
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62353a3a2f34382d3438203d3e20323134373639.roa
File: 326130623a346530373a62353a3a2f34382d3438203d3e20323134373639.roa (raw, json)
Hash identifier: d8rzSZH6MThDh7N6C6ahxRQEy0HOvwE46l0BX3sMN/E=
Subject key identifier: 87:EF:9A:DD:8B:95:30:0B:75:F7:C7:01:86:73:F7:C4:A4:6E:E6:F2
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 6537056370777EE864A15CF72ACB513324443576
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62353a3a2f34382d3438203d3e20323134373639.roa
Signing time: Tue 24 Feb 2026 12:57:16 +0000
ROA not before: Tue 24 Feb 2026 12:52:16 +0000
ROA not after: Tue 23 Feb 2027 12:57:16 +0000
asID: 214769
IP address blocks: 2a0b:4e07:b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:37:05:63:70:77:7e:e8:64:a1:5c:f7:2a:cb:51:33:24:44:35:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Feb 24 12:52:16 2026 GMT
Not After : Feb 23 12:57:16 2027 GMT
Subject: CN=87EF9ADD8B95300B75F7C7018673F7C4A46EE6F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:b7:56:88:c4:de:9b:06:c6:f7:e5:18:25:
50:04:70:40:de:75:44:06:93:c7:c9:59:fc:00:6f:
18:be:08:77:27:3d:9e:53:e0:f6:ba:07:a5:df:e5:
2e:9a:f8:26:97:27:48:14:76:d4:f9:ee:09:3f:16:
3d:0a:23:22:1a:9d:6c:46:01:80:c2:92:fe:24:be:
e1:84:25:7f:dd:fe:1f:60:fc:58:7d:0c:34:35:ec:
99:e6:e1:80:d3:a0:03:e9:93:f7:11:c8:53:b6:10:
c7:41:1b:c7:98:23:ac:f4:fd:31:a8:60:86:1e:be:
0d:2a:29:b8:3c:ce:07:29:d6:ce:6c:89:38:0c:db:
fa:7b:b5:e5:51:fe:94:ca:aa:39:c5:95:9b:5d:31:
02:c4:91:df:fc:5b:83:cf:9a:1f:47:0b:93:62:5c:
15:c5:32:d8:3d:14:03:20:79:f4:11:8c:3c:63:ac:
e3:6e:d9:46:8b:fc:6b:ae:55:65:d7:ec:e8:89:a2:
19:e7:6b:34:76:a9:ff:6e:a9:b6:cc:e2:08:39:55:
c6:15:f4:d7:1b:4d:db:6f:40:6c:38:1d:4f:bd:3e:
c8:9e:3b:5d:65:fd:36:69:db:27:7f:30:e1:ca:ae:
9a:2b:d1:6e:52:b7:e2:49:f5:a7:95:09:d8:58:ae:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EF:9A:DD:8B:95:30:0B:75:F7:C7:01:86:73:F7:C4:A4:6E:E6:F2
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62353a3a2f34382d3438203d3e20323134373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:b5::/48
Signature Algorithm: sha256WithRSAEncryption
2c:37:d2:08:2e:5d:d7:2b:df:08:d9:4d:68:f7:4f:e7:a8:6c:
ae:08:e5:5b:59:52:12:13:41:85:f6:d0:1a:95:cc:1f:fa:a6:
d3:e6:3f:ab:8a:93:87:99:45:1b:ce:3c:ad:98:d5:92:29:dd:
8f:ec:4a:f4:61:95:ab:b6:34:d8:0b:70:54:16:a9:e9:91:d3:
ae:b6:5d:02:f9:2b:33:75:e3:63:4c:42:da:d7:a7:dc:5d:84:
34:fe:ac:48:16:e8:37:b0:95:3c:89:07:ef:0d:52:f3:db:75:
78:01:f8:49:8c:9c:b2:92:3e:38:d9:a4:d2:2d:b8:f3:31:f8:
cb:a5:36:93:69:bf:5e:1f:05:62:5f:68:69:be:6d:b0:ee:af:
d9:9d:99:d9:73:03:3c:91:0d:b7:e3:e3:40:d0:ec:cc:d1:a4:
9d:4c:60:9b:91:e7:38:f9:c8:a6:7d:bc:b0:53:f8:c7:3b:74:
6f:1b:ef:fa:7a:a7:99:f9:8f:30:3b:81:ac:7e:8c:bc:a8:14:
2a:8f:dc:ac:ca:09:ac:b3:3f:60:d6:9c:04:b8:25:ce:f4:29:
2c:90:6d:a2:18:bb:32:0b:71:a1:43:6a:b2:68:74:de:01:a0:
1b:3b:25:37:b3:04:50:52:c1:c0:5a:2c:f8:df:06:03:f6:4e:
f8:33:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:57:34 2026 by rpki-client