$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS48752.roa File: AS48752.roa (raw, json) Hash identifier: IiDHQU+b3FNBRoQ5jEltwPwtG1lGaDIl3RlXDT2Z7bE= Subject key identifier: ED:B6:98:98:78:8F:38:C6:ED:E3:58:17:D1:4E:41:87:C7:73:AF:3A Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 3D11AA80778367278F183779F0109B1ECCF086A2 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS48752.roa Signing time: Tue 28 Apr 2026 13:22:48 +0000 ROA not before: Tue 28 Apr 2026 13:17:48 +0000 ROA not after: Tue 27 Apr 2027 13:22:48 +0000 asID: 48752 IP address blocks: 2a0b:4e07:c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:11:aa:80:77:83:67:27:8f:18:37:79:f0:10:9b:1e:cc:f0:86:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:48 2026 GMT Not After : Apr 27 13:22:48 2027 GMT Subject: CN=EDB69898788F38C6EDE35817D14E4187C773AF3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a1:04:a9:ef:d9:f1:1d:21:ba:ed:69:2c:e1: 46:e0:32:1b:c8:55:ce:4b:ad:c3:14:0b:29:43:f2: 16:08:a3:33:32:da:b2:79:84:88:54:6c:ea:1e:33: 41:0d:d7:da:30:50:a6:52:8f:e7:35:13:a1:1f:fe: 62:13:dd:41:e8:d8:9e:20:c3:56:e1:be:71:90:07: 9e:21:bc:47:f0:55:44:69:22:70:10:01:62:0d:b9: 8f:ce:0c:b2:21:36:85:d5:d2:fa:d4:e4:c6:9f:50: 58:60:d0:2d:71:34:d2:fe:53:50:ba:61:40:b7:62: cf:9f:67:ac:06:4b:d4:7c:16:7a:fc:80:c7:c1:29: ea:6f:c5:c1:cc:a1:ce:30:d9:2a:ac:35:27:dd:25: 2e:78:83:4b:9c:03:77:80:d8:eb:e1:a7:e5:cd:4f: 02:01:f9:d6:0b:e4:eb:67:0d:2e:d7:7d:3b:23:f9: 1f:72:77:d6:99:a4:92:df:89:3b:67:66:7b:64:88: 5b:fd:fa:ea:d6:86:10:81:c0:8c:ab:97:83:90:11: 1d:10:07:26:6e:2d:82:56:2e:d6:42:7a:67:28:60: d2:4f:5d:3c:4c:0e:95:c5:12:db:73:b1:ed:12:d1: 91:a4:c8:15:c4:d6:9f:11:fb:d2:84:69:51:69:08: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B6:98:98:78:8F:38:C6:ED:E3:58:17:D1:4E:41:87:C7:73:AF:3A X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS48752.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c::/46 Signature Algorithm: sha256WithRSAEncryption 39:f8:c4:49:4f:8c:1f:0b:84:16:14:4a:3c:0c:81:c7:f7:c7: d2:7e:8b:df:6c:85:47:fa:1f:f4:8f:59:b5:5c:88:b8:ab:37: 87:e7:bb:8f:ef:63:c5:5f:18:1f:09:49:7b:7b:22:8c:1a:8b: 6c:42:6a:b2:0e:67:ce:f3:81:6a:68:db:61:29:83:d4:d5:88: 86:ff:90:3b:69:3e:60:55:7e:4b:a1:e8:37:f8:98:d1:46:03: 50:98:08:66:40:a2:81:d2:4c:2b:d8:de:ae:04:b5:19:1c:48: f7:68:a2:78:40:47:93:15:56:8f:57:f8:fb:83:aa:8b:a4:2c: 88:45:6c:18:a2:fc:e1:03:e4:c0:0f:c0:0f:87:1a:2c:da:fd: d4:f9:00:f2:ac:51:77:62:03:05:a6:a2:57:07:d8:6a:a7:c3: 5e:9a:e5:a0:f5:03:05:b6:3a:0c:f0:0f:17:22:8b:d4:7b:f1: b8:93:6a:f4:87:56:15:42:b8:97:15:3a:76:43:58:c3:6c:14: b7:3d:d3:3b:9c:2b:0c:1b:de:35:63:68:8c:97:51:97:e3:de: 3f:10:f0:b5:f0:12:69:e4:1f:c6:29:16:6d:c1:0e:34:b3:6c: b1:ea:1b:bb:a0:3a:72:36:85:63:d3:17:2e:b2:a4:d1:b4:b5: 54:71:a6:57 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUPRGqgHeDZyePGDd58BCbHszwhqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDhaFw0yNzA0MjcxMzIyNDhaMDMxMTAvBgNV BAMTKEVEQjY5ODk4Nzg4RjM4QzZFREUzNTgxN0QxNEU0MTg3Qzc3M0FGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1oQSp79nxHSG67Wks4UbgMhvI Vc5LrcMUCylD8hYIozMy2rJ5hIhUbOoeM0EN19owUKZSj+c1E6Ef/mIT3UHo2J4g w1bhvnGQB54hvEfwVURpInAQAWINuY/ODLIhNoXV0vrU5MafUFhg0C1xNNL+U1C6 YUC3Ys+fZ6wGS9R8Fnr8gMfBKepvxcHMoc4w2SqsNSfdJS54g0ucA3eA2Ovhp+XN TwIB+dYL5OtnDS7XfTsj+R9yd9aZpJLfiTtnZntkiFv9+urWhhCBwIyrl4OQER0Q ByZuLYJWLtZCemcoYNJPXTxMDpXFEttzse0S0ZGkyBXE1p8R+9KEaVFpCGGTAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU7baYmHiPOMbt41gX0U5Bh8dzrzowHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVM0ODc1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioLTgcADDANBgkqhkiG9w0BAQsF AAOCAQEAOfjESU+MHwuEFhRKPAyBx/fH0n6L32yFR/of9I9ZtVyIuKs3h+e7j+9j xV8YHwlJe3sijBqLbEJqsg5nzvOBamjbYSmD1NWIhv+QO2k+YFV+S6HoN/iY0UYD UJgIZkCigdJMK9jergS1GRxI92iieEBHkxVWj1f4+4Oqi6QsiEVsGKL84QPkwA/A D4caLNr91PkA8qxRd2IDBaaiVwfYaqfDXprloPUDBbY6DPAPFyKL1HvxuJNq9IdW FUK4lxU6dkNYw2wUtz3TO5wrDBveNWNojJdRl+PePxDwtfASaeQfxikWbcEONLNs seobu6A6cjaFY9MXLrKk0bS1VHGmVw== -----END CERTIFICATE-----Generated at Tue May 12 22:10:32 2026 by rpki-client