$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366331303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: CT2Pti4XemvvEX+FKtZM0gIVXoou5oVrOoGdNLcevog= Subject key identifier: A7:60:1E:4D:93:D7:C2:C2:0C:5E:55:97:D2:34:55:A7:EA:A2:5C:D1 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 0C81CEA16392F0366390F0E9A5CED06EB131B579 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 19:33:47 +0000 ROA not before: Sat 01 Feb 2025 19:28:47 +0000 ROA not after: Sat 31 Jan 2026 19:33:47 +0000 asID: 16909 IP address blocks: 2a14:7584:6c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:81:ce:a1:63:92:f0:36:63:90:f0:e9:a5:ce:d0:6e:b1:31:b5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 19:28:47 2025 GMT Not After : Jan 31 19:33:47 2026 GMT Subject: CN=A7601E4D93D7C2C20C5E5597D23455A7EAA25CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:26:17:9f:f9:a1:d4:e4:ee:6e:3d:9f:2a: 37:ac:20:5e:2b:b2:a6:f5:76:77:63:95:42:36:30: 3b:da:3a:57:cd:9e:64:03:35:76:d3:5d:56:7f:03: f2:09:c3:9d:40:72:0d:fa:99:3a:68:b8:d3:3a:6f: 92:ff:3c:9f:2a:ae:8c:15:e7:64:f7:8d:45:a6:56: 90:20:52:c3:e8:b9:8c:9c:57:3b:ea:b6:d6:d1:a6: 68:27:1b:a2:a1:cd:d3:c0:f4:b6:e5:8d:ed:29:5c: 5c:06:1c:3b:1d:11:2b:32:1f:40:7a:24:77:00:57: 25:98:04:28:66:a9:f0:f2:a8:2b:a6:a9:d5:b4:5d: c8:ae:e4:d5:03:5d:51:1d:6d:38:94:ff:31:b4:dd: b8:3a:4b:a7:1d:d0:67:c3:30:b3:c6:1f:b1:a2:96: 71:cd:b4:70:df:c1:73:d6:7f:0a:ba:c7:49:c6:77: 1d:91:b6:06:59:ed:3b:87:fb:5f:91:85:04:52:b6: e5:09:8a:d5:6b:25:a2:01:c3:e2:84:4f:99:66:1d: 5f:fa:c0:71:3b:a9:9d:4d:af:78:cf:d5:c8:6a:3c: c5:88:85:a6:18:82:b9:62:8a:1c:bc:52:c6:55:24: 2f:e7:53:4f:0f:21:40:87:cb:6d:ba:d1:b7:2b:7e: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:1E:4D:93:D7:C2:C2:0C:5E:55:97:D2:34:55:A7:EA:A2:5C:D1 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6c10::/48 Signature Algorithm: sha256WithRSAEncryption 35:65:82:e8:0d:77:42:ff:18:62:17:70:2d:71:d2:80:2d:cd: 46:e9:11:71:52:93:c0:7b:da:f1:be:7d:89:5c:3d:0f:bc:c4: b6:a0:a9:6e:e9:6d:5f:c9:45:33:02:e4:73:08:17:93:7c:fa: 5f:0a:26:67:aa:36:f6:e9:41:5e:3a:28:b4:14:a7:ec:3b:ba: 64:7b:09:42:7a:c8:09:c8:fc:76:5d:8b:a1:9e:de:bf:ba:5b: f6:a7:6d:29:99:5a:8e:9c:da:f6:a6:4c:f8:5e:48:10:37:70: 46:78:88:54:f7:59:39:5a:ac:e0:ff:72:4a:7e:15:87:6e:18: 52:79:8e:c3:ff:82:5a:9d:7a:a9:ba:7e:dd:57:a4:16:90:c8: 81:a0:65:19:9e:43:f2:54:9f:7f:01:4a:77:4b:0d:08:40:6c: d8:5b:7f:60:ed:98:77:25:53:5a:99:2e:4a:48:70:2b:d1:93: de:d6:e0:6f:a5:3a:6c:c6:58:a7:cd:5e:59:8f:f9:b3:84:62: ee:b7:5c:e7:17:2c:23:84:76:e2:84:5c:5f:cd:e0:28:56:00: 50:da:fa:68:e7:35:91:a2:9b:f0:e2:3e:77:65:4b:16:3b:45: 3a:80:b4:15:69:96:bd:fd:2d:5d:74:72:f7:ea:ef:b5:8a:17: b4:4f:8b:37 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUDIHOoWOS8DZjkPDppc7QbrExtXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDExOTI4NDdaFw0yNjAxMzExOTMzNDdaMDMxMTAvBgNV BAMTKEE3NjAxRTREOTNEN0MyQzIwQzVFNTU5N0QyMzQ1NUE3RUFBMjVDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfSYXn/mh1OTubj2fKjesIF4r sqb1dndjlUI2MDvaOlfNnmQDNXbTXVZ/A/IJw51Acg36mTpouNM6b5L/PJ8qrowV 52T3jUWmVpAgUsPouYycVzvqttbRpmgnG6KhzdPA9Lblje0pXFwGHDsdESsyH0B6 JHcAVyWYBChmqfDyqCumqdW0Xciu5NUDXVEdbTiU/zG03bg6S6cd0GfDMLPGH7Gi lnHNtHDfwXPWfwq6x0nGdx2RtgZZ7TuH+1+RhQRStuUJitVrJaIBw+KET5lmHV/6 wHE7qZ1Nr3jP1chqPMWIhaYYgrliihy8UsZVJC/nU08PIUCHy2260bcrfpsNAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUp2AeTZPXwsIMXlWX0jRVp+qiXNEwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjMzMTMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRsEDAN BgkqhkiG9w0BAQsFAAOCAQEANWWC6A13Qv8YYhdwLXHSgC3NRukRcVKTwHva8b59 iVw9D7zEtqCpbultX8lFMwLkcwgXk3z6XwomZ6o29ulBXjootBSn7Du6ZHsJQnrI Ccj8dl2LoZ7ev7pb9qdtKZlajpza9qZM+F5IEDdwRniIVPdZOVqs4P9ySn4Vh24Y UnmOw/+CWp16qbp+3VekFpDIgaBlGZ5D8lSffwFKd0sNCEBs2Ft/YO2YdyVTWpku SkhwK9GT3tbgb6U6bMZYp81eWY/5s4Ri7rdc5xcsI4R24oRcX83gKFYAUNr6aOc1 kaKb8OI+d2VLFjtFOoC0FWmWvf0tXXRy9+rvtYoXtE+LNw== -----END CERTIFICATE-----Generated at Wed Feb 5 06:47:32 2025 by rpki-client