$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e20323134363339.roa File: 326130623a346530373a63313a3a2f34382d3438203d3e20323134363339.roa (raw, json) Hash identifier: x7iltq+Oja027GboD3IPNZ7g1LwN0WheOedAvdu1cWk= Subject key identifier: 95:DF:F7:44:12:57:E2:80:DB:0F:F6:70:D0:E8:0E:86:9E:F7:1F:B7 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4216AB8AFAA4DE365DA45769E00214DF0D322AF4 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e20323134363339.roa Signing time: Sun 29 Jun 2025 06:09:20 +0000 ROA not before: Sun 29 Jun 2025 06:04:20 +0000 ROA not after: Sun 28 Jun 2026 06:09:20 +0000 asID: 214639 IP address blocks: 2a0b:4e07:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 19:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:16:ab:8a:fa:a4:de:36:5d:a4:57:69:e0:02:14:df:0d:32:2a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 29 06:04:20 2025 GMT Not After : Jun 28 06:09:20 2026 GMT Subject: CN=95DFF7441257E280DB0FF670D0E80E869EF71FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:a2:0d:89:c0:b2:98:fd:43:81:13:1d:11: 0f:f1:af:6a:62:1f:b4:15:f5:f5:e8:28:25:99:ab: 4e:a8:38:21:a8:e6:71:92:24:fb:7f:5e:ea:3a:26: 14:e7:6c:10:07:57:2f:bf:6b:eb:0a:71:9e:f2:a8: 4a:36:cf:e9:99:3c:35:1a:de:b6:e4:5a:99:d6:78: 46:95:6a:c2:f3:d3:a3:af:dd:88:a7:f7:33:2b:85: 53:f6:1a:e6:9f:3a:28:83:8c:4c:8c:a6:31:1b:c3: 8a:15:fb:9b:58:1a:70:63:c3:a6:b3:69:46:3c:60: a1:76:aa:37:9f:d2:1f:b1:6c:47:76:10:76:40:c0: f5:d4:0c:a2:fd:b3:39:a1:09:1e:87:56:8e:be:42: 55:0c:df:7c:c1:86:09:66:8e:61:58:7c:1c:a4:52: e4:6e:19:1a:d1:cc:3e:36:7e:50:bc:37:aa:07:74: 8a:71:6d:1d:bc:54:49:f6:2c:4a:99:4c:f4:ad:a0: ef:b8:90:ae:da:1b:94:da:55:8c:c9:9b:81:1b:af: 7e:d0:24:3c:47:39:85:06:40:0c:1c:32:0d:8a:e1: 79:4a:7a:8a:c8:40:ac:30:fb:c3:eb:3c:e3:05:8a: b4:48:ba:b7:ab:3e:97:27:1c:02:a3:0b:be:76:f4: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DF:F7:44:12:57:E2:80:DB:0F:F6:70:D0:E8:0E:86:9E:F7:1F:B7 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e20323134363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c1::/48 Signature Algorithm: sha256WithRSAEncryption 3a:01:7e:d2:17:b3:75:c2:7d:b8:17:16:e4:df:94:fd:d9:65: 84:03:e5:07:1a:8b:72:36:12:8b:2f:8b:86:fc:25:05:3a:0a: ac:83:ae:45:25:1d:5c:0e:c0:ad:85:53:56:18:c8:2c:ba:8a: cc:16:88:78:5a:d9:85:58:85:49:50:d5:85:72:97:61:71:2e: 43:83:e2:d2:d5:16:4d:14:91:88:c1:ef:fa:14:c3:4b:58:13: 5b:65:bc:f1:c3:82:8e:26:07:87:f1:2d:1f:dd:6e:55:21:8a: 8c:26:04:2a:91:c3:60:02:77:d4:17:1e:fb:75:c9:2d:49:25: 2c:63:fc:9e:56:87:7d:7d:75:0c:b7:6e:20:95:36:73:16:45: 86:8a:ec:b9:2a:e2:b0:ac:ec:d4:60:72:35:58:d3:97:f0:cf: 0f:ff:5a:d6:0e:3b:fb:d1:8d:a9:52:fc:ae:77:bc:6a:3a:a8: 77:e3:45:45:75:e5:8e:38:c0:e4:14:cc:df:62:e1:73:38:3e: 0f:d1:07:ba:11:d6:cb:4b:ca:a5:2f:b3:98:ab:23:42:ea:7d: 2a:90:2a:a5:7b:1f:24:d4:45:3f:45:3a:53:3a:84:06:e4:d5: e9:f5:ab:1d:f4:30:8c:f3:de:66:ae:c7:30:30:06:d6:b5:bd: 81:8e:ae:48 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUQharivqk3jZdpFdp4AIU3w0yKvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA2MjkwNjA0MjBaFw0yNjA2MjgwNjA5MjBaMDMxMTAvBgNV BAMTKDk1REZGNzQ0MTI1N0UyODBEQjBGRjY3MEQwRTgwRTg2OUVGNzFGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRW6INicCymP1DgRMdEQ/xr2pi H7QV9fXoKCWZq06oOCGo5nGSJPt/Xuo6JhTnbBAHVy+/a+sKcZ7yqEo2z+mZPDUa 3rbkWpnWeEaVasLz06Ov3Yin9zMrhVP2GuafOiiDjEyMpjEbw4oV+5tYGnBjw6az aUY8YKF2qjef0h+xbEd2EHZAwPXUDKL9szmhCR6HVo6+QlUM33zBhglmjmFYfByk UuRuGRrRzD42flC8N6oHdIpxbR28VEn2LEqZTPStoO+4kK7aG5TaVYzJm4Ebr37Q JDxHOYUGQAwcMg2K4XlKeorIQKww+8PrPOMFirRIurerPpcnHAKjC7529B8PAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUld/3RBJX4oDbD/Zw0OgOhp73H7cwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYzMzEzYTNhMmYzNDM4 MmQzNDM4MjAzZDNlMjAzMjMxMzQzNjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAMEwDQYJ KoZIhvcNAQELBQADggEBADoBftIXs3XCfbgXFuTflP3ZZYQD5Qcai3I2Eosvi4b8 JQU6CqyDrkUlHVwOwK2FU1YYyCy6iswWiHha2YVYhUlQ1YVyl2FxLkOD4tLVFk0U kYjB7/oUw0tYE1tlvPHDgo4mB4fxLR/dblUhiowmBCqRw2ACd9QXHvt1yS1JJSxj /J5Wh319dQy3biCVNnMWRYaK7Lkq4rCs7NRgcjVY05fwzw//WtYOO/vRjalS/K53 vGo6qHfjRUV15Y44wOQUzN9i4XM4Pg/RB7oR1stLyqUvs5irI0LqfSqQKqV7HyTU RT9FOlM6hAbk1en1qx30MIzz3mauxzAwBta1vYGOrkg= -----END CERTIFICATE-----Generated at Fri Jul 4 08:11:36 2025 by rpki-client