$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366361303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366361303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: ojKjNbvS+yryb31P4ZJUbhYXyfbMSqpIHLtAkff+rjM= Subject key identifier: BA:E0:F6:40:C4:31:B1:B2:AD:D0:B2:14:51:B0:41:07:47:E5:5B:F9 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 4906235A4FA3CFC924AC170EC075B2A3027E8EC2 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366361303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 21:39:48 +0000 ROA not before: Sat 01 Feb 2025 21:34:48 +0000 ROA not after: Sat 31 Jan 2026 21:39:48 +0000 asID: 16909 IP address blocks: 2a14:7584:6ca0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:06:23:5a:4f:a3:cf:c9:24:ac:17:0e:c0:75:b2:a3:02:7e:8e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 21:34:48 2025 GMT Not After : Jan 31 21:39:48 2026 GMT Subject: CN=BAE0F640C431B1B2ADD0B21451B0410747E55BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:b1:98:c9:7b:2a:2c:90:a6:12:25:89:ce: ed:a1:a2:93:ea:df:e2:55:f3:32:87:03:f0:8d:76: 84:43:d0:9e:19:11:51:f9:60:30:a1:aa:0d:25:25: af:90:4d:49:eb:7e:0d:d2:e3:3a:54:11:4b:f1:9a: d5:f7:c6:bc:a1:5d:83:b9:3b:10:47:a7:24:1c:ba: d0:8a:b1:5a:6d:6f:02:44:97:d4:76:bb:0d:84:d8: 23:2f:79:4d:ae:f9:45:4b:8d:f7:52:94:26:49:18: 6d:8d:f0:44:61:3b:ed:29:3d:a2:6a:d3:18:9f:25: 82:4d:58:e5:3e:52:48:1f:a1:b9:74:d4:0d:83:50: f0:e0:d6:7b:11:7b:4d:89:4b:1a:d5:7d:06:23:31: 39:53:d0:11:16:9b:f4:68:1e:4b:3c:8a:d3:eb:d6: 1d:f8:0e:8b:5f:8d:a4:a9:26:28:3b:a5:84:e7:91: 1d:67:b1:12:68:8b:d0:2a:4d:dc:6c:55:99:2b:ca: 78:8f:c1:6e:ed:4f:5a:7f:97:1e:b6:61:e3:3f:fa: 56:27:78:a8:1b:ac:7e:0a:a1:0d:d6:2d:8b:32:3e: ef:cb:7e:85:f5:93:95:0d:21:57:1c:64:37:91:27: d1:68:92:de:f8:45:a1:10:c1:c2:ce:70:9c:fe:7a: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E0:F6:40:C4:31:B1:B2:AD:D0:B2:14:51:B0:41:07:47:E5:5B:F9 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366361303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6ca0::/48 Signature Algorithm: sha256WithRSAEncryption 1f:d6:b5:33:92:37:d6:cb:b0:c5:98:39:ba:1b:3c:e3:1d:44: 9b:ad:68:22:ef:c4:06:04:a2:31:81:42:aa:10:3a:8b:ef:73: 96:3b:d3:63:f8:60:1c:e4:72:62:cc:eb:f3:b2:16:46:f1:9c: 70:c6:e0:ad:ed:76:08:ba:24:f5:f5:30:fc:e2:fe:8f:55:42: c1:ef:28:26:5a:74:6e:16:fd:f1:8d:3e:df:89:6b:a9:2d:52: 53:dd:fc:fc:b2:6a:4c:0d:5b:4d:87:71:1b:ed:4c:87:1f:a1: 84:92:b7:45:fa:8e:d7:cc:13:0f:8e:cf:e2:76:f6:0d:a0:64: 9c:e1:bc:7f:2b:3c:30:46:5b:c2:07:fc:5b:15:37:2e:33:3c: ef:13:8a:33:ca:5f:84:80:ce:6a:3c:30:86:8a:30:c0:8e:53: b3:a1:cd:9e:aa:ad:59:99:9b:ec:73:f0:a3:ec:ff:74:ae:b3: 06:46:95:51:d3:67:ae:d1:2c:7b:a1:16:d4:b9:39:8d:c6:a6: 9d:a3:f6:80:9d:c6:35:82:74:5b:47:b2:eb:b6:47:23:f9:22: 00:48:d0:03:38:69:46:32:22:69:85:68:60:ed:5b:d2:f9:19: 48:8d:eb:38:2c:29:59:b7:04:46:aa:45:e9:25:96:c5:1c:0c: ae:e7:07:61 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUSQYjWk+jz8kkrBcOwHWyowJ+jsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDEyMTM0NDhaFw0yNjAxMzEyMTM5NDhaMDMxMTAvBgNV BAMTKEJBRTBGNjQwQzQzMUIxQjJBREQwQjIxNDUxQjA0MTA3NDdFNTVCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JbGYyXsqLJCmEiWJzu2hopPq 3+JV8zKHA/CNdoRD0J4ZEVH5YDChqg0lJa+QTUnrfg3S4zpUEUvxmtX3xryhXYO5 OxBHpyQcutCKsVptbwJEl9R2uw2E2CMveU2u+UVLjfdSlCZJGG2N8ERhO+0pPaJq 0xifJYJNWOU+Ukgfobl01A2DUPDg1nsRe02JSxrVfQYjMTlT0BEWm/RoHks8itPr 1h34DotfjaSpJig7pYTnkR1nsRJoi9AqTdxsVZkryniPwW7tT1p/lx62YeM/+lYn eKgbrH4KoQ3WLYsyPu/LfoX1k5UNIVccZDeRJ9Fokt74RaEQwcLOcJz+ep5NAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUuuD2QMQxsbKt0LIUUbBBB0flW/kwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjM2MTMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRsoDAN BgkqhkiG9w0BAQsFAAOCAQEAH9a1M5I31suwxZg5uhs84x1Em61oIu/EBgSiMYFC qhA6i+9zljvTY/hgHORyYszr87IWRvGccMbgre12CLok9fUw/OL+j1VCwe8oJlp0 bhb98Y0+34lrqS1SU938/LJqTA1bTYdxG+1Mhx+hhJK3RfqO18wTD47P4nb2DaBk nOG8fys8MEZbwgf8WxU3LjM87xOKM8pfhIDOajwwhoowwI5Ts6HNnqqtWZmb7HPw o+z/dK6zBkaVUdNnrtEse6EW1Lk5jcamnaP2gJ3GNYJ0W0ey67ZHI/kiAEjQAzhp RjIiaYVoYO1b0vkZSI3rOCwpWbcERqpF6SWWxRwMrucHYQ== -----END CERTIFICATE-----Generated at Wed Feb 5 06:48:12 2025 by rpki-client