$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214022.roa File: AS214022.roa (raw, json) Hash identifier: /C+oZ55b/7KrdAoScbn3NhsrNQJyWX8YSsoaytpyCJc= Subject key identifier: 9B:77:A4:AA:AE:A3:71:D7:87:CE:0D:DC:79:FF:18:1C:B2:66:A5:74 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 2A665CBA8B80DC817EDA0C061F94858876823E94 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214022.roa Signing time: Tue 28 Apr 2026 13:22:48 +0000 ROA not before: Tue 28 Apr 2026 13:17:48 +0000 ROA not after: Tue 27 Apr 2027 13:22:48 +0000 asID: 214022 IP address blocks: 2a0b:4e07:8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 May 2026 13:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:66:5c:ba:8b:80:dc:81:7e:da:0c:06:1f:94:85:88:76:82:3e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:48 2026 GMT Not After : Apr 27 13:22:48 2027 GMT Subject: CN=9B77A4AAAEA371D787CE0DDC79FF181CB266A574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:64:5b:5b:8d:5a:72:df:41:e6:f5:2e:3b: d7:c5:57:f9:2f:fc:11:88:f7:04:e3:cb:04:fc:86: a4:4f:11:9a:6d:b1:d5:7d:b7:30:2a:46:28:a1:8a: 6f:81:b0:c0:dd:f0:df:8c:1b:52:21:f6:ad:db:c7: c8:81:ee:ab:69:fb:a1:55:90:de:71:6e:ac:c7:90: b6:72:b0:2a:48:9b:41:7b:f5:dc:73:1a:f3:b4:09: ed:54:6d:28:6f:e9:b8:92:c9:a3:b0:5c:dc:0a:7a: 37:07:ae:8b:f8:a1:c0:7d:2c:39:10:47:4c:36:4c: 92:77:e7:90:0a:91:39:e0:45:da:56:8c:ed:06:d4: 75:f5:5b:49:9e:d2:c8:62:6d:89:f0:fe:63:ca:8d: 43:b7:b9:05:e0:1f:d9:f5:39:4c:e3:16:81:16:c1: 14:84:83:53:48:84:2c:2e:06:2b:40:b4:84:0b:00: 06:d7:b9:53:90:5e:10:42:4d:09:f3:ee:ff:be:56: 7a:b4:9e:5e:48:cc:05:76:31:c7:de:4e:8c:54:8b: da:86:7a:c1:67:c1:20:9f:14:13:74:fd:bb:6f:97: cb:e2:91:b6:68:14:c2:61:95:cb:69:6d:33:ce:93: 6a:dc:10:ee:c0:4c:b2:be:5a:60:91:87:cf:1c:55: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:77:A4:AA:AE:A3:71:D7:87:CE:0D:DC:79:FF:18:1C:B2:66:A5:74 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS214022.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:8::/46 Signature Algorithm: sha256WithRSAEncryption 9c:aa:1f:fd:94:78:67:3f:94:f4:35:0b:76:fe:c7:0e:d4:f1: 8a:22:90:ef:e3:bb:aa:3e:8e:78:28:df:72:17:5b:a7:35:60: 0d:1a:fe:41:e2:49:21:8a:22:8e:09:8d:cc:74:2d:fa:d7:4e: 7c:ab:84:51:2f:c2:8f:31:01:a4:c6:6b:3a:1f:24:c3:8e:30: 54:c1:bf:e9:07:60:a7:20:a1:3a:50:df:ce:56:63:e6:f5:09: e0:6e:76:82:ee:65:8d:3f:1e:cc:e8:7a:7b:ea:75:06:2d:3e: f0:01:e4:30:87:ba:7c:fa:d3:fa:62:c1:17:98:06:6f:b4:5f: 30:51:37:50:62:16:bc:11:91:c0:4d:5b:d6:e9:67:88:ce:32: b4:c5:49:d9:35:f9:b5:61:4b:8f:42:c5:69:37:d0:07:4e:c5: f6:c4:07:49:ab:50:1e:dd:5c:7e:9b:d4:bb:48:36:ef:25:eb: 9c:cd:80:18:6d:c9:0f:48:41:dd:81:3d:91:24:2b:cf:c6:52: 90:8b:4f:fe:60:ce:b8:81:27:a5:4a:29:88:34:bf:1e:c4:b4: 5e:2f:84:4e:c0:9f:0e:37:b6:cc:32:b1:49:27:f5:31:1d:83: 1d:7a:c2:9f:31:34:f0:3f:07:d1:54:69:70:ad:34:b5:1c:0b: df:25:ba:1f -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUKmZcuouA3IF+2gwGH5SFiHaCPpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDhaFw0yNzA0MjcxMzIyNDhaMDMxMTAvBgNV BAMTKDlCNzdBNEFBQUVBMzcxRDc4N0NFMEREQzc5RkYxODFDQjI2NkE1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+X2RbW41act9B5vUuO9fFV/kv /BGI9wTjywT8hqRPEZptsdV9tzAqRiihim+BsMDd8N+MG1Ih9q3bx8iB7qtp+6FV kN5xbqzHkLZysCpIm0F79dxzGvO0Ce1UbShv6biSyaOwXNwKejcHrov4ocB9LDkQ R0w2TJJ355AKkTngRdpWjO0G1HX1W0me0shibYnw/mPKjUO3uQXgH9n1OUzjFoEW wRSEg1NIhCwuBitAtIQLAAbXuVOQXhBCTQnz7v++Vnq0nl5IzAV2McfeToxUi9qG esFnwSCfFBN0/btvl8vikbZoFMJhlctpbTPOk2rcEO7ATLK+WmCRh88cVcK/AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUm3ekqq6jcdeHzg3cef8YHLJmpXQwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTQwMjIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAAgwDQYJKoZIhvcNAQEL BQADggEBAJyqH/2UeGc/lPQ1C3b+xw7U8YoikO/ju6o+jngo33IXW6c1YA0a/kHi SSGKIo4Jjcx0LfrXTnyrhFEvwo8xAaTGazofJMOOMFTBv+kHYKcgoTpQ385WY+b1 CeBudoLuZY0/HszoenvqdQYtPvAB5DCHunz60/piwReYBm+0XzBRN1BiFrwRkcBN W9bpZ4jOMrTFSdk1+bVhS49CxWk30AdOxfbEB0mrUB7dXH6b1LtINu8l65zNgBht yQ9IQd2BPZEkK8/GUpCLT/5gzriBJ6VKKYg0vx7EtF4vhE7Anw43tswysUkn9TEd gx16wp8xNPA/B9FUaXCtNLUcC98luh8= -----END CERTIFICATE-----Generated at Sat May 2 00:38:29 2026 by rpki-client