$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS203062.roa File: AS203062.roa (raw, json) Hash identifier: 5y+lBXTYJFMs829ovJ3rch8h3KR9oFKAgaGXVYqphvE= Subject key identifier: 8D:7B:C4:B7:98:5E:E7:E9:EC:FD:77:A1:9D:89:06:76:7B:BB:45:20 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4C0E702D436EEBC36A703890F21EC16B5C077E3A Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS203062.roa Signing time: Tue 28 Apr 2026 13:22:48 +0000 ROA not before: Tue 28 Apr 2026 13:17:48 +0000 ROA not after: Tue 27 Apr 2027 13:22:48 +0000 asID: 203062 IP address blocks: 2a0b:4e07:210::/46 maxlen: 46 2a0b:4e07:7000::/37 maxlen: 48 2a0b:4e07:7800::/37 maxlen: 48 2a0b:4e07:8000::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 May 2026 14:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0e:70:2d:43:6e:eb:c3:6a:70:38:90:f2:1e:c1:6b:5c:07:7e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:48 2026 GMT Not After : Apr 27 13:22:48 2027 GMT Subject: CN=8D7BC4B7985EE7E9ECFD77A19D8906767BBB4520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:27:84:c4:8c:2e:30:61:1f:02:05:a8:6c: a1:f4:02:41:80:a8:5a:77:97:a9:83:40:82:d4:51: 9b:75:ab:4b:df:c7:61:4a:ba:88:29:bb:f3:2c:8c: 96:95:b1:20:ff:03:60:0d:29:ed:f0:14:6d:cd:c7: 17:b8:6d:57:7a:b7:de:5e:c1:4c:f0:35:bb:cd:b0: 71:ff:85:da:30:69:bf:35:f0:6c:1b:74:c5:02:dc: b3:58:18:14:52:68:e4:cf:b3:cc:53:77:0e:fa:b0: cc:2f:71:38:13:57:ac:23:15:7a:ec:ee:81:1b:d7: e6:c6:cd:be:93:e1:4f:16:1f:0c:68:68:71:70:9e: 7d:da:00:c4:09:5c:2a:55:ba:c1:56:91:ad:ac:3d: 08:64:73:fe:92:8b:fb:c1:9a:bf:3e:f5:a6:5b:5a: 28:a9:09:68:99:f9:8e:b1:a0:9f:ad:e8:a1:24:ae: a0:99:49:fb:5a:f4:b5:92:f4:8a:9e:42:d7:f4:e2: ee:7b:bd:ef:ae:be:37:95:54:d5:79:21:69:fb:76: 11:31:5f:27:b3:4e:d2:ad:c8:16:02:15:34:65:66: 30:42:8f:40:41:90:f3:a7:cf:b5:6f:b2:ec:9d:40: 03:b1:2a:06:e9:4a:68:73:95:4f:75:86:30:81:77: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7B:C4:B7:98:5E:E7:E9:EC:FD:77:A1:9D:89:06:76:7B:BB:45:20 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS203062.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:210::/46 2a0b:4e07:7000::-2a0b:4e07:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8d:1d:9b:5e:ec:83:3f:b4:95:b0:a1:8c:e5:fa:ac:bb:1c:b8: cb:42:28:ee:88:82:a8:4f:37:70:3c:d3:f7:93:93:da:4e:85: b5:96:cb:cd:e6:73:3b:9e:6c:dc:cc:d7:88:9d:5d:3b:2d:a3: 65:7c:44:3c:5f:cf:2a:11:f5:49:64:de:4e:cc:b4:65:3a:00: 7e:d8:96:bc:e2:46:43:69:bd:4d:f4:97:b5:c3:b9:96:25:94: 91:3b:d1:b5:73:4c:f5:28:a4:14:41:ed:0d:44:53:57:a7:dd: ed:f6:8a:e4:d9:3f:7f:56:0c:f7:77:30:f1:75:34:59:93:0d: 5d:0b:77:5b:9f:cf:ef:f9:cf:02:d8:21:ba:77:8f:d5:48:9d: 3c:05:9c:56:e7:c6:36:65:48:de:93:a0:45:b3:4f:07:38:69: ed:81:7f:be:b2:c4:7e:f3:d1:a5:c7:cc:a3:03:bc:01:13:bf: 71:70:ca:c4:8b:5c:12:12:5a:77:27:e2:91:79:bb:b6:1b:93: 03:13:1f:7c:9c:53:8d:cb:65:61:52:8e:17:1d:d8:11:87:cd: 36:b9:13:bf:9c:0f:13:c5:46:bf:32:b8:23:e1:30:99:de:76: 14:e2:0d:7c:4f:db:d0:63:6d:ed:26:42:a2:50:1f:9a:eb:cb: 2e:2c:65:e5 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUTA5wLUNu68NqcDiQ8h7Ba1wHfjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDhaFw0yNzA0MjcxMzIyNDhaMDMxMTAvBgNV BAMTKDhEN0JDNEI3OTg1RUU3RTlFQ0ZENzdBMTlEODkwNjc2N0JCQjQ1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmieExIwuMGEfAgWobKH0AkGA qFp3l6mDQILUUZt1q0vfx2FKuogpu/MsjJaVsSD/A2ANKe3wFG3Nxxe4bVd6t95e wUzwNbvNsHH/hdowab818GwbdMUC3LNYGBRSaOTPs8xTdw76sMwvcTgTV6wjFXrs 7oEb1+bGzb6T4U8WHwxoaHFwnn3aAMQJXCpVusFWka2sPQhkc/6Si/vBmr8+9aZb WiipCWiZ+Y6xoJ+t6KEkrqCZSfta9LWS9IqeQtf04u57ve+uvjeVVNV5IWn7dhEx XyezTtKtyBYCFTRlZjBCj0BBkPOnz7VvsuydQAOxKgbpSmhzlU91hjCBd4RzAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUjXvEt5he5+ns/XehnYkGdnu7RSAwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDMwNjIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw MwYIKwYBBQUHAQcBAf8EJDAiMCAEAgACMBoDBwIqC04HAhAwDwMGBCoLTgdwAwUD KgtOADANBgkqhkiG9w0BAQsFAAOCAQEAjR2bXuyDP7SVsKGM5fqsuxy4y0Io7oiC qE83cDzT95OT2k6FtZbLzeZzO55s3MzXiJ1dOy2jZXxEPF/PKhH1SWTeTsy0ZToA ftiWvOJGQ2m9TfSXtcO5liWUkTvRtXNM9SikFEHtDURTV6fd7faK5Nk/f1YM93cw 8XU0WZMNXQt3W5/P7/nPAtghuneP1UidPAWcVufGNmVI3pOgRbNPBzhp7YF/vrLE fvPRpcfMowO8ARO/cXDKxItcEhJadyfikXm7thuTAxMffJxTjctlYVKOFx3YEYfN NrkTv5wPE8VGvzK4I+Ewmd52FOINfE/b0GNt7SZColAfmuvLLixl5Q== -----END CERTIFICATE-----Generated at Thu May 7 06:02:42 2026 by rpki-client