$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218343.roa File: AS218343.roa (raw, json) Hash identifier: +oOu76g+qMuTl0xEOPypx8PZTbu9YC/yBfLpTv/sKxI= Subject key identifier: 10:ED:F1:40:D1:30:D8:5C:BE:8A:08:07:EA:6F:54:02:51:77:42:C0 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 32BE89AD63D78347D8E2AB2281820F30154B484B Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218343.roa Signing time: Tue 20 Oct 2026 14:45:11 +0000 ROA not before: Tue 20 Oct 2026 14:40:11 +0000 ROA not after: Tue 19 Oct 2027 14:45:11 +0000 asID: 218343 IP address blocks: 2a0b:4e07:2c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 22:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:be:89:ad:63:d7:83:47:d8:e2:ab:22:81:82:0f:30:15:4b:48:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 20 14:40:11 2026 GMT Not After : Oct 19 14:45:11 2027 GMT Subject: CN=10EDF140D130D85CBE8A0807EA6F5402517742C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:fe:5a:92:e5:7b:92:9c:b5:f7:c9:f3:e4: 2f:53:38:7c:a1:6d:2b:da:29:16:4e:e5:56:b0:53: 72:1b:78:de:c3:ba:1b:67:15:a5:6f:f6:eb:3f:b5: 63:81:ad:2c:1e:01:31:72:78:97:a2:dd:63:4e:d0: c6:ce:17:1e:bc:20:d1:59:1e:2a:2e:aa:6c:5a:93: 85:d6:3e:ea:a5:1c:3d:85:8d:c8:d9:fc:07:42:c5: 32:8f:67:f6:97:2e:fd:49:43:e2:5c:68:66:42:dc: 84:86:93:f3:43:1a:89:be:f7:3d:f1:32:3a:61:1b: ea:4f:9e:7e:7c:c6:28:f2:bd:21:bb:ff:e0:25:72: e3:fa:82:38:7c:4a:1d:63:0f:0b:74:57:7b:e0:11: 16:96:53:d0:68:5a:01:d5:f0:b9:02:0b:0b:e6:67: a4:96:10:2a:36:91:02:d8:db:a3:25:cd:45:f0:9e: 22:0b:61:92:91:63:fc:7a:3a:4c:ae:1d:05:48:ae: 8a:70:20:e1:a0:62:bc:c4:4d:27:86:a9:06:30:21: f4:27:9e:51:6e:ca:6f:ed:eb:0c:20:a8:fa:39:c8: c5:af:0c:da:46:5e:1a:b7:d4:0c:1e:59:6b:f1:00: 4b:8c:07:a7:34:47:17:cc:5e:7e:bf:ec:fb:51:cc: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:ED:F1:40:D1:30:D8:5C:BE:8A:08:07:EA:6F:54:02:51:77:42:C0 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218343.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2c0::/44 Signature Algorithm: sha256WithRSAEncryption 16:1f:53:0f:76:db:15:5b:3f:fb:b4:3a:2c:cb:73:6d:70:70: 3c:92:34:af:24:44:29:33:90:ca:7b:2c:e5:60:76:f6:75:c7: 49:15:9d:13:fc:e4:4c:05:c1:d9:75:8b:f3:ad:ad:b2:28:df: cc:a0:75:f0:a6:25:6c:2f:a6:b6:73:48:f2:31:7b:fa:60:bd: 84:08:21:9c:21:c6:4a:14:12:de:4d:70:77:67:f7:f0:31:0d: 80:02:60:1f:bd:13:0f:3e:dd:76:0e:38:cf:a5:9c:82:af:86: 1a:b9:90:43:41:0d:24:12:0c:d4:a6:7f:8f:13:2e:be:72:2f: cd:3c:23:51:ee:a1:b0:88:59:fd:91:fb:9c:df:d0:8a:0d:20: 52:f0:21:57:6b:fa:25:75:f4:26:6a:24:5f:99:78:1e:aa:bb: 90:dd:1c:6e:13:6b:25:fb:86:f2:30:77:82:d3:6f:4b:f7:e1: b6:ba:97:ea:3c:6f:0a:e2:b1:b1:76:75:9d:55:b2:04:57:d9: 22:ab:48:11:bd:08:66:4b:d1:0e:10:37:83:10:0a:74:6e:5c: 5c:78:79:3f:77:7c:79:89:22:1d:6b:77:77:10:4e:e2:34:25: 16:75:5a:7a:bb:a7:4a:14:5e:a8:fd:d0:d4:64:dd:04:25:5f: 9b:c1:ef:10 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUMr6JrWPXg0fY4qsigYIPMBVLSEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjEwMjAxNDQwMTFaFw0yNzEwMTkxNDQ1MTFaMDMxMTAvBgNV BAMTKDEwRURGMTQwRDEzMEQ4NUNCRThBMDgwN0VBNkY1NDAyNTE3NzQyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfP5akuV7kpy198nz5C9TOHyh bSvaKRZO5VawU3IbeN7DuhtnFaVv9us/tWOBrSweATFyeJei3WNO0MbOFx68INFZ Hiouqmxak4XWPuqlHD2FjcjZ/AdCxTKPZ/aXLv1JQ+JcaGZC3ISGk/NDGom+9z3x MjphG+pPnn58xijyvSG7/+AlcuP6gjh8Sh1jDwt0V3vgERaWU9BoWgHV8LkCCwvm Z6SWECo2kQLY26MlzUXwniILYZKRY/x6OkyuHQVIropwIOGgYrzETSeGqQYwIfQn nlFuym/t6wwgqPo5yMWvDNpGXhq31AweWWvxAEuMB6c0RxfMXn6/7PtRzBtbAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUEO3xQNEw2Fy+iggH6m9UAlF3QsAwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTgzNDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04HAsAwDQYJKoZIhvcNAQEL BQADggEBABYfUw922xVbP/u0OizLc21wcDySNK8kRCkzkMp7LOVgdvZ1x0kVnRP8 5EwFwdl1i/OtrbIo38ygdfCmJWwvprZzSPIxe/pgvYQIIZwhxkoUEt5NcHdn9/Ax DYACYB+9Ew8+3XYOOM+lnIKvhhq5kENBDSQSDNSmf48TLr5yL808I1HuobCIWf2R +5zf0IoNIFLwIVdr+iV19CZqJF+ZeB6qu5DdHG4TayX7hvIwd4LTb0v34ba6l+o8 bwrisbF2dZ1VsgRX2SKrSBG9CGZL0Q4QN4MQCnRuXFx4eT93fHmJIh1rd3cQTuI0 JRZ1Wnq7p0oUXqj90NRk3QQlX5vB7xA= -----END CERTIFICATE-----Generated at Sat Oct 24 10:32:20 2026 by rpki-client