$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS207567.roa File: AS207567.roa (raw, json) Hash identifier: SLW3jTC3/ek2SC+bHk4+/uZ7DA4dnn8Fu1ID9oETKSM= Subject key identifier: 07:0D:3A:63:0A:33:9F:4C:D7:A3:25:F4:58:F7:43:22:6A:42:2E:5F Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 633AD2DB7516EC49F13E2E17F40C965ED4218F09 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS207567.roa Signing time: Tue 28 Apr 2026 13:22:49 +0000 ROA not before: Tue 28 Apr 2026 13:17:49 +0000 ROA not after: Tue 27 Apr 2027 13:22:49 +0000 asID: 207567 IP address blocks: 2a0b:4e07:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3a:d2:db:75:16:ec:49:f1:3e:2e:17:f4:0c:96:5e:d4:21:8f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:49 2026 GMT Not After : Apr 27 13:22:49 2027 GMT Subject: CN=070D3A630A339F4CD7A325F458F743226A422E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:59:27:4a:e9:03:5c:90:99:a6:43:fb:7c: 84:2c:33:37:5e:15:43:d1:b6:f4:92:04:38:f2:f4: 42:e3:5a:84:b9:c0:b4:e4:0d:8f:ac:1f:17:7f:12: 05:64:f6:1a:25:e7:c7:8d:72:a4:05:7e:0f:0d:6e: b2:fe:80:f6:e0:3c:5a:17:d4:3c:60:67:61:43:00: fc:e4:34:82:7c:10:ce:df:9e:7e:13:8a:f6:22:f9: c7:b9:06:83:68:22:31:17:df:18:58:60:a1:de:dd: 0b:65:e0:97:0f:ee:0a:f5:91:bc:99:43:38:f6:95: ee:97:57:7d:45:2c:b6:f2:ab:bf:2f:6d:f9:a3:b6: 81:f7:37:c0:a9:cf:29:d5:b3:a2:cd:1e:3f:17:3e: db:fa:a4:1b:7d:36:b0:a2:a3:04:f7:1c:8b:f1:e6: 25:62:db:a9:8d:00:9f:26:27:87:3f:ee:89:54:27: ad:00:64:87:d6:c3:ba:c9:bd:fc:5d:67:bd:c3:70: b2:34:18:d6:93:9e:61:6f:8c:66:9c:fc:91:7c:26: 87:f4:e9:40:77:cc:65:e1:12:32:54:39:01:2d:11: 60:44:cd:e0:fa:d6:0b:8e:5a:77:13:3f:81:e7:be: 02:02:73:fe:f8:69:c2:22:66:84:c3:52:49:de:d7: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:3A:63:0A:33:9F:4C:D7:A3:25:F4:58:F7:43:22:6A:42:2E:5F X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS207567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:4000::/36 Signature Algorithm: sha256WithRSAEncryption 11:f2:2c:17:3c:b4:64:f2:ef:17:50:07:5b:31:5e:c4:51:9e: ff:31:62:07:15:bc:e2:22:91:1f:e6:f3:5a:1f:bb:c9:19:f1: 30:5b:8c:78:75:33:b9:ec:5e:67:6d:4b:44:84:fa:14:e4:c1: db:9f:df:64:a6:07:7a:35:ef:e8:02:a3:17:1e:e5:88:0d:af: cb:cd:8e:6b:d9:6f:91:fc:1d:6a:9b:cd:e9:0f:0c:0f:c0:6f: 5f:35:ba:c3:44:f7:6e:9f:f6:c5:dc:55:2c:fb:9b:cc:50:59: 8d:84:2d:d2:ce:01:6f:4f:ca:50:be:55:54:a8:57:6c:08:10: 0e:74:8d:4a:6f:35:54:8e:a2:0a:e0:d8:44:d5:35:f3:ca:9a: cc:d7:2c:0c:c7:18:fc:57:2d:4e:cf:e9:0a:bc:e7:fa:eb:f8: 60:79:88:8b:5d:9c:66:95:73:01:66:88:3b:f9:4f:07:f4:d7: c8:85:0b:df:6f:d0:70:f8:8b:19:6b:49:eb:fc:3d:ef:41:f1: 1b:e7:ce:e0:5e:00:f6:91:3a:b2:2c:64:69:10:60:d0:93:1c: b8:8a:1d:c7:05:24:9e:59:8c:f9:47:cc:54:ec:a5:67:d3:23: bf:c3:f7:92:7f:12:32:6b:ad:7a:4c:ca:bc:f3:c9:46:6e:c6: a8:b5:62:2b -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUYzrS23UW7EnxPi4X9AyWXtQhjwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDlaFw0yNzA0MjcxMzIyNDlaMDMxMTAvBgNV BAMTKDA3MEQzQTYzMEEzMzlGNENEN0EzMjVGNDU4Rjc0MzIyNkE0MjJFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJlknSukDXJCZpkP7fIQsMzde FUPRtvSSBDjy9ELjWoS5wLTkDY+sHxd/EgVk9hol58eNcqQFfg8NbrL+gPbgPFoX 1DxgZ2FDAPzkNIJ8EM7fnn4TivYi+ce5BoNoIjEX3xhYYKHe3Qtl4JcP7gr1kbyZ Qzj2le6XV31FLLbyq78vbfmjtoH3N8CpzynVs6LNHj8XPtv6pBt9NrCiowT3HIvx 5iVi26mNAJ8mJ4c/7olUJ60AZIfWw7rJvfxdZ73DcLI0GNaTnmFvjGac/JF8Jof0 6UB3zGXhEjJUOQEtEWBEzeD61guOWncTP4HnvgICc/74acIiZoTDUkne1ySJAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUBw06Ywozn0zXoyX0WPdDImpCLl8wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDc1Njcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqC04HQDANBgkqhkiG9w0BAQsF AAOCAQEAEfIsFzy0ZPLvF1AHWzFexFGe/zFiBxW84iKRH+bzWh+7yRnxMFuMeHUz uexeZ21LRIT6FOTB25/fZKYHejXv6AKjFx7liA2vy82Oa9lvkfwdapvN6Q8MD8Bv XzW6w0T3bp/2xdxVLPubzFBZjYQt0s4Bb0/KUL5VVKhXbAgQDnSNSm81VI6iCuDY RNU188qazNcsDMcY/FctTs/pCrzn+uv4YHmIi12cZpVzAWaIO/lPB/TXyIUL32/Q cPiLGWtJ6/w970HxG+fO4F4A9pE6sixkaRBg0JMcuIodxwUknlmM+UfMVOylZ9Mj v8P3kn8SMmutekzKvPPJRm7GqLViKw== -----END CERTIFICATE-----Generated at Tue May 12 21:53:59 2026 by rpki-client