$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS197137.roa File: AS197137.roa (raw, json) Hash identifier: aPahSRqXMJoatWhNFbiTGPGEcAZMySndRyk6ugEcxgk= Subject key identifier: 1E:18:10:A1:41:8C:54:0D:8B:F7:B1:5B:FE:97:04:C4:6A:53:F8:76 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4E701B30B73344CDA5C15F428CD35DAB7272CF74 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS197137.roa Signing time: Mon 24 Aug 2026 08:54:19 +0000 ROA not before: Mon 24 Aug 2026 08:49:19 +0000 ROA not after: Mon 23 Aug 2027 08:54:19 +0000 asID: 197137 IP address blocks: 2a0b:4e07:6200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:70:1b:30:b7:33:44:cd:a5:c1:5f:42:8c:d3:5d:ab:72:72:cf:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Aug 24 08:49:19 2026 GMT Not After : Aug 23 08:54:19 2027 GMT Subject: CN=1E1810A1418C540D8BF7B15BFE9704C46A53F876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:c9:79:f0:0f:b9:8c:4e:0e:94:52:48:2c: 66:8d:21:16:2e:4d:f8:a9:51:7f:5d:59:0b:06:59: f5:de:ee:b1:8c:2b:3e:1c:04:00:f0:3e:1f:15:27: d4:8c:10:f0:4c:b8:36:3c:e1:6a:93:d5:9d:f6:0e: f8:0c:05:f5:6e:95:83:17:2b:38:c3:71:04:2d:f0: 4a:29:d3:bf:69:c6:35:62:4b:cb:36:7e:a6:b3:2c: 36:5b:c2:f5:f2:f9:b2:3d:77:0c:55:65:8d:cf:b8: 77:78:28:40:5f:f8:d9:df:2d:0c:26:e5:a6:05:32: 59:be:15:7c:30:48:23:f1:b1:e6:0b:b4:7a:36:5a: 95:a0:73:e3:06:54:8d:a9:b1:85:82:1d:38:23:96: db:c7:ba:f1:20:10:ed:a1:66:01:8d:3b:f6:81:98: 78:d3:46:59:a2:70:9d:bf:3f:d6:4f:92:ec:2d:70: a9:7d:a6:eb:73:9b:e2:f1:59:e8:6e:6c:8f:54:c2: ca:1e:a5:89:2b:84:1a:23:d1:ab:8d:85:66:64:b7: 31:f0:66:ef:80:1c:18:4f:8b:35:e9:46:a0:29:62: a2:20:ec:b3:78:c6:ea:a8:49:a8:71:98:01:7f:69: 03:5c:53:a7:f2:69:8f:d0:98:9d:89:a8:b2:5c:83: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:10:A1:41:8C:54:0D:8B:F7:B1:5B:FE:97:04:C4:6A:53:F8:76 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS197137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6200::/40 Signature Algorithm: sha256WithRSAEncryption 6f:b3:70:58:23:6c:b5:2b:bd:8d:70:e3:63:46:a7:20:03:ad: f4:14:fd:fb:cf:58:f4:98:13:8b:ab:7f:ec:13:6e:00:ef:09: ae:3c:9b:1d:d8:41:b5:40:19:38:ad:0c:a2:06:fe:29:76:2c: cd:7b:b8:64:3c:4f:3f:6a:f8:56:e7:97:87:f8:12:66:1e:79: d0:5a:5f:cb:63:ab:6b:bd:be:da:60:d1:a0:0b:6f:d9:39:39: 2c:32:87:c2:6a:e3:ac:41:15:0a:40:67:a4:ec:72:84:3a:43: a8:41:4e:ff:25:4a:12:48:71:14:b1:8a:a4:c7:00:2c:e1:04: 95:93:7e:ab:ff:96:a6:43:4d:e4:a6:f1:72:82:18:b8:65:e9: 9c:41:6a:ff:14:98:6b:2b:dc:12:08:7e:fe:93:46:26:d6:12: e9:95:0d:09:92:31:e9:26:77:ca:91:56:11:88:3f:e9:c5:b6: 13:b2:44:52:31:cb:b8:ce:f2:96:a0:79:2c:1f:ed:1c:ff:1a: d9:12:66:1d:08:79:cf:9b:ee:0b:15:08:9a:d0:97:f7:69:66: dd:7a:ff:28:13:7a:ab:13:fb:c8:56:41:15:83:80:22:9e:27: 8b:11:dc:8d:77:dd:03:97:59:dc:66:99:a5:04:76:6f:c1:6c: 11:e7:b3:e0 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUTnAbMLczRM2lwV9CjNNdq3Jyz3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA4MjQwODQ5MTlaFw0yNzA4MjMwODU0MTlaMDMxMTAvBgNV BAMTKDFFMTgxMEExNDE4QzU0MEQ4QkY3QjE1QkZFOTcwNEM0NkE1M0Y4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaEMl58A+5jE4OlFJILGaNIRYu TfipUX9dWQsGWfXe7rGMKz4cBADwPh8VJ9SMEPBMuDY84WqT1Z32DvgMBfVulYMX KzjDcQQt8Eop079pxjViS8s2fqazLDZbwvXy+bI9dwxVZY3PuHd4KEBf+NnfLQwm 5aYFMlm+FXwwSCPxseYLtHo2WpWgc+MGVI2psYWCHTgjltvHuvEgEO2hZgGNO/aB mHjTRlmicJ2/P9ZPkuwtcKl9putzm+LxWehubI9UwsoepYkrhBoj0auNhWZktzHw Zu+AHBhPizXpRqApYqIg7LN4xuqoSahxmAF/aQNcU6fyaY/QmJ2JqLJcg+BpAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUHhgQoUGMVA2L97Fb/pcExGpT+HYwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMxOTcxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqC04HYjANBgkqhkiG9w0BAQsF AAOCAQEAb7NwWCNstSu9jXDjY0anIAOt9BT9+89Y9JgTi6t/7BNuAO8JrjybHdhB tUAZOK0Mogb+KXYszXu4ZDxPP2r4VueXh/gSZh550Fpfy2Ora72+2mDRoAtv2Tk5 LDKHwmrjrEEVCkBnpOxyhDpDqEFO/yVKEkhxFLGKpMcALOEElZN+q/+WpkNN5Kbx coIYuGXpnEFq/xSYayvcEgh+/pNGJtYS6ZUNCZIx6SZ3ypFWEYg/6cW2E7JEUjHL uM7ylqB5LB/tHP8a2RJmHQh5z5vuCxUImtCX92lm3Xr/KBN6qxP7yFZBFYOAIp4n ixHcjXfdA5dZ3GaZpQR2b8FsEeez4A== -----END CERTIFICATE-----Generated at Fri Sep 4 20:34:11 2026 by rpki-client