$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32623a3a2f34382d3438203d3e20323031313234.roa File: 326130623a346530373a32623a3a2f34382d3438203d3e20323031313234.roa (raw, json) Hash identifier: RBtqCS24maUmLgHjO3HQegxbJCD2lPOtVOQn8CGYMhM= Subject key identifier: D4:2D:99:E0:9E:95:7E:BD:B5:15:80:B6:C6:4C:CE:CE:E3:0E:05:53 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 5CEA3FA19AC9B26582998F2B5FC8EE5621D4CC77 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32623a3a2f34382d3438203d3e20323031313234.roa Signing time: Fri 13 Feb 2026 16:09:48 +0000 ROA not before: Fri 13 Feb 2026 16:04:48 +0000 ROA not after: Fri 12 Feb 2027 16:09:48 +0000 asID: 201124 IP address blocks: 2a0b:4e07:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ea:3f:a1:9a:c9:b2:65:82:99:8f:2b:5f:c8:ee:56:21:d4:cc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Feb 13 16:04:48 2026 GMT Not After : Feb 12 16:09:48 2027 GMT Subject: CN=D42D99E09E957EBDB51580B6C64CCECEE30E0553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:22:9c:f1:fa:46:69:6e:63:39:d8:8f:31: 40:48:29:73:33:29:7b:c0:5e:46:b5:27:21:02:df: 78:4d:30:9d:5e:1f:39:f9:e7:4f:84:b5:f7:11:85: 20:d7:e5:6d:b6:72:c8:48:e3:75:29:9a:ff:26:8f: fe:8d:fc:26:27:1a:6a:97:7c:91:49:5a:b9:23:92: 97:b2:a4:72:ef:56:c3:76:46:b6:17:e3:c4:9a:6c: 70:61:5f:10:c7:22:5d:4f:60:87:ac:67:c2:69:96: 9d:0b:ed:4d:5e:a2:f4:3c:b9:30:97:24:d3:1b:a2: b6:6c:c0:b9:51:76:c9:9d:a5:e3:a1:1c:9b:5f:37: 29:4f:d4:7b:d8:de:3f:30:44:c7:aa:8c:b5:e5:96: 19:52:da:b9:bb:0a:36:11:2a:b0:5c:9e:78:d4:1b: d5:bc:83:88:89:a9:f1:34:98:97:e1:2f:8f:27:f1: bb:78:6d:46:98:d8:a1:2a:87:3a:65:93:50:ff:83: f0:09:2a:81:5a:01:04:aa:12:13:8f:9c:06:c4:89: 81:59:5f:cc:37:86:57:46:dc:0e:45:cd:85:28:73: c2:a9:06:ad:5c:ad:b3:38:e7:fd:f6:95:d4:0e:cc: b2:d8:b5:e7:7e:a0:50:28:62:41:fe:14:c4:35:b9: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2D:99:E0:9E:95:7E:BD:B5:15:80:B6:C6:4C:CE:CE:E3:0E:05:53 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32623a3a2f34382d3438203d3e20323031313234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2b::/48 Signature Algorithm: sha256WithRSAEncryption 50:9e:3e:f8:8f:75:a9:bd:a3:14:bb:df:9b:ab:64:08:30:53: 6a:43:61:65:ee:23:aa:d5:24:54:36:08:03:db:72:03:68:c5: 09:6f:f2:54:4f:60:4c:41:30:c3:63:7c:91:c3:06:c7:f3:32: a5:b2:ac:d4:3f:5e:5c:65:71:c8:50:4a:29:8a:9c:36:7e:98: 01:20:b1:78:e7:3a:ca:36:e8:ff:b4:1e:26:1e:32:f6:6e:cc: 6c:06:0b:37:d0:41:5f:a7:3d:99:b8:99:c8:14:7d:d5:67:fc: 03:b4:d5:00:77:ea:86:e7:24:d9:e8:f0:5a:3c:04:43:00:ec: a1:1d:e7:2e:eb:b2:f4:3b:61:4a:bc:6b:d1:1a:2f:65:bb:f8: 6d:df:21:c3:d2:b0:e9:37:97:52:a5:3a:6e:66:e4:38:e9:4e: 18:02:7c:83:80:28:f6:f2:cd:59:aa:88:25:03:39:bf:0f:b2: a3:7a:c6:d7:3c:e8:bf:8f:c6:8d:90:d5:60:85:42:1d:e6:9f: d6:1c:22:17:4d:9d:f3:c4:dc:fa:39:55:62:49:1f:d5:1e:c5: d3:a5:b0:c9:31:b9:4c:5e:b3:d4:c0:b9:c7:2c:7d:2c:ca:f2: 8a:a6:d2:71:85:cc:8c:2e:78:85:07:94:a1:ba:28:73:84:09: e8:d6:01:5e -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUXOo/oZrJsmWCmY8rX8juViHUzHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAyMTMxNjA0NDhaFw0yNzAyMTIxNjA5NDhaMDMxMTAvBgNV BAMTKEQ0MkQ5OUUwOUU5NTdFQkRCNTE1ODBCNkM2NENDRUNFRTMwRTA1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGyKc8fpGaW5jOdiPMUBIKXMz KXvAXka1JyEC33hNMJ1eHzn550+EtfcRhSDX5W22cshI43Upmv8mj/6N/CYnGmqX fJFJWrkjkpeypHLvVsN2RrYX48SabHBhXxDHIl1PYIesZ8Jplp0L7U1eovQ8uTCX JNMborZswLlRdsmdpeOhHJtfNylP1HvY3j8wRMeqjLXllhlS2rm7CjYRKrBcnnjU G9W8g4iJqfE0mJfhL48n8bt4bUaY2KEqhzplk1D/g/AJKoFaAQSqEhOPnAbEiYFZ X8w3hldG3A5FzYUoc8KpBq1crbM45/32ldQOzLLYted+oFAoYkH+FMQ1ufhbAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQU1C2Z4J6Vfr21FYC2xkzOzuMOBVMwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMyNjIzYTNhMmYzNDM4 MmQzNDM4MjAzZDNlMjAzMjMwMzEzMTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HACswDQYJ KoZIhvcNAQELBQADggEBAFCePviPdam9oxS735urZAgwU2pDYWXuI6rVJFQ2CAPb cgNoxQlv8lRPYExBMMNjfJHDBsfzMqWyrNQ/XlxlcchQSimKnDZ+mAEgsXjnOso2 6P+0HiYeMvZuzGwGCzfQQV+nPZm4mcgUfdVn/AO01QB36obnJNno8Fo8BEMA7KEd 5y7rsvQ7YUq8a9EaL2W7+G3fIcPSsOk3l1KlOm5m5DjpThgCfIOAKPbyzVmqiCUD Ob8PsqN6xtc86L+Pxo2Q1WCFQh3mn9YcIhdNnfPE3Po5VWJJH9UexdOlsMkxuUxe s9TAuccsfSzK8oqm0nGFzIwueIUHlKG6KHOECejWAV4= -----END CERTIFICATE-----Generated at Sun Mar 1 20:51:23 2026 by rpki-client