$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366139303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366139303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: 5TH0sH79uylyKnkBp0vOLavFRV5olqSWSzzUpRY3EZA= Subject key identifier: 6F:41:D9:5A:E3:13:79:E5:31:73:1F:56:A5:37:05:F3:82:C8:5B:C4 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 1CE2B7A2976A66E116EE972604C6B9C56A62975C Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366139303a3a2f34382d3438203d3e203136393039.roa Signing time: Wed 29 Jan 2025 17:52:17 +0000 ROA not before: Wed 29 Jan 2025 17:47:17 +0000 ROA not after: Wed 28 Jan 2026 17:52:17 +0000 asID: 16909 IP address blocks: 2a14:7584:6a90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e2:b7:a2:97:6a:66:e1:16:ee:97:26:04:c6:b9:c5:6a:62:97:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Jan 29 17:47:17 2025 GMT Not After : Jan 28 17:52:17 2026 GMT Subject: CN=6F41D95AE31379E531731F56A53705F382C85BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:a1:5d:f5:a4:7a:73:96:38:32:4f:ad:33: f8:b6:a6:b2:fe:3a:8a:2b:76:a8:c4:f2:ba:36:9e: dc:14:4c:52:5a:1d:99:a0:3d:d7:ff:26:74:d9:d0: 89:ea:b8:e8:84:11:37:fc:ad:23:4c:c6:35:e8:c5: 43:6c:79:d4:3f:4b:05:7b:96:f2:83:a0:54:b7:1a: ec:36:64:0c:bf:31:2f:1f:26:8f:dc:6b:e9:f7:91: 9d:db:0e:9e:d8:72:9c:e1:ec:bb:cc:ee:34:e5:08: f4:eb:4f:42:62:20:4e:54:c9:9d:04:a8:67:41:5c: af:95:59:14:11:1f:c5:00:3d:1f:3b:b5:90:f0:5a: a3:4b:97:cf:61:d5:68:d9:80:ed:54:e8:70:90:b0: 68:55:cf:19:9b:3e:ed:71:0d:03:78:1b:f9:a8:00: 3e:d2:c0:8f:0c:cb:27:3e:57:3a:45:a3:af:b3:20: 43:10:6c:9c:22:b7:c7:ca:19:9a:9f:87:32:3d:bf: e5:9e:83:a0:27:09:04:7f:f7:cb:42:84:53:23:31: ee:34:3e:4d:3e:d8:3a:24:b9:fb:2d:c1:8e:16:8d: 95:c4:07:9b:3f:69:1b:3c:7e:3f:4d:d0:6f:86:55: 48:99:ba:68:14:4b:1c:d4:27:90:c3:73:84:51:8c: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:D9:5A:E3:13:79:E5:31:73:1F:56:A5:37:05:F3:82:C8:5B:C4 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366139303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6a90::/48 Signature Algorithm: sha256WithRSAEncryption 74:e1:af:b6:53:43:db:b3:a0:e9:47:71:8a:30:50:81:30:fb: b9:67:1a:c9:96:2f:76:6d:b4:ac:eb:c0:7e:da:5f:86:7e:73: 39:0d:09:63:f0:02:dd:45:8a:66:3d:52:5e:f3:9a:f5:4e:02: 43:01:86:b7:a6:2f:96:71:11:2e:b1:f1:63:1a:75:b3:b1:35: 24:a5:3c:04:a7:84:67:a4:d7:a2:b9:15:ce:9f:65:73:e8:0f: b1:2e:84:c3:35:08:c9:69:c4:f6:63:cb:70:08:37:f8:07:04: 3c:ea:51:c1:7f:66:41:cd:5d:38:45:27:d8:38:8d:35:79:a6: 3b:91:b7:4b:38:8b:5e:d1:88:65:44:bb:67:77:21:e6:3f:a8: 73:53:c8:a9:70:3f:5d:7a:9f:d5:40:e0:7f:7b:2c:0b:c4:34: 7e:4e:e1:3d:c3:08:b5:bb:8f:95:a7:43:b5:e6:eb:8d:7c:92: 27:54:a5:44:1a:09:39:34:91:5b:49:12:b6:69:46:d2:ce:69: e4:a7:35:f8:2e:b4:4b:53:42:b2:45:d2:40:ff:4a:f3:4f:9a: 78:91:1d:b7:1e:1b:e1:e1:83:0f:46:b1:1b:b5:45:5d:24:87: a0:2d:1a:53:6c:c5:b8:77:77:8a:37:5f:aa:3d:5e:7f:ed:82: 0d:c1:2f:ef -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUHOK3opdqZuEW7pcmBMa5xWpil1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAxMjkxNzQ3MTdaFw0yNjAxMjgxNzUyMTdaMDMxMTAvBgNV BAMTKDZGNDFEOTVBRTMxMzc5RTUzMTczMUY1NkE1MzcwNUYzODJDODVCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4KFd9aR6c5Y4Mk+tM/i2prL+ OoordqjE8ro2ntwUTFJaHZmgPdf/JnTZ0InquOiEETf8rSNMxjXoxUNsedQ/SwV7 lvKDoFS3Guw2ZAy/MS8fJo/ca+n3kZ3bDp7Ycpzh7LvM7jTlCPTrT0JiIE5UyZ0E qGdBXK+VWRQRH8UAPR87tZDwWqNLl89h1WjZgO1U6HCQsGhVzxmbPu1xDQN4G/mo AD7SwI8Myyc+VzpFo6+zIEMQbJwit8fKGZqfhzI9v+Weg6AnCQR/98tChFMjMe40 Pk0+2DokufstwY4WjZXEB5s/aRs8fj9N0G+GVUiZumgUSxzUJ5DDc4RRjGBlAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUb0HZWuMTeeUxcx9WpTcF84LIW8QwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjEzOTMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRqkDAN BgkqhkiG9w0BAQsFAAOCAQEAdOGvtlND27Og6UdxijBQgTD7uWcayZYvdm20rOvA ftpfhn5zOQ0JY/AC3UWKZj1SXvOa9U4CQwGGt6YvlnERLrHxYxp1s7E1JKU8BKeE Z6TXorkVzp9lc+gPsS6EwzUIyWnE9mPLcAg3+AcEPOpRwX9mQc1dOEUn2DiNNXmm O5G3SziLXtGIZUS7Z3ch5j+oc1PIqXA/XXqf1UDgf3ssC8Q0fk7hPcMItbuPladD tebrjXySJ1SlRBoJOTSRW0kStmlG0s5p5Kc1+C60S1NCskXSQP9K80+aeJEdtx4b 4eGDD0axG7VFXSSHoC0aU2zFuHd3ijdfqj1ef+2CDcEv7w== -----END CERTIFICATE-----Generated at Wed Feb 5 06:56:49 2025 by rpki-client