$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa File: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (raw, json) Hash identifier: ieiPXHb0LqnIe4Sb9oMzov9gsD9eBVnGkXmjDt9fNGY= Subject key identifier: B1:34:36:BA:06:DD:11:62:32:84:8A:CA:20:7F:44:76:33:9E:A1:28 Certificate issuer: /CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839 Certificate serial: 2D98EDA41D13D043CD9661749B3A86F7F448632A Authority key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa Signing time: Wed 08 Jan 2025 11:07:43 +0000 ROA not before: Wed 08 Jan 2025 11:02:43 +0000 ROA not after: Wed 07 Jan 2026 11:07:43 +0000 asID: 53343 IP address blocks: 2a0a:6044:a880::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 13:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:98:ed:a4:1d:13:d0:43:cd:96:61:74:9b:3a:86:f7:f4:48:63:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839 Validity Not Before: Jan 8 11:02:43 2025 GMT Not After : Jan 7 11:07:43 2026 GMT Subject: CN=B13436BA06DD116232848ACA207F4476339EA128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:ef:63:ad:7c:d4:d5:6a:e0:e8:94:42:c5: c1:06:96:a1:75:da:92:3d:04:0e:46:d9:12:14:64: 63:22:e5:ba:04:a2:52:45:b2:ee:72:5d:95:72:f6: ac:e9:62:5b:8b:61:10:e1:f1:00:91:e0:27:0c:a2: 2e:34:c0:92:97:ff:6d:0c:e3:6d:ec:13:63:48:82: 14:7b:2d:ce:50:f9:3d:2f:07:3a:42:39:df:25:a0: 79:7e:61:6d:c9:f7:ee:c7:54:5e:98:c2:2e:23:3e: 49:e0:7a:d2:a8:bd:4a:b8:08:4d:7a:ed:a5:d4:b0: 1e:d3:99:ff:c9:62:b0:8a:70:63:98:d0:4a:7f:37: 82:3f:e9:bb:85:ff:68:dd:ee:80:b2:df:05:cc:02: c1:24:cf:11:aa:b4:cd:c9:18:97:9c:50:3c:59:32: 4e:94:09:b5:6e:4f:bd:9c:c0:fa:5b:04:09:74:46: ca:cf:c9:3a:9b:53:81:5d:2f:de:4d:59:f2:2b:ba: bb:3e:f1:61:2a:f2:ef:f0:ed:2c:46:42:b5:33:e9: 85:64:90:26:25:fa:a3:ca:4b:96:db:c4:8d:4d:0e: 1c:2b:41:9b:03:7b:5d:8b:5f:9b:59:8e:fd:02:da: b9:e1:30:7c:2f:94:82:15:40:22:78:42:33:15:40: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:34:36:BA:06:DD:11:62:32:84:8A:CA:20:7F:44:76:33:9E:A1:28 X509v3 Authority Key Identifier: keyid:F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a880::/44 Signature Algorithm: sha256WithRSAEncryption 7b:f1:ac:34:0a:84:6d:49:b4:12:d4:5c:20:3c:5f:a0:3f:eb: 46:d5:d9:52:3e:ce:27:2e:d0:d6:b2:89:55:f8:74:ac:d0:57: f6:b1:0d:41:d3:1a:aa:70:bf:8c:d5:ea:5d:df:58:1d:93:f1: 52:bc:b2:1c:f2:9d:e2:b2:ab:eb:26:5d:fb:fb:49:2c:77:e1: 78:79:75:28:df:e6:e1:11:6b:75:59:87:1e:f4:cf:11:6a:85: 0f:14:5c:36:f6:60:e4:8d:12:54:13:7e:04:54:31:09:0d:81: f7:43:02:c8:88:ac:70:3f:f7:6f:d6:86:14:51:b8:ac:0c:b7: ab:07:74:08:25:4c:29:7a:84:f2:b8:4d:74:23:17:c1:19:bf: f9:9b:da:73:99:da:08:d1:f1:36:5d:1e:1a:67:8e:5d:f5:d2: 7c:0d:0e:a7:5f:c3:50:61:de:65:c7:07:8a:4a:bc:4e:14:4e: 0e:8a:85:a7:bc:75:c0:3d:34:cd:1f:07:2a:76:ba:11:c9:30: 80:50:81:f6:e6:b8:c1:55:43:7d:c3:3b:3c:6f:51:c7:a0:fd: 60:0e:df:44:60:28:6e:15:b0:7d:7c:94:a0:71:70:c9:a5:12: cf:9b:c2:c3:34:63:57:0d:0b:cf:eb:3e:51:b1:67:7d:97:5c: 0b:ca:14:39 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIULZjtpB0T0EPNlmF0mzqG9/RIYyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCODM4RjBDQURFRkUxMkIzQ0RCM0Y2REY0REIzNkVG REZDNjgzOTAeFw0yNTAxMDgxMTAyNDNaFw0yNjAxMDcxMTA3NDNaMDMxMTAvBgNV BAMTKEIxMzQzNkJBMDZERDExNjIzMjg0OEFDQTIwN0Y0NDc2MzM5RUExMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZse9jrXzU1Wrg6JRCxcEGlqF1 2pI9BA5G2RIUZGMi5boEolJFsu5yXZVy9qzpYluLYRDh8QCR4CcMoi40wJKX/20M 423sE2NIghR7Lc5Q+T0vBzpCOd8loHl+YW3J9+7HVF6Ywi4jPkngetKovUq4CE16 7aXUsB7Tmf/JYrCKcGOY0Ep/N4I/6buF/2jd7oCy3wXMAsEkzxGqtM3JGJecUDxZ Mk6UCbVuT72cwPpbBAl0RsrPyTqbU4FdL95NWfIrurs+8WEq8u/w7SxGQrUz6YVk kCYl+qPKS5bbxI1NDhwrQZsDe12LX5tZjv0C2rnhMHwvlIIVQCJ4QjMVQN0vAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUsTQ2ugbdEWIyhIrKIH9EdjOeoSgwHwYDVR0j BBgwFoAU8rg48Mre/hKzzbP2302zbv38aDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvMi9GMkI4MzhGMENB REVGRTEyQjNDREIzRjZERjREQjM2RUZERkM2ODM5LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2Ey NWM3ZC8wL0YyQjgzOEYwQ0FERUZFMTJCM0NEQjNGNkRGNERCMzZFRkRGQzY4Mzku Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz ZDU4MzZmZjFiMjkvMi8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzgzODMwM2EzYTJm MzQzNDJkMzQzNDIwM2QzZTIwMzUzMzMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoKYESogDAN BgkqhkiG9w0BAQsFAAOCAQEAe/GsNAqEbUm0EtRcIDxfoD/rRtXZUj7OJy7Q1rKJ Vfh0rNBX9rENQdMaqnC/jNXqXd9YHZPxUryyHPKd4rKr6yZd+/tJLHfheHl1KN/m 4RFrdVmHHvTPEWqFDxRcNvZg5I0SVBN+BFQxCQ2B90MCyIiscD/3b9aGFFG4rAy3 qwd0CCVMKXqE8rhNdCMXwRm/+Zvac5naCNHxNl0eGmeOXfXSfA0Op1/DUGHeZccH ikq8ThRODoqFp7x1wD00zR8HKna6EckwgFCB9ua4wVVDfcM7PG9Rx6D9YA7fRGAo bhWwfXyUoHFwyaUSz5vCwzRjVw0Lz+s+UbFnfZdcC8oUOQ== -----END CERTIFICATE-----Generated at Wed Feb 5 06:59:16 2025 by rpki-client