$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219310.roa File: AS219310.roa (raw, json) Hash identifier: 0Iyq5U6maUi2XqLR6JNuPUUuw85Q5bsrXmBZM7xZrI8= Subject key identifier: FA:25:F0:04:FD:6C:9C:B8:B7:B9:21:0B:26:DF:65:30:F7:0B:C7:9C Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 25A7EEBA6F42F46020AB92E2317EFE371EB33E88 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219310.roa Signing time: Tue 29 Sep 2026 11:05:58 +0000 ROA not before: Tue 29 Sep 2026 11:00:58 +0000 ROA not after: Tue 28 Sep 2027 11:05:58 +0000 asID: 219310 IP address blocks: 2a0b:4e07:280::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 07:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a7:ee:ba:6f:42:f4:60:20:ab:92:e2:31:7e:fe:37:1e:b3:3e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Sep 29 11:00:58 2026 GMT Not After : Sep 28 11:05:58 2027 GMT Subject: CN=FA25F004FD6C9CB8B7B9210B26DF6530F70BC79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:43:a1:69:05:5f:95:41:5a:68:11:4d:e6: 8d:cc:1b:65:a8:34:a5:55:9b:a7:bf:1e:5e:ac:57: eb:c5:e0:00:02:fe:26:ab:ed:b1:1a:4c:c6:0f:e6: 0e:87:45:9b:d6:81:94:47:c8:eb:7b:b8:7d:07:3c: 9c:f8:9c:2c:dd:6b:d1:25:ee:d1:79:81:c0:20:2d: b0:2d:a1:5f:50:3c:f7:89:be:87:c8:7f:dc:ce:b6: 03:ec:e0:d5:30:fd:59:ca:6d:6e:18:42:b4:67:f6: 8c:96:77:b1:89:9e:ee:e7:cb:a3:32:a1:98:c1:b1: 69:b1:91:da:11:57:1e:ee:34:a2:e1:55:fe:fb:cc: e3:12:a2:12:01:b7:cf:71:e1:79:70:53:f7:36:87: 44:59:19:6d:b7:2c:ea:e0:81:f4:a0:a6:84:21:a2: 14:f5:4c:6d:f0:00:c5:a3:24:48:71:46:46:6b:13: 56:72:5a:bd:46:99:8f:41:1c:70:62:ab:5b:9e:9e: ef:93:5a:5f:93:11:3a:2c:1c:37:06:89:52:b8:5f: 98:d5:27:0b:ad:48:8a:4b:ed:fd:c4:a2:be:b0:6b: 8d:dd:85:c3:0e:63:53:f6:67:b0:98:61:ca:82:9f: 9c:dc:a1:d7:1a:03:e8:82:2c:f5:59:8a:ae:d0:9d: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:F0:04:FD:6C:9C:B8:B7:B9:21:0B:26:DF:65:30:F7:0B:C7:9C X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219310.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:280::/44 Signature Algorithm: sha256WithRSAEncryption 42:53:97:5f:4d:69:80:bc:5f:34:7a:58:4d:5f:4d:d0:a6:71: 1a:83:dc:54:cb:4f:fc:0b:31:46:cc:40:af:f9:28:d7:9a:9e: c0:bd:81:d4:51:32:7d:9e:a1:9e:cd:7e:b4:75:9a:d9:52:72: b5:b3:84:29:ec:d2:35:b4:c1:40:1d:c7:64:99:c7:3d:e1:4c: 05:71:cf:f4:a3:97:b8:1a:e5:2e:db:e2:bc:01:cc:b1:ba:75: b4:18:d2:1d:c8:bc:66:e9:31:aa:65:02:16:7b:76:68:85:b7: dc:a6:e1:c6:ae:21:84:f9:a1:08:1b:bb:40:4c:08:20:79:12: ad:44:25:4b:d6:0f:97:31:59:54:be:2f:23:2f:c2:70:85:f6: db:33:02:d9:93:72:bc:9c:19:9b:d3:75:2d:5b:7a:de:2d:56: 5b:48:1a:18:7c:21:61:d1:ec:ba:ef:4e:8e:58:0c:37:28:e2: ac:e0:d2:b4:68:d1:28:4e:d3:d1:5f:8d:95:f1:58:01:b4:bb: 60:b3:df:ab:74:54:a7:53:e1:76:f9:d8:80:32:62:49:6c:bc: 12:d4:87:d0:7e:6e:19:ac:01:12:63:91:93:81:c2:eb:1d:74: 11:d2:9c:11:ca:e2:24:47:4d:e3:d4:7c:2d:f3:9d:a1:8d:0b: b6:c8:b7:b7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUJafuum9C9GAgq5LiMX7+Nx6zPogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA5MjkxMTAwNThaFw0yNzA5MjgxMTA1NThaMDMxMTAvBgNV BAMTKEZBMjVGMDA0RkQ2QzlDQjhCN0I5MjEwQjI2REY2NTMwRjcwQkM3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDW0OhaQVflUFaaBFN5o3MG2Wo NKVVm6e/Hl6sV+vF4AAC/iar7bEaTMYP5g6HRZvWgZRHyOt7uH0HPJz4nCzda9El 7tF5gcAgLbAtoV9QPPeJvofIf9zOtgPs4NUw/VnKbW4YQrRn9oyWd7GJnu7ny6My oZjBsWmxkdoRVx7uNKLhVf77zOMSohIBt89x4XlwU/c2h0RZGW23LOrggfSgpoQh ohT1TG3wAMWjJEhxRkZrE1ZyWr1GmY9BHHBiq1uenu+TWl+TETosHDcGiVK4X5jV JwutSIpL7f3Eor6wa43dhcMOY1P2Z7CYYcqCn5zcodcaA+iCLPVZiq7QnY1BAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU+iXwBP1snLi3uSELJt9lMPcLx5wwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTkzMTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04HAoAwDQYJKoZIhvcNAQEL BQADggEBAEJTl19NaYC8XzR6WE1fTdCmcRqD3FTLT/wLMUbMQK/5KNeansC9gdRR Mn2eoZ7NfrR1mtlScrWzhCns0jW0wUAdx2SZxz3hTAVxz/Sjl7ga5S7b4rwBzLG6 dbQY0h3IvGbpMaplAhZ7dmiFt9ym4cauIYT5oQgbu0BMCCB5Eq1EJUvWD5cxWVS+ LyMvwnCF9tszAtmTcrycGZvTdS1bet4tVltIGhh8IWHR7LrvTo5YDDco4qzg0rRo 0ShO09FfjZXxWAG0u2Cz36t0VKdT4Xb52IAyYklsvBLUh9B+bhmsARJjkZOBwusd dBHSnBHK4iRHTePUfC3znaGNC7bIt7c= -----END CERTIFICATE-----Generated at Tue Oct 20 12:01:42 2026 by rpki-client