$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211358.roa File: AS211358.roa (raw, json) Hash identifier: ZgrA+H9mM5VhcKXz4tjeTCqcroVuRfo8QcjWI+kZGQQ= Subject key identifier: 94:8B:FB:F6:4B:DF:38:D9:EB:E2:40:92:AC:36:2F:96:F2:0D:D4:2A Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4A5B8963E2F83D2A689FB350017996C06D0A34D5 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211358.roa Signing time: Wed 03 Jun 2026 21:10:16 +0000 ROA not before: Wed 03 Jun 2026 21:05:16 +0000 ROA not after: Wed 02 Jun 2027 21:10:16 +0000 asID: 211358 IP address blocks: 2a0b:4e07:e8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 17:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5b:89:63:e2:f8:3d:2a:68:9f:b3:50:01:79:96:c0:6d:0a:34:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 3 21:05:16 2026 GMT Not After : Jun 2 21:10:16 2027 GMT Subject: CN=948BFBF64BDF38D9EBE24092AC362F96F20DD42A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:8d:24:2f:b8:2a:4d:14:c9:d0:fc:f2:0a: b1:9d:19:0c:62:b1:3d:a8:da:4c:d8:bc:56:56:0e: 5b:77:61:78:af:d5:2a:83:12:2c:0b:9f:75:e4:e9: 2a:93:d9:01:07:a7:b4:90:4b:e3:c3:e6:8e:ae:65: b8:6f:4a:bc:d7:f2:e2:58:64:77:cc:d3:e8:93:a9: b0:07:57:df:f9:1b:d4:69:0c:06:00:23:76:b6:05: 34:1a:66:27:2c:85:8e:5e:9b:ff:c4:7c:d1:6b:2d: 71:20:a5:26:ac:66:86:b6:78:4f:ba:10:d7:fd:44: c1:27:a7:ef:31:6a:0a:c3:b3:dd:1b:0a:44:ef:ae: 16:d1:a6:cb:1f:92:b4:d3:65:1f:34:61:1d:67:2d: 8d:6c:56:93:1c:15:87:9f:12:aa:28:c6:28:b2:4c: ad:18:09:88:15:08:b4:91:a1:8e:8e:9f:7f:ba:ca: c0:6e:38:85:1c:8e:45:f5:ee:4f:65:e8:cf:33:d8: 38:55:2c:92:9a:dd:ae:28:7a:78:83:f1:97:a1:b3: 2f:4a:74:1e:a9:b2:09:9a:f7:1c:0c:af:19:d5:29: 7a:ab:8f:d5:1e:f0:f0:10:eb:e2:6b:f9:3e:fb:ad: 31:47:e1:b4:90:a2:06:75:2e:0f:a7:6b:ec:b1:1b: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8B:FB:F6:4B:DF:38:D9:EB:E2:40:92:AC:36:2F:96:F2:0D:D4:2A X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS211358.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:e8::/46 Signature Algorithm: sha256WithRSAEncryption 51:41:bf:16:d9:8d:f1:b3:1f:06:18:d3:98:42:8d:0c:a3:f2: 2d:ce:a4:0b:ce:7c:d5:63:63:b5:c3:dc:cb:f1:99:10:8e:a2: d0:d0:93:16:a1:83:9a:27:21:64:93:a7:4b:ef:13:08:b1:a4: b2:aa:40:f1:4a:d8:5f:79:48:d0:dd:85:87:a9:03:af:ea:df: 10:23:8d:d1:cc:e8:ef:b4:06:a7:62:1f:5d:84:6b:12:f3:7c: f2:b3:71:d3:a1:fb:df:a1:d7:de:52:1b:94:6c:c0:0e:7b:c8: c4:40:3f:41:33:60:04:0d:3a:8f:f3:10:ce:d4:9c:fa:3f:2a: b3:fe:77:8d:f7:8f:37:00:24:22:98:95:0f:2c:8e:c2:a6:ab: 38:6d:59:a8:97:77:83:67:91:31:26:f3:5d:a0:df:65:94:e1: 66:b5:21:c3:dd:1c:ea:f2:4a:84:f8:43:56:d1:c7:e3:19:b0: 99:c9:bd:1c:95:4c:e0:f1:0a:4d:29:c2:b8:72:80:8c:94:a4: 03:82:1a:03:7e:16:99:2b:aa:aa:76:57:23:ea:8d:ec:a2:2c: a7:87:31:e9:28:79:e3:46:99:b4:b6:a5:b9:14:6c:6b:10:20: 9f:8a:18:b7:95:91:4c:81:b8:db:9a:64:8f:d7:4e:8d:43:71: 1a:47:31:3e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUSluJY+L4PSpon7NQAXmWwG0KNNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA2MDMyMTA1MTZaFw0yNzA2MDIyMTEwMTZaMDMxMTAvBgNV BAMTKDk0OEJGQkY2NEJERjM4RDlFQkUyNDA5MkFDMzYyRjk2RjIwREQ0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfo0kL7gqTRTJ0PzyCrGdGQxi sT2o2kzYvFZWDlt3YXiv1SqDEiwLn3Xk6SqT2QEHp7SQS+PD5o6uZbhvSrzX8uJY ZHfM0+iTqbAHV9/5G9RpDAYAI3a2BTQaZicshY5em//EfNFrLXEgpSasZoa2eE+6 ENf9RMEnp+8xagrDs90bCkTvrhbRpssfkrTTZR80YR1nLY1sVpMcFYefEqooxiiy TK0YCYgVCLSRoY6On3+6ysBuOIUcjkX17k9l6M8z2DhVLJKa3a4oeniD8Zehsy9K dB6psgma9xwMrxnVKXqrj9Ue8PAQ6+Jr+T77rTFH4bSQogZ1Lg+na+yxG6AjAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUlIv79kvfONnr4kCSrDYvlvIN1CowHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTEzNTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAOgwDQYJKoZIhvcNAQEL BQADggEBAFFBvxbZjfGzHwYY05hCjQyj8i3OpAvOfNVjY7XD3MvxmRCOotDQkxah g5onIWSTp0vvEwixpLKqQPFK2F95SNDdhYepA6/q3xAjjdHM6O+0BqdiH12EaxLz fPKzcdOh+9+h195SG5RswA57yMRAP0EzYAQNOo/zEM7UnPo/KrP+d433jzcAJCKY lQ8sjsKmqzhtWaiXd4NnkTEm812g32WU4Wa1IcPdHOrySoT4Q1bRx+MZsJnJvRyV TODxCk0pwrhygIyUpAOCGgN+Fpkrqqp2VyPqjeyiLKeHMekoeeNGmbS2pbkUbGsQ IJ+KGLeVkUyBuNuaZI/XTo1DcRpHMT4= -----END CERTIFICATE-----Generated at Sat Jun 6 02:27:27 2026 by rpki-client