$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201541.roa File: AS201541.roa (raw, json) Hash identifier: fcyJskGVBJD7MtXowHqo0S0Al0IT2V4+eHXIly63Vso= Subject key identifier: 0E:21:7A:FF:E0:5C:93:3D:44:EC:77:C7:82:38:79:35:F9:B7:D4:EE Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 2D000DFA426DCCFF429C785B2A0B92DB09234FD1 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201541.roa Signing time: Tue 28 Apr 2026 13:22:48 +0000 ROA not before: Tue 28 Apr 2026 13:17:48 +0000 ROA not after: Tue 27 Apr 2027 13:22:48 +0000 asID: 201541 IP address blocks: 2a0b:4e07:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:00:0d:fa:42:6d:cc:ff:42:9c:78:5b:2a:0b:92:db:09:23:4f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:48 2026 GMT Not After : Apr 27 13:22:48 2027 GMT Subject: CN=0E217AFFE05C933D44EC77C782387935F9B7D4EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:69:cc:bd:53:e2:b9:0e:7d:8e:34:da:c2: 42:89:db:8f:ef:38:15:f7:4b:02:b5:88:e8:d5:c6: 91:50:ae:f8:06:04:00:02:ee:b5:9d:83:7f:fa:ea: 66:ae:ed:22:cc:0f:74:b3:43:c6:03:a6:c6:dc:c8: 4d:63:2c:10:1c:a5:78:f8:f3:9a:b1:3f:cd:ea:58: 74:80:03:6c:18:38:ac:70:be:38:72:49:7f:be:74: 49:58:63:60:5c:ab:0a:b1:ee:ed:78:e6:06:4b:dc: 38:a5:01:84:35:48:08:cf:4c:b7:be:5f:41:55:bb: 89:f9:c7:8c:f8:b7:60:43:b2:27:d0:eb:ba:df:43: d8:bc:fa:0f:c2:96:65:3f:9b:0c:6c:d2:2a:32:07: fa:3b:a7:5a:4c:f0:bc:8f:40:b3:64:25:d9:e6:a3: a4:43:1a:b9:49:09:76:42:0b:70:98:43:88:d0:e3: 9f:9d:84:52:9a:df:89:4d:e9:3e:c6:6f:aa:09:1a: c5:6e:79:3f:b1:ba:c3:43:88:d9:50:58:43:5a:9a: 8b:4e:97:7a:d4:54:e0:f9:27:ea:ce:72:bd:d2:c7: 18:dd:28:fb:7a:21:4e:26:39:54:67:ab:61:1d:67: 1b:2b:7f:40:1a:91:7a:bc:c3:97:d7:6f:e3:f1:67: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:21:7A:FF:E0:5C:93:3D:44:EC:77:C7:82:38:79:35:F9:B7:D4:EE X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS201541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:46::/48 Signature Algorithm: sha256WithRSAEncryption 78:3c:b5:d3:70:ed:67:0c:d4:02:eb:05:36:05:0e:5c:81:ec: 4e:81:e8:0d:09:11:7a:e5:18:03:c3:ab:7e:fb:a8:a1:f7:10: 93:79:ea:9c:2b:48:7a:c4:da:b2:6b:4e:5e:d9:8d:57:03:7b: 2c:fb:14:9a:00:22:42:47:56:6a:64:25:80:53:08:7b:ef:41: 3e:87:bc:f8:21:c7:bd:b8:c3:bd:a7:d9:18:81:c0:8a:3e:5c: 25:6b:ec:51:e8:1e:5f:55:17:92:a3:39:e4:ef:86:89:8a:04: 83:cb:18:e4:e3:57:c9:b8:c4:92:23:bc:32:9c:67:a3:d1:23: 5a:25:94:3b:17:ed:da:8d:2e:ae:7d:91:1f:77:88:e6:c0:a2: 8a:2b:71:8d:bb:d0:14:b7:62:c7:6d:41:83:6a:fe:2c:2c:2e: b8:4c:2c:2a:f2:ad:4e:21:3f:1e:0d:8d:9f:67:12:ae:f6:ef: 75:f1:9a:54:8c:c6:3c:bd:d1:9b:ad:ba:e5:37:d0:0a:72:3f: 91:51:f0:3b:f0:12:c6:50:b0:db:4b:b2:f6:39:0f:fb:8e:bf: 5a:94:a0:75:27:b0:2c:99:e6:e8:88:bf:de:d0:87:02:4d:3c: 2a:b5:21:f3:4d:e4:2a:53:17:fc:15:42:6c:1f:dc:82:cd:51: da:d0:3a:44 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIULQAN+kJtzP9CnHhbKguS2wkjT9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDhaFw0yNzA0MjcxMzIyNDhaMDMxMTAvBgNV BAMTKDBFMjE3QUZGRTA1QzkzM0Q0NEVDNzdDNzgyMzg3OTM1RjlCN0Q0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbmnMvVPiuQ59jjTawkKJ24/v OBX3SwK1iOjVxpFQrvgGBAAC7rWdg3/66mau7SLMD3SzQ8YDpsbcyE1jLBAcpXj4 85qxP83qWHSAA2wYOKxwvjhySX++dElYY2Bcqwqx7u145gZL3DilAYQ1SAjPTLe+ X0FVu4n5x4z4t2BDsifQ67rfQ9i8+g/ClmU/mwxs0ioyB/o7p1pM8LyPQLNkJdnm o6RDGrlJCXZCC3CYQ4jQ45+dhFKa34lN6T7Gb6oJGsVueT+xusNDiNlQWENamotO l3rUVOD5J+rOcr3SxxjdKPt6IU4mOVRnq2EdZxsrf0AakXq8w5fXb+PxZ5mJAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUDiF6/+Bckz1E7HfHgjh5Nfm31O4wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDE1NDEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAEYwDQYJKoZIhvcNAQEL BQADggEBAHg8tdNw7WcM1ALrBTYFDlyB7E6B6A0JEXrlGAPDq377qKH3EJN56pwr SHrE2rJrTl7ZjVcDeyz7FJoAIkJHVmpkJYBTCHvvQT6HvPghx724w72n2RiBwIo+ XCVr7FHoHl9VF5KjOeTvhomKBIPLGOTjV8m4xJIjvDKcZ6PRI1ollDsX7dqNLq59 kR93iObAooorcY270BS3YsdtQYNq/iwsLrhMLCryrU4hPx4NjZ9nEq7273XxmlSM xjy90ZutuuU30ApyP5FR8DvwEsZQsNtLsvY5D/uOv1qUoHUnsCyZ5uiIv97QhwJN PCq1IfNN5CpTF/wVQmwf3ILNUdrQOkQ= -----END CERTIFICATE-----Generated at Tue May 12 22:10:36 2026 by rpki-client