$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6666633a3a2f34362d3438203d3e20323135313931.roa File: 326130623a346530373a6666633a3a2f34362d3438203d3e20323135313931.roa (raw, json) Hash identifier: YB5FhHN11yVoLk/JQpekPNoEoeisEcYB0cUtMX1OKNg= Subject key identifier: 28:FC:EE:D7:42:B2:58:0C:6C:E7:CF:82:D8:A8:45:23:31:B4:81:9E Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 368794AD5D70E6F8C666CA0104C653F38A699A4E Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6666633a3a2f34362d3438203d3e20323135313931.roa Signing time: Fri 11 Apr 2025 21:36:58 +0000 ROA not before: Fri 11 Apr 2025 21:31:58 +0000 ROA not after: Fri 10 Apr 2026 21:36:58 +0000 asID: 215191 IP address blocks: 2a0b:4e07:ffc::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 13:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:87:94:ad:5d:70:e6:f8:c6:66:ca:01:04:c6:53:f3:8a:69:9a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 11 21:31:58 2025 GMT Not After : Apr 10 21:36:58 2026 GMT Subject: CN=28FCEED742B2580C6CE7CF82D8A8452331B4819E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:62:49:48:28:f6:42:4e:09:84:03:c2:5c: a5:b8:b1:db:b3:25:96:a6:3c:3e:cf:b6:7c:2f:07: 3d:48:14:ad:a4:39:a2:d7:b8:e1:fb:5c:80:f8:d2: 75:fa:ac:49:b7:7a:c2:f5:67:3b:57:59:e9:73:c8: 9b:6d:be:11:b0:78:48:7b:b4:23:8d:e7:e3:6c:0f: 6c:7c:0b:1b:90:38:e2:20:d2:05:5c:0b:16:a8:f7: b8:71:e7:bc:8b:43:f6:cc:41:07:1b:ab:4d:32:07: 95:6e:49:2e:02:c1:f8:5d:85:d5:29:37:3c:9a:5b: c8:32:83:92:b0:79:fd:37:4e:0a:aa:6c:29:43:fb: 3e:60:c0:85:68:ed:73:d9:f5:78:8f:a2:ce:9b:1a: cf:a5:31:c6:1f:67:6c:74:45:db:11:37:d7:5f:f6: 90:6e:7c:4b:75:19:79:62:f3:10:01:9d:cd:48:62: c6:f2:58:71:bd:8c:d9:f7:6c:bb:88:31:96:8d:f7: b8:45:5e:0f:78:71:95:09:5d:ef:49:15:37:af:0c: b0:23:83:a3:4f:01:9c:30:22:d1:d4:f0:e9:51:bd: ef:6f:07:36:f3:8a:16:8b:54:77:e0:8e:df:88:04: 06:73:e8:a5:c7:68:c3:09:51:43:02:79:91:e2:7e: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FC:EE:D7:42:B2:58:0C:6C:E7:CF:82:D8:A8:45:23:31:B4:81:9E X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6666633a3a2f34362d3438203d3e20323135313931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:ffc::/46 Signature Algorithm: sha256WithRSAEncryption 53:28:57:18:e9:92:87:18:b3:33:67:ac:52:55:32:65:5c:58: ba:85:2a:63:b6:16:1f:15:ae:e4:e9:3f:e9:ce:68:b1:93:82: 69:3f:b5:ad:8a:9a:28:ca:a0:41:fc:0b:24:af:0f:ba:21:3f: 30:aa:d5:e0:58:02:35:67:f7:17:df:52:05:6b:bd:8b:f4:b5: 23:5d:92:7a:9a:51:65:e4:53:d7:51:9a:ae:81:21:30:ae:72: f4:02:b3:88:77:7b:76:d0:f4:fa:0a:79:94:d6:60:93:d1:cd: b1:3b:3e:0d:60:5c:9b:40:4e:88:f4:52:44:bb:25:06:f6:b6: 2a:19:b1:8f:07:ea:56:90:16:d9:4d:cf:e1:fc:0e:3c:c7:de: bc:fd:ea:89:35:71:14:31:fd:6e:eb:50:ae:9f:0d:b9:ba:83: b0:13:ef:96:a6:9e:9e:03:fb:35:01:c8:56:95:0a:cc:20:f6: 38:e5:2a:5c:79:ee:f0:87:de:91:61:50:b5:7d:f3:e3:43:c0: e3:8e:df:4a:b9:38:41:92:7b:dd:10:4d:3a:56:d5:1e:6f:c7: 64:8f:7f:1b:6f:f3:db:1c:cf:db:7e:8d:d6:bf:6e:42:74:a4: 47:e2:b5:98:16:10:1d:48:6b:fb:c4:58:13:0f:e6:8d:7e:6f: 1b:6b:52:81 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUNoeUrV1w5vjGZsoBBMZT84ppmk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA0MTEyMTMxNThaFw0yNjA0MTAyMTM2NThaMDMxMTAvBgNV BAMTKDI4RkNFRUQ3NDJCMjU4MEM2Q0U3Q0Y4MkQ4QTg0NTIzMzFCNDgxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerWJJSCj2Qk4JhAPCXKW4sduz JZamPD7PtnwvBz1IFK2kOaLXuOH7XID40nX6rEm3esL1ZztXWelzyJttvhGweEh7 tCON5+NsD2x8CxuQOOIg0gVcCxao97hx57yLQ/bMQQcbq00yB5VuSS4CwfhdhdUp NzyaW8gyg5Kwef03TgqqbClD+z5gwIVo7XPZ9XiPos6bGs+lMcYfZ2x0RdsRN9df 9pBufEt1GXli8xABnc1IYsbyWHG9jNn3bLuIMZaN97hFXg94cZUJXe9JFTevDLAj g6NPAZwwItHU8OlRve9vBzbzihaLVHfgjt+IBAZz6KXHaMMJUUMCeZHifnzPAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUKPzu10KyWAxs58+C2KhFIzG0gZ4wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTY2NjY2MzNhM2EyZjM0 MzYyZDM0MzgyMDNkM2UyMDMyMzEzNTMxMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioLTgcP/DAN BgkqhkiG9w0BAQsFAAOCAQEAUyhXGOmShxizM2esUlUyZVxYuoUqY7YWHxWu5Ok/ 6c5osZOCaT+1rYqaKMqgQfwLJK8PuiE/MKrV4FgCNWf3F99SBWu9i/S1I12SeppR ZeRT11GaroEhMK5y9AKziHd7dtD0+gp5lNZgk9HNsTs+DWBcm0BOiPRSRLslBva2 KhmxjwfqVpAW2U3P4fwOPMfevP3qiTVxFDH9butQrp8NubqDsBPvlqaengP7NQHI VpUKzCD2OOUqXHnu8IfekWFQtX3z40PA447fSrk4QZJ73RBNOlbVHm/HZI9/G2/z 2xzP236N1r9uQnSkR+K1mBYQHUhr+8RYEw/mjX5vG2tSgQ== -----END CERTIFICATE-----Generated at Wed Apr 16 02:24:04 2025 by rpki-client