$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS209710.roa File: AS209710.roa (raw, json) Hash identifier: iO0H2xr/BSk1xLtYWBgRR3PK5i0r3L9DganQQX0bN1M= Subject key identifier: E7:1E:AF:DE:EA:E2:51:F8:6B:89:D9:C0:2E:23:16:0D:1F:CE:CF:21 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 6A8BE3E86AB38D44BD093ACACC7E662E834CCA1E Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS209710.roa Signing time: Tue 08 Sep 2026 14:23:05 +0000 ROA not before: Tue 08 Sep 2026 14:18:05 +0000 ROA not after: Tue 07 Sep 2027 14:23:05 +0000 asID: 209710 IP address blocks: 2a0b:4e07:fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 04:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8b:e3:e8:6a:b3:8d:44:bd:09:3a:ca:cc:7e:66:2e:83:4c:ca:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Sep 8 14:18:05 2026 GMT Not After : Sep 7 14:23:05 2027 GMT Subject: CN=E71EAFDEEAE251F86B89D9C02E23160D1FCECF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:0b:99:20:67:70:c8:ab:39:0f:8e:e7:35: 92:ca:65:a1:c8:0b:38:48:98:9d:fc:d9:8a:42:a7: 25:b6:83:da:21:f5:95:90:aa:b2:53:a8:89:f1:3a: 1f:d9:d6:5b:db:d2:ec:cd:08:19:2f:04:d4:6d:46: 0f:5f:e0:26:6f:e1:4f:22:64:94:e2:aa:7c:1e:ce: 99:78:e2:53:f6:bc:e5:8e:c7:08:c8:80:9d:9a:3b: 4c:1b:6e:52:97:4e:e6:27:86:2b:22:e0:95:c7:0e: 4a:23:c3:10:d0:d7:74:60:63:05:47:5d:ec:7b:4d: ee:57:38:e5:82:79:a2:11:83:c8:71:c8:40:7e:3f: b3:95:a9:58:6c:af:2a:2d:d5:c7:72:77:f3:03:56: b5:20:a7:d3:cd:c9:57:fd:16:de:ab:f2:ac:d6:83: f6:c4:73:79:10:16:35:65:6c:9c:6a:94:fa:f6:c7: cc:92:f4:39:78:32:4d:ed:df:3d:60:e4:24:f9:ae: c0:88:69:09:61:c6:a8:81:36:31:f7:0b:6b:a9:b7: 35:6a:cb:b5:ff:44:a5:7a:98:ca:7d:0b:18:a5:e1: ec:d3:05:c2:f4:2e:67:54:fa:96:46:03:26:ad:d7: 2f:1e:c8:ab:06:36:1c:c5:89:d6:d3:9f:b4:e0:67: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1E:AF:DE:EA:E2:51:F8:6B:89:D9:C0:2E:23:16:0D:1F:CE:CF:21 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS209710.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:fb::/48 Signature Algorithm: sha256WithRSAEncryption 48:b9:81:a7:ed:14:65:77:86:32:68:d2:64:0b:4a:52:7f:ce: 4f:5e:f6:72:c3:a3:b0:a0:22:a2:ba:38:e8:7d:72:98:cb:1c: 61:a3:76:8f:28:05:84:e6:1b:95:b3:83:51:54:14:ae:70:ed: 99:17:de:db:e3:47:e6:14:44:ce:7e:2e:ba:96:46:1a:52:4d: b9:d4:87:50:c1:1e:01:80:28:5e:8f:0d:a5:c3:d0:bf:14:6e: 64:2f:67:6c:d5:51:47:ab:1e:9a:38:30:38:17:1c:35:33:6a: 0b:19:2d:60:6b:28:bd:a9:93:32:09:29:b4:1e:9c:13:ca:96: 36:fc:9c:b2:af:d1:ef:a6:a5:11:01:4b:24:20:28:8e:43:e5: 6a:13:69:5d:e5:c7:4e:11:93:2e:8d:bc:9a:b8:ac:33:91:df: 30:99:f4:0e:83:9b:a3:02:42:81:b6:56:ae:65:ae:d3:61:39: 3e:d3:f7:2e:a9:56:d5:f5:2c:26:0f:bb:b5:0d:b7:c8:42:62: c9:dd:ce:f1:df:9e:98:a1:ce:0d:c7:10:a6:ad:0f:6a:cb:db: 5f:28:c4:8e:1e:ab:cf:4c:24:e7:94:8e:d1:47:62:82:fd:8f: 1d:65:18:3e:c0:e3:c1:60:a8:a5:06:82:0e:69:14:07:6c:ad: 05:70:a3:66 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUaovj6GqzjUS9CTrKzH5mLoNMyh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA5MDgxNDE4MDVaFw0yNzA5MDcxNDIzMDVaMDMxMTAvBgNV BAMTKEU3MUVBRkRFRUFFMjUxRjg2Qjg5RDlDMDJFMjMxNjBEMUZDRUNGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTQuZIGdwyKs5D47nNZLKZaHI CzhImJ382YpCpyW2g9oh9ZWQqrJTqInxOh/Z1lvb0uzNCBkvBNRtRg9f4CZv4U8i ZJTiqnwezpl44lP2vOWOxwjIgJ2aO0wbblKXTuYnhisi4JXHDkojwxDQ13RgYwVH Xex7Te5XOOWCeaIRg8hxyEB+P7OVqVhsryot1cdyd/MDVrUgp9PNyVf9Ft6r8qzW g/bEc3kQFjVlbJxqlPr2x8yS9Dl4Mk3t3z1g5CT5rsCIaQlhxqiBNjH3C2uptzVq y7X/RKV6mMp9Cxil4ezTBcL0LmdU+pZGAyat1y8eyKsGNhzFidbTn7TgZxLLAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU5x6v3uriUfhridnALiMWDR/OzyEwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMDk3MTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAPswDQYJKoZIhvcNAQEL BQADggEBAEi5gaftFGV3hjJo0mQLSlJ/zk9e9nLDo7CgIqK6OOh9cpjLHGGjdo8o BYTmG5Wzg1FUFK5w7ZkX3tvjR+YURM5+LrqWRhpSTbnUh1DBHgGAKF6PDaXD0L8U bmQvZ2zVUUerHpo4MDgXHDUzagsZLWBrKL2pkzIJKbQenBPKljb8nLKv0e+mpREB SyQgKI5D5WoTaV3lx04Rky6NvJq4rDOR3zCZ9A6Dm6MCQoG2Vq5lrtNhOT7T9y6p VtX1LCYPu7UNt8hCYsndzvHfnpihzg3HEKatD2rL218oxI4eq89MJOeUjtFHYoL9 jx1lGD7A48FgqKUGgg5pFAdsrQVwo2Y= -----END CERTIFICATE-----Generated at Mon Sep 21 22:13:44 2026 by rpki-client