$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS206604.roa File: AS206604.roa (raw, json) Hash identifier: 330sMdPIByD1X1s+ACT4N8z7Q45cE/iCIW8EPkiTb/Y= Subject key identifier: 73:88:61:44:AC:EB:AE:AE:87:85:EC:EF:76:E4:BD:29:9D:84:54:A4 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4F1F90E21A547970321077B474D7F14D8EC7FE45 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS206604.roa Signing time: Tue 28 Apr 2026 13:22:50 +0000 ROA not before: Tue 28 Apr 2026 13:17:50 +0000 ROA not after: Tue 27 Apr 2027 13:22:50 +0000 asID: 206604 IP address blocks: 2a0b:4e07:38::/48 maxlen: 48 2a0b:4e07:bc::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1f:90:e2:1a:54:79:70:32:10:77:b4:74:d7:f1:4d:8e:c7:fe:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:50 2026 GMT Not After : Apr 27 13:22:50 2027 GMT Subject: CN=73886144ACEBAEAE8785ECEF76E4BD299D8454A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:05:16:7b:38:d2:98:24:36:a8:d5:36:37: da:29:8a:95:ab:00:e9:ec:33:a8:e2:73:bf:ea:95: 0a:bb:59:72:73:bf:7b:ae:b1:06:be:05:84:01:3b: c4:35:35:c7:fe:40:3f:82:5a:3e:ba:14:b5:d5:2b: 15:d6:e8:61:cd:9a:c6:b0:8b:6f:82:e7:85:86:53: ad:0f:c3:87:6d:6b:08:6a:51:59:d7:bc:48:fa:32: f8:c1:6c:8a:e5:87:2d:51:fc:9f:13:f8:38:5f:22: 68:cd:cb:3f:89:94:53:7e:f6:be:b4:44:ab:77:02: 0d:87:9a:a7:fc:f3:22:06:9a:4a:32:91:a8:bc:39: 6d:4d:09:94:78:b4:ed:cb:82:b1:26:61:97:30:0d: 34:7a:17:8b:af:7e:a3:bc:ad:21:ae:89:6d:f3:be: 29:51:55:01:ac:cf:03:8d:17:c3:da:45:fb:c6:ce: 1c:3e:6d:61:d4:64:1c:e8:07:77:a6:fe:6d:f5:be: e6:ec:3c:97:2f:2b:75:9a:00:ab:6b:7f:bf:0e:51: bf:ad:8a:24:46:93:5e:e3:0e:01:30:ef:b8:ff:6c: 44:44:2a:cd:58:1b:5f:1d:26:7d:81:a3:c9:dc:72: be:74:60:99:8f:5a:82:e0:ee:6c:be:8c:2a:67:da: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:88:61:44:AC:EB:AE:AE:87:85:EC:EF:76:E4:BD:29:9D:84:54:A4 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS206604.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:38::/48 2a0b:4e07:bc::/47 Signature Algorithm: sha256WithRSAEncryption 77:3a:76:01:2e:55:14:3e:e9:49:d1:33:71:81:3c:5c:7e:cf: aa:68:82:6f:ad:bb:f9:29:f2:2c:ff:9d:13:56:88:2e:ed:29: e9:5b:94:39:fd:ce:1f:5c:e9:ef:89:cb:2c:1d:b6:aa:1f:bd: 9b:a1:37:c9:e8:83:5e:ae:48:a9:3d:94:e9:34:ca:f4:2f:3e: cd:6a:dc:7a:f4:de:6a:24:5d:f0:15:fb:d3:cb:d6:11:0e:18: 76:bb:8f:5d:12:0c:c2:bf:25:79:8b:12:a5:3d:cc:e3:75:82: b5:81:67:5b:90:74:c2:0f:34:92:40:64:f7:d4:fc:59:4c:ed: c9:fc:c0:60:09:d2:6a:99:8d:75:23:a6:7e:14:d2:36:8c:76: 51:34:93:81:4c:07:f1:65:ac:9b:ef:93:3b:68:ad:32:79:f5: 2e:1d:64:4d:47:c7:53:6a:50:ec:6a:80:1b:72:4f:e2:8e:65: 1c:0a:07:33:5c:f1:cc:57:1e:d1:d8:6d:ca:a9:59:fc:e6:69: f8:b0:33:73:ee:3e:a2:2c:a8:c2:2e:ad:ac:fe:9f:3f:87:89: 19:23:c6:f1:32:dd:c0:f5:76:c2:b5:cf:da:ba:5c:45:e9:d3: b5:82:c5:bb:d2:ce:73:db:09:3a:16:55:3e:f9:5f:4f:25:99: 56:63:44:d3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTx+Q4hpUeXAyEHe0dNfxTY7H/kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NTBaFw0yNzA0MjcxMzIyNTBaMDMxMTAvBgNV BAMTKDczODg2MTQ0QUNFQkFFQUU4Nzg1RUNFRjc2RTRCRDI5OUQ4NDU0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqwUWezjSmCQ2qNU2N9opipWr AOnsM6jic7/qlQq7WXJzv3uusQa+BYQBO8Q1Ncf+QD+CWj66FLXVKxXW6GHNmsaw i2+C54WGU60Pw4dtawhqUVnXvEj6MvjBbIrlhy1R/J8T+DhfImjNyz+JlFN+9r60 RKt3Ag2Hmqf88yIGmkoykai8OW1NCZR4tO3LgrEmYZcwDTR6F4uvfqO8rSGuiW3z vilRVQGszwONF8PaRfvGzhw+bWHUZBzoB3em/m31vubsPJcvK3WaAKtrf78OUb+t iiRGk17jDgEw77j/bEREKs1YG18dJn2Bo8nccr50YJmPWoLg7my+jCpn2lWnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUc4hhRKzrrq6HhezvduS9KZ2EVKQwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDY2MDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqC04HADgDBwEqC04HALwwDQYJ KoZIhvcNAQELBQADggEBAHc6dgEuVRQ+6UnRM3GBPFx+z6pogm+tu/kp8iz/nRNW iC7tKelblDn9zh9c6e+JyywdtqofvZuhN8nog16uSKk9lOk0yvQvPs1q3Hr03mok XfAV+9PL1hEOGHa7j10SDMK/JXmLEqU9zON1grWBZ1uQdMIPNJJAZPfU/FlM7cn8 wGAJ0mqZjXUjpn4U0jaMdlE0k4FMB/FlrJvvkztorTJ59S4dZE1Hx1NqUOxqgBty T+KOZRwKBzNc8cxXHtHYbcqpWfzmafiwM3PuPqIsqMIuraz+nz+HiRkjxvEy3cD1 dsK1z9q6XEXp07WCxbvSznPbCToWVT75X08lmVZjRNM= -----END CERTIFICATE-----Generated at Tue May 12 22:10:33 2026 by rpki-client