$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS399646.roa File: AS399646.roa (raw, json) Hash identifier: PGLQsZUNGLXr4ghbm5RYl5GRN3vjgzfpmljy5XPF2As= Subject key identifier: 4B:29:34:A7:AD:51:17:10:1F:40:2A:C5:FF:58:10:F6:5C:1E:5E:46 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 514FA46C485A1C65355F0DF6124C03FDF3C16570 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS399646.roa Signing time: Tue 28 Apr 2026 13:22:47 +0000 ROA not before: Tue 28 Apr 2026 13:17:47 +0000 ROA not after: Tue 27 Apr 2027 13:22:47 +0000 asID: 399646 IP address blocks: 2a0b:4e07:c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4f:a4:6c:48:5a:1c:65:35:5f:0d:f6:12:4c:03:fd:f3:c1:65:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:47 2026 GMT Not After : Apr 27 13:22:47 2027 GMT Subject: CN=4B2934A7AD5117101F402AC5FF5810F65C1E5E46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:34:af:77:a6:84:ca:1c:62:08:f5:80:cb: fd:3f:74:a2:58:6e:24:aa:14:01:10:93:69:66:3b: ea:27:61:4d:b4:a4:3d:ed:ac:12:a7:8a:1c:9c:e6: 87:75:4d:aa:d3:1f:30:91:94:7b:e0:65:df:d4:07: fb:12:6f:de:40:86:d9:29:ee:aa:da:80:f5:dc:5f: ab:91:ff:3f:0c:6b:7d:19:a1:f7:a0:e4:b7:50:9a: 39:77:aa:35:b8:c6:04:b5:93:0c:43:e5:c9:fe:62: ec:1d:ca:f3:d8:bb:97:3a:43:21:1c:26:43:e0:39: ce:36:b2:df:4c:be:24:e4:54:15:7b:f2:d0:5f:fb: a6:94:41:bf:60:be:0e:4c:37:64:f1:5d:79:0e:f0: a7:79:32:da:82:9d:a5:8d:53:ee:18:a9:16:9a:29: a0:99:13:60:3c:e8:dc:85:d8:bd:b1:fc:cb:4d:63: ae:cf:de:1b:ef:ab:63:ee:81:4e:82:91:e5:4f:ba: 7d:43:29:52:9b:dc:32:db:b8:c9:cf:af:e5:24:40: 7f:65:23:9c:0b:4c:34:83:63:8c:05:8e:af:d0:d9: fb:9e:fa:24:2a:d9:65:84:ac:ac:3b:b8:0c:81:e4: 7a:08:e4:a6:76:cf:6b:f4:de:76:cf:dd:86:95:f6: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:29:34:A7:AD:51:17:10:1F:40:2A:C5:FF:58:10:F6:5C:1E:5E:46 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS399646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c2::/48 Signature Algorithm: sha256WithRSAEncryption 77:3c:77:9b:08:ef:c7:a9:d4:55:2e:2e:66:33:bc:7e:72:2e: 3c:41:8e:ee:de:46:43:94:6d:46:57:79:ad:8c:63:fa:f3:97: 50:02:85:de:3a:19:22:06:94:7c:06:a4:9c:e8:e0:c0:3d:f1: 47:df:96:96:3e:8f:68:5d:c7:43:79:a0:e9:ef:05:b5:53:3e: bf:ff:88:3d:69:e3:09:26:19:a2:59:a1:ac:b6:29:7b:89:f1: 90:1f:85:91:11:18:93:05:b6:f1:57:9a:03:41:66:88:53:07: e7:3d:b8:67:d0:2d:9d:b5:4f:c5:2e:5a:a1:7f:af:94:3d:de: ce:95:f7:b5:2e:20:f7:02:7a:5b:58:7c:40:50:da:56:9d:26: f9:cf:69:a7:42:e4:50:9e:b4:7b:c5:b9:be:56:32:e6:12:3f: ef:7a:66:67:0d:96:92:77:de:42:f2:1c:a0:5b:3b:8e:06:d5: ba:64:3f:9f:c7:53:57:ef:72:00:70:e2:8e:86:1a:ee:83:ec: 02:0a:4b:00:5e:bc:0a:09:fe:f7:df:39:ac:da:9b:f8:4c:5d: 21:33:40:0a:51:7b:47:6d:cc:50:34:97:3b:18:62:91:eb:18: d5:7f:2a:81:f5:58:f1:3a:7d:8f:2e:ad:d8:b7:b1:44:76:13: 2e:ed:b3:0c -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUUU+kbEhaHGU1Xw32EkwD/fPBZXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDdaFw0yNzA0MjcxMzIyNDdaMDMxMTAvBgNV BAMTKDRCMjkzNEE3QUQ1MTE3MTAxRjQwMkFDNUZGNTgxMEY2NUMxRTVFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIzSvd6aEyhxiCPWAy/0/dKJY biSqFAEQk2lmO+onYU20pD3trBKnihyc5od1TarTHzCRlHvgZd/UB/sSb95Ahtkp 7qragPXcX6uR/z8Ma30Zofeg5LdQmjl3qjW4xgS1kwxD5cn+YuwdyvPYu5c6QyEc JkPgOc42st9MviTkVBV78tBf+6aUQb9gvg5MN2TxXXkO8Kd5MtqCnaWNU+4YqRaa KaCZE2A86NyF2L2x/MtNY67P3hvvq2PugU6CkeVPun1DKVKb3DLbuMnPr+UkQH9l I5wLTDSDY4wFjq/Q2fue+iQq2WWErKw7uAyB5HoI5KZ2z2v03nbP3YaV9lNPAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUSyk0p61RFxAfQCrF/1gQ9lweXkYwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMzOTk2NDYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAMIwDQYJKoZIhvcNAQEL BQADggEBAHc8d5sI78ep1FUuLmYzvH5yLjxBju7eRkOUbUZXea2MY/rzl1AChd46 GSIGlHwGpJzo4MA98UfflpY+j2hdx0N5oOnvBbVTPr//iD1p4wkmGaJZoay2KXuJ 8ZAfhZERGJMFtvFXmgNBZohTB+c9uGfQLZ21T8UuWqF/r5Q93s6V97UuIPcCeltY fEBQ2ladJvnPaadC5FCetHvFub5WMuYSP+96ZmcNlpJ33kLyHKBbO44G1bpkP5/H U1fvcgBw4o6GGu6D7AIKSwBevAoJ/vffOazam/hMXSEzQApRe0dtzFA0lzsYYpHr GNV/KoH1WPE6fY8urdi3sUR2Ey7tsww= -----END CERTIFICATE-----Generated at Wed May 13 01:12:01 2026 by rpki-client