$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS208068.roa File: AS208068.roa (raw, json) Hash identifier: 3fvTV9yjxhtuQE3qTEAy8+FUC8jciAh57iKasMLLMbs= Subject key identifier: 47:4A:79:CC:02:B4:C7:77:C3:CE:B3:A0:56:10:EE:68:30:B0:EB:37 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4DAD1BD006714B0530F7C93E6CA055DEF11919CB Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS208068.roa Signing time: Tue 08 Sep 2026 08:22:03 +0000 ROA not before: Tue 08 Sep 2026 08:17:03 +0000 ROA not after: Tue 07 Sep 2027 08:22:03 +0000 asID: 208068 IP address blocks: 2a0b:4e07:5f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ad:1b:d0:06:71:4b:05:30:f7:c9:3e:6c:a0:55:de:f1:19:19:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Sep 8 08:17:03 2026 GMT Not After : Sep 7 08:22:03 2027 GMT Subject: CN=474A79CC02B4C777C3CEB3A05610EE6830B0EB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:50:ab:cc:1d:7f:42:b3:05:7d:7d:fc:b5: e8:ae:1b:9a:9f:a1:1c:90:75:34:11:4a:b5:7a:76: 5d:08:0b:fa:ff:e1:40:16:80:33:e9:f5:b9:58:b7: 3a:ba:3d:70:32:2c:4e:28:84:a5:3e:77:39:8f:ba: 60:01:9f:75:40:42:f3:81:ba:5a:b9:ee:49:12:09: a5:e8:7e:1e:5a:e2:62:10:61:24:7a:d3:a2:96:24: 9c:3a:d6:7b:0e:7b:85:5e:4e:34:c6:50:a6:5c:fe: e4:99:2a:a0:20:87:d6:50:fc:18:b9:d8:18:b9:33: 19:73:1c:ce:e2:ce:c4:2d:87:88:fc:8d:a7:7c:d3: 3f:82:45:e6:c5:01:37:ff:8e:00:7c:39:9d:6c:00: f7:0b:c5:6d:28:41:07:be:3a:99:ff:8a:64:92:09: d6:df:d5:fa:70:b9:52:98:8e:f1:3c:98:f3:c9:5a: db:1c:e9:0c:14:29:2c:6c:25:38:04:51:12:b2:e8: 62:56:ef:77:14:dd:ae:b1:41:a7:fe:a6:49:5a:27: 69:6d:f3:4d:53:a3:d7:c2:b7:ec:d7:ac:30:f8:94: b3:80:9b:7b:b7:77:9d:28:bd:f6:55:87:17:15:68: e6:f0:13:69:8e:e6:e3:e3:ce:7f:14:c0:87:9c:e9: af:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4A:79:CC:02:B4:C7:77:C3:CE:B3:A0:56:10:EE:68:30:B0:EB:37 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS208068.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:5f00::/40 Signature Algorithm: sha256WithRSAEncryption 81:d3:62:09:18:03:f6:f9:8b:bb:34:85:00:f9:34:82:ec:dc: 44:5e:b2:fd:a2:56:2a:4d:d7:a9:62:dd:8c:dd:ae:7f:af:b4: 39:9d:ca:80:fa:34:5f:13:0b:75:c9:17:6f:82:20:e3:c3:c6: 91:0f:61:8b:af:b3:06:b7:7c:4b:98:69:b0:5f:ee:44:0e:81: f2:42:d9:a0:bc:48:d9:1c:e0:d6:fe:99:fb:12:d3:6a:25:84: f7:8e:88:58:1e:65:b4:e8:44:b2:99:0a:df:5f:58:d1:22:5e: f7:ed:01:1b:43:3e:a8:ca:47:43:da:b0:da:52:7f:c2:8b:9e: 40:bb:81:15:6a:ae:fd:26:76:ec:12:16:cd:e9:fe:2c:5e:29: b7:de:84:dd:81:d4:dc:53:d2:32:c6:cd:1e:3f:89:1b:3d:53: d6:e6:01:47:97:90:b7:a8:ee:91:82:8d:df:48:29:29:65:d8: a3:aa:08:cc:55:62:65:86:c7:43:f5:a8:65:e2:de:75:75:18: f5:cb:69:34:e4:28:28:36:28:60:0a:3b:1d:69:c2:3d:9c:50: 82:8b:3f:54:88:e8:a3:ab:75:7f:39:cb:0d:65:af:2b:76:f5: 78:39:6c:4d:41:2f:aa:d1:3e:ee:29:41:72:2d:c5:5a:09:fe: 27:fb:74:93 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUTa0b0AZxSwUw98k+bKBV3vEZGcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA5MDgwODE3MDNaFw0yNzA5MDcwODIyMDNaMDMxMTAvBgNV BAMTKDQ3NEE3OUNDMDJCNEM3NzdDM0NFQjNBMDU2MTBFRTY4MzBCMEVCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQ1CrzB1/QrMFfX38teiuG5qf oRyQdTQRSrV6dl0IC/r/4UAWgDPp9blYtzq6PXAyLE4ohKU+dzmPumABn3VAQvOB ulq57kkSCaXofh5a4mIQYSR606KWJJw61nsOe4VeTjTGUKZc/uSZKqAgh9ZQ/Bi5 2Bi5MxlzHM7izsQth4j8jad80z+CRebFATf/jgB8OZ1sAPcLxW0oQQe+Opn/imSS Cdbf1fpwuVKYjvE8mPPJWtsc6QwUKSxsJTgEURKy6GJW73cU3a6xQaf+pklaJ2lt 801To9fCt+zXrDD4lLOAm3u3d50ovfZVhxcVaObwE2mO5uPjzn8UwIec6a9dAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUR0p5zAK0x3fDzrOgVhDuaDCw6zcwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDgwNjgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqC04HXzANBgkqhkiG9w0BAQsF AAOCAQEAgdNiCRgD9vmLuzSFAPk0guzcRF6y/aJWKk3XqWLdjN2uf6+0OZ3KgPo0 XxMLdckXb4Ig48PGkQ9hi6+zBrd8S5hpsF/uRA6B8kLZoLxI2Rzg1v6Z+xLTaiWE 946IWB5ltOhEspkK319Y0SJe9+0BG0M+qMpHQ9qw2lJ/woueQLuBFWqu/SZ27BIW zen+LF4pt96E3YHU3FPSMsbNHj+JGz1T1uYBR5eQt6jukYKN30gpKWXYo6oIzFVi ZYbHQ/WoZeLedXUY9ctpNOQoKDYoYAo7HWnCPZxQgos/VIjoo6t1fznLDWWvK3b1 eDlsTUEvqtE+7ilBci3FWgn+J/t0kw== -----END CERTIFICATE-----Generated at Tue Sep 22 04:30:41 2026 by rpki-client