$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a363762303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: 7DwFY5HQfC1lggjECHEUZnpCi+0GkGKKBaaH5QF4wyo= Subject key identifier: B5:9E:2A:B8:AD:10:D6:7F:6F:5C:14:D2:C2:CC:98:B0:6F:9F:54:A9 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 6B75234071206EBDB7CB1271539130144E4846C6 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762303a3a2f34382d3438203d3e203136393039.roa Signing time: Thu 16 Jan 2025 19:32:59 +0000 ROA not before: Thu 16 Jan 2025 19:27:59 +0000 ROA not after: Thu 15 Jan 2026 19:32:59 +0000 asID: 16909 IP address blocks: 2a14:7584:67b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:75:23:40:71:20:6e:bd:b7:cb:12:71:53:91:30:14:4e:48:46:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Jan 16 19:27:59 2025 GMT Not After : Jan 15 19:32:59 2026 GMT Subject: CN=B59E2AB8AD10D67F6F5C14D2C2CC98B06F9F54A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:6f:78:2a:ad:bd:b4:50:f7:5f:cd:20:73: be:a7:fc:13:9f:38:64:f1:01:03:37:dd:c0:f6:d2: bd:ea:0d:8a:76:8a:ab:b9:9b:b5:75:15:e9:d0:50: 0e:18:a2:1c:e6:6e:ed:b9:86:d8:34:37:16:18:ff: 2a:c8:d0:44:c9:ff:7f:5b:9f:dd:b5:8d:e2:44:3f: 3b:05:2d:0e:6f:6b:32:0a:ea:cf:dd:9f:c3:78:7d: 44:e3:17:64:f5:5f:d9:30:c4:5e:d5:bf:e1:1b:85: a0:af:62:72:55:48:bf:48:d1:c5:9a:5d:df:b0:b5: 88:18:db:ce:e6:88:ce:84:6b:0e:27:f5:26:63:22: 85:1b:b0:3d:bd:24:67:00:c9:0d:35:9b:ce:a2:ce: b9:f5:a4:f9:1f:06:3e:17:94:9d:ae:ae:f2:c4:32: 2d:69:2d:ed:be:b3:7b:83:2b:f8:25:17:ed:d6:f3: f8:11:a5:7c:7b:e6:e4:63:fa:0e:a2:a4:be:47:91: bf:9d:de:6a:20:c1:ad:6a:b5:5e:8e:bc:ba:35:c4: 4f:71:a0:a6:6f:90:4f:9c:6d:61:a0:45:1b:61:33: bc:97:38:4b:e0:29:40:c2:7a:c7:79:c1:ec:75:bd: f1:d7:7a:50:59:91:de:fa:14:06:05:b8:d8:fe:8b: 41:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9E:2A:B8:AD:10:D6:7F:6F:5C:14:D2:C2:CC:98:B0:6F:9F:54:A9 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:67b0::/48 Signature Algorithm: sha256WithRSAEncryption 98:cb:62:ea:b1:7e:5d:4d:0f:6c:23:50:86:87:f1:e1:91:51: 11:af:dd:8d:78:37:63:3b:74:b8:91:1b:46:a7:f8:3f:98:52: 20:8d:f1:3d:b9:2e:0b:b1:d1:b2:47:c1:f4:53:f8:99:36:cb: bf:ea:99:0d:e9:90:88:e4:2d:24:7d:60:99:72:b8:61:7e:c7: 13:25:46:ab:a0:03:49:17:7a:16:40:bc:ad:b7:50:d5:d0:76: e7:ea:cd:f1:74:55:e4:ac:5d:e1:40:9d:09:e7:5c:6a:8f:78: e7:5e:ee:b8:37:3e:04:77:33:16:b4:c6:92:ba:1c:a4:cf:8c: df:8c:98:dc:1c:61:1c:e5:cb:4f:f7:e5:c0:d4:dd:bc:76:d8: 0d:64:77:bb:67:d6:9e:83:9f:d0:87:53:3e:00:76:49:e6:cc: fb:e8:9f:ee:83:c1:cc:bd:e4:45:9c:f3:4b:1e:73:4f:19:96: c1:2e:07:4e:fa:49:d6:ab:e8:36:53:34:eb:69:1b:2e:19:f8: c2:b5:d0:b8:ce:8f:d1:6d:b2:d9:d4:bf:4e:02:3e:e2:fd:2c: 53:54:b8:31:9a:34:00:8d:38:5f:1f:4a:db:e4:26:4b:4d:2c: d7:37:4e:0f:d8:b5:29:12:68:95:36:56:f5:85:3a:7b:95:3c: a7:08:e0:7f -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUa3UjQHEgbr23yxJxU5EwFE5IRsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAxMTYxOTI3NTlaFw0yNjAxMTUxOTMyNTlaMDMxMTAvBgNV BAMTKEI1OUUyQUI4QUQxMEQ2N0Y2RjVDMTREMkMyQ0M5OEIwNkY5RjU0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLM294Kq29tFD3X80gc76n/BOf OGTxAQM33cD20r3qDYp2iqu5m7V1FenQUA4Yohzmbu25htg0NxYY/yrI0ETJ/39b n921jeJEPzsFLQ5vazIK6s/dn8N4fUTjF2T1X9kwxF7Vv+EbhaCvYnJVSL9I0cWa Xd+wtYgY287miM6Eaw4n9SZjIoUbsD29JGcAyQ01m86izrn1pPkfBj4XlJ2urvLE Mi1pLe2+s3uDK/glF+3W8/gRpXx75uRj+g6ipL5Hkb+d3mogwa1qtV6OvLo1xE9x oKZvkE+cbWGgRRthM7yXOEvgKUDCesd5wex1vfHXelBZkd76FAYFuNj+i0EVAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUtZ4quK0Q1n9vXBTSwsyYsG+fVKkwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzc2MjMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRnsDAN BgkqhkiG9w0BAQsFAAOCAQEAmMti6rF+XU0PbCNQhofx4ZFREa/djXg3Yzt0uJEb Rqf4P5hSII3xPbkuC7HRskfB9FP4mTbLv+qZDemQiOQtJH1gmXK4YX7HEyVGq6AD SRd6FkC8rbdQ1dB25+rN8XRV5Kxd4UCdCedcao94517uuDc+BHczFrTGkrocpM+M 34yY3BxhHOXLT/flwNTdvHbYDWR3u2fWnoOf0IdTPgB2SebM++if7oPBzL3kRZzz Sx5zTxmWwS4HTvpJ1qvoNlM062kbLhn4wrXQuM6P0W2y2dS/TgI+4v0sU1S4MZo0 AI04Xx9K2+QmS00s1zdOD9i1KRJolTZW9YU6e5U8pwjgfw== -----END CERTIFICATE-----Generated at Wed Feb 5 07:01:41 2025 by rpki-client