
$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218346.roa
File: AS218346.roa (raw, json)
Hash identifier: ehi5Ek3MUmC/J2GtiPl4AbvbeuuxcJCSa78YEZef5lE=
Subject key identifier: F4:22:3E:94:F3:74:25:AE:34:48:7F:D6:93:88:0A:5B:09:09:6B:C8
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 04D0EC33952CFAC35D85314245D245F24017A2B5
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218346.roa
Signing time: Tue 20 Oct 2026 20:15:55 +0000
ROA not before: Tue 20 Oct 2026 20:10:55 +0000
ROA not after: Tue 19 Oct 2027 20:15:55 +0000
asID: 218346
IP address blocks: 2a0b:4e07:2e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 22:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d0:ec:33:95:2c:fa:c3:5d:85:31:42:45:d2:45:f2:40:17:a2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Oct 20 20:10:55 2026 GMT
Not After : Oct 19 20:15:55 2027 GMT
Subject: CN=F4223E94F37425AE34487FD693880A5B09096BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:7c:1a:4e:56:e5:8a:20:f2:53:61:d5:fb:
23:6a:8c:49:79:e9:b1:a8:88:2b:52:6b:98:0e:ac:
93:81:e8:5b:e2:38:4e:ec:5b:4a:82:51:f8:72:36:
a2:64:0d:4b:57:75:58:0f:16:b3:96:35:10:c5:a5:
37:75:40:53:4b:8a:3f:7a:9c:d3:33:9d:dc:66:4f:
7a:84:4f:30:35:89:b5:42:b9:6e:85:14:79:10:24:
85:cc:a5:66:18:3b:0f:69:b7:23:14:25:8d:e2:6a:
2f:dc:fe:7c:49:c2:e5:2e:ff:96:bb:eb:e5:b5:af:
ea:b5:7d:3f:52:24:50:17:ca:77:78:9d:d8:00:31:
f0:f6:e9:b0:fd:fb:fe:a6:ed:69:5c:f2:0a:85:28:
5a:02:9d:13:c1:2d:61:ad:36:39:79:5a:eb:02:a5:
2c:88:33:77:20:0f:07:b9:d1:56:aa:b4:29:2d:b3:
eb:ef:78:10:d4:e0:5f:ad:8d:a1:38:f6:c0:3f:62:
d7:fb:ac:59:69:81:76:b4:fa:ad:88:46:ac:1c:78:
33:72:b1:6e:c4:1f:28:b7:ed:97:46:5a:5a:15:1b:
67:de:05:b2:aa:d6:2d:56:d3:27:e3:24:23:3a:1a:
9a:17:0e:2e:fb:97:e6:1c:77:a8:62:e0:37:d8:90:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:3E:94:F3:74:25:AE:34:48:7F:D6:93:88:0A:5B:09:09:6B:C8
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218346.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:2e0::/44
Signature Algorithm: sha256WithRSAEncryption
40:9d:6d:54:87:02:c6:6e:d5:22:2d:b0:8f:a7:a5:c5:c7:31:
cb:f6:32:4d:39:b9:b4:23:86:46:db:85:b4:06:68:ab:bf:a2:
a2:72:13:42:1a:39:53:e2:2d:74:a6:8f:fe:c6:63:dc:70:cc:
f9:82:96:e9:00:75:4d:97:c2:de:f2:4f:aa:17:d9:47:2b:8f:
4c:66:0a:1a:43:20:0b:0c:73:57:74:a9:4a:02:a2:03:ce:9c:
0e:cd:ad:d5:0e:24:e4:0f:ac:31:20:bb:79:91:5a:be:0e:38:
0d:6d:95:26:1c:31:50:5b:53:d6:06:19:8e:b7:29:57:1d:d9:
08:f3:63:26:f3:31:b2:d1:8b:71:c6:cd:4d:f3:35:30:aa:ab:
34:61:d8:e6:1f:66:1b:d4:2d:b9:c1:19:64:79:bb:fb:22:7d:
ed:48:f8:4e:0c:72:c7:0b:7d:7e:dd:83:4b:7d:ca:8f:b4:87:
9b:20:8e:2f:0b:23:01:ac:ee:80:4f:65:f5:f3:fc:23:9c:40:
31:a5:79:9d:15:c1:aa:44:82:f2:55:c6:2f:1e:fe:ef:ef:90:
4c:0e:45:4e:9f:3c:19:f6:83:bf:3c:1d:dd:c8:40:95:61:a2:
ad:f5:20:2d:dd:2b:d2:55:79:20:3d:3d:2e:d2:5f:67:92:57:
87:ea:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:32:18 2026 by rpki-client