$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366230303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: te8ydY7cNVARu4YBUsPdNnlC51puB3dBjLow/xixWr0= Subject key identifier: 6F:4A:88:40:3C:49:FB:6E:55:FC:AE:7D:D9:D8:B9:9B:2F:4D:F3:86 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 2C75D62ECEAECBB269377953398AC962ED5F05E3 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230303a3a2f34382d3438203d3e203136393039.roa Signing time: Wed 29 Jan 2025 17:53:02 +0000 ROA not before: Wed 29 Jan 2025 17:48:02 +0000 ROA not after: Wed 28 Jan 2026 17:53:02 +0000 asID: 16909 IP address blocks: 2a14:7584:6b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:75:d6:2e:ce:ae:cb:b2:69:37:79:53:39:8a:c9:62:ed:5f:05:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Jan 29 17:48:02 2025 GMT Not After : Jan 28 17:53:02 2026 GMT Subject: CN=6F4A88403C49FB6E55FCAE7DD9D8B99B2F4DF386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:09:94:80:7d:f9:a4:d6:2e:ce:aa:fd:47: 9a:51:6c:90:bc:a2:c6:38:df:4d:7e:22:d7:01:4c: be:d7:d5:11:d4:65:19:bd:27:bc:6a:23:bf:d7:96: 53:f6:f1:33:88:4f:20:44:ea:02:ae:a0:79:7f:ea: 3f:9c:34:ca:be:0c:c9:88:d2:1b:8d:1a:3d:9d:4f: 1a:82:e0:bd:7d:29:a3:78:80:75:b2:a8:7c:e5:53: 78:5a:39:35:44:51:3d:29:a3:95:a6:92:5d:70:4b: d6:8f:8a:29:60:22:d4:ff:43:5c:be:7f:1c:ef:25: f9:c4:6a:d3:ea:e4:b8:86:11:52:68:49:fe:fc:a2: 3f:02:e6:51:5e:6d:bc:0f:03:b1:31:23:27:4a:c1: d1:cf:de:cd:df:64:13:a1:e3:73:5f:53:22:bb:a2: a6:c3:62:d1:ca:64:e8:80:1f:57:4f:5c:33:a3:c9: ba:44:06:af:fd:28:83:5f:c2:5e:87:7e:6f:23:d2: b1:ca:53:88:72:a7:fe:20:9f:30:01:30:49:46:e3: 60:eb:55:73:15:1f:4f:ef:a7:7c:8f:e8:8f:02:56: 60:1b:5f:8d:e2:8c:a5:0c:86:6a:9f:99:e9:f1:b4: 6b:7e:bc:a3:73:2e:73:55:7b:b9:d0:30:ee:5d:52: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4A:88:40:3C:49:FB:6E:55:FC:AE:7D:D9:D8:B9:9B:2F:4D:F3:86 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6b00::/48 Signature Algorithm: sha256WithRSAEncryption 2d:2f:cb:55:98:72:2e:3c:52:01:c9:33:e1:bd:28:85:cd:d6: 24:af:c8:2b:13:fd:7f:60:cb:82:91:29:50:31:c2:be:47:e0: 46:d9:d1:0e:4b:c2:8a:fa:66:7f:5c:5f:90:77:e2:3b:ff:9f: ee:4b:05:1f:75:64:88:9a:2a:29:b5:7b:dd:8b:15:8c:dd:f8: 23:86:ec:b7:f6:bd:7d:67:63:c3:c5:a4:9c:13:8b:50:8d:44: 71:7c:e5:5d:3d:7e:1a:a4:10:bd:95:ba:9a:9b:e8:f3:a8:13: cd:0e:67:77:a7:e8:bc:67:bd:46:7e:80:32:1b:b6:68:44:ee: e0:6c:e1:f8:f0:d6:22:06:94:d5:c3:1d:6d:d9:ab:2e:ca:c5: 5d:0a:43:2c:13:b1:11:b6:96:78:98:23:b7:54:b4:f5:cc:a5: 1f:22:5f:e3:48:51:b5:8c:1a:d7:3c:02:81:39:2f:88:42:96: 24:12:a4:b2:48:5f:20:d3:42:6e:ed:78:67:d2:3d:d7:56:ec: 4c:a3:a5:f1:50:54:73:01:82:a6:0b:9b:11:68:37:ec:d6:da: 86:d7:74:a3:5e:70:56:4d:2d:72:3a:47:46:73:61:84:44:27: a5:0d:5e:17:3e:c5:15:eb:b7:bd:b4:e8:a4:6c:ad:46:f9:57: fb:cf:fa:1c -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIULHXWLs6uy7JpN3lTOYrJYu1fBeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAxMjkxNzQ4MDJaFw0yNjAxMjgxNzUzMDJaMDMxMTAvBgNV BAMTKDZGNEE4ODQwM0M0OUZCNkU1NUZDQUU3REQ5RDhCOTlCMkY0REYzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQwmUgH35pNYuzqr9R5pRbJC8 osY4301+ItcBTL7X1RHUZRm9J7xqI7/XllP28TOITyBE6gKuoHl/6j+cNMq+DMmI 0huNGj2dTxqC4L19KaN4gHWyqHzlU3haOTVEUT0po5Wmkl1wS9aPiilgItT/Q1y+ fxzvJfnEatPq5LiGEVJoSf78oj8C5lFebbwPA7ExIydKwdHP3s3fZBOh43NfUyK7 oqbDYtHKZOiAH1dPXDOjybpEBq/9KINfwl6Hfm8j0rHKU4hyp/4gnzABMElG42Dr VXMVH0/vp3yP6I8CVmAbX43ijKUMhmqfmenxtGt+vKNzLnNVe7nQMO5dUsINAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUb0qIQDxJ+25V/K592di5my9N84YwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjIzMDMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRrADAN BgkqhkiG9w0BAQsFAAOCAQEALS/LVZhyLjxSAckz4b0ohc3WJK/IKxP9f2DLgpEp UDHCvkfgRtnRDkvCivpmf1xfkHfiO/+f7ksFH3VkiJoqKbV73YsVjN34I4bst/a9 fWdjw8WknBOLUI1EcXzlXT1+GqQQvZW6mpvo86gTzQ5nd6fovGe9Rn6AMhu2aETu 4Gzh+PDWIgaU1cMdbdmrLsrFXQpDLBOxEbaWeJgjt1S09cylHyJf40hRtYwa1zwC gTkviEKWJBKkskhfINNCbu14Z9I911bsTKOl8VBUcwGCpgubEWg37Nbahtd0o15w Vk0tcjpHRnNhhEQnpQ1eFz7FFeu3vbTopGytRvlX+8/6HA== -----END CERTIFICATE-----Generated at Wed Feb 5 06:45:25 2025 by rpki-client