
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63333a3a2f34382d3438203d3e20323036303037.roa
File: 326130623a346530373a63333a3a2f34382d3438203d3e20323036303037.roa (raw, json)
Hash identifier: 7uYq8w1NYOkdQlch4bIEtjeIm5yVCngQ8/O6DhpJwaM=
Subject key identifier: 59:A0:C0:79:62:BC:E3:2D:73:9A:C9:21:94:DC:4E:38:1C:BA:E1:F0
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 4F7F500AE5CCF8D42FDFD4E56A4117DF9E028D80
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63333a3a2f34382d3438203d3e20323036303037.roa
Signing time: Mon 30 Mar 2026 11:46:50 +0000
ROA not before: Mon 30 Mar 2026 11:41:50 +0000
ROA not after: Mon 29 Mar 2027 11:46:50 +0000
asID: 206007
IP address blocks: 2a0b:4e07:c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7f:50:0a:e5:cc:f8:d4:2f:df:d4:e5:6a:41:17:df:9e:02:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 30 11:41:50 2026 GMT
Not After : Mar 29 11:46:50 2027 GMT
Subject: CN=59A0C07962BCE32D739AC92194DC4E381CBAE1F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:b7:44:13:66:b9:94:ac:f0:98:d4:3b:a6:
12:72:ab:bc:33:d2:f1:5b:57:b2:b9:45:22:75:06:
96:cc:81:e8:f2:16:f0:1b:88:78:56:82:93:a6:61:
a8:eb:dc:6b:79:1f:b7:9e:e1:89:19:cc:c1:fa:0f:
86:0f:b8:92:92:97:c7:b8:d7:fc:f3:9c:6f:2f:8c:
56:6b:d2:93:ca:a3:43:ab:28:fe:53:87:74:f6:f2:
9e:6c:b0:6f:6f:d4:20:7a:58:d0:e1:bb:dc:e6:5d:
a2:38:80:8b:07:92:f7:d6:38:13:b6:0b:49:c4:8f:
af:36:36:f3:fb:34:62:0a:74:c6:06:64:24:eb:11:
57:0b:5d:47:8b:6d:e3:32:de:55:22:73:fa:3a:29:
59:6e:51:cc:e0:80:bb:18:09:47:e0:54:3a:b4:76:
89:96:69:cd:1d:0e:2f:f9:1b:db:dc:1e:43:6c:b2:
9e:e1:5b:0e:98:8c:0c:cd:df:3b:8a:03:6a:f5:cf:
66:53:f6:e7:cd:95:82:22:eb:b3:f6:08:15:87:e1:
0c:25:f7:ff:21:fd:b2:00:8f:0c:74:d3:34:2f:0a:
1e:85:5b:e3:11:82:7e:5e:11:42:2c:91:b1:69:cd:
17:b7:37:a6:94:52:a1:28:ae:46:7e:c9:7b:23:75:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:C0:79:62:BC:E3:2D:73:9A:C9:21:94:DC:4E:38:1C:BA:E1:F0
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63333a3a2f34382d3438203d3e20323036303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:c3::/48
Signature Algorithm: sha256WithRSAEncryption
1d:99:e8:e5:1d:b6:8d:bd:f2:4f:f9:aa:08:33:6a:16:98:ef:
5d:c7:06:82:a2:a2:d2:d4:31:50:2f:5d:7c:21:29:1c:ec:bf:
3a:5f:34:d1:98:35:ef:53:20:8a:21:35:84:2c:0a:c1:ee:f1:
08:a1:a7:40:fd:3b:48:63:7d:59:75:28:47:2e:6a:84:95:dd:
86:4c:03:2c:00:24:2c:7a:a8:7d:ba:f8:33:5a:5f:d7:e6:1b:
d4:11:5c:cd:1b:a6:7b:14:eb:f9:01:a4:47:33:04:26:45:98:
bc:ee:ac:f6:37:6e:fd:9d:8f:c9:6c:6a:b5:b2:76:60:4f:a5:
97:61:11:f5:25:59:4d:55:c0:89:e6:49:43:16:ae:a9:3a:2f:
70:4c:75:7d:84:6a:d9:a9:c8:07:e8:0d:41:d8:16:a8:2a:44:
1e:75:fa:8c:2e:70:e8:cd:6a:4c:9f:27:84:ed:d6:9e:0b:08:
5e:c8:32:bc:8d:a0:be:f5:5c:98:75:79:59:09:8c:00:33:ef:
77:5a:2d:11:1d:24:3c:37:3f:08:4d:d7:eb:c7:48:b1:f2:8d:
df:77:3e:4f:20:02:b4:9e:96:b7:1d:74:97:8b:94:82:93:66:
bc:74:f1:d1:fd:4d:27:4a:d0:0e:bc:4b:e5:38:82:dd:0e:25:
f8:a0:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:06 2026 by rpki-client