$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa File: 326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (raw, json) Hash identifier: Uc79gcztvVNrVXuoLJZOmiSLe+RHrdTATKJGRg0ZxU4= Subject key identifier: 38:64:9B:30:3D:1B:84:59:C6:3C:04:F4:4B:6A:96:3A:56:AF:54:48 Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA Certificate serial: 49C2693EDE1B4F1A4154FCE4877693B68A26BF8B Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa Signing time: Mon 27 Jan 2025 12:14:13 +0000 ROA not before: Mon 27 Jan 2025 12:09:13 +0000 ROA not after: Mon 26 Jan 2026 12:14:13 +0000 asID: 57870 IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 00:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c2:69:3e:de:1b:4f:1a:41:54:fc:e4:87:76:93:b6:8a:26:bf:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892843788777A43273322096510EA10880E7E5EA Validity Not Before: Jan 27 12:09:13 2025 GMT Not After : Jan 26 12:14:13 2026 GMT Subject: CN=38649B303D1B8459C63C04F44B6A963A56AF5448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:47:7f:96:c2:54:02:ed:27:ef:d1:e6:1e: aa:ab:4c:a8:3a:17:a7:57:d0:f6:77:37:cb:fb:d6: 69:40:c1:b3:b4:5a:ce:7f:e5:c5:53:c9:5f:33:c6: 03:32:56:d8:79:d0:0a:af:7a:3a:d8:9c:84:fe:93: 96:80:9a:e4:93:5c:5c:f5:07:36:3f:92:1a:79:c4: ea:99:dd:0b:eb:e5:8b:90:ab:32:9d:7d:0c:91:d9: 23:5a:91:b3:f4:49:3a:da:cf:45:6d:0b:9e:fc:84: 9a:cb:f8:d3:a6:25:af:1c:e4:f1:cd:87:d3:f3:b5: 81:b4:95:bb:af:58:ac:f8:8c:25:61:a2:ee:72:12: 59:01:61:31:ab:2c:97:7f:2b:d0:5e:b9:62:fc:22: 9b:ca:d9:61:c8:83:5a:c2:14:f9:78:4f:ee:3f:71: ff:ad:50:41:1d:dd:eb:a0:60:ce:ce:f7:25:e9:df: 59:06:69:87:c0:04:89:83:d5:c5:8a:8a:da:c3:e8: 8f:51:77:3a:e2:42:df:09:96:bf:49:4a:ad:81:ee: 5a:03:20:a4:06:ed:50:1e:04:2a:95:52:86:12:89: 0a:68:75:2a:c1:5c:cf:15:ad:e9:84:28:63:33:e1: 64:d2:5a:36:de:a5:5b:38:b6:63:88:b7:0f:8b:6a: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:64:9B:30:3D:1B:84:59:C6:3C:04:F4:4B:6A:96:3A:56:AF:54:48 X509v3 Authority Key Identifier: keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0:ffee::/48 Signature Algorithm: sha256WithRSAEncryption 87:1c:a1:cb:77:58:af:4e:21:3f:87:a2:d2:f9:59:41:43:24: 2d:f6:e7:4f:aa:8a:d8:0f:3c:e4:22:13:75:7c:42:18:d4:22: e5:ac:62:1e:f9:97:05:10:9b:4c:46:31:f6:71:97:31:42:11: b7:a5:75:de:d4:87:6f:9e:45:1b:f6:1c:db:8d:c5:52:e8:51: e0:d3:3b:0b:b3:76:33:e2:a3:8f:69:88:85:5e:c5:0d:9e:88: 51:48:09:b6:b1:a8:82:ec:ed:aa:2f:43:b1:a2:87:81:c5:c4: b3:30:39:3f:d5:fd:16:fb:47:52:cd:69:ef:42:11:b2:62:81: 97:50:80:2b:27:50:f9:b5:e6:d3:9b:c4:ba:f4:da:fb:c5:8a: 89:5a:b7:89:32:a9:11:f1:d7:f8:38:53:80:04:00:75:a8:03: fb:c3:0b:57:42:ee:3f:66:63:7b:2d:33:53:91:ee:d2:1f:1a: f0:6d:ee:4e:67:03:52:3e:88:ca:b2:d4:a0:7b:a2:5f:dc:a3: 0f:06:5f:1e:43:76:d9:9f:6a:1d:6e:5f:73:19:27:63:b5:a9: b1:95:73:f1:9a:c4:bb:73:9c:e8:d8:99:87:e1:38:2a:08:1e: b6:3d:8b:05:61:4e:9b:1c:83:72:b2:68:da:81:c0:7a:3c:b8: 8b:5f:9e:83 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUScJpPt4bTxpBVPzkh3aTtoomv4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4 MEU3RTVFQTAeFw0yNTAxMjcxMjA5MTNaFw0yNjAxMjYxMjE0MTNaMDMxMTAvBgNV BAMTKDM4NjQ5QjMwM0QxQjg0NTlDNjNDMDRGNDRCNkE5NjNBNTZBRjU0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FEd/lsJUAu0n79HmHqqrTKg6 F6dX0PZ3N8v71mlAwbO0Ws5/5cVTyV8zxgMyVth50AqvejrYnIT+k5aAmuSTXFz1 BzY/khp5xOqZ3Qvr5YuQqzKdfQyR2SNakbP0STraz0VtC578hJrL+NOmJa8c5PHN h9PztYG0lbuvWKz4jCVhou5yElkBYTGrLJd/K9BeuWL8IpvK2WHIg1rCFPl4T+4/ cf+tUEEd3eugYM7O9yXp31kGaYfABImD1cWKitrD6I9RdzriQt8Jlr9JSq2B7loD IKQG7VAeBCqVUoYSiQpodSrBXM8VremEKGMz4WTSWjbepVs4tmOItw+LalZHAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUOGSbMD0bhFnGPAT0S2qWOlavVEgwHwYDVR0j BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3 NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzUzNzM4MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN BgkqhkiG9w0BAQsFAAOCAQEAhxyhy3dYr04hP4ei0vlZQUMkLfbnT6qK2A885CIT dXxCGNQi5axiHvmXBRCbTEYx9nGXMUIRt6V13tSHb55FG/Yc243FUuhR4NM7C7N2 M+Kjj2mIhV7FDZ6IUUgJtrGoguztqi9DsaKHgcXEszA5P9X9FvtHUs1p70IRsmKB l1CAKydQ+bXm05vEuvTa+8WKiVq3iTKpEfHX+DhTgAQAdagD+8MLV0LuP2Zjey0z U5Hu0h8a8G3uTmcDUj6IyrLUoHuiX9yjDwZfHkN22Z9qHW5fcxknY7WpsZVz8ZrE u3Oc6NiZh+E4Kggetj2LBWFOmxyDcrJo2oHAejy4i1+egw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:04 2025 by rpki-client