$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366333303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: 53T1cuqzpOOD7DXR6iSTk22TtqHxd+wuV2WfspfjLBw= Subject key identifier: E5:06:85:F2:EC:C2:15:A7:40:7B:09:D9:A3:AB:07:83:6D:19:53:A8 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 2785948D3B3D18F4CF53E18B79A3DE29DED28BC1 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 19:34:17 +0000 ROA not before: Sat 01 Feb 2025 19:29:17 +0000 ROA not after: Sat 31 Jan 2026 19:34:17 +0000 asID: 16909 IP address blocks: 2a14:7584:6c30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:85:94:8d:3b:3d:18:f4:cf:53:e1:8b:79:a3:de:29:de:d2:8b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 19:29:17 2025 GMT Not After : Jan 31 19:34:17 2026 GMT Subject: CN=E50685F2ECC215A7407B09D9A3AB07836D1953A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fb:5f:e4:bb:82:da:c6:c6:00:40:c8:f3:1d: f1:96:06:be:53:0a:74:5a:de:bd:f8:21:93:81:a8: 97:35:e9:76:25:16:5c:90:09:43:69:90:66:7f:6b: e5:e6:8d:d3:8b:88:de:9e:fa:25:19:a0:01:f8:b2: 91:87:37:dd:e1:91:83:62:b7:e2:52:d9:80:89:20: fc:43:73:40:0d:a4:57:4f:78:86:ba:ac:ff:49:a7: 52:c0:ac:af:e2:58:85:62:4b:2a:f7:58:d9:e8:13: 6d:f6:8a:5b:76:a0:53:33:82:b3:ae:c9:80:dc:54: be:5d:66:3f:b3:23:66:ab:ca:ea:0f:dc:6f:4e:58: 82:1f:92:cc:a8:b5:51:b5:00:fa:a9:26:b4:72:93: 87:be:92:9a:8a:59:03:3c:07:68:14:32:b1:d6:c0: ce:a4:a8:33:77:e9:1c:e4:0d:01:3a:d5:78:03:6f: ef:36:80:da:c6:ce:b9:b0:2e:16:c6:bf:64:e1:bc: e0:18:89:d3:a2:da:d7:cf:a4:72:e8:35:02:db:4f: 43:8c:9a:c8:33:1b:ed:2a:a3:26:a4:b2:84:de:50: 3c:a4:08:a9:88:b8:c7:04:15:4e:67:61:26:d6:33: 3e:ca:ae:37:08:ea:58:ad:de:c6:a0:0e:fb:9f:4e: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:06:85:F2:EC:C2:15:A7:40:7B:09:D9:A3:AB:07:83:6D:19:53:A8 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6c30::/48 Signature Algorithm: sha256WithRSAEncryption 76:c6:1d:f0:e4:76:5f:79:8d:d1:5e:66:e9:8b:e7:85:a4:c1: 05:59:57:e8:b9:6a:d2:a5:38:0f:01:69:4e:a2:cd:01:e8:f6: 8d:59:42:c7:a0:25:67:73:dc:2f:d4:9c:32:6f:45:a1:ef:30: 82:7b:20:65:ee:6d:01:ab:30:52:93:c5:f6:89:0f:5f:e5:99: b6:c5:b5:58:db:e5:59:8f:77:22:b1:83:b3:b4:42:f0:04:f2: 87:eb:c5:c6:ee:e3:b9:26:25:e7:64:40:54:a2:66:11:17:96: ef:bf:74:ed:03:31:20:a5:15:44:e8:ee:5c:f7:a1:d5:17:9a: 13:61:e9:95:c5:d9:6c:e2:05:5a:22:50:2b:60:95:2c:6b:d8: e7:5f:2c:1d:ab:10:3a:6d:4f:6f:1a:53:a7:8e:dc:fb:23:3e: 1f:1b:2e:79:65:22:45:06:a2:5b:41:b4:31:39:61:6f:38:f9: e5:ec:cf:92:59:d1:85:90:6a:f4:c2:10:3e:6d:ec:01:c6:f5: 5b:4a:ab:c9:c3:6d:08:10:44:47:ce:64:3e:83:38:17:c4:67: 0c:fd:b7:4e:df:47:fe:25:30:4f:6e:b5:90:c3:57:46:2d:10: 04:8c:b0:64:11:16:fc:6f:f5:4a:7c:dd:40:4a:99:40:45:f6: 32:be:04:94 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUJ4WUjTs9GPTPU+GLeaPeKd7Si8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDExOTI5MTdaFw0yNjAxMzExOTM0MTdaMDMxMTAvBgNV BAMTKEU1MDY4NUYyRUNDMjE1QTc0MDdCMDlEOUEzQUIwNzgzNkQxOTUzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN+1/ku4LaxsYAQMjzHfGWBr5T CnRa3r34IZOBqJc16XYlFlyQCUNpkGZ/a+XmjdOLiN6e+iUZoAH4spGHN93hkYNi t+JS2YCJIPxDc0ANpFdPeIa6rP9Jp1LArK/iWIViSyr3WNnoE232ilt2oFMzgrOu yYDcVL5dZj+zI2aryuoP3G9OWIIfksyotVG1APqpJrRyk4e+kpqKWQM8B2gUMrHW wM6kqDN36RzkDQE61XgDb+82gNrGzrmwLhbGv2ThvOAYidOi2tfPpHLoNQLbT0OM msgzG+0qoyaksoTeUDykCKmIuMcEFU5nYSbWMz7KrjcI6lit3sagDvufTuiFAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQU5QaF8uzCFadAewnZo6sHg20ZU6gwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjMzMzMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRsMDAN BgkqhkiG9w0BAQsFAAOCAQEAdsYd8OR2X3mN0V5m6YvnhaTBBVlX6Llq0qU4DwFp TqLNAej2jVlCx6AlZ3PcL9ScMm9Foe8wgnsgZe5tAaswUpPF9okPX+WZtsW1WNvl WY93IrGDs7RC8ATyh+vFxu7juSYl52RAVKJmEReW77907QMxIKUVROjuXPeh1Rea E2HplcXZbOIFWiJQK2CVLGvY518sHasQOm1PbxpTp47c+yM+HxsueWUiRQaiW0G0 MTlhbzj55ezPklnRhZBq9MIQPm3sAcb1W0qrycNtCBBER85kPoM4F8RnDP23Tt9H /iUwT261kMNXRi0QBIywZBEW/G/1SnzdQEqZQEX2Mr4ElA== -----END CERTIFICATE-----Generated at Wed Feb 5 06:52:32 2025 by rpki-client