$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201445.roa File: AS201445.roa (raw, json) Hash identifier: G11kBPLS0IK254H6fBeXGJbyink3yni7XmGPZfzZZwA= Subject key identifier: 53:C3:9D:2A:86:1D:DA:46:4F:10:95:81:21:6D:C7:1E:5C:0E:98:81 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 3336B0455C9C8C6A8E90167E049D686824A46F69 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201445.roa Signing time: Tue 28 Apr 2026 13:22:46 +0000 ROA not before: Tue 28 Apr 2026 13:17:46 +0000 ROA not after: Tue 27 Apr 2027 13:22:46 +0000 asID: 201445 IP address blocks: 2a0b:4e07:26::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:36:b0:45:5c:9c:8c:6a:8e:90:16:7e:04:9d:68:68:24:a4:6f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:46 2026 GMT Not After : Apr 27 13:22:46 2027 GMT Subject: CN=53C39D2A861DDA464F109581216DC71E5C0E9881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:55:5c:50:ce:4a:fd:51:a6:7d:74:50:2e: a8:d3:ba:62:5e:8b:0a:85:ab:10:1e:67:3a:da:7c: d7:8a:3a:37:e4:8a:53:15:7e:ab:5e:da:05:b2:eb: 26:2d:c4:4d:80:3e:bb:e2:10:3a:ff:18:42:8b:fc: 77:14:ea:69:b4:1c:da:d0:e7:30:0d:4b:57:2c:ca: a2:d8:c9:40:ff:a5:6b:b2:d1:26:51:d5:b8:dd:fb: 17:2c:45:44:f4:e3:4b:fc:6b:d9:26:8e:71:87:f1: 93:1d:c1:67:95:f4:8b:ee:a5:7d:4d:46:e5:2e:9c: a3:b1:f0:b5:a4:0d:6b:dc:19:c8:9a:54:54:a0:ce: 8e:2c:01:55:7b:64:32:b5:3b:eb:f1:72:51:80:4e: a6:a4:d1:41:85:34:d4:38:fa:81:e9:9a:09:bf:1f: 33:a9:19:53:49:06:1e:ce:44:1f:9d:77:d1:66:5f: 39:2c:34:9c:0b:77:8e:b6:e9:31:ba:2e:8b:29:4b: a5:8a:e2:ba:2d:c1:8f:f4:0c:56:66:4c:7c:4e:cb: 7c:6a:98:de:07:27:24:1d:69:52:da:9c:bc:40:37: d4:8f:cd:a8:02:78:f7:ad:e3:a5:cf:ec:63:60:c8: ed:ae:05:ce:83:ba:3b:fa:24:b2:aa:2c:30:0d:d9: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:9D:2A:86:1D:DA:46:4F:10:95:81:21:6D:C7:1E:5C:0E:98:81 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201445.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:26::/47 Signature Algorithm: sha256WithRSAEncryption 39:07:08:c2:37:31:09:aa:f3:b9:e6:8f:2b:de:0f:59:a4:b8: 3e:8d:01:e3:d1:f6:0b:71:3e:e5:41:0b:cc:48:18:b6:c1:b0: 49:b7:68:9c:b2:88:0d:66:27:a5:ec:45:9f:73:4f:75:2b:80: 3d:06:7f:b5:c4:bf:f4:6c:72:a5:fe:c5:68:90:7b:de:3c:c1: 88:48:38:4d:29:b1:8c:3c:29:16:bd:c9:aa:de:af:cd:a0:51: b7:2e:40:31:32:f5:41:88:2b:8c:3e:a9:03:d2:46:9b:34:4d: 7b:53:1b:f1:b2:23:57:76:e5:f6:2d:d9:15:06:93:c1:9f:28: a5:a9:3e:f8:00:45:03:5a:fb:f1:c8:65:c8:4d:77:b6:d8:25: c4:1b:d3:93:4a:71:f5:7d:be:94:9a:b8:85:ab:6f:58:2c:5d: 43:d4:34:22:1a:60:d1:eb:a4:4c:82:be:48:45:ef:ab:b5:e8: ae:ca:83:b6:82:6e:54:d9:8f:85:c1:b9:41:25:f2:d2:b7:fa: 73:9b:ab:f4:37:45:27:05:5e:13:d4:bf:a3:f3:3a:67:4e:28: a1:7e:66:f6:3b:72:af:9b:87:4b:98:9a:60:5c:c6:bb:20:a5: b5:06:0d:75:be:34:0d:10:8d:05:9c:89:9f:8a:85:2f:18:9e: 8b:36:a8:ff -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUMzawRVycjGqOkBZ+BJ1oaCSkb2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDZaFw0yNzA0MjcxMzIyNDZaMDMxMTAvBgNV BAMTKDUzQzM5RDJBODYxRERBNDY0RjEwOTU4MTIxNkRDNzFFNUMwRTk4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfv1VcUM5K/VGmfXRQLqjTumJe iwqFqxAeZzrafNeKOjfkilMVfqte2gWy6yYtxE2APrviEDr/GEKL/HcU6mm0HNrQ 5zANS1csyqLYyUD/pWuy0SZR1bjd+xcsRUT040v8a9kmjnGH8ZMdwWeV9IvupX1N RuUunKOx8LWkDWvcGciaVFSgzo4sAVV7ZDK1O+vxclGATqak0UGFNNQ4+oHpmgm/ HzOpGVNJBh7ORB+dd9FmXzksNJwLd4626TG6LospS6WK4rotwY/0DFZmTHxOy3xq mN4HJyQdaVLanLxAN9SPzagCePet46XP7GNgyO2uBc6Dujv6JLKqLDAN2V/xAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUU8OdKoYd2kZPEJWBIW3HHlwOmIEwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDE0NDUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEqC04HACYwDQYJKoZIhvcNAQEL BQADggEBADkHCMI3MQmq87nmjyveD1mkuD6NAePR9gtxPuVBC8xIGLbBsEm3aJyy iA1mJ6XsRZ9zT3UrgD0Gf7XEv/RscqX+xWiQe948wYhIOE0psYw8KRa9yarer82g UbcuQDEy9UGIK4w+qQPSRps0TXtTG/GyI1d25fYt2RUGk8GfKKWpPvgARQNa+/HI ZchNd7bYJcQb05NKcfV9vpSauIWrb1gsXUPUNCIaYNHrpEyCvkhF76u16K7Kg7aC blTZj4XBuUEl8tK3+nObq/Q3RScFXhPUv6PzOmdOKKF+ZvY7cq+bh0uYmmBcxrsg pbUGDXW+NA0QjQWciZ+KhS8Ynos2qP8= -----END CERTIFICATE-----Generated at Tue May 12 22:10:37 2026 by rpki-client