$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS31898.roa File: AS31898.roa (raw, json) Hash identifier: gj/fUcOYbGGf3rI71r0HPj+pf6R2TD4lS7s5xEngvT0= Subject key identifier: AB:DE:A8:7F:6C:C1:56:A5:00:4A:AD:B2:E7:33:E4:65:EE:E2:B6:38 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1254D809DC5FD2076C866D86DA5792DBC99EEF22 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS31898.roa Signing time: Thu 18 Jun 2026 13:15:00 +0000 ROA not before: Thu 18 Jun 2026 13:10:00 +0000 ROA not after: Thu 17 Jun 2027 13:15:00 +0000 asID: 31898 IP address blocks: 2a0b:4e07:230::/44 maxlen: 44 2a0b:4e07:6fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jul 2026 12:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:54:d8:09:dc:5f:d2:07:6c:86:6d:86:da:57:92:db:c9:9e:ef:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 18 13:10:00 2026 GMT Not After : Jun 17 13:15:00 2027 GMT Subject: CN=ABDEA87F6CC156A5004AADB2E733E465EEE2B638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:c0:55:bb:06:1f:40:22:c8:85:31:bd:32: 8b:5c:bc:2c:9d:52:75:f1:1e:9b:29:47:e3:f8:5f: 24:e5:74:ed:4f:9e:ad:eb:1f:72:64:e7:38:6e:75: 50:fe:a4:41:bf:8e:3f:53:83:12:af:c3:7d:f5:22: 6e:ea:c4:ad:9f:e0:c4:e4:bb:91:db:6f:e1:fb:d9: a8:cd:c8:e5:c4:19:71:94:87:e7:9c:f2:ae:aa:22: 54:86:bf:c1:03:f2:3d:10:c8:86:a6:32:0d:4b:d9: 6b:bd:25:07:a6:72:26:96:e7:a9:3a:98:4f:5e:bd: c5:75:87:d4:99:27:c2:a4:ed:34:af:b5:50:fa:ca: 1c:00:bc:25:67:c3:52:cd:f3:d3:05:7a:1c:a2:b9: eb:81:e8:bc:42:49:d1:07:08:b6:d3:d9:9c:54:23: f1:04:b9:26:a2:7f:d3:e5:37:b9:fd:9d:e9:5d:75: ee:0b:46:09:c0:fa:70:ff:bc:cf:22:7a:a1:7b:9f: 3d:2d:ee:f6:a1:c8:31:22:86:eb:46:a5:ad:e1:c6: 42:02:bc:09:b2:a5:14:35:97:88:80:04:6f:c6:a3: c6:92:47:c4:bf:1d:6a:48:5b:c8:f4:57:32:83:f7: 02:2c:41:9d:d9:1f:98:ec:c2:b0:2a:e3:56:a2:f8: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DE:A8:7F:6C:C1:56:A5:00:4A:AD:B2:E7:33:E4:65:EE:E2:B6:38 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS31898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:230::/44 2a0b:4e07:6fc::/48 Signature Algorithm: sha256WithRSAEncryption 7b:82:a3:12:52:b6:7f:66:14:3f:05:2c:ad:14:13:8a:c8:39: 45:07:51:64:67:a0:0b:89:4c:c6:a7:03:bb:e5:75:2d:e1:b7: 8b:aa:f1:4a:3a:d6:99:f0:50:46:bb:89:12:27:73:74:9f:28: ac:03:ac:2d:f8:c4:df:d7:d8:e3:5b:43:83:76:0c:2e:e9:95: f4:77:73:1d:9d:44:15:63:2b:9b:af:6d:1e:65:e3:32:00:0e: 76:ad:b0:1e:6b:db:85:97:5b:e7:2f:a4:a8:84:b6:6b:a3:1d: d1:ed:5b:b8:22:43:8d:a4:cd:47:28:ec:0a:c2:1a:04:7f:81: e6:f0:db:3e:c0:ff:f9:84:dd:d4:5c:30:90:62:14:88:db:92: ee:4c:6b:d6:66:30:a6:d6:b7:96:8f:56:59:af:56:74:bd:52: b7:68:86:8f:e3:80:b3:e8:fc:e8:c7:96:5b:80:60:f8:b0:df: 21:0e:f2:39:3f:20:fb:3b:ca:a8:e9:ad:da:f7:8d:11:13:0a: e4:fd:cb:a5:a4:a7:06:92:91:1e:48:11:63:38:6f:8f:c0:7d: 2d:52:0b:25:98:5a:18:5a:e0:c4:e6:25:1a:5f:5f:e9:2a:93: bc:6b:0f:59:c9:79:a9:3e:fc:5d:ba:81:b7:3d:16:d4:21:ef: f9:1c:e5:52 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUElTYCdxf0gdshm2G2leS28me7yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA2MTgxMzEwMDBaFw0yNzA2MTcxMzE1MDBaMDMxMTAvBgNV BAMTKEFCREVBODdGNkNDMTU2QTUwMDRBQURCMkU3MzNFNDY1RUVFMkI2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHMBVuwYfQCLIhTG9MotcvCyd UnXxHpspR+P4XyTldO1Pnq3rH3Jk5zhudVD+pEG/jj9TgxKvw331Im7qxK2f4MTk u5Hbb+H72ajNyOXEGXGUh+ec8q6qIlSGv8ED8j0QyIamMg1L2Wu9JQemciaW56k6 mE9evcV1h9SZJ8Kk7TSvtVD6yhwAvCVnw1LN89MFehyiueuB6LxCSdEHCLbT2ZxU I/EEuSaif9PlN7n9neldde4LRgnA+nD/vM8ieqF7nz0t7vahyDEihutGpa3hxkIC vAmypRQ1l4iABG/Go8aSR8S/HWpIW8j0VzKD9wIsQZ3ZH5jswrAq41ai+LWTAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUq96of2zBVqUASq2y5zPkZe7itjgwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMzMTg5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCoLTgcCMAMHACoLTgcG/DANBgkq hkiG9w0BAQsFAAOCAQEAe4KjElK2f2YUPwUsrRQTisg5RQdRZGegC4lMxqcDu+V1 LeG3i6rxSjrWmfBQRruJEidzdJ8orAOsLfjE39fY41tDg3YMLumV9HdzHZ1EFWMr m69tHmXjMgAOdq2wHmvbhZdb5y+kqIS2a6Md0e1buCJDjaTNRyjsCsIaBH+B5vDb PsD/+YTd1FwwkGIUiNuS7kxr1mYwpta3lo9WWa9WdL1St2iGj+OAs+j86MeWW4Bg +LDfIQ7yOT8g+zvKqOmt2veNERMK5P3LpaSnBpKRHkgRYzhvj8B9LVILJZhaGFrg xOYlGl9f6SqTvGsPWcl5qT78XbqBtz0W1CHv+RzlUg== -----END CERTIFICATE-----Generated at Mon Jul 13 02:44:52 2026 by rpki-client