
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32363a3a2f34372d3438203d3e20323031343435.roa
File: 326130623a346530373a32363a3a2f34372d3438203d3e20323031343435.roa (raw, json)
Hash identifier: vpDYrjniDDMeLW6rz+L+t5+7Ib49sPnQkFV0/VAGTMo=
Subject key identifier: 40:0A:1C:11:4F:64:AD:47:A1:55:1F:5B:51:33:1A:01:CA:0B:7C:F2
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 62C123BB29ABDE3E179DCE63DB9028328AD72443
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32363a3a2f34372d3438203d3e20323031343435.roa
Signing time: Fri 06 Feb 2026 13:08:45 +0000
ROA not before: Fri 06 Feb 2026 13:03:45 +0000
ROA not after: Fri 05 Feb 2027 13:08:45 +0000
asID: 201445
IP address blocks: 2a0b:4e07:26::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c1:23:bb:29:ab:de:3e:17:9d:ce:63:db:90:28:32:8a:d7:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Feb 6 13:03:45 2026 GMT
Not After : Feb 5 13:08:45 2027 GMT
Subject: CN=400A1C114F64AD47A1551F5B51331A01CA0B7CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:55:9f:2e:b8:e2:2b:4b:a2:0c:f9:f5:82:
cb:46:3d:95:a5:18:25:37:1a:0b:33:2b:df:de:2a:
96:0c:99:1b:1c:db:04:21:97:f9:63:21:8f:db:7a:
22:85:67:e6:d7:4a:96:25:f6:38:af:d4:37:12:36:
b2:c1:14:8e:b2:f8:5c:d1:1b:58:07:70:b8:0f:9a:
d3:8f:db:c1:c9:01:09:08:f6:ab:81:34:d5:87:02:
50:67:03:e4:f9:5f:23:ed:fd:f3:f9:9d:6d:1b:e3:
8b:51:a7:bf:90:f5:93:00:50:39:42:2f:2f:b7:72:
8a:87:57:6d:4d:8d:a8:e6:09:51:57:00:a8:a4:8c:
87:6b:a4:62:61:76:e8:23:20:94:02:f2:b1:cc:60:
5c:bb:c8:8a:13:08:65:df:8c:91:90:d3:cd:1e:ea:
59:26:8e:3c:ff:14:62:eb:bc:91:b7:d8:60:a6:dc:
c8:3d:da:0f:d0:0e:d4:38:4f:57:c9:e7:af:70:98:
22:4f:5e:53:e9:42:a4:f8:92:11:08:4e:21:71:24:
35:2e:20:42:1d:1f:47:aa:9d:2a:f6:27:e6:8f:19:
5f:46:27:f2:4a:26:aa:9b:ed:03:6d:b1:39:e8:20:
a5:0e:7f:1e:91:af:f8:0a:b2:95:a4:37:bd:81:54:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:1C:11:4F:64:AD:47:A1:55:1F:5B:51:33:1A:01:CA:0B:7C:F2
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32363a3a2f34372d3438203d3e20323031343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:26::/47
Signature Algorithm: sha256WithRSAEncryption
92:96:b9:99:49:83:89:61:3b:49:c1:43:28:3c:05:34:24:b9:
8b:91:53:0a:d3:80:a9:c3:a8:93:78:3f:ae:57:97:da:33:12:
fc:d4:8c:02:44:b0:8f:f5:26:27:9f:c2:5c:db:91:c0:97:d0:
a1:16:db:69:63:43:ed:19:fd:28:6b:52:b1:bb:b1:f6:cf:29:
94:bb:8d:04:56:fa:56:88:b5:e0:7c:53:d3:e0:a2:ba:1b:66:
42:28:6b:fe:93:ed:39:dd:d9:cd:cb:0a:36:87:b8:96:63:90:
f8:f8:6d:86:b2:05:ee:ad:cc:f8:b2:75:07:ae:66:75:b2:f9:
69:e3:51:37:08:0c:89:e0:16:e6:eb:07:7c:29:ba:2e:86:d7:
2c:01:e1:70:d3:7e:ee:25:25:e4:72:61:a7:6f:76:34:7b:b3:
21:cd:a9:41:4f:45:94:a8:87:b2:0b:7c:aa:f2:d9:a7:2b:93:
2e:b9:5e:c2:1e:92:4f:55:1d:61:a9:51:61:6b:9c:37:7e:6b:
fd:59:ca:87:b3:86:ca:9f:fa:48:7b:f4:14:a3:ca:2c:b4:19:
07:2d:9a:19:e2:1d:7b:e6:a8:a9:36:e2:0d:46:39:65:b5:c7:
48:51:1a:56:3e:e2:5d:c3:08:db:c6:7c:1b:14:3f:e6:2f:1d:
81:7c:db:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:56:45 2026 by rpki-client