$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa File: AS11967.roa (raw, json) Hash identifier: EDuCkcyc8p54TFOqcuFMDIn9YcM9BWY+BRZTVKGxl10= Subject key identifier: 0A:DF:26:96:98:AF:62:5A:5D:A0:B8:B5:24:FD:25:C6:16:B7:35:1B Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 73E27B542E0D1CC790B72BBB410FE8BDE7A2A3DE Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa Signing time: Fri 04 Sep 2026 10:16:36 +0000 ROA not before: Fri 04 Sep 2026 10:11:36 +0000 ROA not after: Fri 03 Sep 2027 10:16:36 +0000 asID: 11967 IP address blocks: 2a0b:4e07:3::/48 maxlen: 48 2a0b:4e07:10::/44 maxlen: 44 2a0b:4e07:24::/48 maxlen: 48 2a0b:4e07:25::/48 maxlen: 48 2a0b:4e07:2c::/48 maxlen: 48 2a0b:4e07:2e::/48 maxlen: 48 2a0b:4e07:3c::/48 maxlen: 48 2a0b:4e07:3e::/48 maxlen: 48 2a0b:4e07:3f::/48 maxlen: 48 2a0b:4e07:47::/48 maxlen: 48 2a0b:4e07:80::/48 maxlen: 48 2a0b:4e07:b4::/48 maxlen: 48 2a0b:4e07:c1::/48 maxlen: 48 2a0b:4e07:270::/44 maxlen: 48 2a0b:4e07:bec::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Sep 2026 19:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e2:7b:54:2e:0d:1c:c7:90:b7:2b:bb:41:0f:e8:bd:e7:a2:a3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Sep 4 10:11:36 2026 GMT Not After : Sep 3 10:16:36 2027 GMT Subject: CN=0ADF269698AF625A5DA0B8B524FD25C616B7351B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:30:28:50:2e:f2:8f:cf:b4:7e:1c:59:25: 98:93:39:83:28:88:f8:48:35:76:ba:dd:87:98:cd: 62:ea:1a:47:07:95:ac:ca:4e:85:af:e5:1b:2a:76: fc:0f:1c:27:64:2e:50:40:f8:e4:96:44:fc:69:a4: b0:82:c3:01:61:10:a4:aa:28:7a:bc:36:a2:fd:72: 04:53:9c:ea:90:58:9b:f4:f2:91:0f:c6:a3:46:1b: a7:64:25:d3:b2:20:71:c2:b1:fa:8e:de:fb:39:8c: fd:fb:6d:cd:03:05:35:45:8e:95:8d:5f:cf:38:c4: 0f:12:19:55:72:75:7f:cd:d3:c0:39:e9:5e:9a:83: aa:44:0d:5d:70:09:fd:72:f7:da:05:8b:54:2d:9c: 0e:cf:17:6b:a3:3f:02:f2:f3:a5:23:25:6a:91:19: e3:07:d6:41:e0:c1:49:a4:0a:0c:52:f1:3e:ec:0b: 84:50:3c:aa:c6:52:d5:44:b0:de:96:cf:8a:67:fc: 66:8c:81:72:ba:dd:65:3d:87:8d:6d:2b:8e:af:ce: f3:78:e3:5f:18:a3:95:4e:10:85:fb:42:28:99:8c: 83:4f:75:d5:ac:63:1b:23:eb:21:b8:03:1a:32:ba: 7a:de:fd:6b:98:5c:60:ef:65:9f:fa:f3:c9:2c:c7: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DF:26:96:98:AF:62:5A:5D:A0:B8:B5:24:FD:25:C6:16:B7:35:1B X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS11967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3::/48 2a0b:4e07:10::/44 2a0b:4e07:24::/47 2a0b:4e07:2c::/48 2a0b:4e07:2e::/48 2a0b:4e07:3c::/48 2a0b:4e07:3e::/47 2a0b:4e07:47::/48 2a0b:4e07:80::/48 2a0b:4e07:b4::/48 2a0b:4e07:c1::/48 2a0b:4e07:270::/44 2a0b:4e07:bec::/47 Signature Algorithm: sha256WithRSAEncryption 17:50:80:b9:f2:24:dd:e3:a2:f3:b3:63:07:1a:eb:c9:61:e8: 61:b7:8a:47:16:83:95:c5:b6:4a:16:4e:ae:e8:b8:d8:08:d8: a7:66:a5:0a:42:46:ff:80:b3:ff:03:d6:b0:83:ab:ae:b0:6d: 80:7b:9e:71:5f:2a:d9:ad:f8:87:c1:ec:33:da:f3:be:37:9e: e7:03:95:a9:23:37:b5:e8:9b:1f:69:b2:0b:54:bb:7c:e2:70: 7f:0d:c0:06:04:08:78:74:71:b1:ba:a7:e1:3d:d7:60:91:6c: 33:1e:78:e9:61:43:3c:aa:80:64:5d:3c:8a:88:c1:08:33:a6: 33:52:8b:1b:7d:95:3d:c1:7f:58:3e:17:ec:3c:15:ad:74:92: 4b:c5:54:16:2e:de:a0:82:ad:ad:04:c2:99:a0:47:1e:01:3c: b7:b7:32:ee:4f:37:45:9e:d9:10:35:9e:80:87:12:cf:9c:0b: 12:a2:d7:67:71:64:e5:4c:63:fb:1a:f0:f0:c5:ef:f8:35:71: ea:ed:73:37:b9:b5:19:3b:cf:15:9d:00:a4:a1:35:01:18:38: 16:28:88:69:10:ad:4c:4a:4a:9f:e2:f9:d8:ef:de:73:36:37: 32:f3:ba:3d:82:9b:a1:75:af:d4:8d:e7:42:c3:d4:02:22:41: 09:bc:81:b3 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUc+J7VC4NHMeQtyu7QQ/oveeio94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA5MDQxMDExMzZaFw0yNzA5MDMxMDE2MzZaMDMxMTAvBgNV BAMTKDBBREYyNjk2OThBRjYyNUE1REEwQjhCNTI0RkQyNUM2MTZCNzM1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjzAoUC7yj8+0fhxZJZiTOYMo iPhINXa63YeYzWLqGkcHlazKToWv5RsqdvwPHCdkLlBA+OSWRPxppLCCwwFhEKSq KHq8NqL9cgRTnOqQWJv08pEPxqNGG6dkJdOyIHHCsfqO3vs5jP37bc0DBTVFjpWN X884xA8SGVVydX/N08A56V6ag6pEDV1wCf1y99oFi1QtnA7PF2ujPwLy86UjJWqR GeMH1kHgwUmkCgxS8T7sC4RQPKrGUtVEsN6Wz4pn/GaMgXK63WU9h41tK46vzvN4 418Yo5VOEIX7QiiZjINPddWsYxsj6yG4Axoyunre/WuYXGDvZZ/688ksx/UTAgMB AAGjggKZMIIClTAdBgNVHQ4EFgQUCt8mlpivYlpdoLi1JP0lxha3NRswHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMxMTk2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB jgYIKwYBBQUHAQcBAf8EfzB9MHsEAgACMHUDBwAqC04HAAMDBwQqC04HABADBwEq C04HACQDBwAqC04HACwDBwAqC04HAC4DBwAqC04HADwDBwEqC04HAD4DBwAqC04H AEcDBwAqC04HAIADBwAqC04HALQDBwAqC04HAMEDBwQqC04HAnADBwEqC04HC+ww DQYJKoZIhvcNAQELBQADggEBABdQgLnyJN3jovOzYwca68lh6GG3ikcWg5XFtkoW Tq7ouNgI2KdmpQpCRv+As/8D1rCDq66wbYB7nnFfKtmt+IfB7DPa8743nucDlakj N7Xomx9psgtUu3zicH8NwAYECHh0cbG6p+E912CRbDMeeOlhQzyqgGRdPIqIwQgz pjNSixt9lT3Bf1g+F+w8Fa10kkvFVBYu3qCCra0EwpmgRx4BPLe3Mu5PN0We2RA1 noCHEs+cCxKi12dxZOVMY/sa8PDF7/g1certcze5tRk7zxWdAKShNQEYOBYoiGkQ rUxKSp/i+djv3nM2NzLzuj2Cm6F1r9SN50LD1AIiQQm8gbM= -----END CERTIFICATE-----Generated at Mon Sep 14 03:39:57 2026 by rpki-client