$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS44331.roa File: AS44331.roa (raw, json) Hash identifier: 2HaJj1Ljc2TFRtxMmqEFrJ70ny0oBMvsO9McCjt/BkA= Subject key identifier: D5:77:25:C7:A6:30:EE:3F:39:B9:66:AA:F9:E2:73:11:AA:AA:FA:BB Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 2D57781D927F0AF41278B760C340E1363B23ECDB Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS44331.roa Signing time: Tue 28 Apr 2026 13:22:51 +0000 ROA not before: Tue 28 Apr 2026 13:17:51 +0000 ROA not after: Tue 27 Apr 2027 13:22:51 +0000 asID: 44331 IP address blocks: 2a0b:4e07:b1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:57:78:1d:92:7f:0a:f4:12:78:b7:60:c3:40:e1:36:3b:23:ec:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:51 2026 GMT Not After : Apr 27 13:22:51 2027 GMT Subject: CN=D57725C7A630EE3F39B966AAF9E27311AAAAFABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:90:17:80:87:58:8c:99:a0:9c:4c:56:65: b1:b3:18:3a:ef:64:e5:9c:6d:ed:8d:de:f5:91:68: 63:01:fb:55:b4:6e:20:4b:3b:64:2c:ad:bd:4a:e7: 78:f2:37:50:42:1c:02:af:99:94:15:e6:18:a1:42: 48:4d:20:d1:2b:c2:bb:92:19:d8:14:8e:b2:08:a7: dd:80:2b:ba:e5:be:3f:9f:1e:95:bd:f6:de:ef:fa: 27:7d:6c:ad:c9:00:7d:c3:7f:1a:82:8c:23:df:4b: af:4d:73:1e:89:88:d7:ad:d6:cf:9c:bd:04:f3:e0: 77:5b:cc:91:ec:ee:f6:96:f1:51:48:e4:4e:57:80: 31:e2:7c:90:69:e9:ee:bb:f6:06:37:16:9f:a7:73: d1:b0:30:95:68:a6:8b:ab:c8:85:5a:d4:1e:3a:cf: 68:cf:99:39:9d:5d:e8:ca:53:14:88:48:6b:b3:5e: 5e:1a:20:49:14:00:05:04:4b:05:00:44:33:d5:25: 1a:c7:55:27:5a:2f:ad:90:da:76:09:6e:bf:ef:ad: be:d6:e1:9b:64:f8:3e:4a:7d:b4:36:1d:8a:ec:68: e9:bc:77:a1:9a:db:f5:a7:a5:ac:ec:da:49:2e:90: 7f:c3:5b:c8:17:92:d8:9e:85:c5:e2:df:fd:4a:2c: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:77:25:C7:A6:30:EE:3F:39:B9:66:AA:F9:E2:73:11:AA:AA:FA:BB X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS44331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b1e::/48 Signature Algorithm: sha256WithRSAEncryption 09:53:f3:3c:e2:a4:b8:6e:4b:00:b0:c3:91:3b:4c:b4:7b:a5: 32:87:13:f3:a5:44:65:7a:f5:04:b7:13:6a:92:f4:01:a2:47: 5c:1c:fb:79:88:33:09:1c:22:68:31:a3:ec:39:ea:59:8f:87: 4a:41:85:b5:b6:64:d5:35:35:2d:04:d0:04:08:a4:b4:c0:66: 6e:42:2c:2b:51:eb:c9:c6:0d:18:3e:76:3b:d9:db:7b:b6:36: 03:36:af:47:92:28:80:b6:1b:90:c2:89:f7:e1:e1:80:30:5d: f3:e4:26:6f:d0:b1:21:72:7d:c7:89:74:6a:13:97:7f:d5:ed: 1b:19:ba:6a:cd:13:a3:fb:25:95:e2:c6:e8:d5:57:a6:7f:7e: 3a:c9:a3:da:d7:76:3f:32:f1:62:cd:ed:f6:8a:88:95:18:24: 02:7a:24:66:20:15:be:9d:56:a7:9a:57:ee:7a:20:08:ec:3e: c5:b5:26:5e:88:7f:63:04:b3:14:21:9b:2e:a5:d9:d5:f5:04: 50:a3:a7:ac:a7:e0:d6:3f:e3:14:2d:4f:1a:c9:4d:33:fe:e3: 7a:a1:e7:31:8a:e0:3d:37:a2:28:83:58:a7:b4:c1:be:35:11: 17:e1:0c:3f:5c:41:d4:dc:ec:96:71:3f:e9:93:01:51:68:4c: 90:50:07:73 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIULVd4HZJ/CvQSeLdgw0DhNjsj7NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NTFaFw0yNzA0MjcxMzIyNTFaMDMxMTAvBgNV BAMTKEQ1NzcyNUM3QTYzMEVFM0YzOUI5NjZBQUY5RTI3MzExQUFBQUZBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuD5AXgIdYjJmgnExWZbGzGDrv ZOWcbe2N3vWRaGMB+1W0biBLO2Qsrb1K53jyN1BCHAKvmZQV5hihQkhNINErwruS GdgUjrIIp92AK7rlvj+fHpW99t7v+id9bK3JAH3DfxqCjCPfS69Ncx6JiNet1s+c vQTz4HdbzJHs7vaW8VFI5E5XgDHifJBp6e679gY3Fp+nc9GwMJVopouryIVa1B46 z2jPmTmdXejKUxSISGuzXl4aIEkUAAUESwUARDPVJRrHVSdaL62Q2nYJbr/vrb7W 4Ztk+D5KfbQ2HYrsaOm8d6Ga2/Wnpazs2kkukH/DW8gXktiehcXi3/1KLF//AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU1Xclx6Yw7j85uWaq+eJzEaqq+rswHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVM0NDMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLTgcLHjANBgkqhkiG9w0BAQsF AAOCAQEACVPzPOKkuG5LALDDkTtMtHulMocT86VEZXr1BLcTapL0AaJHXBz7eYgz CRwiaDGj7DnqWY+HSkGFtbZk1TU1LQTQBAiktMBmbkIsK1HrycYNGD52O9nbe7Y2 AzavR5IogLYbkMKJ9+HhgDBd8+Qmb9CxIXJ9x4l0ahOXf9XtGxm6as0To/slleLG 6NVXpn9+Osmj2td2PzLxYs3t9oqIlRgkAnokZiAVvp1Wp5pX7nogCOw+xbUmXoh/ YwSzFCGbLqXZ1fUEUKOnrKfg1j/jFC1PGslNM/7jeqHnMYrgPTeiKINYp7TBvjUR F+EMP1xB1NzslnE/6ZMBUWhMkFAHcw== -----END CERTIFICATE-----Generated at Wed May 13 06:38:33 2026 by rpki-client