28 Apr 2026 13:22:50 +0000 ROA not before: Tue 28 Apr 2026 13:17:50 +0000 ROA not after: Tue 27 Apr 2027 13:22:50 +0000 asID: 31898 IP address blocks: 2a0b:4e07:6fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9d:11:b9:16:03:20:d2:04:fc:e5:ac:b5:1f:88:f9:de:3f:3c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:50 2026 GMT Not After : Apr 27 13:22:50 2027 GMT Subject: CN=68AA544E1721D5C82AEF4C2EF1B492A68A30CD42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:b6:30:af:28:01:0e:29:36:21:84:97:b2: f4:f9:d7:8b:f4:62:0a:fd:bf:53:36:cd:ab:e6:3a: 8d:a3:0d:7d:5a:d4:51:47:1c:47:8e:fb:31:59:ae: fa:0a:c8:99:33:1e:5a:cc:be:5f:3e:d2:ed:40:e3: bb:9d:6a:f2:4c:7b:15:73:48:85:f0:6c:d2:08:b4: b3:54:cf:bb:7d:ca:7a:e2:fb:29:da:d6:35:a4:0d: bf:c8:2d:d1:0e:25:a6:e1:95:d8:05:b7:3a:3c:ba: b7:d8:d8:ee:dd:e4:32:aa:08:29:a9:0a:8d:f1:d9: eb:3b:d8:87:43:26:fc:9d:03:33:bd:61:57:be:c4: 4d:27:89:cd:e8:f8:55:fb:7d:7c:75:cb:85:0f:b2: 01:f4:50:89:d0:3d:8c:58:9d:aa:df:a5:cb:b6:6c: 07:46:43:74:9b:9e:d8:43:4a:11:ae:d8:f7:93:1a: e1:0d:aa:50:11:fb:76:93:25:bd:46:d1:47:ee:ca: 03:26:d4:3a:89:69:0d:36:b7:8e:c1:61:60:ef:b3: c5:0f:15:c5:87:1a:99:9f:67:69:66:af:91:77:5e: e5:94:42:9c:dc:16:46:18:bd:d2:74:bf:13:57:8f: fd:2a:cf:1a:6c:85:e4:cf:35:10:ff:db:82:0f:b5: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AA:54:4E:17:21:D5:C8:2A:EF:4C:2E:F1:B4:92:A6:8A:30:CD:42 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS31898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6fc::/48 Signature Algorithm: sha256WithRSAEncryption 5d:a4:21:81:f6:53:d9:4a:a0:a4:18:ec:53:5a:25:d5:67:8a: b8:07:18:f3:23:19:61:a7:b6:5f:23:01:63:84:7e:2b:6f:a2: 40:53:1e:85:ce:31:41:2a:81:4c:c1:2c:77:ae:fd:8b:95:e4: e8:a6:dd:3c:40:3b:94:56:e0:db:c7:8b:ad:46:89:b7:11:c0: c0:08:c3:a1:63:ba:c8:4b:ac:72:70:d8:2e:e6:83:f6:61:ee: b4:7e:bf:df:69:4d:d1:bc:09:c2:ca:8e:c3:88:80:19:3e:9b: 48:a1:a8:7b:53:35:cb:d6:dc:2f:87:45:b6:ab:ca:0f:5b:c6: ac:e0:39:22:6f:dc:83:9b:ec:85:5a:bd:5d:a7:41:09:37:a8: f3:4f:76:bf:94:b7:6a:a5:05:f4:11:9b:12:e2:cc:92:b5:d2: 7c:75:ac:84:23:83:17:64:b4:63:57:3b:59:ca:f1:58:62:ad: 6b:7c:1f:b3:a1:87:19:cc:45:07:c0:ac:7b:80:cf:8f:52:f9: b7:69:3c:90:2f:85:b2:ec:76:0a:72:2d:69:c2:d2:a4:33:62: 25:e8:55:9a:ee:1e:40:be:5b:20:a4:54:69:30:ba:67:d8:23: 1c:42:a7:aa:82:f0:70:61:36:bc:7a:6a:43:9b:7b:63:ed:37: 00:0f:5c:5b -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUdZ0RuRYDINIE/OWstR+I+d4/PNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NTBaFw0yNzA0MjcxMzIyNTBaMDMxMTAvBgNV BAMTKDY4QUE1NDRFMTcyMUQ1QzgyQUVGNEMyRUYxQjQ5MkE2OEEzMENENDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3rYwrygBDik2IYSXsvT514v0 Ygr9v1M2zavmOo2jDX1a1FFHHEeO+zFZrvoKyJkzHlrMvl8+0u1A47udavJMexVz SIXwbNIItLNUz7t9ynri+yna1jWkDb/ILdEOJabhldgFtzo8urfY2O7d5DKqCCmp Co3x2es72IdDJvydAzO9YVe+xE0nic3o+FX7fXx1y4UPsgH0UInQPYxYnarfpcu2 bAdGQ3SbnthDShGu2PeTGuENqlAR+3aTJb1G0UfuygMm1DqJaQ02t47BYWDvs8UP FcWHGpmfZ2lmr5F3XuWUQpzcFkYYvdJ0vxNXj/0qzxpsheTPNRD/24IPta3LAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUaKpUThch1cgq70wu8bSSpoowzUIwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMzMTg5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLTgcG/DANBgkqhkiG9w0BAQsF AAOCAQEAXaQhgfZT2UqgpBjsU1ol1WeKuAcY8yMZYae2XyMBY4R+K2+iQFMehc4x QSqBTMEsd679i5Xk6KbdPEA7lFbg28eLrUaJtxHAwAjDoWO6yEuscnDYLuaD9mHu tH6/32lN0bwJwsqOw4iAGT6bSKGoe1M1y9bcL4dFtqvKD1vGrOA5Im/cg5vshVq9 XadBCTeo8092v5S3aqUF9BGbEuLMkrXSfHWshCODF2S0Y1c7WcrxWGKta3wfs6GH GcxFB8Cse4DPj1L5t2k8kC+Fsux2CnItacLSpDNiJehVmu4eQL5bIKRUaTC6Z9gj HEKnqoLwcGE2vHpqQ5t7Y+03AA9cWw== -----END CERTIFICATE-----Generated at Tue May 12 21:53:54 2026 by rpki-client