
$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219267.roa
File: AS219267.roa (raw, json)
Hash identifier: qJf2qIrtixRvPpoBY0jB086Z7jRKwPLPOeqA3XuUWEw=
Subject key identifier: 08:F5:5F:C5:97:A0:D5:AD:1E:D4:06:4A:18:07:89:60:39:5E:C6:C3
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 39DBE8F7EC7F00D18AE2C5AD0C11873C55A48230
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219267.roa
Signing time: Sat 26 Sep 2026 18:55:45 +0000
ROA not before: Sat 26 Sep 2026 18:50:45 +0000
ROA not after: Sat 25 Sep 2027 18:55:45 +0000
asID: 219267
IP address blocks: 2a0b:4e07:270::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:db:e8:f7:ec:7f:00:d1:8a:e2:c5:ad:0c:11:87:3c:55:a4:82:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Sep 26 18:50:45 2026 GMT
Not After : Sep 25 18:55:45 2027 GMT
Subject: CN=08F55FC597A0D5AD1ED4064A18078960395EC6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:ec:64:f9:96:33:2a:12:85:bf:fa:33:f5:
41:8f:55:3b:ea:52:b2:17:de:62:7e:f1:46:a2:31:
63:ed:9e:c4:29:4f:ed:7d:0b:0b:ab:d0:c9:2b:75:
1c:49:d9:05:ff:ff:33:c8:3e:f5:c4:fc:d7:e7:d1:
33:ea:bd:2c:a3:c9:ef:1d:77:01:38:97:74:6a:7e:
29:91:a3:a0:6b:47:df:d5:63:78:4a:af:19:77:b1:
33:11:0c:ae:d3:8d:bc:4e:4e:e4:e6:74:50:e3:a4:
ca:06:f6:37:1a:61:9b:9b:7a:d0:31:ef:5c:7b:fa:
8e:78:85:9a:72:9e:44:5c:cd:bf:9f:0f:52:53:88:
0f:76:e6:bf:be:8d:18:ff:6e:9d:d6:a0:e1:a4:58:
7d:36:7b:7b:d0:2a:99:ca:b9:0b:49:ae:42:d1:fa:
5d:f9:45:52:b1:f6:d6:23:b7:c2:5e:d5:04:0a:5c:
ba:65:c3:44:50:8d:aa:e4:2a:dd:3d:1c:fa:d9:6d:
17:bd:61:03:6e:af:53:d1:61:49:71:94:62:f8:2e:
cc:95:00:0e:98:5c:79:f6:4b:aa:b9:f5:c9:64:ff:
b4:14:a8:51:36:14:95:ed:07:e9:05:a2:68:68:cc:
e9:b6:13:c3:33:6d:ae:49:d7:44:8e:86:95:30:c8:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:5F:C5:97:A0:D5:AD:1E:D4:06:4A:18:07:89:60:39:5E:C6:C3
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:270::/44
Signature Algorithm: sha256WithRSAEncryption
9f:63:cf:ed:af:23:1e:d9:df:29:5b:ed:ae:a8:9e:6d:c2:89:
58:ca:54:4a:af:2c:bb:ba:8c:a7:38:e6:83:86:a4:79:5b:37:
69:af:41:30:f7:c5:04:19:2d:84:fa:53:d5:6e:71:fd:d4:68:
ac:b8:2d:ce:78:bd:1e:55:84:0a:ad:36:74:8a:45:6e:d7:79:
3e:1b:9d:d6:35:cd:29:03:2b:4e:ae:6e:fa:d5:26:42:1b:70:
75:d1:e9:e2:2e:f4:48:f7:7a:f3:97:2a:5e:d8:55:de:8c:49:
bc:e8:db:30:51:40:e0:45:43:c3:83:9e:bf:a2:9a:07:85:76:
aa:bf:05:86:c8:e3:6d:b0:43:28:ca:05:fb:09:05:3a:cc:2d:
ff:77:e1:89:9a:ca:a7:c9:c2:26:40:6b:75:ec:a5:57:ea:4d:
37:57:31:10:ee:f0:6f:a9:35:e7:f6:41:70:6e:72:a0:6b:c0:
9d:36:67:0c:b7:10:25:54:45:0e:66:24:f8:99:5f:41:29:d9:
13:2e:72:da:15:9d:2c:ac:0a:6e:7a:1e:ae:45:1b:29:06:1b:
18:23:7f:91:75:fa:a1:04:7b:1a:52:6e:3d:f2:4d:8c:b1:85:
ca:9d:fe:b5:ed:fc:ee:d0:3c:4a:d8:6a:31:2c:26:d7:01:fc:
2a:4f:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:36:47 2026 by rpki-client