$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218500.roa File: AS218500.roa (raw, json) Hash identifier: V5wzXc7Bc0hAlY38oA6z2To8jhGfBs6X9mDFAp6QpXs= Subject key identifier: 9F:D7:FF:76:77:F1:C4:7D:B5:87:E3:3B:9D:A3:9D:BE:31:91:DF:6B Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 167B67675208AC7DDAB75EE3A58FC8E783D52B77 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218500.roa Signing time: Tue 06 Oct 2026 10:47:53 +0000 ROA not before: Tue 06 Oct 2026 10:42:53 +0000 ROA not after: Tue 05 Oct 2027 10:47:53 +0000 asID: 218500 IP address blocks: 2a0b:4e07:290::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 20:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7b:67:67:52:08:ac:7d:da:b7:5e:e3:a5:8f:c8:e7:83:d5:2b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 6 10:42:53 2026 GMT Not After : Oct 5 10:47:53 2027 GMT Subject: CN=9FD7FF7677F1C47DB587E33B9DA39DBE3191DF6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:c6:7f:a5:77:d0:f3:86:0c:bc:ab:5c:14: 73:8e:c4:7b:e4:fb:96:15:20:06:77:0d:38:6a:58: ab:a9:eb:71:b4:46:f6:3a:d4:f1:6c:8e:df:36:a5: 1e:35:c7:cb:08:03:45:6a:7c:c2:2d:af:77:aa:c1: 75:f7:f7:e5:16:f1:d4:39:2c:ab:a8:59:a7:68:89: 36:ee:4b:f1:96:e6:89:11:06:ef:ab:b3:ba:ec:be: a3:2a:0b:2a:77:0e:61:7f:7b:ce:22:de:cd:69:6f: 01:e9:89:c3:a2:80:0a:a7:13:e9:11:1b:a2:43:f2: 32:96:cc:e9:eb:a7:69:8c:45:f6:6c:70:6e:66:74: 95:79:4e:77:db:31:20:be:b1:49:0f:b9:de:f2:62: b9:7f:47:e5:21:32:cc:94:6e:fa:ce:69:59:75:38: 03:95:34:a0:10:35:eb:ce:19:c6:8a:bc:d6:be:96: aa:5a:1c:4e:6a:ec:f4:06:8b:8c:d3:1f:24:03:bd: fc:f2:28:bb:e1:71:53:38:21:61:a2:5e:af:7a:8b: 24:88:da:68:e2:3d:3b:0a:ef:9a:7c:8f:5a:cd:1d: 65:e5:a5:c4:10:97:20:d9:57:38:e3:9e:55:ad:b1: 69:5c:d3:45:23:54:97:d4:80:52:13:61:31:46:26: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D7:FF:76:77:F1:C4:7D:B5:87:E3:3B:9D:A3:9D:BE:31:91:DF:6B X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218500.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:290::/44 Signature Algorithm: sha256WithRSAEncryption 61:73:fb:28:8a:59:ae:82:3e:3b:56:c9:5c:4c:da:41:a1:09: 49:01:7e:29:d1:21:ee:de:85:af:ed:b0:20:15:92:3e:89:ac: 90:c3:77:c7:c4:e6:b6:8c:4e:c3:48:9b:bc:b0:b3:e5:a8:e5: 3e:fe:fd:3a:26:6f:59:02:1b:ed:a1:b3:e0:e9:68:79:21:c7: 70:12:ca:d0:27:6e:06:ee:1c:80:de:c4:77:3d:7e:87:fb:4e: 48:05:d3:e0:01:02:80:b6:56:ac:35:db:68:29:67:1f:9b:33: 4c:f1:db:fa:6d:97:e1:c0:b1:ac:ad:00:78:2e:e8:a5:39:de: f7:84:ab:cd:fe:2e:2c:ad:6c:f1:cc:53:b9:95:80:91:91:73: 03:75:72:bd:8e:ec:04:17:31:ac:b6:6b:c8:8a:f3:bc:30:d3: f0:58:9a:ae:77:ad:27:ae:12:d6:4e:35:7e:8f:c1:56:4f:87: 12:80:b3:32:12:c2:2b:d3:1a:b1:28:4e:c6:88:3d:72:6e:d8: d4:a7:f0:13:6a:30:0c:77:95:30:45:91:53:1e:d5:08:cf:1c: c6:f0:27:69:a3:6b:1b:47:ff:b4:a5:7f:c9:6d:89:47:e2:06: 39:f9:35:1f:6d:69:fe:e6:99:89:b7:ab:8a:94:3b:20:fd:bf: 01:84:35:16 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUFntnZ1IIrH3at17jpY/I54PVK3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjEwMDYxMDQyNTNaFw0yNzEwMDUxMDQ3NTNaMDMxMTAvBgNV BAMTKDlGRDdGRjc2NzdGMUM0N0RCNTg3RTMzQjlEQTM5REJFMzE5MURGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bcZ/pXfQ84YMvKtcFHOOxHvk +5YVIAZ3DThqWKup63G0RvY61PFsjt82pR41x8sIA0VqfMItr3eqwXX39+UW8dQ5 LKuoWadoiTbuS/GW5okRBu+rs7rsvqMqCyp3DmF/e84i3s1pbwHpicOigAqnE+kR G6JD8jKWzOnrp2mMRfZscG5mdJV5TnfbMSC+sUkPud7yYrl/R+UhMsyUbvrOaVl1 OAOVNKAQNevOGcaKvNa+lqpaHE5q7PQGi4zTHyQDvfzyKLvhcVM4IWGiXq96iySI 2mjiPTsK75p8j1rNHWXlpcQQlyDZVzjjnlWtsWlc00UjVJfUgFITYTFGJjC1AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUn9f/dnfxxH21h+M7naOdvjGR32swHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTg1MDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04HApAwDQYJKoZIhvcNAQEL BQADggEBAGFz+yiKWa6CPjtWyVxM2kGhCUkBfinRIe7eha/tsCAVkj6JrJDDd8fE 5raMTsNIm7yws+Wo5T7+/Tomb1kCG+2hs+DpaHkhx3ASytAnbgbuHIDexHc9fof7 TkgF0+ABAoC2Vqw122gpZx+bM0zx2/ptl+HAsaytAHgu6KU53veEq83+LiytbPHM U7mVgJGRcwN1cr2O7AQXMay2a8iK87ww0/BYmq53rSeuEtZONX6PwVZPhxKAszIS wivTGrEoTsaIPXJu2NSn8BNqMAx3lTBFkVMe1QjPHMbwJ2mjaxtH/7Slf8ltiUfi Bjn5NR9taf7mmYm3q4qUOyD9vwGENRY= -----END CERTIFICATE-----Generated at Tue Oct 20 08:37:29 2026 by rpki-client