
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a363430303a3a2f33382d3438203d3e20323032333538.roa
File: 326130623a346530373a363430303a3a2f33382d3438203d3e20323032333538.roa (raw, json)
Hash identifier: cu7KUdBxISGNCAUR052OuRjWP6Wmyv1rBMJ2Vg05MJ8=
Subject key identifier: FB:7C:2B:EB:AD:26:D5:3E:9A:D3:F8:D1:35:60:61:DA:F1:8F:75:69
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 5890D79D93B476E1AC6FE0270FB2902C0162066E
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a363430303a3a2f33382d3438203d3e20323032333538.roa
Signing time: Wed 04 Feb 2026 08:55:57 +0000
ROA not before: Wed 04 Feb 2026 08:50:57 +0000
ROA not after: Wed 03 Feb 2027 08:55:57 +0000
asID: 202358
IP address blocks: 2a0b:4e07:6400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:90:d7:9d:93:b4:76:e1:ac:6f:e0:27:0f:b2:90:2c:01:62:06:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Feb 4 08:50:57 2026 GMT
Not After : Feb 3 08:55:57 2027 GMT
Subject: CN=FB7C2BEBAD26D53E9AD3F8D1356061DAF18F7569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:f6:a5:77:bf:ef:ca:fd:95:de:c8:e9:9b:
c3:5b:b2:63:3a:07:8b:a6:b3:29:66:9a:97:d9:aa:
b5:08:b9:9c:99:db:a0:71:e5:b5:d2:c7:86:5a:33:
6d:8c:af:78:69:93:2f:b7:50:22:e2:c0:27:72:31:
57:31:f7:33:f3:89:55:48:ce:2f:4c:54:1f:a7:10:
b0:f4:ab:4e:62:0c:58:1b:77:42:b6:90:e3:b5:ba:
86:85:4a:46:20:62:a8:66:44:db:52:5a:f4:8e:65:
bd:95:8e:49:8f:9d:a7:4c:7b:31:85:dd:95:8c:8c:
a7:4d:57:ba:90:5a:13:8c:4e:64:14:4e:31:10:3c:
53:bd:b7:74:04:20:5b:cf:77:c4:0e:e6:c5:5b:97:
82:b8:0e:cf:59:ed:1d:2b:97:52:fc:36:1c:c7:6c:
6b:33:38:2b:f8:bb:26:a3:8b:46:8b:f8:80:32:e1:
46:57:3e:3e:ed:1b:16:ae:fd:7b:ba:af:54:d5:d0:
d0:13:9d:fb:bc:e2:6d:e7:89:26:37:aa:c5:3c:43:
c4:0e:41:9b:a6:da:08:58:10:4f:d9:df:87:5f:52:
2a:79:fd:4a:08:b7:94:56:d2:1c:68:00:99:91:6d:
92:87:5f:6a:da:16:f1:a1:c0:96:80:9a:93:20:a6:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7C:2B:EB:AD:26:D5:3E:9A:D3:F8:D1:35:60:61:DA:F1:8F:75:69
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a363430303a3a2f33382d3438203d3e20323032333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:6400::/38
Signature Algorithm: sha256WithRSAEncryption
36:93:80:dc:27:a1:0b:01:2a:94:a2:5e:14:8f:4c:57:9c:b4:
40:06:c2:09:6f:9c:61:66:ee:07:36:c5:3e:a8:52:fb:53:cd:
da:ed:18:a5:61:be:12:06:76:6f:6f:54:26:1b:3c:64:e9:42:
09:70:57:69:57:45:dc:f2:91:89:0a:33:de:46:3d:66:c5:97:
d1:66:2b:5c:12:27:c2:f4:54:85:b3:99:21:e6:64:8d:f2:f0:
68:29:13:b3:4f:03:dc:77:98:b2:65:6f:f3:11:ff:d5:7e:1d:
de:61:67:80:c2:3f:64:3f:8e:88:fd:7c:20:ad:50:6c:3f:66:
d2:5f:d8:7e:d3:b6:73:e5:fd:4c:36:1c:c8:ea:16:e1:b2:20:
d3:86:19:18:f2:2b:f6:d1:1f:f9:a9:ec:43:a4:6a:a0:b1:87:
f1:e2:d4:48:7a:a2:7e:01:96:54:12:bf:53:7c:a2:fe:40:ac:
e3:ef:2d:be:f1:cd:9c:f7:8b:f4:df:f2:fd:e1:8e:0a:5a:79:
67:da:eb:7d:e6:92:e3:8a:14:8e:99:bf:81:e8:ae:bf:38:09:
84:86:e7:cf:b4:3c:de:c5:bb:d8:41:ec:b2:43:c3:2d:fd:f3:
1e:bc:57:89:9d:ff:aa:43:9c:27:52:20:e8:d6:9d:66:e1:b5:
aa:08:42:f3
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUWJDXnZO0duGsb+AnD7KQLAFiBm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAyMDQwODUwNTdaFw0yNzAyMDMwODU1NTdaMDMxMTAvBgNV
BAMTKEZCN0MyQkVCQUQyNkQ1M0U5QUQzRjhEMTM1NjA2MURBRjE4Rjc1NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGPald7/vyv2V3sjpm8NbsmM6
B4umsylmmpfZqrUIuZyZ26Bx5bXSx4ZaM22Mr3hpky+3UCLiwCdyMVcx9zPziVVI
zi9MVB+nELD0q05iDFgbd0K2kOO1uoaFSkYgYqhmRNtSWvSOZb2VjkmPnadMezGF
3ZWMjKdNV7qQWhOMTmQUTjEQPFO9t3QEIFvPd8QO5sVbl4K4Ds9Z7R0rl1L8NhzH
bGszOCv4uyaji0aL+IAy4UZXPj7tGxau/Xu6r1TV0NATnfu84m3niSY3qsU8Q8QO
QZum2ghYEE/Z34dfUip5/UoIt5RW0hxoAJmRbZKHX2raFvGhwJaAmpMgpmizAgMB
AAGjggJpMIICZTAdBgNVHQ4EFgQU+3wr660m1T6a0/jRNWBh2vGPdWkwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM2MzQzMDMwM2EzYTJm
MzMzODJkMzQzODIwM2QzZTIwMzIzMDMyMzMzNTM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgtOB2Qw
DQYJKoZIhvcNAQELBQADggEBADaTgNwnoQsBKpSiXhSPTFectEAGwglvnGFm7gc2
xT6oUvtTzdrtGKVhvhIGdm9vVCYbPGTpQglwV2lXRdzykYkKM95GPWbFl9FmK1wS
J8L0VIWzmSHmZI3y8GgpE7NPA9x3mLJlb/MR/9V+Hd5hZ4DCP2Q/joj9fCCtUGw/
ZtJf2H7TtnPl/Uw2HMjqFuGyINOGGRjyK/bRH/mp7EOkaqCxh/Hi1Eh6on4BllQS
v1N8ov5ArOPvLb7xzZz3i/Tf8v3hjgpaeWfa633mkuOKFI6Zv4Horr84CYSG58+0
PN7Fu9hB7LJDwy398x68V4md/6pDnCdSIOjWnWbhtaoIQvM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:56:32 2026 by rpki-client