
$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219336.roa
File: AS219336.roa (raw, json)
Hash identifier: D5ilPmwop97RYo2uVgb4cUDqLBXJWkoeDrF8k1gKnRA=
Subject key identifier: CD:E2:D6:02:FB:63:E0:BD:B8:46:24:05:6A:BA:72:43:92:AD:1D:5B
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 72CBB8CA7DF220EF2CC52600ECB4133573ACC7DC
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219336.roa
Signing time: Tue 08 Sep 2026 14:23:43 +0000
ROA not before: Tue 08 Sep 2026 14:18:43 +0000
ROA not after: Tue 07 Sep 2027 14:23:43 +0000
asID: 219336
IP address blocks: 2a0b:4e07:5e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cb:b8:ca:7d:f2:20:ef:2c:c5:26:00:ec:b4:13:35:73:ac:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Sep 8 14:18:43 2026 GMT
Not After : Sep 7 14:23:43 2027 GMT
Subject: CN=CDE2D602FB63E0BDB84624056ABA724392AD1D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:38:43:ae:02:0e:88:b4:81:28:2e:46:ef:
5d:fd:e5:f8:a4:dc:8c:01:1d:e2:63:99:7b:de:cd:
ce:0b:b2:7f:62:2f:40:04:05:27:ad:52:95:4d:e9:
98:da:c3:8e:45:8f:93:29:e3:3e:1d:82:ec:e8:94:
66:d1:7a:e6:e5:eb:d9:ca:db:6c:19:0a:77:9c:6f:
39:5e:58:2e:04:81:f9:df:77:7f:77:64:83:ef:b1:
99:ec:d5:14:96:4f:1f:53:70:1c:9a:ec:b2:5b:c3:
ff:22:7b:ca:de:9e:1a:ce:8e:ab:e7:ab:e1:31:dd:
50:13:06:ef:00:09:45:4c:de:29:b8:63:b4:ca:10:
61:dd:2c:6c:db:77:91:7c:c2:d3:01:d9:5a:08:49:
d0:0f:f1:65:7c:87:9c:15:5c:2c:39:81:ff:15:ff:
a1:72:0d:fd:28:03:92:4b:53:2c:1d:7c:f2:ab:bd:
49:22:53:78:01:7f:2a:a0:83:56:94:cc:6a:e4:34:
29:b3:3e:75:37:5b:af:83:5c:2b:1a:34:7a:82:cd:
03:3f:f6:50:8c:09:37:60:a8:3e:a4:41:72:c3:90:
a7:c8:b7:1c:4f:d5:58:86:4c:02:4d:3d:1e:50:9a:
c9:9b:85:0e:97:9e:6d:96:7e:8e:b3:e4:71:b8:d2:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:D6:02:FB:63:E0:BD:B8:46:24:05:6A:BA:72:43:92:AD:1D:5B
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:5e00::/40
Signature Algorithm: sha256WithRSAEncryption
48:1c:6b:c0:1f:6d:ee:99:c5:e5:f0:4b:9c:98:53:86:02:a5:
23:1e:56:a2:66:2f:dd:c1:d3:c1:a2:0d:4f:ad:71:2d:dd:48:
7f:a8:51:a8:d3:ca:2d:fb:1c:78:44:59:b8:e4:d2:31:41:08:
0d:51:3d:76:d4:ba:bb:f7:30:9c:30:7d:5c:22:80:36:e9:87:
02:05:62:74:b1:e7:db:b1:af:b8:3d:72:e9:2e:97:76:17:1b:
16:8d:5f:97:18:29:63:98:ce:f6:66:97:00:11:f7:40:fe:b5:
8b:07:73:57:82:3c:6d:1b:d2:8d:5f:50:85:ad:c6:b0:fd:5e:
7e:69:74:96:04:33:d9:3e:86:3e:30:89:e8:55:73:a9:a4:e9:
1d:35:44:4c:25:0e:d3:5a:15:d4:f3:3d:b6:0c:0a:db:66:6b:
ba:0a:86:8d:6f:e6:a9:aa:dd:e0:8b:32:48:67:ba:d8:66:f1:
5e:bf:da:15:8b:e7:dc:99:40:e9:4f:6b:ec:0f:70:4d:9b:19:
c0:5f:66:6e:28:8a:4a:7b:e9:7d:7b:b6:81:76:c7:b7:97:39:
13:cc:c0:cc:9f:5b:9d:9e:dd:06:ee:ef:03:6a:54:96:b3:84:
fa:fc:3a:bb:22:5b:19:1d:a8:89:dc:5d:35:2e:04:42:c1:cd:
02:cd:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:44 2026 by rpki-client