$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215664.roa File: AS215664.roa (raw, json) Hash identifier: CZYBwMTx3qq3urJxaZUeb2AXYz8AFzbaBlTkqN0Cp1Q= Subject key identifier: C2:0C:01:D7:F9:3A:2D:01:BF:1D:2C:E5:91:61:20:95:CF:5B:8B:47 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 0CBDB4DD6FC4BB616149D39A58B7B0F79BCD7375 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215664.roa Signing time: Mon 18 May 2026 08:09:52 +0000 ROA not before: Mon 18 May 2026 08:04:52 +0000 ROA not after: Mon 17 May 2027 08:09:52 +0000 asID: 215664 IP address blocks: 2a0b:4e07:9c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 17:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bd:b4:dd:6f:c4:bb:61:61:49:d3:9a:58:b7:b0:f7:9b:cd:73:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: May 18 08:04:52 2026 GMT Not After : May 17 08:09:52 2027 GMT Subject: CN=C20C01D7F93A2D01BF1D2CE591612095CF5B8B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:8a:eb:28:bb:17:d4:8a:f3:51:ef:2b:0c: 21:4f:23:be:aa:67:a6:96:bc:c4:9f:92:ac:dc:cc: 93:66:f0:e7:d6:dd:99:a5:fb:03:ab:73:61:92:a4: 0d:c6:bb:9a:0d:a6:26:a7:db:2c:a8:e4:b3:b2:8a: 59:10:8e:71:08:b6:67:f2:c6:af:e8:05:35:55:be: a8:7d:99:95:03:67:6d:21:a7:0d:6b:1f:5c:60:49: 77:cb:e2:26:36:3f:47:fb:d2:94:5b:39:2a:59:12: 13:2d:7a:80:12:6b:25:c8:c3:ee:d4:93:1f:a8:d0: 64:5c:d9:92:aa:73:f1:24:e0:57:61:a6:73:08:50: 7d:d2:b5:55:a7:ce:0d:72:dc:38:b9:a9:61:20:d4: c5:df:5e:d1:d6:02:cb:f0:77:e2:fc:93:2c:c6:9b: 7e:76:ec:04:7d:bd:e4:24:e0:ed:45:5d:99:2f:7b: d9:96:f6:ad:12:a7:fd:81:6f:fb:38:03:4d:d1:96: b6:7d:82:70:0b:62:f5:ce:99:ea:0c:14:b5:52:cf: be:63:1f:ac:f7:a2:cd:34:4f:a9:f3:d0:59:6c:f2: 6b:29:ed:b7:d1:b1:7f:30:59:b7:9c:eb:66:b8:77: dd:ba:80:23:23:68:c9:de:09:dc:d2:74:98:72:d0: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0C:01:D7:F9:3A:2D:01:BF:1D:2C:E5:91:61:20:95:CF:5B:8B:47 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215664.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:9c::/46 Signature Algorithm: sha256WithRSAEncryption 07:3a:3e:de:6b:cb:62:00:3e:5b:00:d6:34:c9:f0:e3:08:b0: 9a:78:3e:b3:6c:c7:7d:b6:e9:35:54:01:19:d0:43:8a:c8:ce: 00:26:f2:e3:a8:55:0b:b7:67:38:4a:7c:c3:7e:47:4a:48:0d: e8:fc:f4:ae:b1:f3:df:50:87:ee:cd:a3:c2:c2:c0:f4:0f:7a: cb:f9:3d:14:8b:97:dd:d7:98:dd:32:ba:57:c5:68:e8:7d:1f: 1c:0c:5f:9b:a2:b6:22:30:08:4c:bd:4b:3a:38:e6:61:71:24: 58:90:e9:c8:3e:96:f2:dc:a8:2b:f9:60:d2:5e:b0:75:32:f7: 1a:b5:f7:48:47:14:7c:23:5d:2f:72:1a:f8:d5:fd:b9:d7:e5: 53:31:b0:82:85:d4:8d:31:b1:fc:5f:3d:b8:02:25:00:2d:b8: d4:13:dc:c4:1d:a7:57:c5:84:e1:24:bb:8e:00:47:f9:36:e7: e7:a7:42:d5:b9:41:48:7e:e2:3c:8a:8b:dc:ea:b8:90:d1:b0: 95:6e:ac:f5:a0:ae:f1:74:0f:71:1b:9e:f8:35:67:e4:c1:cc: 08:2f:74:dd:a6:e7:8d:a6:24:bf:fb:27:3f:22:9d:8d:dc:55: 3f:f4:61:dd:bd:a9:be:59:ae:83:21:f8:22:37:bc:ff:8b:2e: 75:50:ba:b6 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUDL203W/Eu2FhSdOaWLew95vNc3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA1MTgwODA0NTJaFw0yNzA1MTcwODA5NTJaMDMxMTAvBgNV BAMTKEMyMEMwMUQ3RjkzQTJEMDFCRjFEMkNFNTkxNjEyMDk1Q0Y1QjhCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSFIrrKLsX1IrzUe8rDCFPI76q Z6aWvMSfkqzczJNm8OfW3Zml+wOrc2GSpA3Gu5oNpian2yyo5LOyilkQjnEItmfy xq/oBTVVvqh9mZUDZ20hpw1rH1xgSXfL4iY2P0f70pRbOSpZEhMteoASayXIw+7U kx+o0GRc2ZKqc/Ek4FdhpnMIUH3StVWnzg1y3Di5qWEg1MXfXtHWAsvwd+L8kyzG m3527AR9veQk4O1FXZkve9mW9q0Sp/2Bb/s4A03RlrZ9gnALYvXOmeoMFLVSz75j H6z3os00T6nz0Fls8msp7bfRsX8wWbec62a4d926gCMjaMneCdzSdJhy0BNLAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUwgwB1/k6LQG/HSzlkWEglc9bi0cwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTU2NjQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAJwwDQYJKoZIhvcNAQEL BQADggEBAAc6Pt5ry2IAPlsA1jTJ8OMIsJp4PrNsx3226TVUARnQQ4rIzgAm8uOo VQu3ZzhKfMN+R0pIDej89K6x899Qh+7No8LCwPQPesv5PRSLl93XmN0yulfFaOh9 HxwMX5uitiIwCEy9Szo45mFxJFiQ6cg+lvLcqCv5YNJesHUy9xq190hHFHwjXS9y GvjV/bnX5VMxsIKF1I0xsfxfPbgCJQAtuNQT3MQdp1fFhOEku44AR/k25+enQtW5 QUh+4jyKi9zquJDRsJVurPWgrvF0D3Ebnvg1Z+TBzAgvdN2m542mJL/7Jz8inY3c VT/0Yd29qb5ZroMh+CI3vP+LLnVQurY= -----END CERTIFICATE-----Generated at Sat Jun 6 02:27:31 2026 by rpki-client