$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366365303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: OaAnepHR7+vXRLzSUBdk3yAvO4IBeSTWFMZpS317FJ4= Subject key identifier: 82:E3:92:D2:1B:8C:8E:30:29:11:D5:F9:88:01:46:8B:3E:34:3A:0B Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 3DD4F5EB45A48A782630C113A794217EE166863F Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 21:54:00 +0000 ROA not before: Sat 01 Feb 2025 21:49:00 +0000 ROA not after: Sat 31 Jan 2026 21:54:00 +0000 asID: 16909 IP address blocks: 2a14:7584:6ce0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d4:f5:eb:45:a4:8a:78:26:30:c1:13:a7:94:21:7e:e1:66:86:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 21:49:00 2025 GMT Not After : Jan 31 21:54:00 2026 GMT Subject: CN=82E392D21B8C8E302911D5F98801468B3E343A0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:95:bb:a4:15:f2:df:8a:24:01:fa:3f:c7:de: 9d:53:57:e7:c9:71:18:71:9e:dc:3c:db:80:66:5f: d4:a8:e5:a6:67:aa:3c:7e:4a:a8:7f:e5:bb:d3:7e: bb:42:c0:74:18:5b:2e:1c:1d:28:8d:c8:b1:eb:ac: 7a:5a:aa:71:2c:35:b1:e9:9a:bb:67:06:9d:41:3f: fd:22:b4:a5:02:28:5f:42:f7:bb:a8:4e:f0:a6:01: b5:84:bb:73:36:3f:6d:3a:b4:b5:da:5a:bb:ef:c9: 8a:53:1a:46:ff:38:2a:4d:ff:38:31:d4:cc:58:2e: 60:07:15:92:dc:e8:ba:6f:6b:55:90:d0:84:ec:d8: 5c:90:24:67:56:7a:d9:ab:df:63:80:57:8b:40:1a: e2:f9:47:45:f3:eb:cf:21:e4:26:e8:46:d8:a9:04: 75:40:e0:65:e8:f8:f3:cc:ce:40:3c:b5:fe:8a:f6: 9a:a7:8f:3e:4c:16:4b:4f:b6:1a:4e:45:d8:ff:79: 28:de:ad:a5:ca:14:ed:0c:42:41:38:5b:a5:cf:fe: 2b:a1:23:7c:1b:b4:6e:e7:1f:be:d7:2c:ea:ef:d5: 7a:4c:0c:da:cc:e3:c9:a7:03:76:59:91:46:1b:9e: 5f:a2:f6:2d:9d:b0:9d:40:d6:b7:77:3b:35:61:36: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E3:92:D2:1B:8C:8E:30:29:11:D5:F9:88:01:46:8B:3E:34:3A:0B X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6ce0::/48 Signature Algorithm: sha256WithRSAEncryption 42:a7:d0:7d:95:6d:99:6e:76:45:c9:96:cf:96:be:80:f1:b3: 45:e6:41:3f:76:ce:ae:3b:d6:8c:50:52:81:17:dc:f5:2a:01: 59:70:8e:fb:b8:2f:dc:82:c9:b1:2e:96:24:10:36:04:20:76: 8c:90:f6:4c:41:8d:98:b0:11:a7:c5:ce:99:13:f8:bb:4b:18: 9c:14:89:ac:b8:8c:6a:5d:f0:09:71:4f:bc:aa:78:dc:b5:f1: 8a:d2:a3:56:c2:0a:2d:64:db:fd:df:3d:de:5b:14:60:ba:75: 8b:ba:9c:95:8d:8d:e0:06:5f:b6:8a:c8:37:bd:0d:b3:2a:db: 3f:c9:f5:87:60:44:fe:c8:ca:37:d0:3f:e8:db:2c:d3:2c:60: 03:e5:37:67:93:89:09:df:df:58:90:d5:e0:ee:91:96:ec:1e: 68:ae:c4:cc:c2:90:b2:a8:d8:b0:56:af:90:7c:85:a9:c2:70: 13:87:ef:2e:51:e4:07:65:b7:a1:87:69:69:7f:d5:7b:b9:5c: 46:67:b0:97:c0:bd:5e:8c:ae:f5:b2:0b:bc:7b:81:4e:97:65: 2d:57:13:96:33:81:cb:74:6f:e7:c2:a9:0e:d3:1e:f4:29:cd: 54:16:dd:e8:26:b0:63:5c:39:26:bf:1b:67:3b:a7:76:1b:1b: 0b:8c:c2:16 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUPdT160WkingmMMETp5QhfuFmhj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDEyMTQ5MDBaFw0yNjAxMzEyMTU0MDBaMDMxMTAvBgNV BAMTKDgyRTM5MkQyMUI4QzhFMzAyOTExRDVGOTg4MDE0NjhCM0UzNDNBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdlbukFfLfiiQB+j/H3p1TV+fJ cRhxntw824BmX9So5aZnqjx+Sqh/5bvTfrtCwHQYWy4cHSiNyLHrrHpaqnEsNbHp mrtnBp1BP/0itKUCKF9C97uoTvCmAbWEu3M2P206tLXaWrvvyYpTGkb/OCpN/zgx 1MxYLmAHFZLc6Lpva1WQ0ITs2FyQJGdWetmr32OAV4tAGuL5R0Xz688h5CboRtip BHVA4GXo+PPMzkA8tf6K9pqnjz5MFktPthpORdj/eSjeraXKFO0MQkE4W6XP/iuh I3wbtG7nH77XLOrv1XpMDNrM48mnA3ZZkUYbnl+i9i2dsJ1A1rd3OzVhNlf1AgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUguOS0huMjjApEdX5iAFGiz40OgswHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjM2NTMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRs4DAN BgkqhkiG9w0BAQsFAAOCAQEAQqfQfZVtmW52RcmWz5a+gPGzReZBP3bOrjvWjFBS gRfc9SoBWXCO+7gv3ILJsS6WJBA2BCB2jJD2TEGNmLARp8XOmRP4u0sYnBSJrLiM al3wCXFPvKp43LXxitKjVsIKLWTb/d893lsUYLp1i7qclY2N4AZftorIN70Nsyrb P8n1h2BE/sjKN9A/6Nss0yxgA+U3Z5OJCd/fWJDV4O6RluweaK7EzMKQsqjYsFav kHyFqcJwE4fvLlHkB2W3oYdpaX/Ve7lcRmewl8C9Xoyu9bILvHuBTpdlLVcTljOB y3Rv58KpDtMe9CnNVBbd6CawY1w5Jr8bZzundhsbC4zCFg== -----END CERTIFICATE-----Generated at Wed Feb 5 06:57:50 2025 by rpki-client