$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366364303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: agvsn0w1T2YIyJrq+94NrGfuEYQ/Qy9ihMw50MRLsos= Subject key identifier: 6A:E1:92:C3:FA:DF:F1:79:D8:64:DA:CB:CA:00:B9:95:89:10:3D:15 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 7E7134ACD02A353952B0E6CD49A107DFD47C309B Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 21:39:50 +0000 ROA not before: Sat 01 Feb 2025 21:34:50 +0000 ROA not after: Sat 31 Jan 2026 21:39:50 +0000 asID: 16909 IP address blocks: 2a14:7584:6cd0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:71:34:ac:d0:2a:35:39:52:b0:e6:cd:49:a1:07:df:d4:7c:30:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 21:34:50 2025 GMT Not After : Jan 31 21:39:50 2026 GMT Subject: CN=6AE192C3FADFF179D864DACBCA00B99589103D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:4f:8c:0e:f2:dc:d2:f1:57:30:1f:b8:bf: 5d:4c:19:9b:ea:0c:f8:cd:27:4a:2e:2d:af:56:0a: 6c:5c:ad:0c:c9:d2:15:27:2a:e3:9f:e9:dd:83:c5: 32:6f:36:09:68:88:57:d8:3f:cc:d4:dc:16:48:f0: c8:82:43:ee:97:96:80:cd:18:d5:aa:61:23:16:6b: cb:ab:fd:f0:8d:94:f7:f4:8c:e4:ae:f1:09:96:2e: 0c:4f:69:a6:45:1c:13:c5:a5:53:a1:dc:bb:38:a5: 21:81:f5:d1:84:5e:90:9d:21:03:a2:06:39:3f:2b: e1:0f:e3:49:4b:5d:ac:de:d6:4e:53:14:dd:22:42: 8c:ba:8f:c0:1f:69:29:54:03:60:1a:70:20:6a:98: ff:0b:af:47:23:c0:a7:1f:a9:6f:8c:75:f2:9c:16: 5f:6e:ce:8a:ee:db:36:32:f9:55:39:e3:1a:9d:1f: ab:c5:b2:48:ed:e4:9c:48:6b:9c:46:a0:97:f1:21: 91:7e:7c:52:ed:00:56:1e:51:99:b5:df:66:cf:50: 00:92:bf:37:d3:46:bb:17:38:8f:96:41:46:9a:60: dc:c3:cc:8a:36:39:e9:2d:93:6b:f4:ce:3e:73:32: 83:f2:a1:c6:e6:1f:73:ce:d0:a4:d0:12:45:23:ba: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:92:C3:FA:DF:F1:79:D8:64:DA:CB:CA:00:B9:95:89:10:3D:15 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6cd0::/48 Signature Algorithm: sha256WithRSAEncryption af:e0:5d:70:38:30:09:76:ef:cc:43:0b:92:1b:d2:41:c2:1e: 19:09:33:d5:13:18:5b:db:ef:bf:c5:fe:09:43:10:ca:d3:61: 67:d3:65:2e:27:ae:fe:f0:99:e9:e1:e2:e7:90:80:7a:3b:9c: 43:03:88:48:14:99:65:f4:13:28:26:c8:15:11:9f:85:52:97: cc:37:40:82:7a:94:a0:c7:3c:ba:9f:5b:c2:ae:fc:9a:1c:40: e0:64:ce:5e:a7:88:39:cc:18:f2:c3:b0:2f:a8:26:e1:8b:55: 3c:c0:b5:86:9c:b6:8d:25:25:8d:55:7b:d7:f4:f5:ad:07:eb: e8:b5:15:8f:ea:73:4b:19:88:c5:3a:9f:75:d9:9e:29:d4:0f: 53:80:80:7b:22:45:4e:d1:e2:a7:85:14:20:81:fc:20:08:3a: b4:aa:b8:72:3e:4b:01:a3:36:51:86:2b:7b:cc:60:a9:e6:5f: 87:de:f1:4c:d1:6b:31:ab:33:6c:c4:8f:06:20:68:59:9e:4d: f6:7f:f1:bd:95:21:0e:c2:7b:c9:a0:02:4a:b3:0f:ce:11:44: 9f:6a:c8:78:96:8f:99:ea:cb:eb:80:34:d2:e5:fb:14:63:cf: 61:59:ff:35:71:77:0f:3e:93:0c:04:46:e3:e7:fc:12:02:61: cb:7e:dc:8d -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUfnE0rNAqNTlSsObNSaEH39R8MJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDEyMTM0NTBaFw0yNjAxMzEyMTM5NTBaMDMxMTAvBgNV BAMTKDZBRTE5MkMzRkFERkYxNzlEODY0REFDQkNBMDBCOTk1ODkxMDNEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViE+MDvLc0vFXMB+4v11MGZvq DPjNJ0ouLa9WCmxcrQzJ0hUnKuOf6d2DxTJvNgloiFfYP8zU3BZI8MiCQ+6XloDN GNWqYSMWa8ur/fCNlPf0jOSu8QmWLgxPaaZFHBPFpVOh3Ls4pSGB9dGEXpCdIQOi Bjk/K+EP40lLXaze1k5TFN0iQoy6j8AfaSlUA2AacCBqmP8Lr0cjwKcfqW+MdfKc Fl9uzoru2zYy+VU54xqdH6vFskjt5JxIa5xGoJfxIZF+fFLtAFYeUZm132bPUACS vzfTRrsXOI+WQUaaYNzDzIo2Oektk2v0zj5zMoPyocbmH3PO0KTQEkUjunZFAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUauGSw/rf8XnYZNrLygC5lYkQPRUwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjM2NDMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRs0DAN BgkqhkiG9w0BAQsFAAOCAQEAr+BdcDgwCXbvzEMLkhvSQcIeGQkz1RMYW9vvv8X+ CUMQytNhZ9NlLieu/vCZ6eHi55CAejucQwOISBSZZfQTKCbIFRGfhVKXzDdAgnqU oMc8up9bwq78mhxA4GTOXqeIOcwY8sOwL6gm4YtVPMC1hpy2jSUljVV71/T1rQfr 6LUVj+pzSxmIxTqfddmeKdQPU4CAeyJFTtHip4UUIIH8IAg6tKq4cj5LAaM2UYYr e8xgqeZfh97xTNFrMaszbMSPBiBoWZ5N9n/xvZUhDsJ7yaACSrMPzhFEn2rIeJaP merL64A00uX7FGPPYVn/NXF3Dz6TDARG4+f8EgJhy37cjQ== -----END CERTIFICATE-----Generated at Wed Feb 5 06:40:51 2025 by rpki-client