$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64383a3a2f34362d3438203d3e20323035333035.roa File: 326130623a346530373a64383a3a2f34362d3438203d3e20323035333035.roa (raw, json) Hash identifier: nNqB0beYzVBBspk/sgyPuveiA2C1Ay4a5c0mwexiYvM= Subject key identifier: 68:FF:79:67:80:5E:5F:27:D6:87:0E:17:50:60:4A:D9:32:13:40:51 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 357FE8BAB3D77794FC4E5F34D0FF01BF49F4C353 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64383a3a2f34362d3438203d3e20323035333035.roa Signing time: Tue 31 Mar 2026 14:01:01 +0000 ROA not before: Tue 31 Mar 2026 13:56:01 +0000 ROA not after: Tue 30 Mar 2027 14:01:01 +0000 asID: 205305 IP address blocks: 2a0b:4e07:d8::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 01:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7f:e8:ba:b3:d7:77:94:fc:4e:5f:34:d0:ff:01:bf:49:f4:c3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Mar 31 13:56:01 2026 GMT Not After : Mar 30 14:01:01 2027 GMT Subject: CN=68FF7967805E5F27D6870E1750604AD932134051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:1f:18:15:8b:a0:b6:b1:b3:88:f1:b3:45: fc:7f:dc:8c:a4:99:04:2a:7b:dc:f2:18:b8:05:6a: 69:d4:0d:9c:81:90:16:aa:56:45:27:d5:b8:29:fa: 14:4f:07:5d:5e:7b:29:52:c9:ea:b3:94:23:6e:c3: 06:56:c8:08:d3:cb:91:2b:b9:fb:ae:5a:00:8d:8f: 1f:a1:40:40:f5:b6:de:9f:41:aa:0c:47:c6:64:b5: df:0d:8f:a0:08:92:b8:e0:f1:4c:c4:70:28:48:12: d1:8a:7e:d9:59:90:90:86:7d:ed:be:27:5c:84:a5: 71:c2:09:3a:2d:13:28:18:16:33:c9:1b:d6:e9:a3: 3a:59:43:69:91:74:d2:0a:55:a6:42:f8:b7:93:08: dc:9e:27:71:f8:dd:87:a1:1d:88:e8:38:bd:02:e5: f4:4a:e8:f2:6c:0b:26:e2:7f:c5:e9:b2:92:33:0c: 3e:a8:9e:df:d9:59:be:ce:80:e5:07:1c:46:6e:32: 87:36:9b:5a:a7:bf:fa:92:04:5f:94:54:32:90:a4: 6f:bf:d8:f6:63:49:bf:5f:11:09:a5:0b:8f:6e:ef: 97:d3:da:b1:de:57:28:1e:ee:da:67:63:5f:f2:ec: 97:4c:66:07:25:c7:43:4c:58:3a:43:38:f7:32:56: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:79:67:80:5E:5F:27:D6:87:0E:17:50:60:4A:D9:32:13:40:51 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64383a3a2f34362d3438203d3e20323035333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:d8::/46 Signature Algorithm: sha256WithRSAEncryption 49:7d:f6:74:42:a2:9b:44:22:a3:ee:3b:0b:1e:cf:65:17:5b: 91:60:ff:58:3d:13:fc:bd:ce:ce:d2:d6:81:fe:7c:97:fb:4f: b1:58:c8:9a:ee:11:ea:b9:18:a3:0b:7a:38:8f:6c:de:f4:d8: d8:98:36:26:fe:f4:b8:c3:bb:de:af:76:b7:73:01:8e:88:15: c0:3b:ea:1e:0d:eb:cd:58:d0:12:10:67:86:92:fa:25:d5:65: 2c:85:a8:dc:67:24:89:ce:32:59:34:a4:0b:79:93:56:12:66: ac:0e:37:22:9e:6d:75:2d:c6:9c:f6:b9:cf:be:6e:4a:fc:22: 01:27:91:4d:9a:ae:39:16:cd:e5:48:70:47:d8:eb:bc:9f:82: 46:d2:7b:fe:77:a0:0f:45:21:f6:e1:aa:96:93:f3:a5:bb:39: 01:a1:62:b8:b1:4b:73:68:a5:7c:af:be:16:c9:7f:c4:8b:94: 41:4f:01:16:ab:64:25:c9:01:fd:29:c3:6e:8f:e6:57:d1:c6: ce:9c:f2:c9:56:9c:cf:6a:c1:64:82:b3:99:ee:6f:16:eb:ca: b2:e5:38:f1:41:75:fe:3c:f4:6e:bb:9b:91:30:5a:e0:4e:a7: 38:da:93:2f:b6:1a:2a:c5:de:7a:f4:e3:1c:10:63:66:c3:a8: 3e:a5:c9:28 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUNX/ourPXd5T8Tl800P8Bv0n0w1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAzMzExMzU2MDFaFw0yNzAzMzAxNDAxMDFaMDMxMTAvBgNV BAMTKDY4RkY3OTY3ODA1RTVGMjdENjg3MEUxNzUwNjA0QUQ5MzIxMzQwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8R8YFYugtrGziPGzRfx/3Iyk mQQqe9zyGLgFamnUDZyBkBaqVkUn1bgp+hRPB11eeylSyeqzlCNuwwZWyAjTy5Er ufuuWgCNjx+hQED1tt6fQaoMR8Zktd8Nj6AIkrjg8UzEcChIEtGKftlZkJCGfe2+ J1yEpXHCCTotEygYFjPJG9bpozpZQ2mRdNIKVaZC+LeTCNyeJ3H43YehHYjoOL0C 5fRK6PJsCybif8XpspIzDD6ont/ZWb7OgOUHHEZuMoc2m1qnv/qSBF+UVDKQpG+/ 2PZjSb9fEQmlC49u75fT2rHeVyge7tpnY1/y7JdMZgclx0NMWDpDOPcyVgLhAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUaP95Z4BeXyfWhw4XUGBK2TITQFEwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTY0MzgzYTNhMmYzNDM2 MmQzNDM4MjAzZDNlMjAzMjMwMzUzMzMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HANgwDQYJ KoZIhvcNAQELBQADggEBAEl99nRCoptEIqPuOwsez2UXW5Fg/1g9E/y9zs7S1oH+ fJf7T7FYyJruEeq5GKMLejiPbN702NiYNib+9LjDu96vdrdzAY6IFcA76h4N681Y 0BIQZ4aS+iXVZSyFqNxnJInOMlk0pAt5k1YSZqwONyKebXUtxpz2uc++bkr8IgEn kU2arjkWzeVIcEfY67yfgkbSe/53oA9FIfbhqpaT86W7OQGhYrixS3NopXyvvhbJ f8SLlEFPARarZCXJAf0pw26P5lfRxs6c8slWnM9qwWSCs5nubxbryrLlOPFBdf48 9G67m5EwWuBOpzjaky+2GirF3nr04xwQY2bDqD6lySg= -----END CERTIFICATE-----Generated at Fri Apr 17 16:54:49 2026 by rpki-client