$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366263303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366263303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: fSGQ2Q8uhJ/wGvAMgmIzzPrzF0xy9FYV9hP6g62/xF0= Subject key identifier: C5:3B:45:99:CA:04:CC:55:67:27:F7:A5:65:FC:CC:AF:81:51:DD:F8 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 264C2C352BBB16227DA7C039FE1864E82C97EB95 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366263303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 19:33:10 +0000 ROA not before: Sat 01 Feb 2025 19:28:10 +0000 ROA not after: Sat 31 Jan 2026 19:33:10 +0000 asID: 16909 IP address blocks: 2a14:7584:6bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4c:2c:35:2b:bb:16:22:7d:a7:c0:39:fe:18:64:e8:2c:97:eb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 19:28:10 2025 GMT Not After : Jan 31 19:33:10 2026 GMT Subject: CN=C53B4599CA04CC556727F7A565FCCCAF8151DDF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:4c:d1:8b:0f:2e:7e:14:cb:10:b9:89:bf: a5:ab:04:9c:2a:06:5b:5e:3f:c0:dc:23:97:fc:76: 89:04:ff:8f:42:bb:2f:e8:29:6b:03:da:f0:6d:46: 3b:65:90:c1:b4:f5:58:ea:4a:a7:ad:41:5c:bf:9b: 16:d9:71:ff:38:ce:1c:7b:32:45:d0:46:f7:2b:28: e4:1c:f2:7c:34:c6:a3:06:aa:5b:b7:7e:ba:04:e7: 0f:9f:ee:e1:eb:3c:5b:71:ca:1b:ae:47:f6:f6:39: dd:cc:cd:9e:65:e1:e5:65:b5:e1:a3:52:23:98:ef: f2:13:63:5e:86:ea:a9:da:00:7b:e8:b9:b9:bb:e6: 3f:d7:70:cc:56:c3:1f:61:aa:a7:db:f3:c7:02:3a: 26:5a:7e:22:a3:1c:be:f8:75:a7:02:15:5c:57:d7: 18:2a:ba:97:4a:34:31:f7:15:07:7c:7d:6b:2f:6a: 29:3b:ae:e1:9d:00:16:a9:dd:49:0d:4b:6f:ed:38: b5:31:f9:ad:6e:83:fa:5b:ed:16:70:e6:ec:ac:17: 74:b7:fd:49:11:85:d6:74:17:6d:b5:60:37:25:f2: df:16:c6:d4:b6:f8:d9:0c:f3:2d:74:5d:c2:1c:65: 8b:3c:c5:65:4f:3c:c4:2f:a4:d7:39:be:94:e5:c2: eb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:45:99:CA:04:CC:55:67:27:F7:A5:65:FC:CC:AF:81:51:DD:F8 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366263303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6bc0::/48 Signature Algorithm: sha256WithRSAEncryption 86:cc:7f:aa:00:14:ce:2f:18:e0:90:67:d5:7f:df:72:39:b0: 52:31:e8:07:db:86:0c:90:28:73:70:9f:b6:46:e8:7d:f8:cb: 2d:bd:90:20:37:34:4a:d9:7d:24:f4:fd:45:a5:ff:f7:94:f9: db:b9:71:3a:05:6b:a3:b9:f0:20:b5:48:f5:02:82:31:6a:6a: e4:f8:40:42:29:72:37:e5:65:f4:47:ab:ac:e5:5b:b9:15:5e: b2:75:74:8e:98:d5:f9:8c:ac:89:35:b6:f1:4b:99:42:97:d8: 23:69:64:3e:5a:6b:c5:c1:47:f0:3f:59:63:c1:46:d5:8f:4b: ab:dc:fb:b8:02:6a:7a:16:5d:68:0d:b5:3f:9c:c7:13:6e:f5: 94:19:16:37:4c:30:d8:97:dc:4f:b4:ce:91:0b:c4:db:f4:fe: e5:2d:bf:f7:56:c1:d1:b1:13:3b:1f:09:db:95:79:ad:ff:99: 0a:78:1f:c0:bb:cc:20:16:42:13:ee:e9:80:0c:a2:09:44:8f: 23:c3:20:50:ea:65:fa:c1:36:49:66:74:6e:47:c6:04:f4:85: 84:2d:c2:08:49:c8:02:ef:71:74:c2:81:a0:68:f1:1a:3e:8b: 19:42:22:2a:35:28:c9:ac:14:72:f3:3c:fd:5b:d5:ee:95:38: 5e:3c:f1:fc -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUJkwsNSu7FiJ9p8A5/hhk6CyX65UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDExOTI4MTBaFw0yNjAxMzExOTMzMTBaMDMxMTAvBgNV BAMTKEM1M0I0NTk5Q0EwNENDNTU2NzI3RjdBNTY1RkNDQ0FGODE1MURERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqo0zRiw8ufhTLELmJv6WrBJwq BlteP8DcI5f8dokE/49Cuy/oKWsD2vBtRjtlkMG09VjqSqetQVy/mxbZcf84zhx7 MkXQRvcrKOQc8nw0xqMGqlu3froE5w+f7uHrPFtxyhuuR/b2Od3MzZ5l4eVlteGj UiOY7/ITY16G6qnaAHvoubm75j/XcMxWwx9hqqfb88cCOiZafiKjHL74dacCFVxX 1xgqupdKNDH3FQd8fWsvaik7ruGdABap3UkNS2/tOLUx+a1ug/pb7RZw5uysF3S3 /UkRhdZ0F221YDcl8t8WxtS2+NkM8y10XcIcZYs8xWVPPMQvpNc5vpTlwuvrAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUxTtFmcoEzFVnJ/elZfzMr4FR3fgwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjI2MzMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRrwDAN BgkqhkiG9w0BAQsFAAOCAQEAhsx/qgAUzi8Y4JBn1X/fcjmwUjHoB9uGDJAoc3Cf tkboffjLLb2QIDc0Stl9JPT9RaX/95T527lxOgVro7nwILVI9QKCMWpq5PhAQily N+Vl9EerrOVbuRVesnV0jpjV+YysiTW28UuZQpfYI2lkPlprxcFH8D9ZY8FG1Y9L q9z7uAJqehZdaA21P5zHE271lBkWN0ww2JfcT7TOkQvE2/T+5S2/91bB0bETOx8J 25V5rf+ZCngfwLvMIBZCE+7pgAyiCUSPI8MgUOpl+sE2SWZ0bkfGBPSFhC3CCEnI Au9xdMKBoGjxGj6LGUIiKjUoyawUcvM8/VvV7pU4Xjzx/A== -----END CERTIFICATE-----Generated at Wed Feb 5 06:50:35 2025 by rpki-client