$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538343a366433303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: mmnpgZnuxDiG1StAK1RH1/gMBBHKdoDXk2/3qd6fajw= Subject key identifier: 94:1C:0A:E5:66:56:58:BE:B2:55:1B:89:A0:16:86:1C:BC:52:D5:98 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 5837292DF7F54606EF8802C7F435B45126161DA6 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e203136393039.roa Signing time: Sat 01 Feb 2025 21:54:04 +0000 ROA not before: Sat 01 Feb 2025 21:49:04 +0000 ROA not after: Sat 31 Jan 2026 21:54:04 +0000 asID: 16909 IP address blocks: 2a14:7584:6d30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:37:29:2d:f7:f5:46:06:ef:88:02:c7:f4:35:b4:51:26:16:1d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Feb 1 21:49:04 2025 GMT Not After : Jan 31 21:54:04 2026 GMT Subject: CN=941C0AE5665658BEB2551B89A016861CBC52D598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3b:7b:d6:0f:a4:28:bf:9c:2f:3a:8f:92:c8: cc:ce:4d:85:43:c0:bf:02:fc:8c:ab:79:b8:46:3d: a0:1a:c6:e7:08:4a:3f:39:e2:e0:06:ca:63:bc:ba: fe:9c:e9:8a:89:ec:4e:78:6f:dc:2a:61:7e:1b:72: de:54:b3:10:2c:02:bb:e0:b0:7b:6a:38:1c:c8:92: cb:9d:73:d6:fe:b0:ab:a4:07:60:44:50:46:f4:51: 72:65:2e:fb:eb:7e:bc:f8:55:c2:b8:9f:2a:11:f9: 71:6b:bf:fb:65:6b:0a:e5:9b:bd:1f:ae:1f:56:34: ee:b6:a1:a9:5f:81:26:cd:bc:b2:6f:21:91:10:44: 9a:5a:b1:93:cc:84:dd:b8:10:f1:b7:61:35:c5:ff: 1a:15:78:3b:36:be:ff:50:4f:99:4a:5d:6b:80:c4: d2:39:dc:fe:fe:93:bb:28:bc:7d:fa:48:d4:cc:67: 77:fd:d5:05:c6:ba:8f:ef:f8:98:46:24:23:e8:b4: ba:f9:cc:6d:da:7f:f6:21:37:c5:a3:ca:6b:f7:38: 2a:b9:fe:3d:4a:1a:19:dc:32:db:e5:1d:d9:47:2a: df:5c:70:d8:80:10:6a:09:ac:e0:86:bc:e4:77:94: c2:95:69:b8:c4:5c:b4:7f:4d:f5:21:54:7f:91:ff: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1C:0A:E5:66:56:58:BE:B2:55:1B:89:A0:16:86:1C:BC:52:D5:98 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6d30::/48 Signature Algorithm: sha256WithRSAEncryption 0d:66:27:c9:b1:70:6e:77:13:93:a6:40:c3:82:26:58:7a:f1: 9e:bf:1d:13:cd:c1:02:68:5a:11:dd:4a:27:5d:c3:0e:10:f0: 8d:04:47:f6:de:de:ba:9a:ef:47:82:c9:86:e5:28:59:66:dc: 3f:6f:9a:7d:31:5e:db:76:a4:f9:ba:63:49:f3:bc:af:32:0a: 2b:36:4a:bc:b4:f0:f2:b4:4b:5e:a5:fe:24:fd:8c:2d:72:34: ef:25:b3:85:84:5d:b5:ca:66:0b:1d:9c:20:4f:60:4c:0e:0b: 9d:98:28:07:d4:b1:a2:51:93:38:2e:23:db:66:44:cf:7e:26: 20:63:b6:3a:c0:aa:d6:cd:6a:27:ce:1a:1e:72:eb:5e:58:7c: 72:ef:c1:fb:69:87:2d:ab:f0:03:d5:0c:5e:40:ed:47:19:c6: 15:55:f9:fb:fd:8e:57:21:b7:16:1c:eb:c7:01:b3:50:00:3e: f1:a3:63:98:cb:ef:0b:50:d6:1a:4b:91:05:68:da:01:36:7b: 3d:08:7a:db:b0:fa:b4:82:fb:a5:58:8f:4a:ec:91:3d:ed:81: e4:8e:88:67:77:b2:c9:5d:1a:2a:b0:61:23:11:07:53:9f:d5: 9d:c6:b1:ee:cc:20:6d:68:64:23:b2:cf:e5:28:86:9e:c5:9f: 1e:a7:1c:01 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUWDcpLff1RgbviALH9DW0USYWHaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTAyMDEyMTQ5MDRaFw0yNjAxMzEyMTU0MDRaMDMxMTAvBgNV BAMTKDk0MUMwQUU1NjY1NjU4QkVCMjU1MUI4OUEwMTY4NjFDQkM1MkQ1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGO3vWD6Qov5wvOo+SyMzOTYVD wL8C/IyrebhGPaAaxucISj854uAGymO8uv6c6YqJ7E54b9wqYX4bct5UsxAsArvg sHtqOBzIksudc9b+sKukB2BEUEb0UXJlLvvrfrz4VcK4nyoR+XFrv/tlawrlm70f rh9WNO62oalfgSbNvLJvIZEQRJpasZPMhN24EPG3YTXF/xoVeDs2vv9QT5lKXWuA xNI53P7+k7sovH36SNTMZ3f91QXGuo/v+JhGJCPotLr5zG3af/YhN8Wjymv3OCq5 /j1KGhncMtvlHdlHKt9ccNiAEGoJrOCGvOR3lMKVabjEXLR/TfUhVH+R/2dxAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUlBwK5WZWWL6yVRuJoBaGHLxS1ZgwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjQzMzMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRtMDAN BgkqhkiG9w0BAQsFAAOCAQEADWYnybFwbncTk6ZAw4ImWHrxnr8dE83BAmhaEd1K J13DDhDwjQRH9t7euprvR4LJhuUoWWbcP2+afTFe23ak+bpjSfO8rzIKKzZKvLTw 8rRLXqX+JP2MLXI07yWzhYRdtcpmCx2cIE9gTA4LnZgoB9SxolGTOC4j22ZEz34m IGO2OsCq1s1qJ84aHnLrXlh8cu/B+2mHLavwA9UMXkDtRxnGFVX5+/2OVyG3Fhzr xwGzUAA+8aNjmMvvC1DWGkuRBWjaATZ7PQh627D6tIL7pViPSuyRPe2B5I6IZ3ey yV0aKrBhIxEHU5/Vncax7swgbWhkI7LP5SiGnsWfHqccAQ== -----END CERTIFICATE-----Generated at Wed Feb 5 06:54:28 2025 by rpki-client