$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS209990.roa File: AS209990.roa (raw, json) Hash identifier: x88LNClbVaG2bFCIYtqBSCPLQET1SbhMumkHXLgyi70= Subject key identifier: DD:CE:87:79:E2:01:77:E2:D6:30:53:47:CB:D0:EA:4C:20:F0:E1:87 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 5D6644420D29063569B9FE2E51B51CE0E245C67B Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS209990.roa Signing time: Tue 28 Apr 2026 13:22:49 +0000 ROA not before: Tue 28 Apr 2026 13:17:49 +0000 ROA not after: Tue 27 Apr 2027 13:22:49 +0000 asID: 209990 IP address blocks: 2a0b:4e07:c8::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:66:44:42:0d:29:06:35:69:b9:fe:2e:51:b5:1c:e0:e2:45:c6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:49 2026 GMT Not After : Apr 27 13:22:49 2027 GMT Subject: CN=DDCE8779E20177E2D6305347CBD0EA4C20F0E187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:b4:b7:68:7e:03:95:d4:03:4f:45:0c:3c: 50:22:a3:ad:68:86:8b:58:9c:37:8a:32:38:c8:dd: 22:df:51:8b:27:3d:1b:a9:16:27:13:0f:cf:24:10: 1f:c1:b9:df:3c:9e:60:e8:59:e5:66:5a:4c:2a:b0: ba:2c:0f:03:68:79:24:7b:8b:73:ed:65:db:50:a1: 51:58:95:58:a5:cd:00:ee:4e:8d:44:79:f2:03:d5: 24:c2:7e:6e:6e:4d:17:ae:45:05:c7:cd:bc:74:58: f4:0b:2a:48:af:26:b5:f1:5a:fc:d4:05:51:ef:22: 3b:21:61:0e:c8:84:80:4e:dc:93:79:d3:84:83:4b: 74:14:41:63:6a:4e:3a:92:39:bc:62:8b:ac:13:5e: 8f:32:6a:6d:ad:11:e8:43:0e:fe:b4:15:5d:fa:1a: 47:20:0b:e1:0a:a0:2e:c4:f9:70:65:07:0e:26:35: ce:26:11:36:a5:81:d3:30:8b:22:8c:37:ec:71:df: 24:29:6a:68:71:bd:7d:9e:74:c5:7d:05:7b:4e:37: df:bf:f0:2e:fa:10:82:b4:74:c8:cf:5f:72:f3:4f: 8c:0d:32:34:9f:04:4c:e3:d0:6e:2c:fe:ff:a8:be: 96:6b:a9:0e:18:1b:36:11:f1:7e:46:70:70:90:da: 4d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CE:87:79:E2:01:77:E2:D6:30:53:47:CB:D0:EA:4C:20:F0:E1:87 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS209990.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c8::/46 Signature Algorithm: sha256WithRSAEncryption 09:f4:ba:60:26:d8:d2:8c:89:c0:2d:9e:32:ce:1b:ab:70:18: 31:3d:61:96:db:14:77:15:a4:a1:b3:fe:8a:56:16:cd:3e:30: 9c:c0:da:90:1f:56:33:bb:bb:fc:d6:46:c4:c5:5f:35:62:39: d5:72:af:96:52:9a:ce:fc:da:40:8d:7b:9c:24:e0:96:bb:e7: 50:2f:c9:bd:d6:25:8e:a1:47:74:31:af:69:54:04:24:24:20: bc:35:53:df:87:f5:4f:b7:3e:19:1a:72:84:bb:9c:08:c9:c3: 33:aa:64:99:8d:25:2b:43:6a:16:20:b8:bd:cb:fa:53:a6:f0: f6:dc:82:f6:01:b4:d2:b9:09:df:b6:36:cf:09:cc:44:30:ec: 7c:a0:46:51:b1:ff:64:1c:fb:35:7c:18:9e:55:bd:04:db:7e: 98:ca:8f:e8:c2:5c:f1:4d:95:9a:3d:f6:d1:52:41:7e:62:b9: 81:39:9a:db:c3:2b:ad:7e:a1:a9:3b:9d:15:b9:e0:04:c8:94: 4b:c9:f8:46:08:78:a4:b4:34:61:85:10:1b:32:f9:57:08:b9: 4e:c1:ee:76:b9:86:5a:5c:85:79:0b:74:a7:1b:5b:3c:99:27: 3a:da:92:f0:c5:c8:ca:31:9a:c5:5d:2e:55:78:56:86:48:5d: 11:40:34:e4 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUXWZEQg0pBjVpuf4uUbUc4OJFxnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDlaFw0yNzA0MjcxMzIyNDlaMDMxMTAvBgNV BAMTKEREQ0U4Nzc5RTIwMTc3RTJENjMwNTM0N0NCRDBFQTRDMjBGMEUxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9rS3aH4DldQDT0UMPFAio61o hotYnDeKMjjI3SLfUYsnPRupFicTD88kEB/Bud88nmDoWeVmWkwqsLosDwNoeSR7 i3PtZdtQoVFYlVilzQDuTo1EefID1STCfm5uTReuRQXHzbx0WPQLKkivJrXxWvzU BVHvIjshYQ7IhIBO3JN504SDS3QUQWNqTjqSObxii6wTXo8yam2tEehDDv60FV36 GkcgC+EKoC7E+XBlBw4mNc4mETalgdMwiyKMN+xx3yQpamhxvX2edMV9BXtON9+/ 8C76EIK0dMjPX3LzT4wNMjSfBEzj0G4s/v+ovpZrqQ4YGzYR8X5GcHCQ2k2PAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU3c6HeeIBd+LWMFNHy9DqTCDw4YcwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDk5OTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAMgwDQYJKoZIhvcNAQEL BQADggEBAAn0umAm2NKMicAtnjLOG6twGDE9YZbbFHcVpKGz/opWFs0+MJzA2pAf VjO7u/zWRsTFXzViOdVyr5ZSms782kCNe5wk4Ja751Avyb3WJY6hR3Qxr2lUBCQk ILw1U9+H9U+3PhkacoS7nAjJwzOqZJmNJStDahYguL3L+lOm8PbcgvYBtNK5Cd+2 Ns8JzEQw7HygRlGx/2Qc+zV8GJ5VvQTbfpjKj+jCXPFNlZo99tFSQX5iuYE5mtvD K61+oak7nRW54ATIlEvJ+EYIeKS0NGGFEBsy+VcIuU7B7na5hlpchXkLdKcbWzyZ JzrakvDFyMoxmsVdLlV4VoZIXRFANOQ= -----END CERTIFICATE-----Generated at Tue May 12 22:40:01 2026 by rpki-client