$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036643a3a2f34382d3438203d3e20343031353037.roa File: 326131343a373538343a363036643a3a2f34382d3438203d3e20343031353037.roa (raw, json) Hash identifier: 0g9WHze2VpsVNoErNBOX1LBdi+y6hnuIOiV+8ILpPS0= Subject key identifier: 4F:E7:59:71:7B:D5:C4:33:80:6B:FA:31:0A:23:96:5D:2D:68:23:37 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 43620FC92717F8FF30CA169E92451E20340DBF42 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036643a3a2f34382d3438203d3e20343031353037.roa Signing time: Mon 10 Mar 2025 11:53:33 +0000 ROA not before: Mon 10 Mar 2025 11:48:33 +0000 ROA not after: Mon 09 Mar 2026 11:53:33 +0000 asID: 401507 IP address blocks: 2a14:7584:606d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Apr 2025 20:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:62:0f:c9:27:17:f8:ff:30:ca:16:9e:92:45:1e:20:34:0d:bf:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Mar 10 11:48:33 2025 GMT Not After : Mar 9 11:53:33 2026 GMT Subject: CN=4FE759717BD5C433806BFA310A23965D2D682337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:9a:7a:52:97:99:a6:0c:89:c7:98:47:f6: 36:49:76:71:19:b7:35:16:a7:73:51:10:dd:15:dc: 3e:d3:7f:d4:9e:f8:8e:28:90:0e:0e:ac:e3:69:de: c5:37:b1:c2:83:fa:e1:3c:18:e9:43:72:3e:8e:02: e8:89:aa:3f:9f:24:2d:4e:9e:1e:fe:b7:41:28:de: 1f:07:22:19:36:8f:96:38:7a:f6:ad:ff:ae:86:74: 02:63:65:b6:7b:d4:5b:20:7f:33:4a:e8:84:8b:f0: cc:90:47:d4:1c:2d:b6:33:14:f4:fe:3f:32:25:2c: 21:f5:8c:7c:7d:a3:a0:88:cf:a5:f6:66:da:53:5e: 59:31:71:24:a0:f2:22:00:64:56:09:ad:a9:69:fc: ff:9a:b9:2b:f3:5f:e3:d9:3e:ac:47:ad:50:1b:87: d4:9d:ad:3d:9b:2c:a2:63:ca:6d:5f:3d:09:7e:15: b0:2f:8a:9e:55:24:97:d3:a8:3e:f6:bf:e2:1d:03: 7e:2d:a8:77:f2:f7:4f:65:31:d3:fd:41:45:0c:dc: 76:15:d3:01:31:57:08:2a:d2:f7:1a:54:e6:dd:1d: ca:37:1e:b5:24:e9:ea:d2:41:6a:b6:a6:28:6d:8b: 56:e5:2a:31:5e:3b:69:dd:ab:79:8e:8e:3a:a9:4b: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E7:59:71:7B:D5:C4:33:80:6B:FA:31:0A:23:96:5D:2D:68:23:37 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036643a3a2f34382d3438203d3e20343031353037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:606d::/48 Signature Algorithm: sha256WithRSAEncryption 1f:e4:cc:cf:d3:ab:81:a3:af:11:72:fd:8c:ff:cc:81:af:54: f5:34:10:cc:9e:de:e9:88:99:0e:8a:88:3d:b1:28:23:a2:fa: 16:7e:93:2f:af:04:3d:81:ff:ea:f9:d4:cd:29:3c:1a:46:df: 7a:4a:a4:db:a9:b6:2d:61:2c:be:21:13:c9:fb:04:dd:5a:fd: cd:ba:07:fe:2b:dc:45:2d:b2:2d:12:59:da:3d:04:fa:f2:69: be:7e:31:3d:88:01:e3:48:3d:75:04:47:12:64:05:86:7e:f3: 0b:11:63:1f:99:47:24:b1:7b:cc:34:27:f7:f9:28:bf:0b:d3: 16:4d:17:5d:a6:7b:de:46:d7:c8:16:f2:de:22:c1:95:cc:3e: 24:31:d5:ff:19:49:87:bf:48:fd:0e:38:40:1d:99:d3:01:5d: 5d:f7:f6:c5:b4:13:f6:9f:f1:bb:be:c5:2c:c8:90:d2:62:83: 5c:2d:61:eb:17:1f:93:b8:2c:8f:49:2c:1e:88:59:74:5c:c3: fb:a3:8c:89:50:81:1f:be:2e:1f:ff:66:ac:46:54:eb:b1:54: b7:6b:ec:30:7a:ad:8c:54:01:f7:46:06:ef:b0:53:b2:34:1d: 41:96:2d:b8:87:7a:cf:46:4f:85:08:aa:6e:01:ce:8d:14:a1: bf:8f:a1:6e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQ2IPyScX+P8wyhaekkUeIDQNv0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAzMTAxMTQ4MzNaFw0yNjAzMDkxMTUzMzNaMDMxMTAvBgNV BAMTKDRGRTc1OTcxN0JENUM0MzM4MDZCRkEzMTBBMjM5NjVEMkQ2ODIzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgJp6UpeZpgyJx5hH9jZJdnEZ tzUWp3NREN0V3D7Tf9Se+I4okA4OrONp3sU3scKD+uE8GOlDcj6OAuiJqj+fJC1O nh7+t0Eo3h8HIhk2j5Y4evat/66GdAJjZbZ71FsgfzNK6ISL8MyQR9QcLbYzFPT+ PzIlLCH1jHx9o6CIz6X2ZtpTXlkxcSSg8iIAZFYJralp/P+auSvzX+PZPqxHrVAb h9SdrT2bLKJjym1fPQl+FbAvip5VJJfTqD72v+IdA34tqHfy909lMdP9QUUM3HYV 0wExVwgq0vcaVObdHco3HrUk6erSQWq2pihti1blKjFeO2ndq3mOjjqpS8EfAgMB AAGjggJqMIICZjAdBgNVHQ4EFgQUT+dZcXvVxDOAa/oxCiOWXS1oIzcwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNjY0M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGBt MA0GCSqGSIb3DQEBCwUAA4IBAQAf5MzP06uBo68Rcv2M/8yBr1T1NBDMnt7piJkO iog9sSgjovoWfpMvrwQ9gf/q+dTNKTwaRt96SqTbqbYtYSy+IRPJ+wTdWv3Nugf+ K9xFLbItElnaPQT68mm+fjE9iAHjSD11BEcSZAWGfvMLEWMfmUcksXvMNCf3+Si/ C9MWTRddpnveRtfIFvLeIsGVzD4kMdX/GUmHv0j9DjhAHZnTAV1d9/bFtBP2n/G7 vsUsyJDSYoNcLWHrFx+TuCyPSSweiFl0XMP7o4yJUIEfvi4f/2asRlTrsVS3a+ww eq2MVAH3RgbvsFOyNB1Bli24h3rPRk+FCKpuAc6NFKG/j6Fu -----END CERTIFICATE-----Generated at Thu Apr 3 07:34:56 2025 by rpki-client