$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313030303a3a2f33382d3430203d3e2036353137.roa File: 326130623a346530373a313030303a3a2f33382d3430203d3e2036353137.roa (raw, json) Hash identifier: +EG61HOtmpMW3KMlfD41+BlfBBzK4FPpOFBo86f7kUk= Subject key identifier: 7A:09:E0:31:D6:5E:7A:AE:56:F4:AF:32:CC:C7:49:68:29:19:44:45 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 7BB0B752A3AE21A3C9ECAE0BFCDACF50D648CDF6 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313030303a3a2f33382d3430203d3e2036353137.roa Signing time: Mon 30 Mar 2026 20:14:09 +0000 ROA not before: Mon 30 Mar 2026 20:09:09 +0000 ROA not after: Mon 29 Mar 2027 20:14:09 +0000 asID: 6517 IP address blocks: 2a0b:4e07:1000::/38 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Apr 2026 20:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b0:b7:52:a3:ae:21:a3:c9:ec:ae:0b:fc:da:cf:50:d6:48:cd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Mar 30 20:09:09 2026 GMT Not After : Mar 29 20:14:09 2027 GMT Subject: CN=7A09E031D65E7AAE56F4AF32CCC7496829194445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:38:5a:9d:34:b6:8a:95:f9:88:99:2f:68: 8e:cd:86:96:82:02:dd:70:3a:d5:5c:7c:b4:18:94: 8b:bb:51:57:e6:b9:64:6f:3f:7d:cc:1b:b7:d9:bb: 15:c1:7b:c6:4f:4e:9d:9a:56:f0:ad:4f:8e:11:9a: 4c:a6:e0:06:8d:2b:ce:98:f9:23:01:94:5d:8d:86: e3:9e:9f:01:a6:f7:31:28:82:56:fb:53:3e:97:5a: d2:3d:20:e7:5f:46:d1:45:dd:35:01:dd:f7:4f:d8: c4:64:c2:e6:c9:47:43:84:6e:c0:50:1b:53:81:81: 21:f0:22:50:55:7f:a4:49:b2:6c:a1:2d:e6:69:da: 0c:72:fd:ae:49:9f:15:86:35:7b:f2:64:fa:0a:b0: 31:4a:1e:f2:fa:aa:b5:4a:56:83:d3:30:d4:ca:41: 67:ab:f5:a8:94:bf:89:6a:46:4a:6f:6b:e3:de:09: b4:1e:97:72:0b:99:ff:cf:f4:73:39:af:20:5e:b2: 30:1f:cc:18:cb:99:c9:99:8c:5e:98:cd:17:cc:55: d8:94:c3:b8:ef:cb:ff:71:b8:43:82:74:7b:f2:32: f7:8e:f7:9d:e6:b4:cd:88:73:88:d4:c6:d2:70:45: 3e:33:89:0f:3a:c9:6b:c8:d9:68:cc:e8:70:cc:b6: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:09:E0:31:D6:5E:7A:AE:56:F4:AF:32:CC:C7:49:68:29:19:44:45 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313030303a3a2f33382d3430203d3e2036353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1000::/38 Signature Algorithm: sha256WithRSAEncryption 91:d1:04:b3:ab:98:28:10:43:32:69:41:ab:fc:ce:9e:f6:a4: 9e:33:fe:38:04:64:bb:54:b4:c6:8c:aa:6c:28:4c:c5:56:72: 0c:6e:ae:f9:0c:80:e2:c7:9d:6f:af:1c:32:70:5f:3a:6e:86: 0d:6b:0f:f9:ee:c0:46:26:0a:1b:2b:6e:2a:54:e8:f3:cf:6a: ba:38:95:0f:1a:cd:cb:6b:49:74:dd:5d:44:80:ab:34:be:24: ce:08:e8:aa:a8:2e:3b:a2:c5:7e:3f:1a:d5:e1:03:9e:2b:8e: 47:eb:8a:69:b7:50:d4:39:5c:a7:81:c1:58:cd:0f:2b:e1:c0: 6a:cc:7b:46:8e:68:fd:45:b6:28:8f:e5:2a:1b:82:81:d8:44: 40:7c:17:a8:61:d9:ba:af:16:2b:3d:55:ac:ae:a2:5e:1a:04: 9b:37:e3:ab:00:11:3c:8d:3f:5f:42:ae:4d:7e:c9:6d:b9:c2: 43:ea:35:5f:dc:e6:d8:c7:0f:9d:12:38:82:0d:41:31:81:fe: 50:a4:4e:eb:22:83:94:de:9d:81:69:45:86:cf:99:e4:40:02: 9e:c5:ba:b1:27:c2:34:d2:27:c0:c3:36:a6:60:1f:d3:6d:6c: 77:6a:e4:ae:82:53:b4:28:70:e0:9c:e0:69:1a:bf:c9:3d:d3: a8:59:19:eb -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUe7C3UqOuIaPJ7K4L/NrPUNZIzfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAzMzAyMDA5MDlaFw0yNzAzMjkyMDE0MDlaMDMxMTAvBgNV BAMTKDdBMDlFMDMxRDY1RTdBQUU1NkY0QUYzMkNDQzc0OTY4MjkxOTQ0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9zhanTS2ipX5iJkvaI7NhpaC At1wOtVcfLQYlIu7UVfmuWRvP33MG7fZuxXBe8ZPTp2aVvCtT44Rmkym4AaNK86Y +SMBlF2NhuOenwGm9zEoglb7Uz6XWtI9IOdfRtFF3TUB3fdP2MRkwubJR0OEbsBQ G1OBgSHwIlBVf6RJsmyhLeZp2gxy/a5JnxWGNXvyZPoKsDFKHvL6qrVKVoPTMNTK QWer9aiUv4lqRkpva+PeCbQel3ILmf/P9HM5ryBesjAfzBjLmcmZjF6YzRfMVdiU w7jvy/9xuEOCdHvyMveO953mtM2Ic4jUxtJwRT4ziQ86yWvI2WjM6HDMtiGPAgMB AAGjggJlMIICYTAdBgNVHQ4EFgQUegngMdZeeq5W9K8yzMdJaCkZREUwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMxMzAzMDMwM2EzYTJm MzMzODJkMzQzMDIwM2QzZTIwMzYzNTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIqC04HEDANBgkq hkiG9w0BAQsFAAOCAQEAkdEEs6uYKBBDMmlBq/zOnvaknjP+OARku1S0xoyqbChM xVZyDG6u+QyA4sedb68cMnBfOm6GDWsP+e7ARiYKGytuKlTo889qujiVDxrNy2tJ dN1dRICrNL4kzgjoqqguO6LFfj8a1eEDniuOR+uKabdQ1Dlcp4HBWM0PK+HAasx7 Ro5o/UW2KI/lKhuCgdhEQHwXqGHZuq8WKz1VrK6iXhoEmzfjqwARPI0/X0KuTX7J bbnCQ+o1X9zm2McPnRI4gg1BMYH+UKRO6yKDlN6dgWlFhs+Z5EACnsW6sSfCNNIn wMM2pmAf021sd2rkroJTtChw4JzgaRq/yT3TqFkZ6w== -----END CERTIFICATE-----Generated at Sun Apr 12 10:26:11 2026 by rpki-client