$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218758.roa File: AS218758.roa (raw, json) Hash identifier: z9FNVvqBnitoGqs6Vd94LRMo+7ipFLmotjD4FiSedv0= Subject key identifier: E0:08:9B:A7:5E:3E:84:B5:E2:B0:80:CA:4D:87:C9:B0:EA:F8:18:37 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 0A4307DBB346265271FAE750F723C9055C1705C8 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218758.roa Signing time: Wed 28 Oct 2026 19:41:23 +0000 ROA not before: Wed 28 Oct 2026 19:36:23 +0000 ROA not after: Wed 27 Oct 2027 19:41:23 +0000 asID: 218758 IP address blocks: 2a0b:4e07:8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 23:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:43:07:db:b3:46:26:52:71:fa:e7:50:f7:23:c9:05:5c:17:05:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 28 19:36:23 2026 GMT Not After : Oct 27 19:41:23 2027 GMT Subject: CN=E0089BA75E3E84B5E2B080CA4D87C9B0EAF81837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:25:7c:43:06:aa:27:22:91:bb:97:2b:85: 99:bc:d3:ee:07:7f:ac:fb:0e:26:15:9e:e9:16:ba: 67:69:0c:21:3c:9f:e9:66:4c:a4:18:8c:78:f1:af: 59:41:fa:91:46:a6:e6:9a:ca:07:b9:85:7d:e6:6a: db:b3:09:e3:2e:d5:13:19:b1:a9:a7:a5:85:2d:d5: da:9c:9d:19:cc:67:73:31:35:93:40:b9:08:0b:8f: 4c:bc:1a:1b:46:a9:06:a3:56:ed:19:88:68:d8:9d: a7:7d:38:6b:fc:c5:2f:3a:f6:5b:3a:85:e0:9a:ba: f5:1a:69:6c:89:94:57:b8:59:fe:4d:9c:a0:82:bd: de:4f:8b:24:a2:49:e5:a1:45:86:43:cf:fe:ef:88: 03:f8:aa:85:79:7d:73:c2:d5:e5:2c:1d:f3:4c:ae: ac:2e:37:e2:eb:a9:f3:68:55:6d:8f:f1:37:0e:71: 01:5b:9d:9c:41:a3:8e:a8:19:5f:48:57:be:0c:74: a9:68:b4:47:9a:d3:17:2b:28:81:eb:8e:35:a3:7d: 54:cd:a9:14:f6:d0:1e:95:d1:b6:7b:56:b6:c5:c9: c7:dc:fb:47:01:62:49:e3:33:8e:62:ca:a6:fb:99: 71:0e:34:0c:e0:48:ef:72:b0:d7:f7:2b:cf:d2:da: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:08:9B:A7:5E:3E:84:B5:E2:B0:80:CA:4D:87:C9:B0:EA:F8:18:37 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218758.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:8c::/48 Signature Algorithm: sha256WithRSAEncryption 0d:fc:8d:e1:29:13:c4:0c:15:4e:98:0c:6b:04:08:58:d2:f8: b8:8a:21:92:85:19:ab:01:86:f3:e4:58:dc:fe:ac:60:23:3c: fc:b5:a4:23:9a:50:b0:65:c7:40:bd:ed:e8:a6:db:bf:f3:36: ef:ae:7b:86:41:87:aa:30:9e:b8:3b:28:b0:62:b9:a2:31:ab: 8c:7b:90:5b:35:38:27:8d:ad:92:11:4e:e3:6b:64:25:4c:b7: b5:d1:1c:ca:5f:15:17:63:88:8b:7a:7e:5d:d1:f5:db:cd:35: 4a:c7:48:89:ad:25:99:cd:f1:f6:45:b8:eb:37:fd:b8:34:4b: eb:fe:08:9a:76:cc:28:4d:e0:03:57:a3:95:2a:6a:65:e9:e9: 45:cf:ac:35:e3:d4:77:a0:71:6d:09:5c:97:66:4e:a8:eb:b2: e9:cf:a5:13:f1:95:ff:c3:74:09:62:4d:e1:1e:8f:f9:62:1b: 1b:d2:0c:5a:22:3e:9d:6e:29:75:67:99:54:cd:36:08:48:de: c8:37:c2:58:f7:f7:f6:6c:61:3e:9f:00:a8:42:d2:3a:4f:ab: 04:5d:96:90:65:79:b4:39:3d:d9:2e:54:6c:32:48:f8:1f:c6: af:7f:43:77:e0:3f:3d:a1:06:4e:1e:72:ac:53:01:8c:92:77: eb:df:24:d3 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUCkMH27NGJlJx+udQ9yPJBVwXBcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjEwMjgxOTM2MjNaFw0yNzEwMjcxOTQxMjNaMDMxMTAvBgNV BAMTKEUwMDg5QkE3NUUzRTg0QjVFMkIwODBDQTREODdDOUIwRUFGODE4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10SV8QwaqJyKRu5crhZm80+4H f6z7DiYVnukWumdpDCE8n+lmTKQYjHjxr1lB+pFGpuaayge5hX3matuzCeMu1RMZ samnpYUt1dqcnRnMZ3MxNZNAuQgLj0y8GhtGqQajVu0ZiGjYnad9OGv8xS869ls6 heCauvUaaWyJlFe4Wf5NnKCCvd5PiySiSeWhRYZDz/7viAP4qoV5fXPC1eUsHfNM rqwuN+LrqfNoVW2P8TcOcQFbnZxBo46oGV9IV74MdKlotEea0xcrKIHrjjWjfVTN qRT20B6V0bZ7VrbFycfc+0cBYknjM45iyqb7mXEONAzgSO9ysNf3K8/S2lB7AgMB AAGjggItMIICKTAdBgNVHQ4EFgQU4Aibp14+hLXisIDKTYfJsOr4GDcwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTg3NTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAIwwDQYJKoZIhvcNAQEL BQADggEBAA38jeEpE8QMFU6YDGsECFjS+LiKIZKFGasBhvPkWNz+rGAjPPy1pCOa ULBlx0C97eim27/zNu+ue4ZBh6ownrg7KLBiuaIxq4x7kFs1OCeNrZIRTuNrZCVM t7XRHMpfFRdjiIt6fl3R9dvNNUrHSImtJZnN8fZFuOs3/bg0S+v+CJp2zChN4ANX o5UqamXp6UXPrDXj1HegcW0JXJdmTqjrsunPpRPxlf/DdAliTeEej/liGxvSDFoi Pp1uKXVnmVTNNghI3sg3wlj39/ZsYT6fAKhC0jpPqwRdlpBlebQ5PdkuVGwySPgf xq9/Q3fgPz2hBk4ecqxTAYySd+vfJNM= -----END CERTIFICATE-----Generated at Thu Nov 5 14:05:03 2026 by rpki-client