$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS210083.roa File: AS210083.roa (raw, json) Hash identifier: qr/3T5Z1Y4vU7VXVZhuHfj76PwN6fYiaJ0igMj0OxWc= Subject key identifier: 0A:03:73:61:47:0D:5F:09:C8:9A:0C:50:15:4F:6E:20:01:C9:F7:40 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 03B7CAD0348CBB4B07F1B76A9CD0024B01B17FCA Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS210083.roa Signing time: Tue 28 Apr 2026 13:22:47 +0000 ROA not before: Tue 28 Apr 2026 13:17:47 +0000 ROA not after: Tue 27 Apr 2027 13:22:47 +0000 asID: 210083 IP address blocks: 2a0b:4e07:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b7:ca:d0:34:8c:bb:4b:07:f1:b7:6a:9c:d0:02:4b:01:b1:7f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 28 13:17:47 2026 GMT Not After : Apr 27 13:22:47 2027 GMT Subject: CN=0A037361470D5F09C89A0C50154F6E2001C9F740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a6:33:a5:80:74:5d:0f:35:d5:49:aa:b1:68: 7c:ad:ea:68:3c:09:d2:6c:ce:67:d1:3e:1c:7c:c7: f3:19:0a:f2:b4:08:cd:db:3f:cd:9c:a8:5d:db:c8: 16:69:3a:4d:86:00:2a:da:05:44:1e:a3:4c:40:8e: 05:16:db:2a:65:d1:b6:a8:66:ca:95:1c:dc:74:b2: ac:79:f0:8f:8d:9f:17:44:3c:02:7e:b7:70:3a:5a: d4:f1:a8:33:09:d6:c5:e7:95:ba:fa:29:4f:94:95: 0a:12:85:91:9a:ce:41:34:f8:fe:15:fa:aa:34:18: e5:99:01:5c:97:51:2a:00:78:35:b2:20:a9:d4:a7: d5:1c:ad:1e:12:63:65:c2:82:c5:10:f8:ea:0f:c2: 90:5e:2d:17:95:3c:d0:07:7a:7a:19:72:19:10:4b: b5:83:02:ed:04:1f:98:b5:5d:b6:c4:26:f4:73:cb: 08:69:7c:2e:12:0b:4d:df:20:88:a6:cd:6c:fd:31: 68:8c:97:7d:08:5b:29:46:51:57:21:49:39:a9:5a: e7:63:b9:b3:e9:f9:06:f1:45:fb:18:a2:f6:99:5e: e9:99:ab:f4:2c:56:05:48:b2:51:59:67:19:a8:8c: 90:fb:65:fd:ab:b0:c1:bb:9e:98:65:9d:e8:2a:6a: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:03:73:61:47:0D:5F:09:C8:9A:0C:50:15:4F:6E:20:01:C9:F7:40 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS210083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3b::/48 Signature Algorithm: sha256WithRSAEncryption 74:19:1c:df:7b:97:47:67:08:d5:60:09:1d:8a:06:11:97:67: a7:bf:9f:a3:06:11:0c:8d:be:2a:b1:33:8c:3c:ee:d8:dc:c0: 0a:2a:fd:a3:8a:72:f9:fd:5d:af:1f:3a:e6:98:37:1a:b8:ff: 68:b4:6f:99:e8:0f:4d:0a:d5:71:54:c7:68:c7:ba:95:59:3f: f2:72:c2:6c:7a:97:30:12:65:ab:24:73:7e:28:c6:b0:82:1b: f0:99:4b:89:2e:d6:67:45:52:93:79:09:27:38:64:d8:28:fd: de:e7:ec:63:9f:39:0a:6f:57:e6:3d:7d:10:d8:50:98:ae:f7: 4b:b0:ee:a5:43:00:ee:73:9e:c2:9e:16:9b:50:3c:56:43:6f: 8f:c5:0f:d3:c1:75:c3:69:a5:1d:42:ce:9b:a5:29:32:9c:2f: 69:2e:b7:23:a8:e4:27:d9:6f:60:44:d7:01:39:fc:70:8a:1c: b6:79:9d:2d:1d:c2:d2:9a:0f:43:be:49:6d:d9:97:21:2c:85: b1:c2:f1:e0:bd:cc:64:3c:0e:d4:fb:dd:f7:90:53:2a:73:ac: c3:41:d0:ba:e2:7f:2a:cc:f8:fa:3a:df:41:84:10:aa:3e:f2: 9f:8f:85:e2:da:a0:ad:2c:5b:bb:b6:8b:d3:dc:71:9a:ce:8f: 64:9c:a6:5e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUA7fK0DSMu0sH8bdqnNACSwGxf8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA0MjgxMzE3NDdaFw0yNzA0MjcxMzIyNDdaMDMxMTAvBgNV BAMTKDBBMDM3MzYxNDcwRDVGMDlDODlBMEM1MDE1NEY2RTIwMDFDOUY3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlpjOlgHRdDzXVSaqxaHyt6mg8 CdJszmfRPhx8x/MZCvK0CM3bP82cqF3byBZpOk2GACraBUQeo0xAjgUW2ypl0bao ZsqVHNx0sqx58I+NnxdEPAJ+t3A6WtTxqDMJ1sXnlbr6KU+UlQoShZGazkE0+P4V +qo0GOWZAVyXUSoAeDWyIKnUp9UcrR4SY2XCgsUQ+OoPwpBeLReVPNAHenoZchkQ S7WDAu0EH5i1XbbEJvRzywhpfC4SC03fIIimzWz9MWiMl30IWylGUVchSTmpWudj ubPp+QbxRfsYovaZXumZq/QsVgVIslFZZxmojJD7Zf2rsMG7nphlnegqatqFAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUCgNzYUcNXwnImgxQFU9uIAHJ90AwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTAwODMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HADswDQYJKoZIhvcNAQEL BQADggEBAHQZHN97l0dnCNVgCR2KBhGXZ6e/n6MGEQyNviqxM4w87tjcwAoq/aOK cvn9Xa8fOuaYNxq4/2i0b5noD00K1XFUx2jHupVZP/Jywmx6lzASZaskc34oxrCC G/CZS4ku1mdFUpN5CSc4ZNgo/d7n7GOfOQpvV+Y9fRDYUJiu90uw7qVDAO5znsKe FptQPFZDb4/FD9PBdcNppR1CzpulKTKcL2kutyOo5CfZb2BE1wE5/HCKHLZ5nS0d wtKaD0O+SW3ZlyEshbHC8eC9zGQ8DtT73feQUypzrMNB0LrifyrM+Po630GEEKo+ 8p+PheLaoK0sW7u2i9PccZrOj2Scpl4= -----END CERTIFICATE-----Generated at Tue May 12 21:53:56 2026 by rpki-client