$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201957.roa File: AS201957.roa (raw, json) Hash identifier: U+b+W+Yit/71aE0EMR01JeZxysIV6LKQhDALqEmRFzo= Subject key identifier: 40:EA:F5:A0:9B:95:15:05:65:4E:54:31:E1:12:FB:CB:21:2D:37:17 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 7278120967E59F083B9C7C2F68B13D04812AD602 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201957.roa Signing time: Fri 23 Oct 2026 20:59:46 +0000 ROA not before: Fri 23 Oct 2026 20:54:46 +0000 ROA not after: Fri 22 Oct 2027 20:59:46 +0000 asID: 201957 IP address blocks: 2a0b:4e07:8a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 22:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:78:12:09:67:e5:9f:08:3b:9c:7c:2f:68:b1:3d:04:81:2a:d6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 23 20:54:46 2026 GMT Not After : Oct 22 20:59:46 2027 GMT Subject: CN=40EAF5A09B951505654E5431E112FBCB212D3717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:d0:a9:0a:c1:40:93:b8:dc:45:c2:b7:e7: 55:f2:b3:7d:bf:31:49:a0:cb:8a:f6:25:f2:b6:b1: ba:a1:93:bc:14:76:3f:ad:2a:27:10:2b:0c:b4:27: 13:66:7f:0d:c0:15:3e:cf:c6:d0:64:d6:e9:1e:23: ba:7a:a3:10:19:1a:3d:a6:f8:82:b8:02:48:56:17: f7:b0:37:d7:de:f1:18:82:69:bd:37:43:03:78:04: 43:20:03:80:d8:c4:e2:01:64:b4:a7:cd:3c:18:3c: 18:f8:5c:23:ae:da:60:39:bf:a7:ba:bc:66:fc:1a: c8:ad:36:e6:67:08:6f:3d:57:ba:6b:05:03:57:fe: 1a:cd:c7:05:03:84:da:d7:a6:58:ae:0f:0f:8a:6c: 3b:09:93:f5:43:ac:13:d0:1a:b4:05:40:e1:a9:47: 7b:d4:70:ec:c1:50:3c:dc:fc:3b:de:f9:36:09:6d: 9c:4a:43:37:39:43:7d:48:cb:b9:17:d9:d3:40:03: 9f:2e:45:fd:28:e1:a5:82:92:a0:4f:52:27:c8:2d: 6a:bf:83:d0:5e:88:9b:71:18:8e:fa:8d:0e:15:55: 5a:18:ee:81:f7:ff:c1:14:11:4c:8f:3e:11:33:13: 5f:01:e7:ac:e5:8f:73:65:29:13:d1:8f:06:c0:34: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EA:F5:A0:9B:95:15:05:65:4E:54:31:E1:12:FB:CB:21:2D:37:17 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201957.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:8a::/48 Signature Algorithm: sha256WithRSAEncryption 9f:ac:bf:98:76:00:dd:2d:cf:a6:37:11:7d:ee:f2:22:b8:a0: 6d:cb:da:d3:34:e7:13:3d:6f:37:2c:34:dc:1c:8b:ce:08:59: 24:2e:60:fe:96:d5:c3:bf:27:ea:00:4f:d6:4d:7a:63:de:34: c3:cc:a9:8a:f0:73:50:4c:56:ff:8d:0b:3c:47:8c:29:d4:41: ec:b6:e3:74:7f:03:04:74:32:1a:8d:0d:5f:f6:e4:22:a8:7c: 06:77:5d:c1:23:2d:2d:83:b7:16:46:ce:41:e4:5c:59:47:75: 95:ff:b6:53:93:ca:0b:1b:21:ac:d1:73:29:d3:51:72:a9:7f: ba:e0:5f:e0:15:23:48:98:b8:ea:80:1c:e6:ee:7f:6d:88:89: 45:30:68:3c:a9:5e:fb:15:49:1a:0a:5e:8c:eb:0c:10:0e:93: 44:b2:0e:4e:8d:a5:4a:64:51:aa:53:75:82:0b:23:51:00:bc: ef:ba:96:0d:f9:10:0a:22:e2:bd:22:a4:63:fa:f5:cd:35:8f: af:e1:e1:8c:74:95:61:66:82:40:90:9d:36:de:7f:e6:1f:90: f2:f4:93:3a:40:40:67:6d:4d:fd:32:66:5b:7b:d0:6c:72:e6: 22:e9:23:7e:69:a9:02:58:4c:75:93:43:c7:a4:49:97:ed:75: 78:7c:06:98 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUcngSCWflnwg7nHwvaLE9BIEq1gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjEwMjMyMDU0NDZaFw0yNzEwMjIyMDU5NDZaMDMxMTAvBgNV BAMTKDQwRUFGNUEwOUI5NTE1MDU2NTRFNTQzMUUxMTJGQkNCMjEyRDM3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZnNCpCsFAk7jcRcK351Xys32/ MUmgy4r2JfK2sbqhk7wUdj+tKicQKwy0JxNmfw3AFT7PxtBk1ukeI7p6oxAZGj2m +IK4AkhWF/ewN9fe8RiCab03QwN4BEMgA4DYxOIBZLSnzTwYPBj4XCOu2mA5v6e6 vGb8GsitNuZnCG89V7prBQNX/hrNxwUDhNrXpliuDw+KbDsJk/VDrBPQGrQFQOGp R3vUcOzBUDzc/Dve+TYJbZxKQzc5Q31Iy7kX2dNAA58uRf0o4aWCkqBPUifILWq/ g9BeiJtxGI76jQ4VVVoY7oH3/8EUEUyPPhEzE18B56zlj3NlKRPRjwbANLl9AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUQOr1oJuVFQVlTlQx4RL7yyEtNxcwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDE5NTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAIowDQYJKoZIhvcNAQEL BQADggEBAJ+sv5h2AN0tz6Y3EX3u8iK4oG3L2tM05xM9bzcsNNwci84IWSQuYP6W 1cO/J+oAT9ZNemPeNMPMqYrwc1BMVv+NCzxHjCnUQey243R/AwR0MhqNDV/25CKo fAZ3XcEjLS2DtxZGzkHkXFlHdZX/tlOTygsbIazRcynTUXKpf7rgX+AVI0iYuOqA HObuf22IiUUwaDypXvsVSRoKXozrDBAOk0SyDk6NpUpkUapTdYILI1EAvO+6lg35 EAoi4r0ipGP69c01j6/h4Yx0lWFmgkCQnTbef+YfkPL0kzpAQGdtTf0yZlt70Gxy 5iLpI35pqQJYTHWTQ8ekSZftdXh8Bpg= -----END CERTIFICATE-----Generated at Sat Oct 24 17:21:18 2026 by rpki-client