
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34333a3a2f34382d3438203d3e20323136303931.roa
File: 326130623a346530373a34333a3a2f34382d3438203d3e20323136303931.roa (raw, json)
Hash identifier: ApTqqzjvCoTMl4vE/D0HTTizI5XntkccsxRxJuLOQ4E=
Subject key identifier: E9:A5:F7:35:ED:78:0D:AB:E7:F3:63:85:33:E7:8C:AD:98:9E:F3:47
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 51D4B8C01E6394C69497E6589CC36CAEB2D8AB9E
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34333a3a2f34382d3438203d3e20323136303931.roa
Signing time: Fri 26 Sep 2025 08:53:44 +0000
ROA not before: Fri 26 Sep 2025 08:48:44 +0000
ROA not after: Fri 25 Sep 2026 08:53:44 +0000
asID: 216091
IP address blocks: 2a0b:4e07:43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d4:b8:c0:1e:63:94:c6:94:97:e6:58:9c:c3:6c:ae:b2:d8:ab:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Sep 26 08:48:44 2025 GMT
Not After : Sep 25 08:53:44 2026 GMT
Subject: CN=E9A5F735ED780DABE7F3638533E78CAD989EF347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:e4:90:1c:8c:bb:dc:27:87:be:0e:7d:04:
86:39:55:18:44:c1:6b:09:bf:e2:ff:f6:c2:61:bb:
64:58:9f:45:89:16:d2:b4:86:d4:7a:1f:5b:41:fd:
b0:7d:61:85:82:04:4c:8a:4c:cf:64:30:d2:3d:f3:
4c:95:f3:33:20:66:d9:07:2d:bb:1d:97:14:39:0e:
76:b5:00:a2:46:29:6f:fe:4f:b9:b2:e6:ef:f0:97:
03:a6:2a:49:70:8e:0f:36:66:61:82:e9:2b:89:51:
c2:dc:41:b0:b6:fd:2d:21:95:31:da:aa:38:fc:54:
88:b4:82:a1:2d:8e:13:a6:01:fa:f5:8f:84:4e:fe:
f6:7c:46:67:2e:57:9a:0a:11:4b:a6:d5:d3:b2:fd:
03:d8:76:8a:10:1a:cf:3c:9b:30:23:67:fa:8f:90:
c0:23:d8:7e:f8:c6:e6:7a:20:da:be:cf:99:3f:87:
b8:12:a3:95:07:06:5d:92:2d:1c:95:8c:c3:84:7f:
1c:b9:7a:76:d6:1a:20:b9:24:9b:ca:0c:8e:38:18:
50:46:b1:7e:14:a0:38:86:53:bb:db:0e:1a:39:4c:
60:83:71:ab:41:8a:17:5f:21:32:03:21:1f:41:d9:
29:10:bd:10:bf:51:f6:e0:2a:82:81:2e:1e:f6:74:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:F7:35:ED:78:0D:AB:E7:F3:63:85:33:E7:8C:AD:98:9E:F3:47
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34333a3a2f34382d3438203d3e20323136303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:43::/48
Signature Algorithm: sha256WithRSAEncryption
99:10:f1:0d:42:4b:df:3c:ed:00:f4:76:8c:3d:1b:29:bc:05:
34:63:87:d4:21:78:fb:95:0f:9e:88:81:7c:59:07:37:3e:78:
0a:ab:5c:84:ce:3a:ff:59:c6:aa:04:30:16:b2:d6:57:69:da:
50:2b:3b:59:56:f2:c9:a5:7c:d2:0a:f0:e9:84:03:1a:ea:fe:
35:27:a7:58:74:4f:74:88:1e:2e:74:9b:79:a8:ee:5a:fa:5b:
48:d7:65:9e:f8:60:a8:2a:ed:7f:dc:41:3f:7f:77:51:b1:08:
32:b1:f4:b6:05:db:b4:a5:e4:6e:6f:33:ee:2d:00:bb:4f:3b:
ad:de:7a:06:26:8c:43:2e:cb:fa:64:a6:9d:e0:aa:e5:cc:f7:
d3:47:f5:56:1a:55:84:b0:bb:77:43:2a:b4:03:3b:fe:95:ab:
71:b9:32:f2:ec:c0:fe:8e:88:25:22:d2:f8:2b:0e:41:47:26:
a5:7d:37:0e:0b:78:76:61:ce:05:b0:36:b9:0e:f2:22:9c:61:
8c:51:55:f4:44:4d:9e:09:76:d4:1f:fa:5a:1d:b4:18:4c:68:
46:79:34:b3:80:56:e9:ce:73:f5:74:c5:04:07:b0:80:3e:fc:
ec:c7:64:6f:10:70:5a:57:4b:00:ba:18:da:68:93:1c:9e:0a:
21:44:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:29:36 2025 by rpki-client