$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201345.roa File: AS201345.roa (raw, json) Hash identifier: wSL11TTF8lSw6AiAzy7suQklT3enLDYT+gK2pWS1bm0= Subject key identifier: B3:56:C3:54:1B:81:DE:99:C6:0F:DA:C2:FD:79:02:E3:2E:58:85:67 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 5F5D4C53629B83F324CEFE38DCABC2B1CBDAA285 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201345.roa Signing time: Mon 04 May 2026 10:29:08 +0000 ROA not before: Mon 04 May 2026 10:24:08 +0000 ROA not after: Mon 03 May 2027 10:29:08 +0000 asID: 201345 IP address blocks: 2a0b:4e07:94::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5d:4c:53:62:9b:83:f3:24:ce:fe:38:dc:ab:c2:b1:cb:da:a2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: May 4 10:24:08 2026 GMT Not After : May 3 10:29:08 2027 GMT Subject: CN=B356C3541B81DE99C60FDAC2FD7902E32E588567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:59:fe:7a:9b:1e:1c:7a:65:6a:bf:3d:17: e4:42:81:88:c4:f9:56:6d:88:4d:a6:80:7d:1a:76: 06:4b:7c:e1:3f:34:cb:31:dc:9d:ef:3f:7d:39:a7: c7:a2:c6:58:d5:15:c5:5f:6c:ce:ab:c5:6f:13:ce: 7f:e8:6e:33:ee:bf:a3:e2:58:39:d9:1f:4a:90:cf: 23:eb:7d:8c:70:07:d4:e6:58:12:7c:08:db:32:8c: 2e:6b:ee:44:48:41:7b:17:96:bb:85:df:15:6c:73: dd:bc:32:91:11:36:7e:ff:93:d4:41:5b:ec:1b:35: b2:b8:fa:1f:2e:24:0e:2f:e9:eb:51:ee:bd:4f:7c: 04:67:24:76:10:91:3e:ba:f6:f3:a3:c7:ba:ed:05: d0:a6:37:74:c3:2e:7c:54:9d:50:b3:16:da:6d:8f: 8c:c5:cb:57:9c:91:a5:3a:34:7a:b6:7f:2e:ed:12: 05:20:73:37:26:40:e9:ea:9f:18:9c:06:be:21:55: b3:1a:70:99:3e:e0:a1:1f:4e:cd:d1:ab:14:14:65: d0:76:73:40:d5:fd:dc:50:b1:af:23:88:69:19:8e: 9a:d8:7a:96:c9:f2:3e:48:52:fc:e7:58:be:f6:48: 85:95:f0:2e:94:cf:7c:2a:84:ef:1a:9c:23:b1:f5: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:56:C3:54:1B:81:DE:99:C6:0F:DA:C2:FD:79:02:E3:2E:58:85:67 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201345.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:94::/46 Signature Algorithm: sha256WithRSAEncryption 14:02:2f:41:eb:7f:4e:48:7c:68:f4:e1:eb:5a:0f:64:75:41: 9e:0b:8c:be:47:d1:95:09:aa:80:8e:fd:5e:b6:ab:9f:0b:59: 73:19:72:f2:9b:2e:eb:25:b4:1a:37:8e:cc:9f:f7:8b:f9:ee: fb:ac:fd:8d:70:3f:2f:dd:c1:36:cc:b7:c9:41:71:a7:e5:05: 96:d3:28:71:20:71:e1:47:56:c5:a2:dc:ad:10:27:b9:00:1a: ce:47:8e:1e:b8:08:54:f0:67:73:2b:29:ca:4d:e7:6d:69:08: 0e:4b:52:ee:1a:23:29:a7:9e:a7:1b:20:03:9d:3f:14:28:aa: d4:1c:2a:72:d4:27:35:12:10:e7:87:91:15:aa:25:24:69:64: a5:b6:e4:da:7b:fb:cf:dc:64:90:5e:4e:91:91:75:75:da:d7: 20:87:d7:9b:d3:3e:1d:74:90:65:a1:48:0c:fd:3e:9a:5d:f3: 97:7d:48:c9:2e:28:6b:bc:ed:2f:0d:23:67:70:27:ea:90:2b: 6e:e4:b4:2d:45:17:0f:75:a7:6d:a3:68:2d:13:2b:4a:3a:86: 8e:a5:6b:45:6c:d9:ad:ca:a4:f4:7b:78:b3:72:a0:30:01:6f: d3:e5:44:55:87:df:1d:33:b1:21:d8:26:0c:0c:21:10:72:48: bc:2e:36:05 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUX11MU2Kbg/Mkzv443KvCscvaooUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA1MDQxMDI0MDhaFw0yNzA1MDMxMDI5MDhaMDMxMTAvBgNV BAMTKEIzNTZDMzU0MUI4MURFOTlDNjBGREFDMkZENzkwMkUzMkU1ODg1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYFn+epseHHplar89F+RCgYjE +VZtiE2mgH0adgZLfOE/NMsx3J3vP305p8eixljVFcVfbM6rxW8Tzn/objPuv6Pi WDnZH0qQzyPrfYxwB9TmWBJ8CNsyjC5r7kRIQXsXlruF3xVsc928MpERNn7/k9RB W+wbNbK4+h8uJA4v6etR7r1PfARnJHYQkT669vOjx7rtBdCmN3TDLnxUnVCzFtpt j4zFy1eckaU6NHq2fy7tEgUgczcmQOnqnxicBr4hVbMacJk+4KEfTs3RqxQUZdB2 c0DV/dxQsa8jiGkZjprYepbJ8j5IUvznWL72SIWV8C6Uz3wqhO8anCOx9QYXAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUs1bDVBuB3pnGD9rC/XkC4y5YhWcwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDEzNDUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAJQwDQYJKoZIhvcNAQEL BQADggEBABQCL0Hrf05IfGj04etaD2R1QZ4LjL5H0ZUJqoCO/V62q58LWXMZcvKb LusltBo3jsyf94v57vus/Y1wPy/dwTbMt8lBcaflBZbTKHEgceFHVsWi3K0QJ7kA Gs5Hjh64CFTwZ3MrKcpN521pCA5LUu4aIymnnqcbIAOdPxQoqtQcKnLUJzUSEOeH kRWqJSRpZKW25Np7+8/cZJBeTpGRdXXa1yCH15vTPh10kGWhSAz9Pppd85d9SMku KGu87S8NI2dwJ+qQK27ktC1FFw91p22jaC0TK0o6ho6la0Vs2a3KpPR7eLNyoDAB b9PlRFWH3x0zsSHYJgwMIRBySLwuNgU= -----END CERTIFICATE-----Generated at Tue May 12 21:54:02 2026 by rpki-client