$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215146.roa File: AS215146.roa (raw, json) Hash identifier: pZ7LqdMhSh78Jf6jUKMp3AhpFfDewdGxltLtz1UScqw= Subject key identifier: 87:D9:FE:F1:A5:13:31:5E:16:A9:75:B3:39:3A:45:B0:A8:CA:53:31 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 26B7928D06F471C839FBAF2931E4EF0591507E53 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215146.roa Signing time: Fri 15 May 2026 20:10:36 +0000 ROA not before: Fri 15 May 2026 20:05:36 +0000 ROA not after: Fri 14 May 2027 20:10:36 +0000 asID: 215146 IP address blocks: 2a0b:4e07:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 17:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b7:92:8d:06:f4:71:c8:39:fb:af:29:31:e4:ef:05:91:50:7e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: May 15 20:05:36 2026 GMT Not After : May 14 20:10:36 2027 GMT Subject: CN=87D9FEF1A513315E16A975B3393A45B0A8CA5331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:28:da:91:d7:98:3e:34:39:c4:4a:fe:31: b7:8d:b8:a4:9f:f4:d3:fe:ed:55:ed:f0:3c:a8:89: 73:fa:a2:67:88:8e:75:05:28:b3:a1:51:8c:62:bd: 99:e8:1b:db:38:6b:a1:3d:c7:fd:c2:d1:18:0b:a0: a1:0a:e0:0c:c0:50:6e:c9:1a:17:69:72:89:9c:74: b8:34:63:90:f7:3c:e7:04:9d:1d:36:72:5d:d6:a6: 2a:ce:ef:f5:11:da:8d:d8:0e:79:b7:06:90:13:fa: c7:fa:27:e4:5d:d8:97:e7:49:c1:d9:73:21:85:71: 15:d6:da:a8:32:eb:99:f1:e5:64:c1:95:71:33:5d: 7d:5b:95:72:52:07:98:ae:a4:10:5b:df:89:eb:4e: f7:60:21:9e:54:e1:83:c0:11:66:16:b1:30:de:e8: bd:fb:b3:8a:6c:5d:bb:c5:03:c7:1d:0d:c7:cb:ce: 8e:be:79:69:d0:23:5a:be:89:8e:e3:1b:a8:77:52: e0:62:26:9e:c4:3c:1d:68:b4:7d:a5:b3:eb:2e:c8: 4f:bb:1a:4b:be:1e:de:6f:0b:54:6e:7b:87:bf:92: 36:be:b6:19:85:e6:23:ce:5a:ee:22:16:50:02:f9: 0b:42:70:12:f9:ff:8f:dd:16:e3:b5:5b:b1:f5:91: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D9:FE:F1:A5:13:31:5E:16:A9:75:B3:39:3A:45:B0:A8:CA:53:31 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215146.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:ef::/48 Signature Algorithm: sha256WithRSAEncryption 17:a7:14:bc:61:7a:f9:67:43:09:79:81:36:98:9f:04:2a:76: 05:31:35:f4:91:3a:08:af:7d:a4:d7:82:c1:fd:03:5b:b7:47: 68:37:49:51:86:d9:18:b8:09:7f:a4:f7:37:d0:be:aa:e1:8e: 6f:b7:e3:f1:ce:fb:78:c4:94:d3:26:26:f0:94:02:b1:17:70: 5c:58:df:91:37:20:cb:7d:ac:ea:3f:3f:e1:14:1a:47:10:ed: 89:37:55:bc:59:03:4e:83:08:1c:5c:88:53:ca:0b:00:8b:54: 5b:9b:9a:9b:53:2f:e9:9e:5e:ce:fc:9a:cf:98:5f:d0:c5:2d: 73:46:1f:83:58:08:cb:2e:3f:b1:25:17:56:c6:a7:c4:27:f5: 4d:c0:be:76:82:3a:91:6e:1c:21:b0:6b:3e:12:6b:31:8d:b4: 10:8c:28:f4:97:82:b0:9c:ee:63:1d:3e:74:d1:a1:57:25:b9: dd:6e:93:4f:4c:65:21:bb:57:a9:1b:41:6f:68:ae:dc:3b:38: 7f:94:17:d2:39:6d:32:d0:93:3b:3d:9f:f4:9e:f3:d4:22:1b: 0c:b8:9e:cd:a0:5b:29:21:42:f5:40:e1:83:77:fd:a4:64:bb: 56:a9:3c:82:ab:4e:a1:2a:7e:c2:d4:9b:42:a3:51:0b:71:88: 90:ef:b2:31 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUJreSjQb0ccg5+68pMeTvBZFQflMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA1MTUyMDA1MzZaFw0yNzA1MTQyMDEwMzZaMDMxMTAvBgNV BAMTKDg3RDlGRUYxQTUxMzMxNUUxNkE5NzVCMzM5M0E0NUIwQThDQTUzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+CjakdeYPjQ5xEr+MbeNuKSf 9NP+7VXt8DyoiXP6omeIjnUFKLOhUYxivZnoG9s4a6E9x/3C0RgLoKEK4AzAUG7J GhdpcomcdLg0Y5D3POcEnR02cl3WpirO7/UR2o3YDnm3BpAT+sf6J+Rd2JfnScHZ cyGFcRXW2qgy65nx5WTBlXEzXX1blXJSB5iupBBb34nrTvdgIZ5U4YPAEWYWsTDe 6L37s4psXbvFA8cdDcfLzo6+eWnQI1q+iY7jG6h3UuBiJp7EPB1otH2ls+suyE+7 Gku+Ht5vC1Rue4e/kja+thmF5iPOWu4iFlAC+QtCcBL5/4/dFuO1W7H1kU1JAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUh9n+8aUTMV4WqXWzOTpFsKjKUzEwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTUxNDYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAO8wDQYJKoZIhvcNAQEL BQADggEBABenFLxhevlnQwl5gTaYnwQqdgUxNfSROgivfaTXgsH9A1u3R2g3SVGG 2Ri4CX+k9zfQvqrhjm+34/HO+3jElNMmJvCUArEXcFxY35E3IMt9rOo/P+EUGkcQ 7Yk3VbxZA06DCBxciFPKCwCLVFubmptTL+meXs78ms+YX9DFLXNGH4NYCMsuP7El F1bGp8Qn9U3AvnaCOpFuHCGwaz4SazGNtBCMKPSXgrCc7mMdPnTRoVclud1uk09M ZSG7V6kbQW9ortw7OH+UF9I5bTLQkzs9n/Se89QiGwy4ns2gWykhQvVA4YN3/aRk u1apPIKrTqEqfsLUm0KjUQtxiJDvsjE= -----END CERTIFICATE-----Generated at Sat Jun 6 02:27:14 2026 by rpki-client