$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366237303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366237303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: qcDUeom1xd1jQtNbZTiMWjajy7nnCnkPrkWupVCNsBE= Subject key identifier: 77:22:B3:F2:2D:59:37:FA:9F:9A:E6:C4:B6:47:C9:6F:A8:34:71:1F Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 08377FBB231B397F5065CACE700A01B509755647 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366237303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 19:33:06 +0000 ROA not before: Sat 01 Feb 2025 19:28:06 +0000 ROA not after: Sat 31 Jan 2026 19:33:06 +0000 asID: 16909 IP address blocks: 2a14:7584:6b70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:37:7f:bb:23:1b:39:7f:50:65:ca:ce:70:0a:01:b5:09:75:56:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 19:28:06 2025 GMT Not After : Jan 31 19:33:06 2026 GMT Subject: CN=7722B3F22D5937FA9F9AE6C4B647C96FA834711F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:cd:50:db:15:72:94:e3:ca:3c:36:2a:b8: 06:fc:1c:eb:8e:2d:b1:2a:36:78:3c:e9:b3:44:e0: 44:4c:ef:96:b5:c9:71:f7:3a:0b:b1:53:e9:fb:41: 5e:20:d6:01:36:42:ee:1b:f5:34:1c:07:82:eb:3c: c4:e3:9c:60:0c:70:75:d0:dc:4a:e5:b2:68:68:78: 88:dc:3c:44:03:73:0f:3b:8f:09:6d:c1:6c:10:42: e5:94:09:07:cc:69:29:6c:b7:21:ac:7e:6e:a2:1c: 03:89:64:09:1e:69:28:98:6a:a0:97:0d:f6:da:e2: f5:d6:ca:1b:da:09:a3:99:ef:ec:10:7c:2a:90:34: b5:81:e1:7f:85:fa:f3:dd:35:01:f4:56:f1:98:56: 6c:dc:d4:ca:f3:5c:89:74:59:cd:d8:ac:67:fd:90: b7:a5:7b:15:b0:1a:72:f8:63:a0:aa:44:a1:d0:6b: 74:f6:1e:18:2f:da:d1:a8:74:78:d6:c7:35:f0:98: 58:0a:45:3d:b7:16:4b:4c:81:fd:a5:67:80:08:ba: ba:eb:e4:78:82:0c:ea:27:db:b0:34:41:5f:a1:d8: 17:8d:9c:22:44:d9:a9:3f:16:8e:f8:38:9e:69:4e: 31:04:b9:47:cd:0a:7f:29:74:44:9c:0c:46:77:12: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:22:B3:F2:2D:59:37:FA:9F:9A:E6:C4:B6:47:C9:6F:A8:34:71:1F X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366237303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6b70::/48 Signature Algorithm: sha256WithRSAEncryption 09:83:9c:3e:03:fc:c6:33:3a:37:30:7d:7f:07:3f:dd:3b:6d: d4:bd:8d:5e:e5:26:09:80:2f:09:57:db:d3:b6:75:89:83:3b: 31:27:05:fd:20:14:7d:ce:33:ce:d8:2a:b5:01:04:3c:8e:c1: 49:ad:de:c1:12:3a:11:d4:50:ad:57:80:01:04:ee:f3:25:8e: 57:d4:e2:e5:06:fd:d7:7d:8e:a0:b8:2a:30:21:0a:09:b9:f3: f3:12:93:cf:8e:e8:bd:8d:e8:39:02:fa:ee:47:fa:d8:d6:7c: e8:7d:7e:9c:0f:c8:ac:42:36:a0:70:66:ad:f0:f6:52:25:cb: 0a:9e:38:a0:32:8a:23:e2:7d:35:e6:71:49:b7:15:cb:73:45: 7a:e2:51:76:a7:85:46:c2:9c:20:ac:05:1e:a8:12:49:3d:55: b5:35:27:25:8f:08:aa:4d:48:76:12:c8:83:29:c8:e6:b7:e7: b0:78:d0:86:74:96:c7:b3:14:a2:63:5e:d2:9f:f4:de:10:39: db:e6:99:90:05:1d:08:dd:2b:8f:7f:8b:9f:83:42:67:3b:8c: 39:27:8c:58:f0:a8:23:45:34:0e:f2:e7:8a:dd:e9:16:6e:87: 93:8a:5d:e0:28:12:e2:6e:5b:42:ca:44:33:bc:9c:9e:22:b3: 15:9a:79:7b -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUCDd/uyMbOX9QZcrOcAoBtQl1VkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDExOTI4MDZaFw0yNjAxMzExOTMzMDZaMDMxMTAvBgNV BAMTKDc3MjJCM0YyMkQ1OTM3RkE5RjlBRTZDNEI2NDdDOTZGQTgzNDcxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TM1Q2xVylOPKPDYquAb8HOuO LbEqNng86bNE4ERM75a1yXH3OguxU+n7QV4g1gE2Qu4b9TQcB4LrPMTjnGAMcHXQ 3ErlsmhoeIjcPEQDcw87jwltwWwQQuWUCQfMaSlstyGsfm6iHAOJZAkeaSiYaqCX Dfba4vXWyhvaCaOZ7+wQfCqQNLWB4X+F+vPdNQH0VvGYVmzc1MrzXIl0Wc3YrGf9 kLelexWwGnL4Y6CqRKHQa3T2Hhgv2tGodHjWxzXwmFgKRT23FktMgf2lZ4AIurrr 5HiCDOon27A0QV+h2BeNnCJE2ak/Fo74OJ5pTjEEuUfNCn8pdEScDEZ3EpUnAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUdyKz8i1ZN/qfmubEtkfJb6g0cR8wHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjIzNzMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRrcDAN BgkqhkiG9w0BAQsFAAOCAQEACYOcPgP8xjM6NzB9fwc/3Ttt1L2NXuUmCYAvCVfb 07Z1iYM7MScF/SAUfc4zztgqtQEEPI7BSa3ewRI6EdRQrVeAAQTu8yWOV9Ti5Qb9 132OoLgqMCEKCbnz8xKTz47ovY3oOQL67kf62NZ86H1+nA/IrEI2oHBmrfD2UiXL Cp44oDKKI+J9NeZxSbcVy3NFeuJRdqeFRsKcIKwFHqgSST1VtTUnJY8Iqk1IdhLI gynI5rfnsHjQhnSWx7MUomNe0p/03hA52+aZkAUdCN0rj3+Ln4NCZzuMOSeMWPCo I0U0DvLnit3pFm6Hk4pd4CgS4m5bQspEM7ycniKzFZp5ew== -----END CERTIFICATE-----Generated at Wed Feb 5 06:48:44 2025 by rpki-client