$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202076.roa File: AS202076.roa (raw, json) Hash identifier: YSxsUDWP8T/ky3TdixZ/NrNg8vv8ON5ulP6YNoFwP0g= Subject key identifier: C4:33:0B:B3:80:0A:18:76:2D:01:B9:C4:56:90:3B:AF:B8:6A:45:43 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 28D3A77849A62C8E51594BFBE2BF6BAD868B80B7 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202076.roa Signing time: Tue 28 Apr 2026 13:22:48 +0000 ROA not before: Tue 28 Apr 2026 13:17:48 +0000 ROA not after: Tue 27 Apr 2027 13:22:48 +0000 asID: 202076 IP address blocks: 2a0b:4e07:30::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 18:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d3:a7:78:49:a6:2c:8e:51:59:4b:fb:e2:bf:6b:ad:86:8b:80:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:48 2026 GMT Not After : Apr 27 13:22:48 2027 GMT Subject: CN=C4330BB3800A18762D01B9C456903BAFB86A4543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:17:7a:61:71:15:ae:86:f3:7c:51:e1:53: 3c:aa:e4:0d:fe:c5:a3:ae:1d:ce:89:82:dc:b2:bd: d6:51:98:88:a8:3f:fe:a2:ea:6c:cf:f1:d7:5e:56: c1:dc:8f:3c:2a:ca:76:5f:06:4a:ca:40:67:35:5d: 62:0c:9e:1c:42:50:d1:6a:50:7c:ed:42:8a:16:a2: 4e:ed:d4:3c:76:2e:2a:1a:33:79:11:39:6a:4e:c2: 1a:3a:bf:99:b5:ba:c5:53:e0:49:15:4d:be:4f:76: 5a:bc:19:f1:d6:34:49:1a:bf:0d:e4:92:18:5f:b5: a1:9b:37:41:62:99:20:3b:fe:2d:cb:3b:e2:cb:eb: 40:c7:a5:da:db:3c:47:b2:c2:f1:02:4c:4c:b1:c8: 71:89:cb:b2:7f:cf:6b:04:7f:01:07:ca:d9:c9:7b: 01:79:cd:8a:d4:00:2b:b5:7a:54:e6:d6:cf:c8:01: cc:2b:b5:03:16:dc:23:ac:76:81:3a:0d:3b:1b:46: 97:ee:d8:54:f8:f1:da:61:8f:cd:40:3c:7b:ca:65: 10:b4:60:d5:fe:19:68:54:4e:17:c8:dd:79:fe:15: ed:10:9e:6a:2d:b2:d6:24:69:b6:94:a2:9a:38:69: 30:1f:b2:1c:1b:6b:96:7a:35:45:60:33:4b:3a:0d: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:33:0B:B3:80:0A:18:76:2D:01:B9:C4:56:90:3B:AF:B8:6A:45:43 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202076.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:30::/46 Signature Algorithm: sha256WithRSAEncryption 52:28:38:c5:8e:35:fc:86:d9:49:3f:d6:fa:9a:ae:b7:0e:6f: a8:dd:4a:d9:53:c0:99:27:76:51:e0:9f:20:36:a3:f0:f3:9e: 9b:30:2d:c7:14:9d:0c:41:3c:f9:b3:40:27:eb:3c:7f:f1:a9: 18:19:ad:2b:37:dc:83:fc:5b:bb:8e:53:fe:5b:ab:b9:cd:54: 00:dd:2e:9e:8b:35:27:5e:b5:10:a9:3f:91:b5:31:ab:fd:8d: 8e:54:b4:45:91:58:6e:63:04:8f:f6:53:2e:38:b3:68:0d:ea: 59:0a:ff:d5:79:de:09:9e:da:d3:26:ee:b2:3a:43:45:ab:8c: 6a:10:e0:1d:11:bf:3c:2e:f9:82:42:b3:37:da:de:2f:f5:2d: ec:55:1e:84:88:92:8c:6d:78:3a:ef:70:3f:89:18:d9:66:53: 88:eb:7b:43:b3:fd:82:75:1b:17:8e:9c:41:4f:fd:ca:16:ac: 96:41:dd:2e:72:ce:e5:1c:ff:b9:8c:85:70:19:9f:ef:93:0e: 0b:8b:31:57:bc:03:bf:01:e1:11:36:52:1b:75:57:0f:ce:e8: a6:d1:0a:03:4e:4a:89:5b:50:7a:4b:70:d9:f3:4a:a0:11:0f: e6:7d:74:9b:a7:76:b5:dd:10:a6:d9:79:8d:37:04:58:58:9e: 1c:31:6a:a4 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUKNOneEmmLI5RWUv74r9rrYaLgLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDhaFw0yNzA0MjcxMzIyNDhaMDMxMTAvBgNV BAMTKEM0MzMwQkIzODAwQTE4NzYyRDAxQjlDNDU2OTAzQkFGQjg2QTQ1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuBd6YXEVrobzfFHhUzyq5A3+ xaOuHc6JgtyyvdZRmIioP/6i6mzP8ddeVsHcjzwqynZfBkrKQGc1XWIMnhxCUNFq UHztQooWok7t1Dx2LioaM3kROWpOwho6v5m1usVT4EkVTb5Pdlq8GfHWNEkavw3k khhftaGbN0FimSA7/i3LO+LL60DHpdrbPEeywvECTEyxyHGJy7J/z2sEfwEHytnJ ewF5zYrUACu1elTm1s/IAcwrtQMW3COsdoE6DTsbRpfu2FT48dphj81APHvKZRC0 YNX+GWhUThfI3Xn+Fe0QnmotstYkabaUopo4aTAfshwba5Z6NUVgM0s6DbQhAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUxDMLs4AKGHYtAbnEVpA7r7hqRUMwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDIwNzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HADAwDQYJKoZIhvcNAQEL BQADggEBAFIoOMWONfyG2Uk/1vqarrcOb6jdStlTwJkndlHgnyA2o/DznpswLccU nQxBPPmzQCfrPH/xqRgZrSs33IP8W7uOU/5bq7nNVADdLp6LNSdetRCpP5G1Mav9 jY5UtEWRWG5jBI/2Uy44s2gN6lkK/9V53gme2tMm7rI6Q0WrjGoQ4B0Rvzwu+YJC szfa3i/1LexVHoSIkoxteDrvcD+JGNlmU4jre0Oz/YJ1GxeOnEFP/coWrJZB3S5y zuUc/7mMhXAZn++TDguLMVe8A78B4RE2Uht1Vw/O6KbRCgNOSolbUHpLcNnzSqAR D+Z9dJundrXdEKbZeY03BFhYnhwxaqQ= -----END CERTIFICATE-----Generated at Wed May 6 02:40:21 2026 by rpki-client