$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS204611.roa File: AS204611.roa (raw, json) Hash identifier: JaXdhdlqhkHaW3rBPs1qWCLW9Pau5NWxzdONfq+28ps= Subject key identifier: 47:86:25:73:7B:75:0A:53:9A:B3:02:AB:9B:18:6B:8D:E6:33:8C:22 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 0B6B125FCBE6E574951339ACB84DC3DA24CF140A Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS204611.roa Signing time: Mon 04 May 2026 10:20:50 +0000 ROA not before: Mon 04 May 2026 10:15:50 +0000 ROA not after: Mon 03 May 2027 10:20:50 +0000 asID: 204611 IP address blocks: 2a0b:4e07:90::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 May 2026 06:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6b:12:5f:cb:e6:e5:74:95:13:39:ac:b8:4d:c3:da:24:cf:14:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: May 4 10:15:50 2026 GMT Not After : May 3 10:20:50 2027 GMT Subject: CN=478625737B750A539AB302AB9B186B8DE6338C22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:23:ad:5e:30:1f:d6:7c:ad:b4:53:cd:2a: 59:55:ff:e1:d0:dd:74:bb:c1:19:fd:94:eb:b5:ba: 2e:fb:67:b5:3a:d2:02:6f:a1:0a:14:e1:a0:7a:5e: 67:fc:7d:55:3e:cc:82:93:e3:33:5d:f9:24:8a:7b: 2c:c3:13:25:d5:dd:8b:3d:a3:2c:61:95:61:a7:71: bf:ee:b1:c2:89:aa:1f:85:60:e6:95:22:7e:22:e3: 29:35:7a:e9:a6:f0:94:ec:5f:45:93:35:c3:af:33: 2d:1b:cb:06:7c:49:cd:39:57:41:ee:62:30:cd:c8: 9a:75:28:28:e0:11:ca:7e:21:54:44:3c:c5:3d:44: 76:42:b3:cd:1f:6a:d9:73:62:cb:b5:6f:a7:cd:c1: c0:94:4f:59:d0:1c:9a:b8:44:4c:83:87:f4:44:8b: d7:f4:ed:94:a2:1c:bb:53:c6:e3:63:f8:2a:bd:27: c9:7d:75:a7:87:77:c7:53:0c:5d:00:48:8a:5f:9c: 73:00:74:b6:cc:50:c1:a3:6d:71:c3:3d:d3:f2:67: 9b:55:c9:1e:6a:6a:04:04:49:82:64:70:fb:f3:73: f7:3e:05:0c:dc:55:7a:cc:f9:26:95:a0:78:97:7a: 36:48:4a:9b:76:2f:5e:20:ae:e6:a4:d4:2b:ef:32: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:86:25:73:7B:75:0A:53:9A:B3:02:AB:9B:18:6B:8D:E6:33:8C:22 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS204611.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:90::/46 Signature Algorithm: sha256WithRSAEncryption 3e:e7:86:d0:c5:2c:48:3a:4c:02:57:d0:4a:22:a2:6c:b1:cb: 2a:0c:d4:ea:93:32:b6:a2:be:6a:22:d5:55:46:57:76:d5:9f: ef:f8:eb:f6:65:13:e9:3f:d9:26:40:f5:30:2e:48:a5:20:4e: 3c:89:bb:43:21:0e:22:84:17:bc:c3:8e:8f:f5:93:49:f7:10: 1e:5f:72:91:d4:ad:96:8e:ba:a9:a7:2b:db:97:a9:30:51:02: c2:78:d8:f7:5f:c0:f2:97:fc:10:00:0f:e4:03:82:10:07:b9: d0:02:93:83:c2:3a:45:ce:31:5b:7d:43:6b:fa:96:6a:b3:a1: 9c:2e:c6:1f:37:e3:39:09:b7:a8:35:5c:29:78:95:a6:87:83: 91:38:e1:9b:4a:04:ed:34:06:03:68:c0:e5:32:92:6c:44:45: 97:87:17:bc:1e:50:8b:d6:ce:8f:b7:e9:da:8e:5e:92:0e:08: 20:1d:8b:67:7a:4e:2e:5b:b1:6a:0f:a6:e4:51:18:87:5a:62: 4c:fc:b5:64:aa:1f:09:16:67:fd:9d:8e:95:8e:46:b1:66:f3: 89:08:d0:5b:50:97:96:36:fc:24:ff:a4:b1:b7:8a:82:77:89: af:a9:e0:b1:a4:d1:e2:b5:72:68:07:95:ea:9a:05:03:7b:83: f6:d6:83:a7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUC2sSX8vm5XSVEzmsuE3D2iTPFAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA1MDQxMDE1NTBaFw0yNzA1MDMxMDIwNTBaMDMxMTAvBgNV BAMTKDQ3ODYyNTczN0I3NTBBNTM5QUIzMDJBQjlCMTg2QjhERTYzMzhDMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkASOtXjAf1nyttFPNKllV/+HQ 3XS7wRn9lOu1ui77Z7U60gJvoQoU4aB6Xmf8fVU+zIKT4zNd+SSKeyzDEyXV3Ys9 oyxhlWGncb/uscKJqh+FYOaVIn4i4yk1eumm8JTsX0WTNcOvMy0bywZ8Sc05V0Hu YjDNyJp1KCjgEcp+IVREPMU9RHZCs80fatlzYsu1b6fNwcCUT1nQHJq4REyDh/RE i9f07ZSiHLtTxuNj+Cq9J8l9daeHd8dTDF0ASIpfnHMAdLbMUMGjbXHDPdPyZ5tV yR5qagQESYJkcPvzc/c+BQzcVXrM+SaVoHiXejZISpt2L14gruak1CvvMmMbAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUR4Ylc3t1ClOaswKrmxhrjeYzjCIwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDQ2MTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAJAwDQYJKoZIhvcNAQEL BQADggEBAD7nhtDFLEg6TAJX0EoiomyxyyoM1OqTMraivmoi1VVGV3bVn+/46/Zl E+k/2SZA9TAuSKUgTjyJu0MhDiKEF7zDjo/1k0n3EB5fcpHUrZaOuqmnK9uXqTBR AsJ42PdfwPKX/BAAD+QDghAHudACk4PCOkXOMVt9Q2v6lmqzoZwuxh834zkJt6g1 XCl4laaHg5E44ZtKBO00BgNowOUykmxERZeHF7weUIvWzo+36dqOXpIOCCAdi2d6 Ti5bsWoPpuRRGIdaYkz8tWSqHwkWZ/2djpWORrFm84kI0FtQl5Y2/CT/pLG3ioJ3 ia+p4LGk0eK1cmgHleqaBQN7g/bWg6c= -----END CERTIFICATE-----Generated at Sat May 9 22:52:39 2026 by rpki-client