
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS203534.roa
File: AS203534.roa (raw, json)
Hash identifier: T/ID7mYUnfjfA8G3DK/zRtFVQ+Vq4JQ+HukB2GAWTbE=
Subject key identifier: 75:FA:79:16:08:EB:5A:F4:8C:A2:70:6D:EA:F4:96:CE:A1:79:15:48
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 0469145B5DC82C81544870140E01D753C6072427
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS203534.roa
Signing time: Tue 28 Apr 2026 13:22:49 +0000
ROA not before: Tue 28 Apr 2026 13:17:49 +0000
ROA not after: Tue 27 Apr 2027 13:22:49 +0000
asID: 203534
IP address blocks: 2a0b:4e07:be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:69:14:5b:5d:c8:2c:81:54:48:70:14:0e:01:d7:53:c6:07:24:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Apr 28 13:17:49 2026 GMT
Not After : Apr 27 13:22:49 2027 GMT
Subject: CN=75FA791608EB5AF48CA2706DEAF496CEA1791548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:8d:b7:a3:8a:0c:ee:b4:34:d8:c9:e4:73:
0e:4c:2e:9c:33:a6:f3:4c:de:f7:f2:a9:bd:3b:c1:
a5:17:05:e7:a5:73:fc:f8:bd:2a:65:a7:ba:7c:a1:
2f:b8:71:58:ba:c9:82:ff:f2:62:a4:42:3a:a4:9f:
c8:22:28:3b:4c:3d:1a:c8:68:6a:69:94:48:0c:75:
31:09:2d:a9:4c:93:23:f2:3b:41:75:89:d9:9e:59:
70:23:44:7c:27:89:dc:2e:35:93:c4:22:68:57:83:
4e:c9:aa:bb:21:3f:e1:ce:b5:f9:fd:92:08:05:a8:
18:70:95:53:7a:ca:11:ee:70:2a:e5:80:15:4b:5d:
6d:cd:6e:e2:ba:50:60:2a:bb:3f:32:51:41:79:e7:
54:59:44:0f:32:b7:d1:3b:38:1a:31:25:5f:18:32:
e2:d7:43:40:be:ad:d9:3f:d1:ae:10:04:e1:ff:44:
02:78:65:1e:32:82:df:5a:35:e7:6b:82:4d:36:a7:
30:ed:22:c6:19:bc:3e:b2:5a:c3:4e:3f:a3:ab:39:
58:a4:07:5f:4d:41:6c:66:a4:43:e0:04:f1:e0:ab:
34:95:a6:e7:43:15:1e:6a:82:ef:ab:d2:7f:c9:b9:
2e:e2:63:c4:db:ab:dd:28:8d:bc:af:ba:58:ed:c8:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FA:79:16:08:EB:5A:F4:8C:A2:70:6D:EA:F4:96:CE:A1:79:15:48
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS203534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:be::/48
Signature Algorithm: sha256WithRSAEncryption
79:d8:0a:35:db:13:6f:3e:f3:a3:c6:65:97:32:87:0f:1e:79:
75:ca:6e:7c:86:f6:be:29:97:83:b6:d4:3c:24:f9:63:4a:26:
1d:61:e6:fa:32:33:97:5d:66:3d:87:9d:60:ea:99:68:ce:83:
22:eb:5b:79:14:66:bf:96:88:ad:6f:98:ee:4c:bd:31:a3:dc:
9c:b8:98:da:1e:1b:10:4d:2c:55:d7:86:d4:75:e3:da:22:73:
aa:14:2b:1a:38:51:d6:1e:13:79:30:d3:36:ce:60:88:ce:55:
af:d8:fb:03:5a:1f:ff:5f:f1:88:4e:9c:36:4a:f9:17:21:6a:
0d:e6:93:be:c9:7e:83:40:f4:43:59:81:7e:1e:f5:59:48:59:
44:11:c4:aa:0b:b1:62:6b:9a:7c:70:22:06:40:62:29:a2:31:
5a:80:7d:bf:4a:0f:fa:98:4f:45:11:70:69:a8:f7:06:71:13:
f4:89:98:86:4d:f6:4c:e5:8a:d0:62:99:d6:76:18:d0:dc:da:
57:17:37:e6:94:9c:f8:2c:45:73:39:cb:f2:ab:4f:35:8b:19:
8e:a2:e9:d3:0b:aa:b5:32:b6:fe:be:52:8a:93:e5:b5:6f:fb:
ba:05:c6:86:bf:f2:0f:3a:13:d4:43:e0:85:8d:9a:4f:fc:86:
9f:f3:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:44 2026 by rpki-client