$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3566313a3a2f34382d3438203d3e20323134353433.roa File: 326130623a346530373a3566313a3a2f34382d3438203d3e20323134353433.roa (raw, json) Hash identifier: 9oGQ5xgeSNssOU1dV9otNzLly3YNa9KxfUul+2PfW+k= Subject key identifier: 42:9F:B0:08:2A:BD:93:6B:84:7C:A5:98:58:AA:69:9F:42:A4:21:2E Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 62C6493932590004EB2F4BD58E57CB07EA5ECB27 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3566313a3a2f34382d3438203d3e20323134353433.roa Signing time: Fri 11 Apr 2025 14:29:04 +0000 ROA not before: Fri 11 Apr 2025 14:24:04 +0000 ROA not after: Fri 10 Apr 2026 14:29:04 +0000 asID: 214543 IP address blocks: 2a0b:4e07:5f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 13:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c6:49:39:32:59:00:04:eb:2f:4b:d5:8e:57:cb:07:ea:5e:cb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 11 14:24:04 2025 GMT Not After : Apr 10 14:29:04 2026 GMT Subject: CN=429FB0082ABD936B847CA59858AA699F42A4212E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:3a:a2:da:65:c6:be:11:14:c6:33:e9:8a: 9d:8a:86:5c:1d:fd:bd:8b:37:0f:65:a7:8d:54:f7: 35:20:d8:ef:ae:e3:59:7c:6e:4b:28:b8:8f:69:20: 13:b4:ee:92:4f:a9:ee:13:87:c6:a3:27:f6:69:ca: 92:cb:73:25:0a:63:94:f1:e1:e7:db:33:17:3c:b7: f2:00:44:7b:27:f2:7c:2c:2a:8c:e8:45:ae:62:a0: f9:0a:49:2d:81:12:ff:1e:cc:c0:c5:c1:0a:9d:e7: 7e:97:d8:1d:c4:a0:04:34:fd:10:d1:c1:93:67:2f: dc:57:47:84:5b:be:b1:bd:62:1e:a7:ea:50:6e:d5: 5f:d3:42:7e:c5:81:3d:87:6c:70:96:c1:39:6c:e7: bd:72:87:b7:6e:35:a5:d8:59:57:6d:36:8e:46:2b: 63:ec:4c:de:01:e1:2f:60:f9:3a:9c:26:8b:88:1c: bd:00:96:fa:42:5b:8b:b9:60:b0:fa:3d:46:40:c1: d6:dc:f2:a1:c2:31:df:0c:e5:ad:20:22:ca:a0:e7: ea:8d:32:a0:2a:f4:a9:09:93:44:ed:9d:5d:23:6a: 51:ac:42:69:04:de:d0:d4:b0:bd:b7:b3:9a:e7:82: 64:79:c9:81:7a:79:83:5d:bc:37:0a:c7:3c:1d:b1: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9F:B0:08:2A:BD:93:6B:84:7C:A5:98:58:AA:69:9F:42:A4:21:2E X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3566313a3a2f34382d3438203d3e20323134353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:5f1::/48 Signature Algorithm: sha256WithRSAEncryption 4b:3d:fb:0d:07:13:06:fd:a5:56:2e:73:e0:71:1c:f7:67:3c: 85:8c:fc:47:d2:fa:5a:9a:3e:fd:61:43:21:9f:87:e2:65:7f: ca:82:ce:58:28:82:92:0b:3a:ce:08:f1:15:9d:0b:5d:c3:21: a0:97:ef:24:4e:42:9b:b6:5a:20:91:78:48:a0:0d:67:28:c9: bf:31:91:85:3f:2d:00:68:36:b1:43:91:00:c5:42:c0:be:f2: 35:a6:59:3a:98:ee:53:3b:67:12:13:a2:2d:b0:a6:1b:76:b5: 43:18:30:76:7a:1c:a1:17:7b:82:33:b1:6b:dc:84:25:ce:26: 71:81:e1:d7:f5:1f:2e:4c:6b:8c:08:7c:58:a4:02:ac:54:36: 84:c1:ae:0d:bf:fb:87:74:1e:c0:dc:07:95:9d:e5:49:44:a3: ed:69:23:e6:53:f8:ad:63:79:08:b2:95:ac:c8:43:bb:17:2c: 89:bc:4c:f4:72:4d:c4:5c:76:80:c0:45:5c:e4:cc:e1:70:65: 2c:b6:15:1e:f1:a2:1e:0f:c5:7c:e4:45:ef:1a:0a:c8:9b:4c: 72:92:77:e5:36:2b:8a:56:79:16:18:be:31:f3:a7:ff:3b:40: 2c:37:a6:f0:d9:b6:8c:e9:1c:97:93:3a:31:4e:85:4d:d7:12: 13:01:43:25 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUYsZJOTJZAATrL0vVjlfLB+peyycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA0MTExNDI0MDRaFw0yNjA0MTAxNDI5MDRaMDMxMTAvBgNV BAMTKDQyOUZCMDA4MkFCRDkzNkI4NDdDQTU5ODU4QUE2OTlGNDJBNDIxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKjqi2mXGvhEUxjPpip2Khlwd /b2LNw9lp41U9zUg2O+u41l8bksouI9pIBO07pJPqe4Th8ajJ/ZpypLLcyUKY5Tx 4efbMxc8t/IARHsn8nwsKozoRa5ioPkKSS2BEv8ezMDFwQqd536X2B3EoAQ0/RDR wZNnL9xXR4RbvrG9Yh6n6lBu1V/TQn7FgT2HbHCWwTls571yh7duNaXYWVdtNo5G K2PsTN4B4S9g+TqcJouIHL0AlvpCW4u5YLD6PUZAwdbc8qHCMd8M5a0gIsqg5+qN MqAq9KkJk0TtnV0jalGsQmkE3tDUsL23s5rngmR5yYF6eYNdvDcKxzwdsQdNAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUQp+wCCq9k2uEfKWYWKppn0KkIS4wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM1NjYzMTNhM2EyZjM0 MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLTgcF8TAN BgkqhkiG9w0BAQsFAAOCAQEASz37DQcTBv2lVi5z4HEc92c8hYz8R9L6Wpo+/WFD IZ+H4mV/yoLOWCiCkgs6zgjxFZ0LXcMhoJfvJE5Cm7ZaIJF4SKANZyjJvzGRhT8t AGg2sUORAMVCwL7yNaZZOpjuUztnEhOiLbCmG3a1QxgwdnocoRd7gjOxa9yEJc4m cYHh1/UfLkxrjAh8WKQCrFQ2hMGuDb/7h3QewNwHlZ3lSUSj7Wkj5lP4rWN5CLKV rMhDuxcsibxM9HJNxFx2gMBFXOTM4XBlLLYVHvGiHg/FfORF7xoKyJtMcpJ35TYr ilZ5Fhi+MfOn/ztALDem8Nm2jOkcl5M6MU6FTdcSEwFDJQ== -----END CERTIFICATE-----Generated at Wed Apr 16 02:26:23 2025 by rpki-client