$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS204604.roa File: AS204604.roa (raw, json) Hash identifier: fS/J//CWfiEZPobR8r0AfhSAmlMlsNHmu5ost2r1W3U= Subject key identifier: 2A:33:CF:DD:10:00:AB:34:AC:09:EC:C2:F0:48:18:A9:75:DC:4A:C2 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 6DC8B5A2056807D05A2FA39D42C5A3F62DF4C049 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS204604.roa Signing time: Tue 28 Apr 2026 13:22:49 +0000 ROA not before: Tue 28 Apr 2026 13:17:49 +0000 ROA not after: Tue 27 Apr 2027 13:22:49 +0000 asID: 204604 IP address blocks: 2a0b:4e07:d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c8:b5:a2:05:68:07:d0:5a:2f:a3:9d:42:c5:a3:f6:2d:f4:c0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:49 2026 GMT Not After : Apr 27 13:22:49 2027 GMT Subject: CN=2A33CFDD1000AB34AC09ECC2F04818A975DC4AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f9:e5:c7:e3:01:6f:cd:b8:8e:57:04:fd:70: db:68:d4:aa:66:09:39:d6:b6:a6:a9:af:7d:4d:9c: b3:7f:5c:3c:eb:68:38:a4:35:fd:f0:78:56:4d:d5: d8:74:c0:1e:95:64:ed:4d:3c:8c:dc:e6:92:de:bc: 0b:f2:95:c8:f4:cc:b0:68:a7:66:89:b0:31:84:dd: dd:c4:4f:cb:c3:ae:35:b5:09:bb:64:b5:ec:60:32: d3:37:d7:bb:66:13:75:2f:fe:de:e6:26:4c:c6:f3: 72:3e:f4:6d:0f:e2:3e:97:4f:68:5e:43:30:40:c1: 98:c0:98:1f:28:e5:e7:35:e6:ee:9c:c7:53:9c:dd: 42:e3:5f:c3:f9:11:de:d5:b2:4d:4f:0b:39:f6:51: 63:18:79:24:be:cc:2b:f6:c5:7d:f6:c3:c1:8d:25: b8:da:5c:c5:34:7d:99:80:c5:11:b1:25:11:d8:b1: a3:fe:55:69:cf:b5:53:b8:14:11:b5:e4:78:ec:b8: b5:99:2a:5a:86:70:a2:d9:a6:16:c4:3e:3f:fb:57: 64:0d:37:be:57:fc:8e:55:7b:9a:76:1a:c2:6d:3b: c1:c3:c2:99:8f:69:93:c3:00:95:a8:8c:9d:5b:0c: 5f:d4:1f:e5:16:c3:5a:89:be:a0:a7:35:1a:24:76: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:33:CF:DD:10:00:AB:34:AC:09:EC:C2:F0:48:18:A9:75:DC:4A:C2 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS204604.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:d2::/48 Signature Algorithm: sha256WithRSAEncryption 1e:ec:3c:4a:1b:d3:2b:0d:84:58:a1:7e:1e:15:8c:67:3b:34: 09:0f:0a:3c:d0:e2:24:81:63:20:59:49:cd:b1:1b:53:00:a4: a7:37:b4:64:1c:ca:55:1e:8f:bf:db:1d:94:5b:d8:5c:ae:0c: 9c:cd:07:32:9b:49:0b:ae:e3:fa:2f:6f:61:50:07:86:14:13: 57:10:ba:0b:53:ad:92:ce:c3:ca:48:c7:4d:9d:93:ca:8f:e6: 8b:6d:b7:c5:f1:0d:03:5a:90:ba:70:d2:76:8e:73:dd:c1:ff: 33:46:d7:cf:43:8a:0f:dd:cd:e5:a5:a6:11:03:03:3d:0d:b4: 0f:5d:63:5e:ef:0d:77:96:f1:a5:9e:b7:bb:03:e0:e6:4b:39: f8:58:a2:96:77:e1:28:72:03:f4:55:6e:81:51:9c:cd:6d:a7: 55:c9:ac:c8:48:da:3d:86:62:e2:ef:2b:4a:6c:35:ac:71:c4: 97:b0:e9:e3:f1:8a:aa:92:2b:cc:91:53:f2:9b:7d:7a:bb:45: f9:41:4d:2d:b6:ba:46:7e:ed:09:3f:fc:58:ff:45:94:0d:bf: c8:ee:ce:67:c0:bc:46:d9:66:8c:68:df:f8:30:d9:44:6f:7c: b7:71:b2:f5:c0:46:fa:74:fd:df:21:ee:de:43:b8:8b:d5:98: 10:7d:c7:0e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUbci1ogVoB9BaL6OdQsWj9i30wEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDlaFw0yNzA0MjcxMzIyNDlaMDMxMTAvBgNV BAMTKDJBMzNDRkREMTAwMEFCMzRBQzA5RUNDMkYwNDgxOEE5NzVEQzRBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR+eXH4wFvzbiOVwT9cNto1Kpm CTnWtqapr31NnLN/XDzraDikNf3weFZN1dh0wB6VZO1NPIzc5pLevAvylcj0zLBo p2aJsDGE3d3ET8vDrjW1CbtktexgMtM317tmE3Uv/t7mJkzG83I+9G0P4j6XT2he QzBAwZjAmB8o5ec15u6cx1Oc3ULjX8P5Ed7Vsk1PCzn2UWMYeSS+zCv2xX32w8GN JbjaXMU0fZmAxRGxJRHYsaP+VWnPtVO4FBG15HjsuLWZKlqGcKLZphbEPj/7V2QN N75X/I5Ve5p2GsJtO8HDwpmPaZPDAJWojJ1bDF/UH+UWw1qJvqCnNRokdjFfAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUKjPP3RAAqzSsCezC8EgYqXXcSsIwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDQ2MDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HANIwDQYJKoZIhvcNAQEL BQADggEBAB7sPEob0ysNhFihfh4VjGc7NAkPCjzQ4iSBYyBZSc2xG1MApKc3tGQc ylUej7/bHZRb2FyuDJzNBzKbSQuu4/ovb2FQB4YUE1cQugtTrZLOw8pIx02dk8qP 5ottt8XxDQNakLpw0naOc93B/zNG189Dig/dzeWlphEDAz0NtA9dY17vDXeW8aWe t7sD4OZLOfhYopZ34ShyA/RVboFRnM1tp1XJrMhI2j2GYuLvK0psNaxxxJew6ePx iqqSK8yRU/KbfXq7RflBTS22ukZ+7Qk//Fj/RZQNv8juzmfAvEbZZoxo3/gw2URv fLdxsvXARvp0/d8h7t5DuIvVmBB9xw4= -----END CERTIFICATE-----Generated at Wed May 13 02:38:48 2026 by rpki-client