$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa File: 326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa (raw, json) Hash identifier: ANW1GMpAaEUlZWwDP3EY0Lwcuz1g+IS5T3lX5U8y7RE= Subject key identifier: 7E:03:38:4F:DD:BB:C0:A3:0B:20:2B:08:CC:44:05:D5:A6:7A:10:6D Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 126B9B133E6E01E3269B6CC9DB21C21038E08F2C Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa Signing time: Fri 11 Apr 2025 19:29:07 +0000 ROA not before: Fri 11 Apr 2025 19:24:07 +0000 ROA not after: Fri 10 Apr 2026 19:29:07 +0000 asID: 203062 IP address blocks: 2a0b:4e07:7000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 13:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6b:9b:13:3e:6e:01:e3:26:9b:6c:c9:db:21:c2:10:38:e0:8f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 11 19:24:07 2025 GMT Not After : Apr 10 19:29:07 2026 GMT Subject: CN=7E03384FDDBBC0A30B202B08CC4405D5A67A106D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1b:80:c3:88:e8:a1:4f:0c:85:c8:ae:15:72: cb:b7:9a:81:cc:58:06:16:68:28:ba:a6:28:9f:ec: 00:9c:ac:94:15:70:a8:f3:9a:ae:1d:48:c1:b6:8d: 01:96:54:6b:08:3f:4c:b1:83:34:0e:83:1c:73:10: a7:c3:84:10:78:c1:e0:97:dd:fa:d2:71:cc:46:1e: ea:ba:cd:57:30:c8:7e:50:06:4f:93:19:ee:22:c2: e2:01:7e:00:62:69:12:5e:2d:1b:f2:00:71:94:40: 57:9e:1a:ec:f6:50:2a:81:d8:0c:61:1b:22:6b:50: 89:a7:14:84:94:78:49:a1:6e:f3:61:cc:8e:68:58: 22:ce:f5:8b:7b:5c:70:29:a7:2e:00:14:03:8a:27: ea:77:c8:a9:e3:f8:46:be:7d:0c:bf:6f:02:43:f1: a2:29:77:6b:05:dc:36:8a:84:d0:6e:90:fe:3f:4b: c3:16:df:13:03:97:e6:44:ae:33:fe:51:21:aa:90: 2d:9b:5e:0e:65:02:18:3c:44:83:3b:cd:8d:5e:8d: 6f:3e:1c:8a:3f:5e:d7:db:93:74:e1:1f:a9:57:32: 2e:df:2d:04:ac:37:1b:6c:56:35:e9:12:6b:49:ef: b2:ae:79:f3:b1:1c:db:96:c1:b1:84:0a:9c:bd:a5: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:03:38:4F:DD:BB:C0:A3:0B:20:2B:08:CC:44:05:D5:A6:7A:10:6D X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:7000::/37 Signature Algorithm: sha256WithRSAEncryption 79:fd:a1:0a:7d:4d:16:dc:6f:b3:6b:e7:ae:e9:6b:0a:f3:63: 8f:68:1c:15:37:a6:6c:6b:5e:54:8b:83:fb:21:45:e4:12:fb: 1b:ca:76:e8:85:a2:0c:87:5b:51:1d:ef:d9:ad:52:b0:15:6a: 98:cf:84:9a:ee:49:5e:1a:50:6a:b3:d1:1b:5f:3d:1b:ea:a9: a7:af:77:a4:bf:ad:93:b2:95:55:d9:a9:1c:0e:c7:b0:d0:10: d1:e0:7f:d9:d8:ee:37:ea:5c:e1:8c:16:0e:c6:ad:bb:f4:c0: ab:d1:0b:ea:ec:15:4e:49:1f:23:8b:9b:73:30:ef:ea:4b:4c: 61:dd:39:3b:50:a9:c6:ac:92:2c:68:e3:af:95:96:58:fc:a7: 83:87:ec:b5:aa:a4:22:3a:ce:18:52:f8:cf:eb:c2:0e:65:5e: 4d:86:42:39:61:26:84:da:d3:e4:10:94:77:11:26:3e:94:a0: c3:55:8e:e5:29:e0:be:f0:bc:91:b8:05:74:e5:a6:88:2a:fb: 4e:37:b7:5c:b6:95:17:61:0d:b2:ed:56:c7:5e:12:d9:42:51: b4:01:19:18:45:53:e1:82:94:5c:05:9a:4b:3b:96:64:23:b4: b5:49:56:d0:6f:ca:3e:72:01:91:f5:1f:67:bf:33:d2:16:fd: 26:e4:f3:4f -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUEmubEz5uAeMmm2zJ2yHCEDjgjywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA0MTExOTI0MDdaFw0yNjA0MTAxOTI5MDdaMDMxMTAvBgNV BAMTKDdFMDMzODRGRERCQkMwQTMwQjIwMkIwOENDNDQwNUQ1QTY3QTEwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRG4DDiOihTwyFyK4Vcsu3moHM WAYWaCi6piif7ACcrJQVcKjzmq4dSMG2jQGWVGsIP0yxgzQOgxxzEKfDhBB4weCX 3frSccxGHuq6zVcwyH5QBk+TGe4iwuIBfgBiaRJeLRvyAHGUQFeeGuz2UCqB2Axh GyJrUImnFISUeEmhbvNhzI5oWCLO9Yt7XHAppy4AFAOKJ+p3yKnj+Ea+fQy/bwJD 8aIpd2sF3DaKhNBukP4/S8MW3xMDl+ZErjP+USGqkC2bXg5lAhg8RIM7zY1ejW8+ HIo/Xtfbk3ThH6lXMi7fLQSsNxtsVjXpEmtJ77KuefOxHNuWwbGECpy9pf7dAgMB AAGjggJpMIICZTAdBgNVHQ4EFgQUfgM4T927wKMLICsIzEQF1aZ6EG0wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM3MzAzMDMwM2EzYTJm MzMzNzJkMzQzODIwM2QzZTIwMzIzMDMzMzAzNjMyLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKgtOB3Aw DQYJKoZIhvcNAQELBQADggEBAHn9oQp9TRbcb7Nr567pawrzY49oHBU3pmxrXlSL g/shReQS+xvKduiFogyHW1Ed79mtUrAVapjPhJruSV4aUGqz0RtfPRvqqaevd6S/ rZOylVXZqRwOx7DQENHgf9nY7jfqXOGMFg7Grbv0wKvRC+rsFU5JHyOLm3Mw7+pL TGHdOTtQqcaskixo46+Vllj8p4OH7LWqpCI6zhhS+M/rwg5lXk2GQjlhJoTa0+QQ lHcRJj6UoMNVjuUp4L7wvJG4BXTlpogq+043t1y2lRdhDbLtVsdeEtlCUbQBGRhF U+GClFwFmks7lmQjtLVJVtBvyj5yAZH1H2e/M9IW/Sbk808= -----END CERTIFICATE-----Generated at Wed Apr 16 02:24:02 2025 by rpki-client