$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366337303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366337303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: 7JcuH80WdeL80VLI3ARW/OmyL/VvLS1zPR2HPSAqZjg= Subject key identifier: 20:0A:FC:A3:E8:51:AE:8A:96:80:D4:72:20:C4:02:02:8F:87:9B:89 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 7AF0A027E6B14BD66A4D16AAF9FEA883E07AE3D8 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366337303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 21:39:45 +0000 ROA not before: Sat 01 Feb 2025 21:34:45 +0000 ROA not after: Sat 31 Jan 2026 21:39:45 +0000 asID: 16909 IP address blocks: 2a14:7584:6c70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f0:a0:27:e6:b1:4b:d6:6a:4d:16:aa:f9:fe:a8:83:e0:7a:e3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 21:34:45 2025 GMT Not After : Jan 31 21:39:45 2026 GMT Subject: CN=200AFCA3E851AE8A9680D47220C402028F879B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:e2:76:84:04:d7:99:05:23:ca:3c:7f:af: 80:8c:a4:cf:c8:56:85:fe:15:4e:77:53:a5:99:0a: de:01:81:af:06:36:62:d0:73:36:42:af:61:4c:c8: 65:11:af:fb:ab:3c:1a:b6:8e:59:e1:7b:da:03:c4: 5f:90:c6:e2:3e:2d:30:4a:96:2b:e9:93:05:0c:09: 5f:d4:f2:a1:b8:11:4e:ab:da:3c:bd:cb:9c:48:90: 01:73:d1:f5:30:d5:f2:1e:a2:6b:e9:9c:7e:fe:c3: 4b:64:31:bf:5f:ee:8d:69:bb:42:65:a5:a0:46:31: 1f:66:86:f9:e6:62:ba:58:2c:43:ed:b0:c9:2e:cd: 36:50:9f:12:52:8b:43:aa:f3:65:a4:c0:e4:ea:77: 1a:24:3e:6c:67:66:95:bf:a0:86:2c:8f:be:ef:eb: 1e:70:76:84:6a:ff:14:9f:49:cf:5c:11:cb:a5:3a: ea:78:fd:f0:0c:9c:5f:f6:be:04:90:c0:79:c2:a0: cb:35:6c:22:1d:19:6a:a6:83:3b:37:d9:65:8f:a0: ba:5a:36:1d:4b:08:5f:74:f6:a6:c0:93:45:98:fa: 7e:96:e3:25:95:07:89:64:87:66:5e:1d:c9:03:89: c2:62:1b:bf:b9:6d:88:c0:23:35:9c:dd:7a:80:28: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0A:FC:A3:E8:51:AE:8A:96:80:D4:72:20:C4:02:02:8F:87:9B:89 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366337303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6c70::/48 Signature Algorithm: sha256WithRSAEncryption 5b:f7:38:f9:eb:e3:2b:ca:89:d0:4d:7b:63:1c:9b:71:96:8e: b0:56:a3:c9:0a:5d:4e:38:8e:29:ec:2d:3c:8e:68:fb:24:fb: 97:28:64:ab:cb:62:c2:9c:65:0b:b5:84:84:8e:da:e9:05:12: e4:66:71:1e:86:5c:7a:50:5f:6d:61:44:1b:02:32:fd:a7:84: 47:70:ea:e1:6e:a9:22:fe:ab:07:4d:0d:ba:85:d9:9a:b3:7a: 82:d2:4c:ab:d9:4a:9d:a6:36:ef:80:48:8f:d0:0f:d7:d4:44: 79:31:74:cb:b7:6e:b0:9b:56:4a:9b:9d:f9:76:2b:78:e7:ac: 2f:6d:f2:c2:72:ce:fd:0c:dd:54:d6:90:a9:d4:a1:72:7b:eb: 14:5f:ce:74:72:a5:b0:0a:cf:a5:eb:fe:d7:cf:85:58:f5:d8: cc:51:f6:01:91:d5:17:db:fd:2d:92:d3:18:83:ef:80:a8:2e: 48:7a:07:34:e7:c5:87:30:a2:b5:2f:0f:db:3f:73:44:6f:92: d5:d3:b8:be:dc:87:52:fc:e0:c0:66:cb:a4:4c:cc:bf:90:c4: c7:22:ab:22:8d:ff:73:60:b9:9d:34:b6:6e:69:89:18:6f:09: eb:1c:29:b0:28:94:00:52:b0:77:86:79:33:ea:76:67:01:15: f9:76:0e:86 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUevCgJ+axS9ZqTRaq+f6og+B649gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDEyMTM0NDVaFw0yNjAxMzEyMTM5NDVaMDMxMTAvBgNV BAMTKDIwMEFGQ0EzRTg1MUFFOEE5NjgwRDQ3MjIwQzQwMjAyOEY4NzlCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbkeJ2hATXmQUjyjx/r4CMpM/I VoX+FU53U6WZCt4Bga8GNmLQczZCr2FMyGURr/urPBq2jlnhe9oDxF+QxuI+LTBK livpkwUMCV/U8qG4EU6r2jy9y5xIkAFz0fUw1fIeomvpnH7+w0tkMb9f7o1pu0Jl paBGMR9mhvnmYrpYLEPtsMkuzTZQnxJSi0Oq82WkwOTqdxokPmxnZpW/oIYsj77v 6x5wdoRq/xSfSc9cEculOup4/fAMnF/2vgSQwHnCoMs1bCIdGWqmgzs32WWPoLpa Nh1LCF909qbAk0WY+n6W4yWVB4lkh2ZeHckDicJiG7+5bYjAIzWc3XqAKI+XAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUIAr8o+hRroqWgNRyIMQCAo+Hm4kwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjMzNzMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRscDAN BgkqhkiG9w0BAQsFAAOCAQEAW/c4+evjK8qJ0E17YxybcZaOsFajyQpdTjiOKewt PI5o+yT7lyhkq8tiwpxlC7WEhI7a6QUS5GZxHoZcelBfbWFEGwIy/aeER3Dq4W6p Iv6rB00NuoXZmrN6gtJMq9lKnaY274BIj9AP19REeTF0y7dusJtWSpud+XYreOes L23ywnLO/QzdVNaQqdShcnvrFF/OdHKlsArPpev+18+FWPXYzFH2AZHVF9v9LZLT GIPvgKguSHoHNOfFhzCitS8P2z9zRG+S1dO4vtyHUvzgwGbLpEzMv5DExyKrIo3/ c2C5nTS2bmmJGG8J6xwpsCiUAFKwd4Z5M+p2ZwEV+XYOhg== -----END CERTIFICATE-----Generated at Wed Feb 5 06:54:31 2025 by rpki-client