$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (raw, json) Hash identifier: kWfMBt5ZGVfyJKg5d1ZuDzSFiVwPO4bZv13xNVyJl1c= Subject key identifier: 4F:D4:DE:96:7F:9D:CE:24:3E:C6:4B:7B:48:AB:01:5E:57:25:90:A5 Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA Certificate serial: 64212EB9FED9AB337CE60CD377A4106D497257FE Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa Signing time: Mon 27 Jan 2025 12:14:14 +0000 ROA not before: Mon 27 Jan 2025 12:09:14 +0000 ROA not after: Mon 26 Jan 2026 12:14:14 +0000 asID: 200952 IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 19:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:21:2e:b9:fe:d9:ab:33:7c:e6:0c:d3:77:a4:10:6d:49:72:57:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892843788777A43273322096510EA10880E7E5EA Validity Not Before: Jan 27 12:09:14 2025 GMT Not After : Jan 26 12:14:14 2026 GMT Subject: CN=4FD4DE967F9DCE243EC64B7B48AB015E572590A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:f0:14:32:6a:d0:50:fe:0a:a4:8f:82:7d: 2e:1f:e9:29:f6:9c:9d:fc:7c:66:05:e6:d9:60:da: ac:8b:6d:93:c0:c0:a9:08:6f:54:c5:da:c6:b3:95: 09:f3:75:76:97:33:e2:eb:d8:87:94:06:9f:e5:c3: 9b:73:e3:28:15:1f:d9:2c:cb:e1:21:39:4c:a4:26: 0a:f6:25:61:39:22:43:64:de:a4:7c:b8:d3:25:59: b8:96:f9:08:67:30:0e:ab:bf:27:3d:f3:f5:c4:05: 48:54:d4:a7:99:66:0b:6c:6c:99:a6:84:0a:aa:4a: 39:a4:04:ce:c8:58:d3:a3:4f:f8:2e:06:b3:c9:ec: 44:d4:01:05:f3:a0:f0:ab:a5:a0:9b:cf:81:c4:11: 92:29:51:f9:fe:c9:d0:08:ff:dd:8f:3f:be:99:d2: 7a:4f:c4:76:02:a5:26:e5:d2:83:e5:82:d6:a9:3f: aa:60:a8:26:83:e0:b4:b2:90:cf:95:61:a7:b4:76: a7:4f:ba:2a:87:ea:57:a3:29:b7:63:a8:8a:ea:e0: 73:5f:06:93:6c:80:1f:46:8c:f8:ed:7f:f6:2e:e8: 72:a7:bc:0e:e1:5d:bf:28:89:eb:a6:ad:b0:61:5a: 8e:0f:dd:2c:36:f5:dc:17:37:ab:e0:ac:4b:a6:46: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D4:DE:96:7F:9D:CE:24:3E:C6:4B:7B:48:AB:01:5E:57:25:90:A5 X509v3 Authority Key Identifier: keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0:ffee::/48 Signature Algorithm: sha256WithRSAEncryption 26:60:8e:f7:f7:2e:52:76:04:46:50:bd:9b:6a:ab:4e:55:42: 07:56:6b:d2:55:c2:7b:15:44:a3:5f:f9:79:2e:01:07:cc:a5: c2:63:19:e3:ff:ac:07:e4:dc:76:54:62:d2:a1:59:20:e0:f1: aa:f6:fb:48:87:7f:07:31:dd:78:5a:64:5e:9c:2d:8a:19:f7: 1d:c0:78:e5:db:50:ae:13:ec:2a:96:05:0d:2e:c7:07:6a:35: 1c:9f:ea:71:1b:77:33:88:88:8a:c8:31:d0:e2:d7:f9:96:d8: 1c:40:ca:57:b5:62:90:bc:1b:b1:b1:e6:bb:23:4e:df:d6:30: 72:b1:67:36:87:26:ac:2c:a5:89:4a:8b:e9:ff:44:d1:59:e6: 2e:2d:ab:d5:c5:e7:11:b3:6b:87:d7:aa:f4:c2:21:56:ae:00: 22:88:e9:f1:31:8f:ff:15:2f:97:20:86:a8:e1:47:9f:04:23: ce:67:ab:60:c4:46:f7:45:e0:3d:ee:16:08:4a:93:b9:5e:63: 58:62:6b:a5:0a:76:a0:90:ac:7a:bd:ad:f0:9a:fb:5b:e8:d2: 13:fb:9f:24:ad:3f:05:d1:15:0d:09:a1:44:f9:3e:ce:b1:8e: 5b:18:7c:4e:a3:5c:de:50:91:80:bb:c3:5c:a3:32:17:48:90: f6:c1:69:d7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZCEuuf7ZqzN85gzTd6QQbUlyV/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4 MEU3RTVFQTAeFw0yNTAxMjcxMjA5MTRaFw0yNjAxMjYxMjE0MTRaMDMxMTAvBgNV BAMTKDRGRDRERTk2N0Y5RENFMjQzRUM2NEI3QjQ4QUIwMTVFNTcyNTkwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+PAUMmrQUP4KpI+CfS4f6Sn2 nJ38fGYF5tlg2qyLbZPAwKkIb1TF2sazlQnzdXaXM+Lr2IeUBp/lw5tz4ygVH9ks y+EhOUykJgr2JWE5IkNk3qR8uNMlWbiW+QhnMA6rvyc98/XEBUhU1KeZZgtsbJmm hAqqSjmkBM7IWNOjT/guBrPJ7ETUAQXzoPCrpaCbz4HEEZIpUfn+ydAI/92PP76Z 0npPxHYCpSbl0oPlgtapP6pgqCaD4LSykM+VYae0dqdPuiqH6lejKbdjqIrq4HNf BpNsgB9GjPjtf/Yu6HKnvA7hXb8oieumrbBhWo4P3Sw29dwXN6vgrEumRrH/AgMB AAGjggJqMIICZjAdBgNVHQ4EFgQUT9Teln+dziQ+xkt7SKsBXlclkKUwHwYDVR0j BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3 NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzIzMDMwMzkzNTMyLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u MA0GCSqGSIb3DQEBCwUAA4IBAQAmYI739y5SdgRGUL2baqtOVUIHVmvSVcJ7FUSj X/l5LgEHzKXCYxnj/6wH5Nx2VGLSoVkg4PGq9vtIh38HMd14WmRenC2KGfcdwHjl 21CuE+wqlgUNLscHajUcn+pxG3cziIiKyDHQ4tf5ltgcQMpXtWKQvBuxsea7I07f 1jBysWc2hyasLKWJSovp/0TRWeYuLavVxecRs2uH16r0wiFWrgAiiOnxMY//FS+X IIao4UefBCPOZ6tgxEb3ReA97hYISpO5XmNYYmulCnagkKx6va3wmvtb6NIT+58k rT8F0RUNCaFE+T7OsY5bGHxOo1zeUJGAu8NcozIXSJD2wWnX -----END CERTIFICATE-----Generated at Sun Apr 6 10:55:07 2025 by rpki-client