$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS198657.roa File: AS198657.roa (raw, json) Hash identifier: nKwjn7CTZ7luzgbVUIkK5GZYGXAe23E7rAobgLTnndw= Subject key identifier: 83:CD:3B:45:38:38:B5:5B:4D:6B:3B:0D:64:01:27:AE:20:36:A2:5A Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 47750BA70681FA475531642EF6D13B2AB8082028 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS198657.roa Signing time: Mon 07 Sep 2026 20:43:09 +0000 ROA not before: Mon 07 Sep 2026 20:38:09 +0000 ROA not after: Mon 06 Sep 2027 20:43:09 +0000 asID: 198657 IP address blocks: 2a0b:4e07:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 02:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:75:0b:a7:06:81:fa:47:55:31:64:2e:f6:d1:3b:2a:b8:08:20:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Sep 7 20:38:09 2026 GMT Not After : Sep 6 20:43:09 2027 GMT Subject: CN=83CD3B453838B55B4D6B3B0D640127AE2036A25A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:64:50:48:7f:cd:5d:6d:58:c4:26:72:b5: b6:94:30:1f:94:d4:91:d8:8a:d2:33:cb:74:8a:95: 4e:c3:e7:7f:4f:66:34:0b:e7:83:bd:0b:03:0e:68: 11:9a:75:67:71:1c:1c:a6:bb:c3:77:65:a6:30:f5: e1:e1:94:cd:bc:6d:c6:0d:1f:e8:2f:1f:d2:81:3f: a1:d1:15:d7:63:62:6e:f8:8f:26:58:a8:ea:b1:f4: 4c:0e:5c:43:91:23:ed:05:9c:78:c2:72:60:ac:bb: 68:4d:50:c0:1b:75:27:79:4a:93:ed:46:b3:51:69: a3:bb:74:9c:bd:16:58:15:0f:76:35:b8:ba:a0:9a: 8c:40:01:ad:2e:83:21:48:d0:4b:1d:d0:95:a2:4a: e1:a9:ed:74:bc:b8:1c:11:93:2c:e5:68:b6:9c:45: bf:14:cd:8b:f0:7d:4b:e0:9b:d2:a4:84:c9:bf:16: b2:59:13:38:3c:00:d5:5a:8f:2a:fd:ab:83:32:e9: a3:ad:12:85:98:2a:23:f2:c3:f1:d2:58:d6:90:6e: de:c8:04:96:ce:07:86:ce:6e:77:70:83:06:7f:b3: af:75:cf:48:8f:38:64:4e:aa:e9:e3:01:56:0d:17: 2f:25:32:93:c6:df:eb:2a:67:db:49:5c:ee:04:31: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CD:3B:45:38:38:B5:5B:4D:6B:3B:0D:64:01:27:AE:20:36:A2:5A X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS198657.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2800::/40 Signature Algorithm: sha256WithRSAEncryption 19:6e:5a:a5:ad:76:23:e0:5e:d0:d2:8e:b9:c6:c2:57:c8:cb: ea:9d:dc:19:f3:57:eb:b7:0d:d0:93:09:3b:f5:74:ee:18:e6: 4a:e8:10:24:90:84:8f:99:d5:af:b0:73:da:c6:f8:95:fd:7b: d9:96:55:0f:12:f9:db:0b:30:2e:16:1a:61:04:52:7b:ab:15: 66:01:63:a7:e7:cd:d9:90:f1:db:2f:d3:25:38:e9:09:90:2e: 69:f2:db:27:35:24:ec:55:e1:e7:32:b3:f8:db:c1:ab:b7:af: 9e:08:08:d8:54:a8:d3:ec:d5:df:b6:d4:a1:07:6f:e5:76:13: f8:34:71:b4:eb:a2:98:11:8e:37:6d:e7:52:f0:de:e6:8c:ba: 3d:4e:39:1f:63:12:73:4b:46:d5:f5:c4:04:fe:75:e3:79:dc: fb:28:90:34:8b:2d:a8:db:9b:98:bb:e4:ba:65:d4:88:e7:34: 59:6a:5b:f2:f0:bc:97:83:84:20:4e:36:f0:95:b3:31:9d:3b: 96:56:11:2a:83:dd:ff:9c:0a:d6:ef:1c:3f:05:9d:1f:b9:d5: dc:fa:bf:36:23:1d:e8:4e:56:d5:fc:75:31:36:ed:06:f4:69: cf:22:2f:e4:65:f2:7b:5a:de:72:7f:2a:7d:bc:5a:c5:0d:ff: 09:f5:90:21 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUR3ULpwaB+kdVMWQu9tE7KrgIICgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA5MDcyMDM4MDlaFw0yNzA5MDYyMDQzMDlaMDMxMTAvBgNV BAMTKDgzQ0QzQjQ1MzgzOEI1NUI0RDZCM0IwRDY0MDEyN0FFMjAzNkEyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxomRQSH/NXW1YxCZytbaUMB+U 1JHYitIzy3SKlU7D539PZjQL54O9CwMOaBGadWdxHBymu8N3ZaYw9eHhlM28bcYN H+gvH9KBP6HRFddjYm74jyZYqOqx9EwOXEORI+0FnHjCcmCsu2hNUMAbdSd5SpPt RrNRaaO7dJy9FlgVD3Y1uLqgmoxAAa0ugyFI0Esd0JWiSuGp7XS8uBwRkyzlaLac Rb8UzYvwfUvgm9KkhMm/FrJZEzg8ANVajyr9q4My6aOtEoWYKiPyw/HSWNaQbt7I BJbOB4bObndwgwZ/s691z0iPOGROqunjAVYNFy8lMpPG3+sqZ9tJXO4EMVrfAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUg807RTg4tVtNazsNZAEnriA2olowHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMxOTg2NTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqC04HKDANBgkqhkiG9w0BAQsF AAOCAQEAGW5apa12I+Be0NKOucbCV8jL6p3cGfNX67cN0JMJO/V07hjmSugQJJCE j5nVr7Bz2sb4lf172ZZVDxL52wswLhYaYQRSe6sVZgFjp+fN2ZDx2y/TJTjpCZAu afLbJzUk7FXh5zKz+NvBq7evnggI2FSo0+zV37bUoQdv5XYT+DRxtOuimBGON23n UvDe5oy6PU45H2MSc0tG1fXEBP5143nc+yiQNIstqNubmLvkumXUiOc0WWpb8vC8 l4OEIE428JWzMZ07llYRKoPd/5wK1u8cPwWdH7nV3Pq/NiMd6E5W1fx1MTbtBvRp zyIv5GXye1recn8qfbxaxQ3/CfWQIQ== -----END CERTIFICATE-----Generated at Thu Sep 10 17:17:34 2026 by rpki-client