$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219417.roa File: AS219417.roa (raw, json) Hash identifier: I0Z4ie19J5LKe8wRAVPB9654XfKttqH1I/69BgY3MWY= Subject key identifier: 45:4A:9E:68:6B:48:9F:7A:09:7F:83:8A:21:61:AE:9D:BE:3D:D8:7D Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1FF9FB71BC73FD75352E1988343079B6F7329AD5 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219417.roa Signing time: Wed 17 Jun 2026 16:25:01 +0000 ROA not before: Wed 17 Jun 2026 16:20:01 +0000 ROA not after: Wed 16 Jun 2027 16:25:01 +0000 asID: 219417 IP address blocks: 2a0b:4e07:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f9:fb:71:bc:73:fd:75:35:2e:19:88:34:30:79:b6:f7:32:9a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 17 16:20:01 2026 GMT Not After : Jun 16 16:25:01 2027 GMT Subject: CN=454A9E686B489F7A097F838A2161AE9DBE3DD87D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7a:be:88:2b:87:34:ad:91:f2:79:d1:a7:fb: fa:8b:33:ed:6b:8f:bb:28:8b:aa:24:79:21:a6:4c: d0:e4:cd:06:1e:f1:6a:b9:19:d4:63:c1:80:a5:13: 02:26:7f:55:7a:34:6e:40:f0:75:86:d3:d7:88:72: ba:c8:d9:45:2d:5c:73:da:fe:04:7b:7c:67:26:49: cc:f2:e5:6e:fc:36:cd:60:66:0b:9d:2c:c0:da:b8: 8a:62:9a:85:8d:0f:74:b6:6c:4f:ff:9e:40:5a:41: 70:a3:8f:75:af:d9:cb:b4:57:b3:88:a8:46:24:61: ab:10:72:62:9a:55:6b:ec:28:5b:ff:69:a9:be:fd: 95:de:d2:fc:f0:12:04:a0:96:f9:de:dc:7f:ec:fa: 51:4a:fb:e7:d4:a3:91:56:b0:e3:50:cc:aa:47:4a: 42:92:e1:a1:db:29:8c:29:83:e9:d9:a6:28:57:2b: 4b:1e:fa:28:0c:c4:08:2f:f6:5a:04:8d:33:d3:5c: 0d:db:82:f9:14:77:16:94:47:25:67:2a:07:05:73: 03:67:50:fe:47:81:61:d6:35:c7:34:84:85:24:bb: 34:e3:f0:f3:43:d7:f3:c2:96:e3:11:19:3f:c0:b9: ad:b5:bb:b5:2a:d6:c4:35:9b:53:a9:ae:50:51:09: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4A:9E:68:6B:48:9F:7A:09:7F:83:8A:21:61:AE:9D:BE:3D:D8:7D X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219417.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:ed::/48 Signature Algorithm: sha256WithRSAEncryption 25:94:06:eb:be:b8:f8:7c:04:ad:71:68:58:e0:bc:45:52:3e: 76:0e:19:6f:79:a6:1b:0a:2e:b1:7a:cd:29:e5:fb:04:95:52: 4e:28:59:5a:f8:de:67:99:69:4c:43:d7:e4:25:0a:86:bc:40: 5f:e0:61:42:bc:c4:f5:d4:7c:71:dd:8c:a3:e3:15:f4:64:b0: d0:92:7c:ba:6f:b7:47:7b:d8:ed:fd:70:bd:16:b1:6c:ab:a5: 06:b4:36:2a:36:7e:c3:c9:2c:b3:04:9c:75:bb:83:07:44:52: fc:94:5e:be:ba:25:84:0d:57:73:71:8d:cf:e4:3b:e2:b5:fc: fd:fd:3b:8c:ea:80:05:5c:44:cd:ab:6a:bf:6a:3e:a8:b6:1c: cb:4d:ad:77:51:cf:7c:2e:5a:39:3d:82:b7:5d:6f:15:9a:16: 32:de:fd:3d:60:69:3a:99:3d:a3:30:b7:95:3e:19:71:c6:9c: 02:b0:37:54:af:ae:a4:a3:ba:e4:25:58:92:7a:c6:15:ca:c2: 7c:3b:05:37:c4:0e:61:f3:85:e9:39:7d:9a:47:fe:68:5e:36: ae:d8:80:46:97:e0:3b:cc:51:10:fc:1d:03:5f:25:86:a1:2e: fd:bc:9b:69:79:91:6b:69:d8:78:09:ea:aa:81:d4:18:24:3a: 48:43:f1:9f -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUH/n7cbxz/XU1LhmINDB5tvcymtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA2MTcxNjIwMDFaFw0yNzA2MTYxNjI1MDFaMDMxMTAvBgNV BAMTKDQ1NEE5RTY4NkI0ODlGN0EwOTdGODM4QTIxNjFBRTlEQkUzREQ4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCker6IK4c0rZHyedGn+/qLM+1r j7soi6okeSGmTNDkzQYe8Wq5GdRjwYClEwImf1V6NG5A8HWG09eIcrrI2UUtXHPa /gR7fGcmSczy5W78Ns1gZgudLMDauIpimoWND3S2bE//nkBaQXCjj3Wv2cu0V7OI qEYkYasQcmKaVWvsKFv/aam+/ZXe0vzwEgSglvne3H/s+lFK++fUo5FWsONQzKpH SkKS4aHbKYwpg+nZpihXK0se+igMxAgv9loEjTPTXA3bgvkUdxaURyVnKgcFcwNn UP5HgWHWNcc0hIUkuzTj8PND1/PCluMRGT/Aua21u7Uq1sQ1m1OprlBRCbSPAgMB AAGjggItMIICKTAdBgNVHQ4EFgQURUqeaGtIn3oJf4OKIWGunb492H0wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTk0MTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAO0wDQYJKoZIhvcNAQEL BQADggEBACWUBuu+uPh8BK1xaFjgvEVSPnYOGW95phsKLrF6zSnl+wSVUk4oWVr4 3meZaUxD1+QlCoa8QF/gYUK8xPXUfHHdjKPjFfRksNCSfLpvt0d72O39cL0WsWyr pQa0Nio2fsPJLLMEnHW7gwdEUvyUXr66JYQNV3Nxjc/kO+K1/P39O4zqgAVcRM2r ar9qPqi2HMtNrXdRz3wuWjk9grddbxWaFjLe/T1gaTqZPaMwt5U+GXHGnAKwN1Sv rqSjuuQlWJJ6xhXKwnw7BTfEDmHzhek5fZpH/mheNq7YgEaX4DvMURD8HQNfJYah Lv28m2l5kWtp2HgJ6qqB1BgkOkhD8Z8= -----END CERTIFICATE-----Generated at Tue Jul 21 22:12:14 2026 by rpki-client