$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366338303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: tBcacqJgUZdjKtbwrOQ+n9Pv/vF6tENFjZb41T6wOyg= Subject key identifier: C6:16:3E:05:89:AC:00:63:84:6C:BB:29:12:BE:2B:41:1F:A7:D8:F7 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 146819B18C1223ED359C8F2D8CE456DEF0919CAF Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 21:39:46 +0000 ROA not before: Sat 01 Feb 2025 21:34:46 +0000 ROA not after: Sat 31 Jan 2026 21:39:46 +0000 asID: 16909 IP address blocks: 2a14:7584:6c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:68:19:b1:8c:12:23:ed:35:9c:8f:2d:8c:e4:56:de:f0:91:9c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 21:34:46 2025 GMT Not After : Jan 31 21:39:46 2026 GMT Subject: CN=C6163E0589AC0063846CBB2912BE2B411FA7D8F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a9:03:cd:3f:14:17:57:5d:37:3e:a1:da:25: 8c:7d:ec:69:a4:03:5b:16:5b:28:da:a5:94:63:c8: 4a:f4:9e:1b:3b:67:a4:70:7f:5d:7b:82:8b:e9:7b: 80:c3:a9:71:ae:da:f1:85:c5:9b:1f:e1:4c:73:35: e4:ff:40:66:23:2e:a7:ca:a9:bd:fb:41:04:f4:1b: 8d:be:dd:8f:9f:41:81:06:23:3c:48:58:68:4c:97: 4c:5b:f5:d6:b2:c0:bd:bc:9e:33:6c:ec:b7:97:8e: 2d:5d:6f:19:e3:19:72:15:aa:b2:85:49:59:1a:a1: 19:d1:18:43:44:77:87:db:32:6a:2b:df:fd:75:cf: 4b:d4:17:52:c2:eb:79:bd:53:fc:78:72:d0:58:ec: 06:c2:e1:a1:0d:48:c0:8f:7c:a8:80:5a:df:26:73: dd:5c:4a:8c:54:74:82:e7:db:12:8b:56:4a:27:3e: e1:05:97:0f:37:9f:af:f3:2b:ac:ed:47:bf:47:a3: 7a:26:d2:3e:31:37:15:ac:7a:2a:a9:5c:75:0e:24: 1b:29:6e:56:90:56:88:9e:d9:d5:bc:bd:eb:f9:2b: cb:8d:67:6d:39:29:5b:4c:48:54:10:25:f9:79:57: 4c:cb:94:de:a5:f7:64:63:6e:56:cd:a9:a2:3b:6b: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:16:3E:05:89:AC:00:63:84:6C:BB:29:12:BE:2B:41:1F:A7:D8:F7 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6c80::/48 Signature Algorithm: sha256WithRSAEncryption b7:8a:69:08:37:d5:52:59:ef:85:bc:7c:b9:af:b9:d1:9d:43: 46:53:01:fb:0f:aa:bc:4e:8a:8a:4c:c3:67:78:cc:4c:df:50: f2:80:4a:82:95:f8:94:b6:80:03:2d:ac:65:be:6c:b4:0c:01: f1:b2:a2:a8:ec:7e:94:ba:0f:89:b3:90:2c:0b:05:3c:52:a1: 7a:ff:88:4e:e1:e2:53:05:b2:af:26:6d:c8:cd:fe:24:22:d5: a8:d1:d7:d0:14:1e:68:bb:04:27:d1:6d:20:b4:79:9f:69:03: 6e:8f:76:d7:bf:ef:9c:cf:6c:13:93:7d:d3:38:28:92:c6:77: 64:ef:34:7b:8e:9e:71:63:28:b4:ec:c3:97:de:ac:ea:b9:f9: cb:a0:c9:1a:b8:df:2c:4c:20:30:f3:00:8f:71:1f:9d:5e:57: 20:97:17:31:57:9e:0c:26:f0:63:91:0a:f8:f8:dd:09:c0:05: 0e:e5:96:51:f9:32:84:16:08:27:6c:d5:54:83:6a:47:16:d1: bf:fe:0a:e1:82:01:6b:4e:32:f5:ca:a7:c8:15:3b:c9:dd:11: 46:7d:85:db:30:06:a8:a6:78:74:51:d1:97:b1:47:58:59:a9: 76:21:3e:c0:1e:05:f6:88:bb:f0:35:7f:ab:cd:92:29:3c:5b: 6c:dc:d4:ef -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUFGgZsYwSI+01nI8tjORW3vCRnK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDEyMTM0NDZaFw0yNjAxMzEyMTM5NDZaMDMxMTAvBgNV BAMTKEM2MTYzRTA1ODlBQzAwNjM4NDZDQkIyOTEyQkUyQjQxMUZBN0Q4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlqQPNPxQXV103PqHaJYx97Gmk A1sWWyjapZRjyEr0nhs7Z6Rwf117govpe4DDqXGu2vGFxZsf4UxzNeT/QGYjLqfK qb37QQT0G42+3Y+fQYEGIzxIWGhMl0xb9daywL28njNs7LeXji1dbxnjGXIVqrKF SVkaoRnRGENEd4fbMmor3/11z0vUF1LC63m9U/x4ctBY7AbC4aENSMCPfKiAWt8m c91cSoxUdILn2xKLVkonPuEFlw83n6/zK6ztR79Ho3om0j4xNxWseiqpXHUOJBsp blaQVoie2dW8vev5K8uNZ205KVtMSFQQJfl5V0zLlN6l92RjblbNqaI7a8eVAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUxhY+BYmsAGOEbLspEr4rQR+n2PcwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjMzODMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRsgDAN BgkqhkiG9w0BAQsFAAOCAQEAt4ppCDfVUlnvhbx8ua+50Z1DRlMB+w+qvE6KikzD Z3jMTN9Q8oBKgpX4lLaAAy2sZb5stAwB8bKiqOx+lLoPibOQLAsFPFKhev+ITuHi UwWyryZtyM3+JCLVqNHX0BQeaLsEJ9FtILR5n2kDbo9217/vnM9sE5N90zgoksZ3 ZO80e46ecWMotOzDl96s6rn5y6DJGrjfLEwgMPMAj3EfnV5XIJcXMVeeDCbwY5EK +PjdCcAFDuWWUfkyhBYIJ2zVVINqRxbRv/4K4YIBa04y9cqnyBU7yd0RRn2F2zAG qKZ4dFHRl7FHWFmpdiE+wB4F9oi78DV/q82SKTxbbNzU7w== -----END CERTIFICATE-----Generated at Wed Feb 5 06:46:47 2025 by rpki-client