
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63633a3a2f34362d3438203d3e20323134373639.roa
File: 326130623a346530373a63633a3a2f34362d3438203d3e20323134373639.roa (raw, json)
Hash identifier: NL41n8Wryn30Ef/HskzjjawRFIuP1DHCoh/BVgRFatY=
Subject key identifier: B6:B8:FE:4B:59:59:DB:4E:3C:B8:06:75:C1:1D:E3:A2:A5:6F:FF:4A
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 2AE1E22A56D2CAF4ADA2396F23F95CF23886D437
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63633a3a2f34362d3438203d3e20323134373639.roa
Signing time: Tue 03 Mar 2026 14:14:27 +0000
ROA not before: Tue 03 Mar 2026 14:09:27 +0000
ROA not after: Tue 02 Mar 2027 14:14:27 +0000
asID: 214769
IP address blocks: 2a0b:4e07:cc::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 16:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e1:e2:2a:56:d2:ca:f4:ad:a2:39:6f:23:f9:5c:f2:38:86:d4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Mar 3 14:09:27 2026 GMT
Not After : Mar 2 14:14:27 2027 GMT
Subject: CN=B6B8FE4B5959DB4E3CB80675C11DE3A2A56FFF4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:e9:81:6b:cb:c3:cb:f1:bc:da:96:47:05:
78:7f:06:cd:47:38:28:3d:f1:8c:e3:cb:1b:72:1c:
af:2d:1d:dd:ad:38:3a:4a:36:d6:e7:8b:ca:4f:e2:
2f:d1:d9:da:97:9a:18:90:45:f5:61:97:58:d8:76:
85:1c:fd:5d:07:45:e3:bd:fe:96:ac:a5:13:71:3e:
43:31:d9:4f:84:4c:11:18:90:b9:41:a1:b8:b9:cf:
85:fe:0d:32:89:3c:85:a1:fe:57:59:f3:e7:dd:d4:
e3:c6:1b:0c:02:77:d9:f3:1e:ed:e7:35:95:e2:0f:
91:86:e1:3d:bc:00:30:aa:b5:bb:9f:ff:cd:43:66:
67:8a:47:2f:2f:3b:ef:24:6f:c7:97:00:0b:9c:ce:
34:67:3a:f9:45:5d:b9:ff:91:84:56:03:0b:f5:75:
39:7a:be:c3:bc:05:c2:39:26:78:21:96:9f:5e:aa:
72:34:53:64:91:77:22:d4:64:fb:4c:19:92:e6:d6:
87:81:df:4b:f0:bf:43:37:07:fe:26:fc:1b:42:a0:
c8:79:bf:06:d8:b1:9b:14:d5:17:7a:86:8b:c4:21:
42:e4:c8:54:06:9a:be:4c:f8:90:06:49:33:fd:68:
75:bd:c9:00:7a:c8:93:a8:c6:a2:ae:df:26:cf:60:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:FE:4B:59:59:DB:4E:3C:B8:06:75:C1:1D:E3:A2:A5:6F:FF:4A
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63633a3a2f34362d3438203d3e20323134373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:cc::/46
Signature Algorithm: sha256WithRSAEncryption
8a:3c:4c:90:d5:3c:7e:a5:be:f4:1f:1f:ea:a8:5b:3b:dd:38:
1c:df:ad:ea:f4:f8:f2:71:be:40:7a:da:95:98:5e:06:12:1e:
03:3b:59:1c:b2:35:13:a7:d3:89:13:61:7a:60:78:9b:c7:50:
a6:50:bc:b7:5a:e1:6a:40:a7:44:dd:ee:03:b5:0a:65:22:19:
60:8a:2c:2b:c0:63:fb:1a:25:46:09:c3:33:d6:80:09:67:78:
a6:47:d8:43:c5:78:ea:71:eb:6b:00:ff:6f:cc:a2:c3:f7:ae:
f8:a7:64:93:ad:1a:86:9e:c6:8c:ac:66:22:b0:9c:97:1a:33:
11:f9:fd:8a:93:1c:7a:11:59:8c:e9:a8:61:01:46:c1:7c:a3:
2b:c9:4a:d0:96:ac:86:bb:2c:a2:fe:9f:f9:2a:5c:94:25:b4:
84:48:6d:2f:c4:fe:b1:cc:bd:d6:ac:77:5b:65:7b:56:60:e8:
dc:a8:97:5e:81:32:4a:a8:4e:64:34:da:80:5e:a7:17:0b:42:
22:fd:ff:ba:be:7b:b1:97:e6:fd:e2:3a:7a:87:3b:26:12:27:
d3:7e:61:65:5c:85:19:ff:81:a3:af:47:fc:3d:03:6c:8b:91:
9e:83:31:7e:81:31:4f:e7:da:91:67:b0:8d:bc:fb:1e:40:14:
be:4a:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 07:59:43 2026 by rpki-client