$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219331.roa File: AS219331.roa (raw, json) Hash identifier: ywk7VDRb4wPrj5Ri9ICxiIzU9IAqjdpUMrpZVbhivk4= Subject key identifier: 5D:00:9E:80:6F:5B:A7:8A:DC:A1:B9:0E:79:77:7E:76:6D:C9:19:C8 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 70134E0F1042B62960C89E11D6FF287D661FD013 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219331.roa Signing time: Mon 31 Aug 2026 20:47:57 +0000 ROA not before: Mon 31 Aug 2026 20:42:57 +0000 ROA not after: Mon 30 Aug 2027 20:47:57 +0000 asID: 219331 IP address blocks: 2a0b:4e07:2b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:13:4e:0f:10:42:b6:29:60:c8:9e:11:d6:ff:28:7d:66:1f:d0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Aug 31 20:42:57 2026 GMT Not After : Aug 30 20:47:57 2027 GMT Subject: CN=5D009E806F5BA78ADCA1B90E79777E766DC919C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:09:35:c7:5c:6a:eb:e1:b5:cc:37:1d:84: c8:4f:6c:aa:84:a2:ae:5b:8f:40:ed:cf:eb:7d:3f: 2d:d3:c8:c7:80:93:d7:61:7c:ba:20:25:6a:8d:26: 23:e5:d8:ca:72:ed:9b:54:82:d2:f5:b0:56:75:0a: 50:77:71:97:fd:7b:21:23:24:2c:d4:91:8e:7c:34: fe:0f:55:72:36:fd:84:29:3f:bc:63:d5:7f:58:16: 8c:ef:e3:42:3f:34:fc:49:49:6a:75:12:ba:47:d9: 11:eb:37:3f:7e:c5:e2:d6:15:1f:a7:67:72:78:9e: 8a:59:7a:81:8f:45:1b:8a:a7:c7:9e:a5:33:12:13: 54:e9:19:21:cb:c9:f0:76:9d:57:e9:ec:27:c2:b8: 62:93:ce:59:ec:a1:68:bb:0a:3c:6a:7d:d3:3d:fb: bc:83:2e:1c:aa:30:f4:1c:ea:52:f4:8d:97:95:5d: 4e:41:71:a3:e5:60:2e:45:78:22:90:6e:eb:5b:3c: 5f:1b:4b:bd:86:f3:32:ab:69:39:6f:67:6f:c2:66: 92:ea:9b:e9:b2:83:89:d2:60:43:3e:55:5a:c9:e2: 00:b1:ed:64:98:3b:bf:66:24:d7:06:31:10:57:5d: 36:15:5f:9e:bd:f4:4c:50:19:d0:99:04:d3:de:25: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:00:9E:80:6F:5B:A7:8A:DC:A1:B9:0E:79:77:7E:76:6D:C9:19:C8 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2b00::/40 Signature Algorithm: sha256WithRSAEncryption 44:50:a2:1b:9f:f3:f5:a7:e3:20:1e:1d:8f:f9:ef:5b:46:f5: 5c:b1:d8:30:ef:00:9d:6c:d8:a4:78:f8:09:07:46:a3:db:60: d5:dd:93:e3:d4:52:7d:c4:d4:8e:9b:cd:4c:12:25:23:94:b2: f7:c9:fa:21:ae:c5:16:d3:7f:75:19:4d:62:8e:1c:24:f1:29: 30:8b:ac:ea:55:1a:59:74:cb:d6:b6:8a:87:80:9d:6b:bb:d1: 03:97:9c:d7:8d:fd:22:73:6c:49:9f:82:35:ec:96:12:be:29: 54:63:ef:ca:bc:47:be:be:be:cd:9f:6b:67:a5:7f:d5:51:88: a7:1d:de:f9:4b:31:4f:a1:42:d2:ff:6b:84:c8:76:4f:0e:8a: cc:da:1a:45:82:fe:89:cd:e9:54:8f:bd:1a:5f:26:ee:11:3e: d4:39:d8:e0:72:9e:1f:5c:c3:ce:0e:7b:bb:65:e8:b7:43:35: aa:a0:0e:50:41:26:3b:60:83:3a:58:29:48:d4:61:58:a5:67: a7:bc:32:a1:d4:21:8f:a0:0b:29:46:a1:90:7f:ba:1b:13:54: f7:52:74:89:4b:fe:d6:6b:a5:a5:39:9b:84:75:a2:8e:bc:cc: e5:b1:28:16:8b:b6:0c:94:73:db:ae:f2:71:58:9c:3e:4e:7e: 0a:49:00:c8 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUcBNODxBCtilgyJ4R1v8ofWYf0BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA4MzEyMDQyNTdaFw0yNzA4MzAyMDQ3NTdaMDMxMTAvBgNV BAMTKDVEMDA5RTgwNkY1QkE3OEFEQ0ExQjkwRTc5Nzc3RTc2NkRDOTE5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVcQk1x1xq6+G1zDcdhMhPbKqE oq5bj0Dtz+t9Py3TyMeAk9dhfLogJWqNJiPl2Mpy7ZtUgtL1sFZ1ClB3cZf9eyEj JCzUkY58NP4PVXI2/YQpP7xj1X9YFozv40I/NPxJSWp1ErpH2RHrNz9+xeLWFR+n Z3J4nopZeoGPRRuKp8eepTMSE1TpGSHLyfB2nVfp7CfCuGKTzlnsoWi7CjxqfdM9 +7yDLhyqMPQc6lL0jZeVXU5BcaPlYC5FeCKQbutbPF8bS72G8zKraTlvZ2/CZpLq m+myg4nSYEM+VVrJ4gCx7WSYO79mJNcGMRBXXTYVX5699ExQGdCZBNPeJW+tAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUXQCegG9bp4rcobkOeXd+dm3JGcgwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTkzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqC04HKzANBgkqhkiG9w0BAQsF AAOCAQEARFCiG5/z9afjIB4dj/nvW0b1XLHYMO8AnWzYpHj4CQdGo9tg1d2T49RS fcTUjpvNTBIlI5Sy98n6Ia7FFtN/dRlNYo4cJPEpMIus6lUaWXTL1raKh4Cda7vR A5ec1439InNsSZ+CNeyWEr4pVGPvyrxHvr6+zZ9rZ6V/1VGIpx3e+UsxT6FC0v9r hMh2Tw6KzNoaRYL+ic3pVI+9Gl8m7hE+1DnY4HKeH1zDzg57u2Xot0M1qqAOUEEm O2CDOlgpSNRhWKVnp7wyodQhj6ALKUahkH+6GxNU91J0iUv+1mulpTmbhHWijrzM 5bEoFou2DJRz267ycVicPk5+CkkAyA== -----END CERTIFICATE-----Generated at Fri Sep 4 22:17:38 2026 by rpki-client