$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366166303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: JiV3E+zxxHGhCP8F4w72DmASNppjRNeHi++mfY9DkYQ= Subject key identifier: FD:B7:14:1E:B8:20:9C:B1:7F:E2:F4:43:06:59:8D:AE:BB:03:D6:7A Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 3178409F10FF9E3A3B8876C60D9504D2D1A64BE0 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166303a3a2f34382d3438203d3e203136393039.roa Signing time: Wed 29 Jan 2025 17:53:01 +0000 ROA not before: Wed 29 Jan 2025 17:48:01 +0000 ROA not after: Wed 28 Jan 2026 17:53:01 +0000 asID: 16909 IP address blocks: 2a14:7584:6af0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:78:40:9f:10:ff:9e:3a:3b:88:76:c6:0d:95:04:d2:d1:a6:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Jan 29 17:48:01 2025 GMT Not After : Jan 28 17:53:01 2026 GMT Subject: CN=FDB7141EB8209CB17FE2F44306598DAEBB03D67A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:b4:ec:29:2d:72:6d:3c:4f:bd:b4:46:55: dd:9c:43:23:90:4c:bf:9e:c9:b2:a9:10:9d:e1:ad: c9:e7:b4:57:59:82:c4:7d:32:1e:ee:e2:e1:3c:68: 49:0a:13:e1:ff:08:a0:c8:4a:f5:90:e5:39:d2:50: 14:5d:f1:ef:cc:fe:ba:46:7c:10:d1:e5:96:05:7a: a5:b8:43:48:83:23:f0:85:9a:7a:15:eb:19:3f:a1: 3f:bb:1e:46:84:15:fa:f3:3a:6e:30:af:32:93:f0: 99:dc:e5:fe:fc:ab:7f:29:f8:14:c4:2c:ad:a4:e8: da:5c:56:bf:af:cf:10:3a:21:4c:6a:67:70:d2:19: 43:32:76:f8:43:9b:b6:90:ee:a7:77:c3:da:32:19: 2a:49:bd:68:42:c5:b3:7d:8c:50:6e:5c:23:74:65: 1a:6e:d3:63:42:7d:bb:71:de:da:bf:23:8f:a3:33: 0c:8a:1b:7a:3a:26:cd:3d:82:2b:b1:b4:d3:4d:a9: 99:07:52:47:b7:02:21:94:03:08:fc:7e:88:bf:57: a1:e8:6f:65:15:3b:39:93:a3:5e:00:09:4f:6d:cb: fc:20:c2:1b:5f:68:e4:06:81:05:19:76:1d:4b:e6: e2:d5:50:04:c3:69:5f:8e:f9:ff:1a:6f:4e:87:55: 6c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:14:1E:B8:20:9C:B1:7F:E2:F4:43:06:59:8D:AE:BB:03:D6:7A X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6af0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:24:44:7e:68:ce:62:b1:7f:77:5f:d6:9a:3a:ff:a0:78:b3: 2e:39:67:aa:4f:58:76:46:49:7f:84:d2:44:50:e2:21:23:a1: a7:9e:4a:c8:6d:63:00:98:f4:2f:db:4e:07:74:18:ee:2b:e4: 1a:f9:00:b8:47:64:1b:b1:3a:b3:2b:c8:40:02:4c:c6:a9:c3: 4f:b7:3a:92:33:85:cd:51:52:b6:46:f3:f9:63:8a:06:51:b4: 3b:db:81:b1:d5:d7:90:e8:21:56:b7:3d:90:85:01:8b:4c:f5: 68:1c:f9:81:e8:1d:d9:95:0f:f6:a1:26:f4:d8:eb:97:a8:07: c4:99:54:09:b7:f1:82:59:fa:ed:99:83:62:69:1a:c8:f7:d7: b5:b9:cf:da:bd:b8:b8:06:0e:43:f8:a2:0f:f7:5e:47:12:61: c6:92:55:aa:96:c1:7a:01:5f:01:0f:59:99:43:24:92:92:7d: 23:07:94:4e:bf:03:d3:f0:cd:f9:7a:5a:c3:a6:b2:b0:7e:7a: b1:43:8f:15:9e:1e:c6:12:9f:aa:10:c5:54:55:ed:be:04:87: ce:04:4a:72:dd:7f:02:6a:32:aa:81:51:eb:3d:de:80:2d:3f: a3:71:7f:6c:02:53:a6:40:25:af:ea:7a:46:6c:67:d3:d6:82: 5c:b2:d4:b1 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUMXhAnxD/njo7iHbGDZUE0tGmS+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAxMjkxNzQ4MDFaFw0yNjAxMjgxNzUzMDFaMDMxMTAvBgNV BAMTKEZEQjcxNDFFQjgyMDlDQjE3RkUyRjQ0MzA2NTk4REFFQkIwM0Q2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIbTsKS1ybTxPvbRGVd2cQyOQ TL+eybKpEJ3hrcnntFdZgsR9Mh7u4uE8aEkKE+H/CKDISvWQ5TnSUBRd8e/M/rpG fBDR5ZYFeqW4Q0iDI/CFmnoV6xk/oT+7HkaEFfrzOm4wrzKT8Jnc5f78q38p+BTE LK2k6NpcVr+vzxA6IUxqZ3DSGUMydvhDm7aQ7qd3w9oyGSpJvWhCxbN9jFBuXCN0 ZRpu02NCfbtx3tq/I4+jMwyKG3o6Js09giuxtNNNqZkHUke3AiGUAwj8foi/V6Ho b2UVOzmTo14ACU9ty/wgwhtfaOQGgQUZdh1L5uLVUATDaV+O+f8ab06HVWwPAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQU/bcUHrggnLF/4vRDBlmNrrsD1nowHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjE2NjMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRq8DAN BgkqhkiG9w0BAQsFAAOCAQEAayREfmjOYrF/d1/Wmjr/oHizLjlnqk9YdkZJf4TS RFDiISOhp55KyG1jAJj0L9tOB3QY7ivkGvkAuEdkG7E6syvIQAJMxqnDT7c6kjOF zVFStkbz+WOKBlG0O9uBsdXXkOghVrc9kIUBi0z1aBz5gegd2ZUP9qEm9Njrl6gH xJlUCbfxgln67ZmDYmkayPfXtbnP2r24uAYOQ/iiD/deRxJhxpJVqpbBegFfAQ9Z mUMkkpJ9IweUTr8D0/DN+Xpaw6aysH56sUOPFZ4exhKfqhDFVFXtvgSHzgRKct1/ AmoyqoFR6z3egC0/o3F/bAJTpkAlr+p6Rmxn09aCXLLUsQ== -----END CERTIFICATE-----Generated at Wed Feb 5 07:00:42 2025 by rpki-client