$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202934.roa File: AS202934.roa (raw, json) Hash identifier: BM+WycfjyXX3cMTOH08aXezs/WKO3KiFdFbgIqw04MQ= Subject key identifier: AF:BE:38:8F:F1:26:1C:02:9B:42:E4:69:98:A8:ED:7F:6A:B8:94:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 2E55AEA44097FCEFA7D960AEE8B43F09CCFB5F17 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202934.roa Signing time: Tue 28 Apr 2026 13:22:46 +0000 ROA not before: Tue 28 Apr 2026 13:17:46 +0000 ROA not after: Tue 27 Apr 2027 13:22:46 +0000 asID: 202934 IP address blocks: 2a0b:4e07:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:55:ae:a4:40:97:fc:ef:a7:d9:60:ae:e8:b4:3f:09:cc:fb:5f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:46 2026 GMT Not After : Apr 27 13:22:46 2027 GMT Subject: CN=AFBE388FF1261C029B42E46998A8ED7F6AB894BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:7f:8e:61:e1:57:d9:74:4d:3e:b6:a8:4b: ca:7b:6d:5c:bc:b5:07:21:a9:10:d2:04:a5:a6:0c: 67:84:4f:97:12:45:49:d2:87:f1:3f:62:7a:d5:2a: a9:3c:10:44:c6:08:65:7a:cf:e5:21:17:ca:77:ad: 8a:47:69:f2:92:78:85:47:b3:80:e3:21:27:c1:ec: 25:93:21:5d:0d:b2:97:5c:be:7c:b4:5c:bf:4e:22: 6e:ee:94:e4:b1:41:1e:f6:d4:23:9e:39:c2:3f:1e: 2c:f7:e2:54:c3:02:2d:45:6b:38:23:54:1f:97:4b: d0:74:5f:6c:a2:00:39:ce:50:2b:70:93:e3:e8:54: c9:92:9e:5b:2b:ec:aa:4c:ef:6a:98:eb:d1:8c:a3: 3f:70:c6:91:75:d8:d7:dc:ab:92:22:e6:31:53:33: c4:50:a4:8d:c2:0c:1b:cc:4f:18:ed:8b:0f:42:b8: 97:67:34:89:04:0b:c1:32:79:6e:9e:d5:f7:7c:ef: e2:60:16:f5:37:e6:35:74:52:3e:d4:64:10:7e:eb: 18:3c:b4:24:c4:7d:4c:4b:b9:28:4a:75:d7:b0:72: 3e:f6:8e:09:10:cc:49:2b:dc:55:61:e8:ea:85:c1: d3:52:4c:a3:26:80:59:fd:82:a1:5b:ff:4a:64:73: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BE:38:8F:F1:26:1C:02:9B:42:E4:69:98:A8:ED:7F:6A:B8:94:BF X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3a::/48 Signature Algorithm: sha256WithRSAEncryption 8e:30:77:55:fe:28:dd:26:5d:8e:62:62:d3:92:c6:95:64:31: 9c:8c:12:e8:7e:78:b9:89:95:2a:14:5d:f2:97:3a:b7:3e:ee: ce:7d:91:69:39:aa:5e:86:f8:10:b7:4f:b1:e6:e1:a4:c9:77: 55:ce:ab:07:22:a1:0b:d0:e0:6b:59:ff:1f:ba:1d:f6:36:73: d4:4f:c9:61:b6:32:51:22:f0:1a:94:80:b0:ce:1f:6a:31:f7: b7:b5:c9:bc:37:78:18:aa:be:f6:99:c5:77:c3:97:b7:33:64: 35:01:68:cc:c4:56:87:e5:2a:2a:92:1b:59:0b:20:6b:ce:24: eb:1a:c1:25:a2:28:5e:54:27:f5:f6:d9:91:e8:d9:98:59:04: 24:62:02:7f:0e:00:c7:cf:c1:45:3c:f4:d5:9d:bb:05:2b:fb: 1c:94:73:40:34:97:10:a7:bd:92:2f:18:fa:21:07:12:34:e3: e3:3b:1e:f8:39:13:9b:b7:28:06:3b:70:5c:af:f7:84:49:d6: 60:ec:c6:5e:11:93:ba:c1:82:38:d4:28:7c:c0:12:cc:91:e6: 07:52:e0:af:a1:d8:4b:74:ad:86:53:d9:f1:5c:c3:df:94:f7: a1:de:ef:73:df:68:81:00:95:39:54:6b:a1:60:f7:68:9f:17: 1c:2d:48:7c -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIULlWupECX/O+n2WCu6LQ/Ccz7XxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDZaFw0yNzA0MjcxMzIyNDZaMDMxMTAvBgNV BAMTKEFGQkUzODhGRjEyNjFDMDI5QjQyRTQ2OTk4QThFRDdGNkFCODk0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKX+OYeFX2XRNPraoS8p7bVy8 tQchqRDSBKWmDGeET5cSRUnSh/E/YnrVKqk8EETGCGV6z+UhF8p3rYpHafKSeIVH s4DjISfB7CWTIV0Nspdcvny0XL9OIm7ulOSxQR721COeOcI/Hiz34lTDAi1Fazgj VB+XS9B0X2yiADnOUCtwk+PoVMmSnlsr7KpM72qY69GMoz9wxpF12Nfcq5Ii5jFT M8RQpI3CDBvMTxjtiw9CuJdnNIkEC8EyeW6e1fd87+JgFvU35jV0Uj7UZBB+6xg8 tCTEfUxLuShKddewcj72jgkQzEkr3FVh6OqFwdNSTKMmgFn9gqFb/0pkc13BAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUr744j/EmHAKbQuRpmKjtf2q4lL8wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDI5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HADowDQYJKoZIhvcNAQEL BQADggEBAI4wd1X+KN0mXY5iYtOSxpVkMZyMEuh+eLmJlSoUXfKXOrc+7s59kWk5 ql6G+BC3T7Hm4aTJd1XOqwcioQvQ4GtZ/x+6HfY2c9RPyWG2MlEi8BqUgLDOH2ox 97e1ybw3eBiqvvaZxXfDl7czZDUBaMzEVoflKiqSG1kLIGvOJOsawSWiKF5UJ/X2 2ZHo2ZhZBCRiAn8OAMfPwUU89NWduwUr+xyUc0A0lxCnvZIvGPohBxI04+M7Hvg5 E5u3KAY7cFyv94RJ1mDsxl4Rk7rBgjjUKHzAEsyR5gdS4K+h2Et0rYZT2fFcw9+U 96He73PfaIEAlTlUa6Fg92ifFxwtSHw= -----END CERTIFICATE-----Generated at Wed May 13 10:42:34 2026 by rpki-client