$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213905.roa File: AS213905.roa (raw, json) Hash identifier: IwJbUtQRqrdEH4mIMish3Mg2MW0FawISYCTAVbo5zbg= Subject key identifier: E1:F3:D9:08:F2:B4:48:A1:DA:E3:98:21:37:38:12:7C:73:D4:87:44 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 79974270C3FE31139339F87B49FB8161F10F0909 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213905.roa Signing time: Tue 28 Apr 2026 13:22:46 +0000 ROA not before: Tue 28 Apr 2026 13:17:46 +0000 ROA not after: Tue 27 Apr 2027 13:22:46 +0000 asID: 213905 IP address blocks: 2a0b:4e07:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 05:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:97:42:70:c3:fe:31:13:93:39:f8:7b:49:fb:81:61:f1:0f:09:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:46 2026 GMT Not After : Apr 27 13:22:46 2027 GMT Subject: CN=E1F3D908F2B448A1DAE398213738127C73D48744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:9b:ec:e0:6a:13:7d:e1:fe:46:44:7e:53: a2:fd:8c:86:ba:fb:2c:36:8b:8b:23:eb:b4:67:2a: 33:ce:38:3f:91:7f:f2:1e:74:41:08:ff:6b:19:d2: 86:76:d1:fc:8a:04:12:62:a1:7e:f7:27:7d:47:1a: 37:b3:12:f0:0c:05:53:ba:aa:33:f5:68:40:e5:cc: 06:cf:4e:7a:07:b0:dd:aa:86:c8:50:4d:60:ad:f8: 5b:da:a6:b7:f2:3e:0f:8b:23:a4:57:a4:e9:30:3f: 50:f2:f8:a8:cd:cd:63:9f:7f:45:de:f0:c7:e1:b2: 5a:b6:9b:22:53:e9:fb:23:85:8d:27:1f:55:7d:5f: df:f6:c5:d4:ba:3b:a5:19:88:c8:aa:e9:d1:ea:18: 9c:b0:75:b5:27:43:9b:af:5b:88:45:9b:aa:00:ff: ca:23:c3:71:1e:6c:90:e0:55:e8:d5:24:46:3c:01: 7d:d0:e9:82:bd:e6:ce:9d:93:38:5f:12:f5:c2:3e: 55:35:c3:ea:66:7d:1a:83:18:7c:4c:ff:14:c0:b6: 1a:f5:ef:38:3b:2f:16:61:10:c5:68:6c:b3:b0:6b: b9:1f:92:75:22:69:48:d3:ba:68:7c:09:42:6d:c6: ea:45:49:16:0f:08:85:e9:fa:66:4c:a8:d2:61:5b: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:D9:08:F2:B4:48:A1:DA:E3:98:21:37:38:12:7C:73:D4:87:44 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS213905.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:45::/48 Signature Algorithm: sha256WithRSAEncryption 50:11:86:6e:5f:2f:94:5c:a7:68:d6:9d:d5:58:99:32:e1:c0: fc:59:58:bd:cf:ac:f8:27:2d:a5:48:29:48:06:e2:28:11:7b: 17:9d:ce:60:0c:5c:c7:6f:a7:0a:ec:49:f7:ad:7a:ab:51:db: 25:50:28:e7:e5:12:b5:01:b2:8a:df:24:01:73:98:a8:56:a0: 39:49:0b:fd:f7:1e:9b:87:46:7a:3b:18:e5:67:be:06:d7:48: 7f:ae:50:55:fc:0f:17:e2:f9:3a:e6:aa:7f:00:d1:3d:a6:bb: fb:11:e8:a9:02:c4:e5:b1:c1:87:63:82:e9:14:0e:da:91:54: 66:9e:b0:21:e3:cb:ea:bd:6a:16:97:9a:2b:c0:5c:f0:4e:06: ea:70:49:19:a8:ac:b0:d5:a5:85:a2:48:dc:83:3b:36:8d:08: f0:cc:47:e1:4f:ac:01:24:98:0b:75:e8:5b:6c:37:e9:0b:11: 0a:44:0c:bb:56:62:8a:88:00:1e:73:8d:30:4c:67:3c:57:52: 37:4b:f1:ff:e8:aa:d9:4d:03:b9:94:ba:e7:aa:4d:5e:34:24: fc:1f:49:97:f4:d6:4e:3c:77:0b:ae:a1:8a:de:0f:ef:31:6f: eb:cb:7b:1e:99:1d:9e:12:c0:24:bc:68:80:36:a9:39:c4:6d: cc:2c:ac:fb -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUeZdCcMP+MROTOfh7SfuBYfEPCQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDZaFw0yNzA0MjcxMzIyNDZaMDMxMTAvBgNV BAMTKEUxRjNEOTA4RjJCNDQ4QTFEQUUzOTgyMTM3MzgxMjdDNzNENDg3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwZvs4GoTfeH+RkR+U6L9jIa6 +yw2i4sj67RnKjPOOD+Rf/IedEEI/2sZ0oZ20fyKBBJioX73J31HGjezEvAMBVO6 qjP1aEDlzAbPTnoHsN2qhshQTWCt+FvaprfyPg+LI6RXpOkwP1Dy+KjNzWOff0Xe 8Mfhslq2myJT6fsjhY0nH1V9X9/2xdS6O6UZiMiq6dHqGJywdbUnQ5uvW4hFm6oA /8ojw3EebJDgVejVJEY8AX3Q6YK95s6dkzhfEvXCPlU1w+pmfRqDGHxM/xTAthr1 7zg7LxZhEMVobLOwa7kfknUiaUjTumh8CUJtxupFSRYPCIXp+mZMqNJhW5hxAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU4fPZCPK0SKHa45ghNzgSfHPUh0QwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTM5MDUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAEUwDQYJKoZIhvcNAQEL BQADggEBAFARhm5fL5Rcp2jWndVYmTLhwPxZWL3PrPgnLaVIKUgG4igRexedzmAM XMdvpwrsSfeteqtR2yVQKOflErUBsorfJAFzmKhWoDlJC/33HpuHRno7GOVnvgbX SH+uUFX8Dxfi+Trmqn8A0T2mu/sR6KkCxOWxwYdjgukUDtqRVGaesCHjy+q9ahaX mivAXPBOBupwSRmorLDVpYWiSNyDOzaNCPDMR+FPrAEkmAt16FtsN+kLEQpEDLtW YoqIAB5zjTBMZzxXUjdL8f/oqtlNA7mUuueqTV40JPwfSZf01k48dwuuoYreD+8x b+vLex6ZHZ4SwCS8aIA2qTnEbcwsrPs= -----END CERTIFICATE-----Generated at Tue May 5 19:06:11 2026 by rpki-client