$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201269.roa File: AS201269.roa (raw, json) Hash identifier: X6b4/XNQVi2GBS9G4Yipih9tkaJ4uzvXQ1GEQei7rTA= Subject key identifier: 14:0C:AE:D2:F4:CF:A5:38:BE:80:2A:03:00:3F:4A:BA:8C:36:F0:42 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 23C047AA9E3ECAD68F79351A2AA0721B23371308 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201269.roa Signing time: Tue 28 Apr 2026 13:22:48 +0000 ROA not before: Tue 28 Apr 2026 13:17:48 +0000 ROA not after: Tue 27 Apr 2027 13:22:48 +0000 asID: 201269 IP address blocks: 2a0b:4e07:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c0:47:aa:9e:3e:ca:d6:8f:79:35:1a:2a:a0:72:1b:23:37:13:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:48 2026 GMT Not After : Apr 27 13:22:48 2027 GMT Subject: CN=140CAED2F4CFA538BE802A03003F4ABA8C36F042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5d:23:4c:ce:da:57:0c:9e:8f:87:10:37:b7: b7:e9:01:46:de:f7:a7:89:72:4b:c6:ff:b5:35:54: 36:91:99:05:4f:f8:e6:c2:1a:c9:06:12:0d:d1:f2: 68:d0:48:29:1e:3c:be:7d:83:c9:80:0e:c8:a6:05: 25:cf:05:a7:f1:6f:b7:4f:ea:01:78:fa:ef:7a:47: 89:e6:d2:9d:56:80:0a:cc:0d:13:cb:f8:7f:c2:5f: 8b:15:18:75:09:91:7e:84:06:02:dc:46:1d:29:63: 1f:d7:bc:17:c6:0c:b1:62:31:5e:cf:56:f1:b5:00: e6:91:ad:5a:4b:fd:c5:aa:69:c8:fb:89:15:8c:ba: d7:90:40:fe:94:dc:84:69:48:6f:cb:60:21:c3:7d: 6a:23:df:13:f8:ca:fd:65:1d:c1:68:d3:61:0a:70: fd:e1:33:e7:d8:7d:ef:52:bd:85:66:63:10:cf:9a: 2f:da:6a:20:a1:9e:ad:7e:dd:66:37:31:27:24:63: 7c:24:b7:96:54:5e:95:fb:2a:a5:a1:69:f9:81:3a: 6d:b0:5d:0f:6a:01:d7:c6:d1:93:3d:dd:a9:c9:f1: 2b:ef:73:f1:5b:57:ca:a6:34:07:21:44:ea:9c:ec: 8f:6f:f3:e5:54:7c:de:fd:6e:43:98:18:8f:5c:df: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0C:AE:D2:F4:CF:A5:38:BE:80:2A:03:00:3F:4A:BA:8C:36:F0:42 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201269.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2a::/48 Signature Algorithm: sha256WithRSAEncryption 6f:19:ce:a1:f7:68:8b:5f:7b:c7:28:7c:1b:c9:83:60:99:16: 67:55:5f:8e:cf:5a:17:c0:da:13:d4:82:e2:77:1e:49:1e:c3: 06:ca:59:3e:e6:58:e5:a5:8d:e6:f1:51:9f:31:34:e0:aa:ad: 89:0f:1d:53:eb:ec:7b:ef:02:5b:f0:0c:8c:2b:7f:4b:b7:b4: 33:2a:bf:5e:68:e9:47:94:ce:62:bb:4f:ac:7c:3d:de:52:68: 66:a3:69:bb:2b:1e:a6:a9:ea:d6:d4:b1:9c:c6:ce:60:2e:1b: 75:f0:b9:89:8e:2f:5e:5b:07:87:bb:54:33:64:d3:e5:f5:06: 8b:0a:b4:6d:64:6e:d1:16:d6:f4:0d:b7:6d:a7:2f:8c:ef:ad: 03:d7:6c:a2:94:fc:a2:19:67:d4:3c:0f:8f:af:70:89:1f:a2: 68:a9:84:d6:aa:f5:8b:e9:66:86:11:51:2b:de:6c:7d:2d:24: 35:b5:36:83:67:75:ed:07:98:1e:14:0a:cd:16:1e:f5:9c:e3: d5:7a:d4:6f:ab:84:8d:08:f2:ec:04:ab:f8:1e:f4:0d:82:81: b1:ec:6b:d3:bb:eb:aa:db:19:6c:49:b4:5f:19:01:9a:1f:f2: 12:eb:ff:f1:01:f7:d5:43:1f:15:65:86:70:f6:f7:44:1e:8f: 71:40:7c:06 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUI8BHqp4+ytaPeTUaKqByGyM3EwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDhaFw0yNzA0MjcxMzIyNDhaMDMxMTAvBgNV BAMTKDE0MENBRUQyRjRDRkE1MzhCRTgwMkEwMzAwM0Y0QUJBOEMzNkYwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXSNMztpXDJ6PhxA3t7fpAUbe 96eJckvG/7U1VDaRmQVP+ObCGskGEg3R8mjQSCkePL59g8mADsimBSXPBafxb7dP 6gF4+u96R4nm0p1WgArMDRPL+H/CX4sVGHUJkX6EBgLcRh0pYx/XvBfGDLFiMV7P VvG1AOaRrVpL/cWqacj7iRWMuteQQP6U3IRpSG/LYCHDfWoj3xP4yv1lHcFo02EK cP3hM+fYfe9SvYVmYxDPmi/aaiChnq1+3WY3MSckY3wkt5ZUXpX7KqWhafmBOm2w XQ9qAdfG0ZM93anJ8Svvc/FbV8qmNAchROqc7I9v8+VUfN79bkOYGI9c3zJlAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUFAyu0vTPpTi+gCoDAD9Kuow28EIwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDEyNjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HACowDQYJKoZIhvcNAQEL BQADggEBAG8ZzqH3aItfe8cofBvJg2CZFmdVX47PWhfA2hPUguJ3HkkewwbKWT7m WOWljebxUZ8xNOCqrYkPHVPr7HvvAlvwDIwrf0u3tDMqv15o6UeUzmK7T6x8Pd5S aGajabsrHqap6tbUsZzGzmAuG3XwuYmOL15bB4e7VDNk0+X1BosKtG1kbtEW1vQN t22nL4zvrQPXbKKU/KIZZ9Q8D4+vcIkfomiphNaq9YvpZoYRUSvebH0tJDW1NoNn de0HmB4UCs0WHvWc49V61G+rhI0I8uwEq/ge9A2CgbHsa9O766rbGWxJtF8ZAZof 8hLr//EB99VDHxVlhnD290Qej3FAfAY= -----END CERTIFICATE-----Generated at Wed May 13 00:34:56 2026 by rpki-client