$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219244.roa File: AS219244.roa (raw, json) Hash identifier: Ohv9f0M844PhU9tOz/nCAPr//fV5KqqumrfrdQ1600k= Subject key identifier: 87:7B:E4:AC:9C:09:63:73:68:32:11:71:B1:57:AB:4F:68:FE:BB:B3 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 19DCE1064D20A16CD89F1C327E0716934B4C8057 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219244.roa Signing time: Wed 08 Jul 2026 13:27:38 +0000 ROA not before: Wed 08 Jul 2026 13:22:38 +0000 ROA not after: Wed 07 Jul 2027 13:27:38 +0000 asID: 219244 IP address blocks: 2a0b:4e07:240::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:dc:e1:06:4d:20:a1:6c:d8:9f:1c:32:7e:07:16:93:4b:4c:80:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jul 8 13:22:38 2026 GMT Not After : Jul 7 13:27:38 2027 GMT Subject: CN=877BE4AC9C09637368321171B157AB4F68FEBBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a6:6a:82:4d:71:b4:5d:55:1e:47:bc:8d:38: 7a:9e:25:35:d4:9d:b0:49:4f:26:91:94:86:8b:64: ab:07:51:9f:48:f9:4b:c6:7a:a5:65:38:14:5f:cc: 78:99:f2:cd:ec:22:3a:43:fa:2b:61:f6:27:c9:e1: a2:4d:bf:7c:f1:57:ee:a2:85:f8:ed:37:36:ee:35: d7:88:35:96:5f:9e:f2:fb:5a:ec:3a:f4:29:b2:03: 56:6f:05:40:d9:f5:13:7b:cb:6c:1d:93:2e:a1:e2: ea:b5:a1:d5:39:39:42:22:d0:52:13:f7:29:3a:eb: ab:7f:cb:75:7f:6c:63:d0:62:07:4f:50:5b:c8:b6: 98:0f:8f:20:ed:57:7d:d5:e6:01:11:98:83:18:f0: 57:21:75:37:06:13:54:9c:7b:fd:a1:72:5c:77:bc: c7:7b:2b:5c:a8:4d:f6:bd:ce:49:cd:8c:39:87:c4: c3:be:55:6b:d4:de:51:f1:de:4a:a6:95:d6:c5:8c: f5:0b:b0:c9:23:49:2f:94:11:71:50:a9:c4:7e:45: b0:2b:ca:e1:cc:fb:f4:29:76:8b:95:3b:d1:fb:98: 3c:be:fc:86:ad:8a:d5:fb:85:68:ae:8a:3d:8b:8f: 84:3e:fc:65:ec:73:ac:b6:68:f1:bf:a8:9b:91:8e: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7B:E4:AC:9C:09:63:73:68:32:11:71:B1:57:AB:4F:68:FE:BB:B3 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219244.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:240::/44 Signature Algorithm: sha256WithRSAEncryption 6e:00:d1:a3:17:07:e4:f7:e0:de:64:b7:64:fa:cf:6b:96:5f: b8:63:d8:1a:c6:ae:9b:2d:7f:71:53:28:dd:2d:9e:80:7a:e2: ba:f3:cc:b1:9e:77:ed:9c:dc:b9:67:c3:f6:b5:9f:76:7e:f3: 19:22:94:6d:0e:90:5c:90:2c:40:1f:1e:1e:9f:7b:b3:f2:79: 63:b7:72:55:5b:a1:63:df:c9:d6:43:b3:36:59:5c:8e:90:01: de:3b:1b:35:fd:27:82:12:c3:7c:d5:02:e5:24:cf:03:01:14: 3c:f5:b3:eb:f1:01:9d:ad:c1:a3:39:ea:7d:7f:0e:79:c3:4e: 93:62:db:91:ef:65:4e:ea:2e:84:9a:b6:a4:26:5c:91:33:da: 31:d0:18:38:4a:25:66:a5:b0:fd:5a:27:84:dd:46:63:54:f0: 76:7b:86:41:88:77:cd:45:cf:47:10:7e:66:34:77:21:09:14: 50:33:53:3f:ca:96:0b:03:af:9b:d4:55:98:6f:6e:43:f1:e6: 12:7a:9b:9a:0b:fb:de:9e:7f:a9:44:c1:77:48:67:1a:dc:92: 46:46:01:cd:f2:df:eb:48:64:3d:23:72:93:a6:33:93:2c:35: 99:fe:46:85:c4:21:35:24:0f:ee:48:2f:a7:36:bc:1f:ca:45: 42:ba:62:73 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUGdzhBk0goWzYnxwyfgcWk0tMgFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA3MDgxMzIyMzhaFw0yNzA3MDcxMzI3MzhaMDMxMTAvBgNV BAMTKDg3N0JFNEFDOUMwOTYzNzM2ODMyMTE3MUIxNTdBQjRGNjhGRUJCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6pmqCTXG0XVUeR7yNOHqeJTXU nbBJTyaRlIaLZKsHUZ9I+UvGeqVlOBRfzHiZ8s3sIjpD+ith9ifJ4aJNv3zxV+6i hfjtNzbuNdeINZZfnvL7Wuw69CmyA1ZvBUDZ9RN7y2wdky6h4uq1odU5OUIi0FIT 9yk666t/y3V/bGPQYgdPUFvItpgPjyDtV33V5gERmIMY8FchdTcGE1Sce/2hclx3 vMd7K1yoTfa9zknNjDmHxMO+VWvU3lHx3kqmldbFjPULsMkjSS+UEXFQqcR+RbAr yuHM+/QpdouVO9H7mDy+/IatitX7hWiuij2Lj4Q+/GXsc6y2aPG/qJuRjrtRAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUh3vkrJwJY3NoMhFxsVerT2j+u7MwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTkyNDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04HAkAwDQYJKoZIhvcNAQEL BQADggEBAG4A0aMXB+T34N5kt2T6z2uWX7hj2BrGrpstf3FTKN0tnoB64rrzzLGe d+2c3Llnw/a1n3Z+8xkilG0OkFyQLEAfHh6fe7PyeWO3clVboWPfydZDszZZXI6Q Ad47GzX9J4ISw3zVAuUkzwMBFDz1s+vxAZ2twaM56n1/DnnDTpNi25HvZU7qLoSa tqQmXJEz2jHQGDhKJWalsP1aJ4TdRmNU8HZ7hkGId81Fz0cQfmY0dyEJFFAzUz/K lgsDr5vUVZhvbkPx5hJ6m5oL+96ef6lEwXdIZxrckkZGAc3y3+tIZD0jcpOmM5Ms NZn+RoXEITUkD+5IL6c2vB/KRUK6YnM= -----END CERTIFICATE-----Generated at Tue Jul 21 22:12:15 2026 by rpki-client