$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa File: 326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (raw, json) Hash identifier: lJLYs0MMj64yiiin7iTRDR30ilF1Voyl/4s3jPS1Fcg= Subject key identifier: F5:32:5E:B2:85:27:80:23:28:FF:8B:FC:80:AC:D6:61:40:B9:D6:F5 Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA Certificate serial: 131961BA8749961D55444ED7B7D55BB80F8F4519 Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa Signing time: Mon 27 Jan 2025 12:14:14 +0000 ROA not before: Mon 27 Jan 2025 12:09:14 +0000 ROA not after: Mon 26 Jan 2026 12:14:14 +0000 asID: 59993 IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 12:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:19:61:ba:87:49:96:1d:55:44:4e:d7:b7:d5:5b:b8:0f:8f:45:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892843788777A43273322096510EA10880E7E5EA Validity Not Before: Jan 27 12:09:14 2025 GMT Not After : Jan 26 12:14:14 2026 GMT Subject: CN=F5325EB28527802328FF8BFC80ACD66140B9D6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:f8:f8:0a:49:f4:0c:76:5f:1e:74:44:f7: 6a:cf:92:46:12:8f:53:8f:24:0b:7a:b9:34:bf:2e: b1:1a:91:30:68:d3:fe:d5:3d:b5:8b:8b:91:98:29: 2a:d0:44:88:db:08:b6:36:61:3f:95:5b:72:de:89: df:62:01:de:35:a4:e5:56:e6:80:97:74:a2:b9:65: ba:9a:89:bd:f7:53:04:24:14:4a:86:a8:42:20:4a: ab:49:b2:61:58:85:3f:e7:25:c2:da:49:b8:6b:28: 23:2e:a7:c9:ee:bc:de:2b:07:29:97:f7:db:68:1e: 66:af:33:a3:aa:80:8a:e8:15:8d:1e:55:a5:89:32: 81:53:57:ee:ca:6b:69:a3:70:1e:6e:9d:55:f7:a4: 72:44:a1:3e:31:7f:d4:8c:19:42:9d:cd:a2:62:68: b3:c2:73:2d:01:d7:fd:b7:13:ac:50:3e:36:0b:e4: b8:45:00:cb:2f:87:96:5f:ef:12:81:dd:f3:6c:be: 14:18:93:f6:61:1f:13:e0:a8:56:ac:09:cc:92:4d: 6f:74:66:d1:ed:f6:59:72:71:6b:05:cc:0a:17:34: a6:80:15:15:74:8e:85:79:19:ff:80:06:58:5b:33: f2:85:eb:97:5c:91:1e:2c:0a:12:c1:32:cd:27:08: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:32:5E:B2:85:27:80:23:28:FF:8B:FC:80:AC:D6:61:40:B9:D6:F5 X509v3 Authority Key Identifier: keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0:ffee::/48 Signature Algorithm: sha256WithRSAEncryption 03:e5:13:2e:40:22:36:c6:87:c2:18:0c:0f:3e:18:4e:b6:e0: b8:0d:0b:6a:9a:e2:d6:fd:14:0c:15:e8:11:3c:5d:a4:e3:c1: f7:26:f3:59:26:bf:44:f3:97:b4:f0:2f:d9:98:54:53:44:f3: 17:9c:41:f2:1a:1b:7f:02:c9:34:5c:5a:3c:47:75:d4:7c:84: 14:74:3d:f0:72:be:03:5b:45:4e:f8:0c:c9:d3:7d:97:cf:94: b6:be:2e:00:00:59:81:5e:54:cf:75:a9:de:4c:9a:60:4b:b7: 69:1e:1a:50:b4:84:cb:fe:da:de:7c:b7:25:84:77:71:b2:4d: c1:77:ea:6a:1a:6a:1a:50:d3:1c:f1:65:09:6e:e6:c5:7d:c3: ac:23:0d:91:2f:ad:a6:6a:57:9f:5f:df:29:f4:58:5b:4c:5b: f8:4f:da:3c:0f:12:8a:40:d8:c2:60:58:a3:3a:38:cb:b0:69: 56:8a:f4:fa:85:09:9f:59:ce:86:b5:fa:f4:81:ef:6c:b4:15: 5d:fd:78:83:12:a3:2c:4a:17:0a:77:d1:06:8c:2e:06:84:b1: e7:6d:4f:f4:13:93:d2:22:d6:39:0e:57:cf:81:83:85:ea:94: 11:af:cb:8c:a0:4f:d5:9f:57:2c:b3:bb:bc:0f:ff:d2:66:c5: 01:2e:8c:03 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUExlhuodJlh1VRE7Xt9VbuA+PRRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4 MEU3RTVFQTAeFw0yNTAxMjcxMjA5MTRaFw0yNjAxMjYxMjE0MTRaMDMxMTAvBgNV BAMTKEY1MzI1RUIyODUyNzgwMjMyOEZGOEJGQzgwQUNENjYxNDBCOUQ2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCPj4Ckn0DHZfHnRE92rPkkYS j1OPJAt6uTS/LrEakTBo0/7VPbWLi5GYKSrQRIjbCLY2YT+VW3Leid9iAd41pOVW 5oCXdKK5Zbqaib33UwQkFEqGqEIgSqtJsmFYhT/nJcLaSbhrKCMup8nuvN4rBymX 99toHmavM6OqgIroFY0eVaWJMoFTV+7Ka2mjcB5unVX3pHJEoT4xf9SMGUKdzaJi aLPCcy0B1/23E6xQPjYL5LhFAMsvh5Zf7xKB3fNsvhQYk/ZhHxPgqFasCcySTW90 ZtHt9llycWsFzAoXNKaAFRV0joV5Gf+ABlhbM/KF65dckR4sChLBMs0nCCphAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQU9TJesoUngCMo/4v8gKzWYUC51vUwHwYDVR0j BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3 NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzUzOTM5MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN BgkqhkiG9w0BAQsFAAOCAQEAA+UTLkAiNsaHwhgMDz4YTrbguA0Lapri1v0UDBXo ETxdpOPB9ybzWSa/RPOXtPAv2ZhUU0TzF5xB8hobfwLJNFxaPEd11HyEFHQ98HK+ A1tFTvgMydN9l8+Utr4uAABZgV5Uz3Wp3kyaYEu3aR4aULSEy/7a3ny3JYR3cbJN wXfqahpqGlDTHPFlCW7mxX3DrCMNkS+tpmpXn1/fKfRYW0xb+E/aPA8SikDYwmBY ozo4y7BpVor0+oUJn1nOhrX69IHvbLQVXf14gxKjLEoXCnfRBowuBoSx521P9BOT 0iLWOQ5Xz4GDheqUEa/LjKBP1Z9XLLO7vA//0mbFAS6MAw== -----END CERTIFICATE-----Generated at Sat Apr 5 22:41:07 2025 by rpki-client