$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219480.roa File: AS219480.roa (raw, json) Hash identifier: WRwx8ZDvZ6qWKetCDM3p/5zYNcok2N3YA9pJ9FqXEpo= Subject key identifier: 8F:02:16:59:A7:00:BB:C6:2C:D8:46:FB:06:E5:91:00:11:9F:A3:39 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 358C01D689F46B49E0D6E23B5C0BB73EFCF6F8EA Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219480.roa Signing time: Thu 18 Jun 2026 10:58:00 +0000 ROA not before: Thu 18 Jun 2026 10:53:00 +0000 ROA not after: Thu 17 Jun 2027 10:58:00 +0000 asID: 219480 IP address blocks: 2a0b:4e07:230::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 09:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8c:01:d6:89:f4:6b:49:e0:d6:e2:3b:5c:0b:b7:3e:fc:f6:f8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 18 10:53:00 2026 GMT Not After : Jun 17 10:58:00 2027 GMT Subject: CN=8F021659A700BBC62CD846FB06E59100119FA339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:f4:f0:40:69:b7:54:fb:ea:98:ed:60:2e: e8:c5:32:21:6b:ec:19:17:5f:9a:4c:d3:07:a8:9b: fe:3f:ec:54:55:9a:a2:1c:4f:e3:6f:ef:84:14:66: 3b:26:68:86:ae:54:04:d7:0e:b2:61:5c:5c:d3:13: 25:72:bb:a7:2b:e1:fe:c6:51:23:b7:67:8d:88:3f: 2e:fb:ca:a2:4e:07:19:56:ee:ba:06:75:4d:24:8e: 42:cd:e8:ef:15:69:39:28:b1:7c:2d:da:6f:eb:87: d8:bd:51:66:c5:76:6c:d8:9b:80:6f:a7:ce:18:51: dc:0b:38:51:b4:cf:f0:80:9c:ff:d7:a5:13:c8:9c: fc:02:e5:62:59:54:e3:61:0d:66:e0:51:83:9a:96: 2e:4e:19:81:00:f7:cd:62:3d:73:0e:0f:76:0e:a3: 65:bf:b0:d7:fe:3a:44:09:27:35:a9:15:79:a5:39: 57:6b:d3:49:74:94:2c:d7:f7:62:35:4e:be:c5:36: b7:ed:46:dd:2b:d4:a9:a7:84:59:ff:9c:4c:18:92: 73:0a:5a:5a:3a:f5:d6:ae:ed:38:d5:cd:69:21:fc: f5:75:88:e4:f3:11:dd:bd:8b:07:94:37:e2:bb:42: 50:3a:88:c8:54:e1:1e:94:51:c8:6e:2c:66:cf:33: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:02:16:59:A7:00:BB:C6:2C:D8:46:FB:06:E5:91:00:11:9F:A3:39 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219480.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:230::/44 Signature Algorithm: sha256WithRSAEncryption 06:be:af:cb:fb:7d:67:0d:a0:ac:69:0f:af:52:df:75:a9:8f: 1c:ba:70:70:79:d6:4f:52:29:e4:cc:18:d5:65:46:db:74:45: 05:a5:44:58:d3:6a:13:09:ab:7f:01:23:7d:0f:ce:9d:de:58: 2a:ad:0c:59:ff:0c:c4:f6:91:b7:fb:fe:0e:76:0f:be:13:0d: f6:c4:3e:4c:99:d4:e1:39:a6:2c:6f:a8:e9:7f:c9:7b:38:85: 44:1d:dc:e7:78:ca:8d:38:14:4a:ea:32:eb:5e:21:8a:33:25: 0f:51:bc:bd:58:76:d6:0f:6e:b6:5f:e4:8d:9b:ce:f1:e6:12: 81:f0:5a:7d:09:ff:c6:08:e3:f9:b7:49:f5:5c:70:ba:a1:c9: 25:4e:49:3b:07:3b:d0:e5:07:fa:ef:c9:9f:5a:a8:91:93:f2: b6:11:68:db:d8:f6:43:57:39:87:31:14:72:b3:d1:ee:82:a2: 40:1d:f7:21:68:3a:fa:11:fe:62:a4:e5:21:95:5f:b1:31:01: 87:10:93:f1:80:c0:bb:c9:13:8b:63:b8:4d:8f:7c:15:ca:16: 06:bb:a8:bd:b3:a7:01:f5:a1:f5:ed:27:42:85:17:d0:37:ec: 93:90:d6:34:69:4f:a5:29:87:9c:0b:b4:27:4a:54:8e:7f:8f: b9:cf:4e:2d -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUNYwB1on0a0ng1uI7XAu3Pvz2+OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA2MTgxMDUzMDBaFw0yNzA2MTcxMDU4MDBaMDMxMTAvBgNV BAMTKDhGMDIxNjU5QTcwMEJCQzYyQ0Q4NDZGQjA2RTU5MTAwMTE5RkEzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KfTwQGm3VPvqmO1gLujFMiFr 7BkXX5pM0weom/4/7FRVmqIcT+Nv74QUZjsmaIauVATXDrJhXFzTEyVyu6cr4f7G USO3Z42IPy77yqJOBxlW7roGdU0kjkLN6O8VaTkosXwt2m/rh9i9UWbFdmzYm4Bv p84YUdwLOFG0z/CAnP/XpRPInPwC5WJZVONhDWbgUYOali5OGYEA981iPXMOD3YO o2W/sNf+OkQJJzWpFXmlOVdr00l0lCzX92I1Tr7FNrftRt0r1KmnhFn/nEwYknMK Wlo69dau7TjVzWkh/PV1iOTzEd29iweUN+K7QlA6iMhU4R6UUchuLGbPM0DNAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUjwIWWacAu8Ys2Eb7BuWRABGfozkwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTk0ODAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04HAjAwDQYJKoZIhvcNAQEL BQADggEBAAa+r8v7fWcNoKxpD69S33Wpjxy6cHB51k9SKeTMGNVlRtt0RQWlRFjT ahMJq38BI30Pzp3eWCqtDFn/DMT2kbf7/g52D74TDfbEPkyZ1OE5pixvqOl/yXs4 hUQd3Od4yo04FErqMuteIYozJQ9RvL1YdtYPbrZf5I2bzvHmEoHwWn0J/8YI4/m3 SfVccLqhySVOSTsHO9DlB/rvyZ9aqJGT8rYRaNvY9kNXOYcxFHKz0e6CokAd9yFo OvoR/mKk5SGVX7ExAYcQk/GAwLvJE4tjuE2PfBXKFga7qL2zpwH1ofXtJ0KFF9A3 7JOQ1jRpT6Uph5wLtCdKVI5/j7nPTi0= -----END CERTIFICATE-----Generated at Sat Jun 27 23:22:25 2026 by rpki-client