$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa (raw, json) Hash identifier: l8I+he6ymqsWqNdhrgKxmwiJkL0I95zVbeaHcUv/NF0= Subject key identifier: 70:82:35:10:18:32:2A:76:61:79:CD:0A:D1:7C:15:EE:66:ED:97:5B Certificate issuer: /CN=412292C0E24D8885B4760BC708F9E477870D9C70 Certificate serial: 324BE8E6DEFB76B722E537DAD1A78B5AEEC85425 Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa Signing time: Mon 26 Feb 2024 12:08:51 +0000 ROA not before: Mon 26 Feb 2024 12:03:51 +0000 ROA not after: Mon 24 Feb 2025 12:08:51 +0000 asID: 213163 IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.mft rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 May 2024 16:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4b:e8:e6:de:fb:76:b7:22:e5:37:da:d1:a7:8b:5a:ee:c8:54:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70 Validity Not Before: Feb 26 12:03:51 2024 GMT Not After : Feb 24 12:08:51 2025 GMT Subject: CN=7082351018322A766179CD0AD17C15EE66ED975B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:05:f6:4b:12:ee:b4:78:df:a8:95:18:8f: 92:c3:32:bb:00:da:68:3a:0c:18:d3:c3:00:ec:70: bf:85:3f:56:2b:9f:50:fd:c7:9c:d0:66:d7:d5:9c: 89:40:6a:80:e9:5d:5c:eb:a6:66:c8:bb:b5:15:5c: b1:af:d3:90:dd:b8:22:45:24:50:a6:9f:b1:84:57: 4b:9e:8d:03:1a:ec:83:10:ce:09:7c:4c:93:c9:57: ec:e9:dc:b5:97:3f:55:3d:5b:56:39:31:31:f8:87: 11:ad:53:b1:35:1c:34:6d:5e:25:32:83:ec:34:e7: c5:f7:88:5f:2f:19:2c:d4:54:e6:ef:fb:81:fd:f9: a2:d2:c9:06:ac:6c:86:77:44:f1:4b:9a:a0:ed:4b: 5d:96:ce:78:15:9f:d4:a1:d2:e6:06:76:7d:4f:0b: 01:c2:48:4f:85:59:7d:d0:99:ea:77:46:e2:07:96: 2a:bf:76:cf:f8:29:cd:bd:04:92:87:04:01:f1:c4: a2:0e:ba:53:0a:01:5b:88:3f:da:50:80:68:3a:15: 7e:74:96:2f:d1:60:8c:92:cb:07:ff:85:18:e6:06: fa:15:9a:03:a6:a6:d5:99:59:d6:02:57:ac:15:6b: cf:ce:7d:b1:5b:1f:15:e1:9b:c1:6f:76:09:1c:c3: 18:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:35:10:18:32:2A:76:61:79:CD:0A:D1:7C:15:EE:66:ED:97:5B X509v3 Authority Key Identifier: keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0:ffee::/48 Signature Algorithm: sha256WithRSAEncryption ab:50:0d:2d:17:66:71:12:3d:f3:42:f3:eb:82:e1:f4:78:6c: 29:cc:75:86:30:17:90:34:e3:ec:fe:ae:36:98:f0:ca:46:9d: 90:47:54:1e:9e:5e:bd:32:04:0e:54:e0:cc:cd:4e:1f:93:0a: 06:52:35:b2:bd:6a:11:0b:6f:a2:a2:d5:71:73:ca:55:98:14: 65:59:34:fc:83:61:88:01:e8:70:4f:28:2e:70:de:55:6c:17: ef:c5:2b:c5:9a:f4:55:a9:4a:4d:c9:67:0c:51:ed:d8:e0:04: cf:fc:fb:e9:7d:c8:d3:a1:68:b1:8f:17:82:d0:73:7a:d3:e3: 31:2b:e6:49:b1:12:d8:48:0b:26:c4:42:84:9b:3f:c6:1e:e5: a1:9c:a6:7a:92:72:fc:90:22:51:1b:fd:9f:ac:f0:f8:5c:fa: dc:7e:07:19:5e:03:ce:4e:0c:99:ca:77:37:ac:1d:b3:7b:2f: 95:ff:5a:15:f3:ab:63:06:9a:94:f0:53:86:7d:d3:18:72:97: 1b:6f:c1:39:5b:1f:22:77:8c:8f:b6:f4:2c:dc:5b:2d:29:20: cb:26:0a:14:2f:80:46:b9:aa:1a:3b:5b:9b:94:ee:6e:bb:ca: 1f:b1:2f:b0:b9:3c:3f:a7:de:fb:a5:ef:bd:71:1b:2d:fe:35: aa:13:68:ac -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUMkvo5t77drci5Tfa0aeLWu7IVCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyMjkyQzBFMjREODg4NUI0NzYwQkM3MDhGOUU0Nzc4 NzBEOUM3MDAeFw0yNDAyMjYxMjAzNTFaFw0yNTAyMjQxMjA4NTFaMDMxMTAvBgNV BAMTKDcwODIzNTEwMTgzMjJBNzY2MTc5Q0QwQUQxN0MxNUVFNjZFRDk3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34QX2SxLutHjfqJUYj5LDMrsA 2mg6DBjTwwDscL+FP1Yrn1D9x5zQZtfVnIlAaoDpXVzrpmbIu7UVXLGv05DduCJF JFCmn7GEV0uejQMa7IMQzgl8TJPJV+zp3LWXP1U9W1Y5MTH4hxGtU7E1HDRtXiUy g+w058X3iF8vGSzUVObv+4H9+aLSyQasbIZ3RPFLmqDtS12WzngVn9Sh0uYGdn1P CwHCSE+FWX3Qmep3RuIHliq/ds/4Kc29BJKHBAHxxKIOulMKAVuIP9pQgGg6FX50 li/RYIySywf/hRjmBvoVmgOmptWZWdYCV6wVa8/OfbFbHxXhm8FvdgkcwxiNAgMB AAGjggJqMIICZjAdBgNVHQ4EFgQUcII1EBgyKnZhec0K0XwV7mbtl1swHwYDVR0j BBgwFoAUQSKSwOJNiIW0dgvHCPnkd4cNnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNC80MTIyOTJDMEUy NEQ4ODg1QjQ3NjBCQzcwOEY5RTQ3Nzg3MEQ5QzcwLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzQzNDRmZjI5LTcxODQtNDdiZC05MTcyLTM2MDlmNTlj ZTZkZi8yLzQxMjI5MkMwRTI0RDg4ODVCNDc2MEJDNzA4RjlFNDc3ODcwRDlDNzAu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw YzlmZWVjMTI0OWUvNC8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzIzMTMzMzEzNjMzLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u MA0GCSqGSIb3DQEBCwUAA4IBAQCrUA0tF2ZxEj3zQvPrguH0eGwpzHWGMBeQNOPs /q42mPDKRp2QR1Qenl69MgQOVODMzU4fkwoGUjWyvWoRC2+iotVxc8pVmBRlWTT8 g2GIAehwTygucN5VbBfvxSvFmvRVqUpNyWcMUe3Y4ATP/PvpfcjToWixjxeC0HN6 0+MxK+ZJsRLYSAsmxEKEmz/GHuWhnKZ6knL8kCJRG/2frPD4XPrcfgcZXgPOTgyZ ync3rB2zey+V/1oV86tjBpqU8FOGfdMYcpcbb8E5Wx8id4yPtvQs3FstKSDLJgoU L4BGuaoaO1ublO5uu8ofsS+wuTw/p977pe+9cRst/jWqE2is -----END CERTIFICATE-----Generated at Thu May 2 08:50:46 2024 by rpki-client on console-fra.rpki-client.org