$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa File: AS11967.roa (raw, json) Hash identifier: 8PvaKWyRifeWZHE5ms4x7c8nCXErZxyasZJOo4lZ5h4= Subject key identifier: 1B:EB:38:1C:B5:F2:32:1E:82:48:AC:38:94:F0:77:A1:C0:B0:60:E4 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 194A1CC3A36E07BE9066B0782E66D1BE78FA6587 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa Signing time: Wed 17 Jun 2026 12:51:24 +0000 ROA not before: Wed 17 Jun 2026 12:46:24 +0000 ROA not after: Wed 16 Jun 2027 12:51:24 +0000 asID: 11967 IP address blocks: 2a0b:4e07:3::/48 maxlen: 48 2a0b:4e07:10::/44 maxlen: 44 2a0b:4e07:24::/48 maxlen: 48 2a0b:4e07:25::/48 maxlen: 48 2a0b:4e07:2c::/48 maxlen: 48 2a0b:4e07:2e::/48 maxlen: 48 2a0b:4e07:3c::/48 maxlen: 48 2a0b:4e07:3e::/48 maxlen: 48 2a0b:4e07:3f::/48 maxlen: 48 2a0b:4e07:47::/48 maxlen: 48 2a0b:4e07:80::/48 maxlen: 48 2a0b:4e07:b4::/48 maxlen: 48 2a0b:4e07:c1::/48 maxlen: 48 2a0b:4e07:bec::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4a:1c:c3:a3:6e:07:be:90:66:b0:78:2e:66:d1:be:78:fa:65:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 17 12:46:24 2026 GMT Not After : Jun 16 12:51:24 2027 GMT Subject: CN=1BEB381CB5F2321E8248AC3894F077A1C0B060E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:3b:63:1d:17:d1:8e:ad:5e:34:c1:f6:2e: 3a:b5:1c:55:8c:9c:bf:20:26:36:6e:9f:95:48:19: fe:f2:e7:b8:8c:f7:33:60:ae:8d:6e:ce:73:5d:a4: 85:ff:49:5f:f0:0a:c9:30:bc:8e:04:53:63:c5:52: 26:b3:51:87:94:23:5e:f2:a7:56:87:c5:ba:06:e3: 4b:f9:d5:25:c8:a5:32:69:dc:82:b1:a6:5a:26:29: 7c:7e:8d:dc:7d:ba:96:25:10:9c:35:ae:4c:0f:dc: c3:6d:f5:37:50:7f:01:b1:ff:b5:0d:52:d4:69:be: 94:a5:5d:2f:50:af:32:58:a2:6a:fb:8c:d2:88:3a: cf:ec:33:05:8b:b5:d6:2e:6a:85:b0:1f:04:2e:3c: ee:f5:1a:3e:fd:e4:54:9b:49:e2:30:a3:cf:c7:63: 0a:63:53:0f:92:03:f6:b0:a7:eb:d2:02:f4:53:58: 51:07:6e:07:25:00:ec:8f:4b:f9:fd:54:4b:6d:6d: 07:9a:d4:fb:0a:24:db:d2:37:1d:51:2e:ec:6a:41: 48:db:66:71:fc:6d:4b:1d:4f:15:c4:5d:d1:6a:f2: a5:ba:64:15:7a:f6:18:3a:4a:ea:01:d5:5b:13:ba: 18:0d:07:6f:74:08:a4:aa:b0:57:3e:e3:e3:eb:10: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EB:38:1C:B5:F2:32:1E:82:48:AC:38:94:F0:77:A1:C0:B0:60:E4 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3::/48 2a0b:4e07:10::/44 2a0b:4e07:24::/47 2a0b:4e07:2c::/48 2a0b:4e07:2e::/48 2a0b:4e07:3c::/48 2a0b:4e07:3e::/47 2a0b:4e07:47::/48 2a0b:4e07:80::/48 2a0b:4e07:b4::/48 2a0b:4e07:c1::/48 2a0b:4e07:bec::/47 Signature Algorithm: sha256WithRSAEncryption 1d:a2:53:9f:32:3d:56:93:ef:58:e4:3d:50:d8:75:3d:31:8e: 9a:56:dd:1e:f2:bc:92:ab:c2:03:ee:86:f6:8a:f3:70:07:ac: a4:7e:dc:de:60:f0:f8:29:64:49:f0:db:51:64:2e:de:e9:bf: ce:87:53:48:d5:ab:49:bc:e9:bc:60:ca:2d:52:f7:aa:1a:57: de:71:9f:bd:ea:32:3c:1d:24:9a:fd:e0:4d:2d:9a:3a:0c:ee: a0:1c:e3:12:33:69:da:c2:d2:0c:4d:14:ab:e1:f9:9d:df:b6: 13:0c:cb:8a:9f:8a:f0:41:bb:e0:ca:1e:fa:59:ee:bb:61:ac: cf:64:ba:13:6f:b4:2b:a9:b0:e4:a5:75:0d:55:8e:bf:2c:a0: 0d:34:f1:34:e7:62:20:97:88:e0:e9:66:ba:17:fc:dd:ba:66: 50:0d:6f:a9:8b:16:25:a0:ba:59:e4:bf:4f:cb:eb:66:53:b3: 20:3b:89:32:86:fd:17:0f:96:d7:dc:f8:51:1b:e6:74:1a:f8: b7:8b:51:20:53:24:aa:df:42:2c:c2:7d:f6:f1:dd:10:32:e3: 84:8b:e8:cb:00:a1:d0:90:4e:26:57:07:b0:fd:0a:03:a3:36: 07:50:f4:9e:45:96:47:c7:c3:25:96:bb:e5:cf:fd:fd:d5:c6: 27:46:a5:d2 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIUGUocw6NuB76QZrB4LmbRvnj6ZYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA2MTcxMjQ2MjRaFw0yNzA2MTYxMjUxMjRaMDMxMTAvBgNV BAMTKDFCRUIzODFDQjVGMjMyMUU4MjQ4QUMzODk0RjA3N0ExQzBCMDYwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49jtjHRfRjq1eNMH2Ljq1HFWM nL8gJjZun5VIGf7y57iM9zNgro1uznNdpIX/SV/wCskwvI4EU2PFUiazUYeUI17y p1aHxboG40v51SXIpTJp3IKxplomKXx+jdx9upYlEJw1rkwP3MNt9TdQfwGx/7UN UtRpvpSlXS9QrzJYomr7jNKIOs/sMwWLtdYuaoWwHwQuPO71Gj795FSbSeIwo8/H YwpjUw+SA/awp+vSAvRTWFEHbgclAOyPS/n9VEttbQea1PsKJNvSNx1RLuxqQUjb ZnH8bUsdTxXEXdFq8qW6ZBV69hg6SuoB1VsTuhgNB290CKSqsFc+4+PrEEqxAgMB AAGjggKQMIICjDAdBgNVHQ4EFgQUG+s4HLXyMh6CSKw4lPB3ocCwYOQwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMxMTk2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB hQYIKwYBBQUHAQcBAf8EdjB0MHIEAgACMGwDBwAqC04HAAMDBwQqC04HABADBwEq C04HACQDBwAqC04HACwDBwAqC04HAC4DBwAqC04HADwDBwEqC04HAD4DBwAqC04H AEcDBwAqC04HAIADBwAqC04HALQDBwAqC04HAMEDBwEqC04HC+wwDQYJKoZIhvcN AQELBQADggEBAB2iU58yPVaT71jkPVDYdT0xjppW3R7yvJKrwgPuhvaK83AHrKR+ 3N5g8PgpZEnw21FkLt7pv86HU0jVq0m86bxgyi1S96oaV95xn73qMjwdJJr94E0t mjoM7qAc4xIzadrC0gxNFKvh+Z3fthMMy4qfivBBu+DKHvpZ7rthrM9kuhNvtCup sOSldQ1Vjr8soA008TTnYiCXiODpZroX/N26ZlANb6mLFiWgulnkv0/L62ZTsyA7 iTKG/RcPltfc+FEb5nQa+LeLUSBTJKrfQizCffbx3RAy44SL6MsAodCQTiZXB7D9 CgOjNgdQ9J5FlkfHwyWWu+XP/f3VxidGpdI= -----END CERTIFICATE-----Generated at Tue Jul 21 22:14:45 2026 by rpki-client