$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366330303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: hcPJM56xdCg1bVWuMbBHXeFKI/ZOyFKjQyHpEqvgUDA= Subject key identifier: 10:82:F8:0D:23:DC:D7:16:EE:80:5D:D7:E7:C8:AC:69:D7:07:F1:3D Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 3B5AFE6B1323336E5EA95A2DD33F5B587D6791B7 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 19:33:46 +0000 ROA not before: Sat 01 Feb 2025 19:28:46 +0000 ROA not after: Sat 31 Jan 2026 19:33:46 +0000 asID: 16909 IP address blocks: 2a14:7584:6c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5a:fe:6b:13:23:33:6e:5e:a9:5a:2d:d3:3f:5b:58:7d:67:91:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 19:28:46 2025 GMT Not After : Jan 31 19:33:46 2026 GMT Subject: CN=1082F80D23DCD716EE805DD7E7C8AC69D707F13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:f7:79:98:c9:fb:bb:6d:ef:ff:fe:e6:08: 05:d6:a9:d7:d5:3a:29:80:ac:20:a4:d9:cb:78:99: c1:04:c2:91:4d:1d:85:c3:37:b5:28:bd:14:4e:10: 63:92:d0:cc:01:f0:f0:55:37:a8:3d:1c:91:14:64: 8a:a7:f3:30:ad:6f:c1:95:fa:33:78:f4:29:bd:e2: 1b:3d:a7:b7:7a:ce:ac:ee:2a:a7:77:40:0b:fa:71: 37:d8:eb:d7:9b:ea:4a:a7:28:8c:da:e8:19:c9:b6: 08:82:01:44:4a:35:f4:95:ea:2b:00:7e:9f:41:e4: 3d:d9:1f:97:dc:e6:f5:ba:0d:3a:92:af:47:28:56: e4:bf:1c:7b:d9:77:73:de:6f:3f:3a:b8:92:e7:f1: b1:38:83:b9:63:48:e3:41:ff:3a:29:84:26:e3:cb: 56:2c:ad:26:e7:ec:4f:e8:d7:57:3c:e8:72:6a:76: 84:af:4d:c2:78:09:12:72:e5:1a:7f:d3:37:1a:d6: 06:c3:f3:89:fc:68:6f:7a:83:7d:e4:e2:7b:99:77: c4:bb:73:87:36:2e:80:0e:6c:5e:30:0f:aa:f1:79: dd:cd:c6:54:a6:fe:4a:8f:46:a5:c5:73:32:c8:17: ca:52:66:d7:48:e4:2f:91:0c:47:ce:f0:b4:f2:1f: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:82:F8:0D:23:DC:D7:16:EE:80:5D:D7:E7:C8:AC:69:D7:07:F1:3D X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6c00::/48 Signature Algorithm: sha256WithRSAEncryption 33:29:95:c1:d1:99:7f:f1:02:31:dd:a6:02:59:c2:db:5b:00: 12:75:69:16:15:14:08:8d:ae:9d:61:93:74:bb:42:3e:f6:0b: 03:07:4a:89:ac:0a:6c:38:60:2b:a2:16:a7:83:78:78:53:18: 20:37:ac:58:01:fe:68:37:05:f6:cb:07:96:a5:10:5a:2e:fc: f1:50:60:97:64:33:05:62:4b:d1:42:71:53:dc:35:18:06:4a: 2a:81:fd:82:d8:ae:f5:32:aa:87:67:f5:dc:dd:87:73:11:7d: 7b:21:4d:47:56:ac:08:46:c9:86:ab:cf:b8:33:a8:ea:ce:b5: ca:37:c8:44:0a:16:e0:2e:0b:bf:62:1a:83:04:6c:9b:f8:f6: 95:2c:6d:00:c9:60:d9:c1:11:c1:85:2a:98:27:3e:b5:1a:09: 96:e8:7f:e4:d8:ac:9a:6d:82:d2:31:80:b8:cc:75:c0:00:e8: b7:54:e7:e7:1d:31:e4:13:42:14:ed:8a:c4:01:81:03:4d:11: 89:22:8d:ff:4c:5c:1c:ce:55:60:21:31:73:9a:cf:bf:6e:7e: 31:ea:b3:6f:a5:83:86:ba:59:20:7d:bc:22:05:93:f7:f1:78: a3:43:97:70:bb:f1:ad:b8:b0:5b:aa:aa:18:65:49:3b:a4:56: 1b:cb:51:03 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUO1r+axMjM25eqVot0z9bWH1nkbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDExOTI4NDZaFw0yNjAxMzExOTMzNDZaMDMxMTAvBgNV BAMTKDEwODJGODBEMjNEQ0Q3MTZFRTgwNUREN0U3QzhBQzY5RDcwN0YxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAPd5mMn7u23v//7mCAXWqdfV OimArCCk2ct4mcEEwpFNHYXDN7UovRROEGOS0MwB8PBVN6g9HJEUZIqn8zCtb8GV +jN49Cm94hs9p7d6zqzuKqd3QAv6cTfY69eb6kqnKIza6BnJtgiCAURKNfSV6isA fp9B5D3ZH5fc5vW6DTqSr0coVuS/HHvZd3Pebz86uJLn8bE4g7ljSONB/zophCbj y1YsrSbn7E/o11c86HJqdoSvTcJ4CRJy5Rp/0zca1gbD84n8aG96g33k4nuZd8S7 c4c2LoAObF4wD6rxed3NxlSm/kqPRqXFczLIF8pSZtdI5C+RDEfO8LTyHxIDAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUEIL4DSPc1xbugF3X58isadcH8T0wHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjMzMDMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRsADAN BgkqhkiG9w0BAQsFAAOCAQEAMymVwdGZf/ECMd2mAlnC21sAEnVpFhUUCI2unWGT dLtCPvYLAwdKiawKbDhgK6IWp4N4eFMYIDesWAH+aDcF9ssHlqUQWi788VBgl2Qz BWJL0UJxU9w1GAZKKoH9gtiu9TKqh2f13N2HcxF9eyFNR1asCEbJhqvPuDOo6s61 yjfIRAoW4C4Lv2IagwRsm/j2lSxtAMlg2cERwYUqmCc+tRoJluh/5Nismm2C0jGA uMx1wADot1Tn5x0x5BNCFO2KxAGBA00RiSKN/0xcHM5VYCExc5rPv25+Meqzb6WD hrpZIH28IgWT9/F4o0OXcLvxrbiwW6qqGGVJO6RWG8tRAw== -----END CERTIFICATE-----Generated at Wed Feb 5 06:53:04 2025 by rpki-client