$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa File: AS11967.roa (raw, json) Hash identifier: gmnVR0/kahi9ws7EqjF1CmOljCeE9HfRneaQNcAPLxw= Subject key identifier: 57:B2:B9:59:D2:67:D8:C1:72:79:23:27:9E:2D:FF:97:3F:8A:62:89 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 7C74B245BD7E9C273CE3BE0D903B45CBE0829F34 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa Signing time: Mon 26 Oct 2026 15:17:06 +0000 ROA not before: Mon 26 Oct 2026 15:12:06 +0000 ROA not after: Mon 25 Oct 2027 15:17:06 +0000 asID: 11967 IP address blocks: 2a0b:4e07:3::/48 maxlen: 48 2a0b:4e07:10::/44 maxlen: 44 2a0b:4e07:24::/48 maxlen: 48 2a0b:4e07:2c::/48 maxlen: 48 2a0b:4e07:2e::/48 maxlen: 48 2a0b:4e07:3c::/48 maxlen: 48 2a0b:4e07:3e::/48 maxlen: 48 2a0b:4e07:3f::/48 maxlen: 48 2a0b:4e07:47::/48 maxlen: 48 2a0b:4e07:80::/48 maxlen: 48 2a0b:4e07:89::/48 maxlen: 48 2a0b:4e07:b4::/48 maxlen: 48 2a0b:4e07:c1::/48 maxlen: 48 2a0b:4e07:2b0::/44 maxlen: 48 2a0b:4e07:2d0::/44 maxlen: 44 2a0b:4e07:b20::/44 maxlen: 44 2a0b:4e07:bec::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Oct 2026 19:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:74:b2:45:bd:7e:9c:27:3c:e3:be:0d:90:3b:45:cb:e0:82:9f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 26 15:12:06 2026 GMT Not After : Oct 25 15:17:06 2027 GMT Subject: CN=57B2B959D267D8C1727923279E2DFF973F8A6289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:cf:38:d1:e6:ba:4d:7a:13:a2:64:95:4f: ca:4e:07:f2:ce:6f:37:ca:f0:72:03:b9:d4:cb:67: 70:6f:a3:e0:38:fc:39:0f:8c:7d:c6:3e:aa:0a:dd: 4f:b6:a1:7e:c1:f4:08:55:9c:6a:aa:ae:c8:bc:96: c3:c5:5f:e2:16:27:07:61:14:fc:31:0f:5a:a7:9b: 3f:70:13:ee:93:e2:e4:bc:10:58:a1:31:c5:52:d1: d3:6e:cd:7c:1f:41:39:64:4e:1a:fc:ef:ca:ed:a8: 8c:c1:8f:c2:8d:be:f8:34:34:88:15:a2:a8:ef:94: 40:25:ae:56:c4:e1:5d:00:d9:ea:66:89:64:55:cd: 96:70:43:79:d1:e8:18:a8:a2:e4:21:d1:26:8f:08: e6:bf:af:2a:81:fa:d4:ce:7d:f1:00:6f:a1:1e:7c: 9c:7f:d4:7c:64:c8:e1:99:17:43:f9:4c:81:a8:22: d6:e2:2c:67:15:8e:82:bb:90:cf:27:1b:e9:25:ad: e3:e0:97:02:78:35:e1:e7:a3:f8:28:c1:ef:9f:02: 2e:fe:b1:e7:36:b9:6c:32:5a:d8:9b:1c:5a:af:26: 2e:f8:26:92:70:63:2b:15:b7:45:b8:3c:7b:41:44: f8:a9:5c:14:9b:d7:b7:58:18:20:82:27:7e:66:71: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:B9:59:D2:67:D8:C1:72:79:23:27:9E:2D:FF:97:3F:8A:62:89 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3::/48 2a0b:4e07:10::/44 2a0b:4e07:24::/48 2a0b:4e07:2c::/48 2a0b:4e07:2e::/48 2a0b:4e07:3c::/48 2a0b:4e07:3e::/47 2a0b:4e07:47::/48 2a0b:4e07:80::/48 2a0b:4e07:89::/48 2a0b:4e07:b4::/48 2a0b:4e07:c1::/48 2a0b:4e07:2b0::/44 2a0b:4e07:2d0::/44 2a0b:4e07:b20::/44 2a0b:4e07:bec::/47 Signature Algorithm: sha256WithRSAEncryption 69:b5:73:de:be:a4:cd:65:e2:37:ce:8a:2d:22:01:61:4b:69: 2a:16:d4:cd:34:17:87:ad:65:44:72:e2:fa:ce:ea:cd:df:58: 6f:4e:6c:22:48:d5:68:89:aa:ef:ec:a1:35:57:80:32:2d:55: e6:83:b1:7c:6b:14:c3:bc:5d:7b:c6:58:b9:cf:68:dd:cd:64: b4:a0:23:9f:1b:3f:1d:21:49:e7:3d:9a:ad:0d:da:0b:14:5a: 94:ff:e1:41:56:57:f6:07:2a:14:4b:77:b4:f1:a4:b7:f2:2a: 50:3e:8c:83:b3:c8:9a:dc:d6:80:4c:4d:70:5e:a9:80:dd:e0: 0f:90:bb:cb:bd:0b:53:40:d0:c7:ab:de:21:aa:a7:83:1a:12: ab:b8:f1:e7:16:67:ff:d5:8c:ea:20:cc:a9:88:82:a9:f6:8c: 87:75:c9:15:14:f0:54:6c:6d:12:85:cc:37:35:56:1e:9f:97: 4b:17:71:06:6b:fa:2d:1d:09:78:21:25:90:5c:4f:c3:39:98: 78:09:0a:9d:00:b0:3e:66:98:33:ed:1a:b4:1d:83:48:d2:cb: 4d:e3:6c:9e:da:2e:95:cb:18:2d:83:8b:1a:68:e4:37:52:14: b3:26:fd:c8:35:9e:cb:d6:1b:1e:d4:8c:c2:79:1a:1a:9f:e2: 70:83:ef:8f -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgIUfHSyRb1+nCc8474NkDtFy+CCnzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjEwMjYxNTEyMDZaFw0yNzEwMjUxNTE3MDZaMDMxMTAvBgNV BAMTKDU3QjJCOTU5RDI2N0Q4QzE3Mjc5MjMyNzlFMkRGRjk3M0Y4QTYyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn48840ea6TXoTomSVT8pOB/LO bzfK8HIDudTLZ3Bvo+A4/DkPjH3GPqoK3U+2oX7B9AhVnGqqrsi8lsPFX+IWJwdh FPwxD1qnmz9wE+6T4uS8EFihMcVS0dNuzXwfQTlkThr878rtqIzBj8KNvvg0NIgV oqjvlEAlrlbE4V0A2epmiWRVzZZwQ3nR6BioouQh0SaPCOa/ryqB+tTOffEAb6Ee fJx/1HxkyOGZF0P5TIGoItbiLGcVjoK7kM8nG+klrePglwJ4NeHno/gowe+fAi7+ sec2uWwyWtibHFqvJi74JpJwYysVt0W4PHtBRPipXBSb17dYGCCCJ35mcY4LAgMB AAGjggK4MIICtDAdBgNVHQ4EFgQUV7K5WdJn2MFyeSMnni3/lz+KYokwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMxMTk2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB rQYIKwYBBQUHAQcBAf8EgZ0wgZowgZcEAgACMIGQAwcAKgtOBwADAwcEKgtOBwAQ AwcAKgtOBwAkAwcAKgtOBwAsAwcAKgtOBwAuAwcAKgtOBwA8AwcBKgtOBwA+AwcA KgtOBwBHAwcAKgtOBwCAAwcAKgtOBwCJAwcAKgtOBwC0AwcAKgtOBwDBAwcEKgtO BwKwAwcEKgtOBwLQAwcEKgtOBwsgAwcBKgtOBwvsMA0GCSqGSIb3DQEBCwUAA4IB AQBptXPevqTNZeI3zootIgFhS2kqFtTNNBeHrWVEcuL6zurN31hvTmwiSNVoiarv 7KE1V4AyLVXmg7F8axTDvF17xli5z2jdzWS0oCOfGz8dIUnnPZqtDdoLFFqU/+FB Vlf2ByoUS3e08aS38ipQPoyDs8ia3NaATE1wXqmA3eAPkLvLvQtTQNDHq94hqqeD GhKruPHnFmf/1YzqIMypiIKp9oyHdckVFPBUbG0Shcw3NVYen5dLF3EGa/otHQl4 ISWQXE/DOZh4CQqdALA+Zpgz7Rq0HYNI0stN42ye2i6Vyxgtg4saaOQ3UhSzJv3I NZ7L1hse1IzCeRoan+Jwg++P -----END CERTIFICATE-----Generated at Fri Oct 30 12:52:07 2026 by rpki-client