$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS149020.roa File: AS149020.roa (raw, json) Hash identifier: jB9Ei+7idX8ucg3l0vrko/UPVD0pINWZgVsblENgblE= Subject key identifier: 9F:C7:2D:1B:8A:AA:CA:F5:92:21:38:29:9A:ED:4F:73:82:D3:D3:C1 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 3C042D39B14AA6DF232040530FEE616B7FC58551 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS149020.roa Signing time: Tue 28 Apr 2026 13:22:47 +0000 ROA not before: Tue 28 Apr 2026 13:17:47 +0000 ROA not after: Tue 27 Apr 2027 13:22:47 +0000 asID: 149020 IP address blocks: 2a0b:4e07:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:04:2d:39:b1:4a:a6:df:23:20:40:53:0f:ee:61:6b:7f:c5:85:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:47 2026 GMT Not After : Apr 27 13:22:47 2027 GMT Subject: CN=9FC72D1B8AAACAF5922138299AED4F7382D3D3C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:e8:51:16:c8:1e:04:92:03:dd:3d:a8:33: fb:e2:73:d1:11:c4:bf:6d:65:d1:f9:44:ac:f9:95: 63:75:84:b3:1e:9f:59:2c:5d:b4:58:d4:8f:89:a8: 66:38:d3:46:29:1b:81:1f:36:39:47:87:fa:df:9e: 69:6d:ca:78:a8:00:1c:77:cb:83:af:70:b0:77:18: ca:a2:4d:af:a2:49:12:fb:e0:68:bb:b0:2f:d6:00: d2:25:d4:0d:f4:bd:21:bb:25:27:6a:0f:70:7e:bf: c0:5a:56:f4:de:91:16:5a:20:4d:99:56:65:30:4e: 52:59:5b:32:ce:29:5c:35:13:34:24:64:0a:2e:20: 9e:35:56:27:dc:c1:ad:1c:d0:a0:da:e4:dd:1b:93: 92:18:9c:df:d3:bd:1b:d6:2d:bd:3e:52:5c:92:03: 12:65:5c:60:b0:c9:8d:b6:6f:ba:aa:19:77:61:76: f4:7c:84:be:bf:b7:ce:17:6a:a6:d6:c0:12:eb:a7: e2:96:fa:5f:db:2c:d8:0f:36:02:92:8b:22:0a:b2: 74:e0:ed:5e:a5:75:39:88:bb:1f:55:95:76:6f:d0: 2f:44:2e:12:2a:02:7f:f3:13:41:57:16:d3:e8:10: 78:b7:89:8c:74:33:09:50:60:09:4c:52:6b:06:48: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C7:2D:1B:8A:AA:CA:F5:92:21:38:29:9A:ED:4F:73:82:D3:D3:C1 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS149020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:100::/40 Signature Algorithm: sha256WithRSAEncryption 23:ba:34:ce:3f:34:c8:fd:96:d8:59:e2:84:19:35:12:2d:cb: 7a:58:96:c8:2d:99:39:87:42:86:8b:03:aa:1c:80:89:ec:f1: 5d:40:03:b1:d7:2b:45:64:b0:76:8d:7a:f3:69:94:fd:d1:ec: c9:81:c4:ca:c7:3d:9a:61:9f:16:ea:05:c3:f9:47:bb:37:8e: e1:d0:97:8d:c5:b5:90:f5:1f:b5:7f:6a:30:16:a2:36:02:ec: 5b:85:fe:1e:fc:7c:07:ad:24:9a:c0:13:98:a4:4d:36:41:79: ac:4a:e3:bc:a0:d8:2c:af:a9:32:88:cc:44:82:fe:2d:d1:11: bb:a5:4c:f0:e0:01:dc:70:18:fe:a5:08:5d:29:6c:00:26:2c: 91:dc:a5:38:c2:f1:b9:4f:54:6c:2f:6b:33:ec:c3:90:dd:35: bc:cc:2c:ee:48:c1:e9:6f:de:83:1c:e6:8a:60:70:41:58:9c: 15:a4:df:95:32:c3:93:ed:c5:85:7d:17:75:3e:24:e4:5e:c0: eb:c0:54:88:79:da:b7:ed:99:ba:0a:d1:e5:1b:c4:2c:2a:71: 1b:62:b0:5f:6d:e6:8b:29:f1:f4:ca:2f:ea:52:5d:fd:9d:4f: 6f:06:95:37:56:48:24:7c:45:d7:47:7c:2e:b4:d1:ee:a6:fa: 01:8a:93:e1 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUPAQtObFKpt8jIEBTD+5ha3/FhVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDdaFw0yNzA0MjcxMzIyNDdaMDMxMTAvBgNV BAMTKDlGQzcyRDFCOEFBQUNBRjU5MjIxMzgyOTlBRUQ0RjczODJEM0QzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TehRFsgeBJID3T2oM/vic9ER xL9tZdH5RKz5lWN1hLMen1ksXbRY1I+JqGY400YpG4EfNjlHh/rfnmltynioABx3 y4OvcLB3GMqiTa+iSRL74Gi7sC/WANIl1A30vSG7JSdqD3B+v8BaVvTekRZaIE2Z VmUwTlJZWzLOKVw1EzQkZAouIJ41Vifcwa0c0KDa5N0bk5IYnN/TvRvWLb0+UlyS AxJlXGCwyY22b7qqGXdhdvR8hL6/t84XaqbWwBLrp+KW+l/bLNgPNgKSiyIKsnTg 7V6ldTmIux9VlXZv0C9ELhIqAn/zE0FXFtPoEHi3iYx0MwlQYAlMUmsGSH7TAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUn8ctG4qqyvWSITgpmu1Pc4LT08EwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMxNDkwMjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqC04HATANBgkqhkiG9w0BAQsF AAOCAQEAI7o0zj80yP2W2FnihBk1Ei3LeliWyC2ZOYdChosDqhyAiezxXUADsdcr RWSwdo1682mU/dHsyYHEysc9mmGfFuoFw/lHuzeO4dCXjcW1kPUftX9qMBaiNgLs W4X+Hvx8B60kmsATmKRNNkF5rErjvKDYLK+pMojMRIL+LdERu6VM8OAB3HAY/qUI XSlsACYskdylOMLxuU9UbC9rM+zDkN01vMws7kjB6W/egxzmimBwQVicFaTflTLD k+3FhX0XdT4k5F7A68BUiHnat+2ZugrR5RvELCpxG2KwX23miynx9Mov6lJd/Z1P bwaVN1ZIJHxF10d8LrTR7qb6AYqT4Q== -----END CERTIFICATE-----Generated at Wed May 13 00:34:56 2026 by rpki-client