$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa File: 326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa (raw, json) Hash identifier: tZ3uWZIt3XMGWPDpulBNyAONA+j88gIy0OEKjzlHkLo= Subject key identifier: 3C:46:65:71:CB:BA:1B:FE:AD:C2:23:B1:7E:25:1C:6C:6D:2D:91:93 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 79ADE38E96D1832AC0BFC96A7F096FBC540A3766 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa Signing time: Fri 11 Apr 2025 21:11:01 +0000 ROA not before: Fri 11 Apr 2025 21:06:01 +0000 ROA not after: Fri 10 Apr 2026 21:11:01 +0000 asID: 44331 IP address blocks: 2a0b:4e07:b1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 18:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ad:e3:8e:96:d1:83:2a:c0:bf:c9:6a:7f:09:6f:bc:54:0a:37:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 11 21:06:01 2025 GMT Not After : Apr 10 21:11:01 2026 GMT Subject: CN=3C466571CBBA1BFEADC223B17E251C6C6D2D9193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:15:2b:73:c7:a7:2a:19:63:55:85:7d:47: 16:93:5b:89:6a:17:cd:6d:44:fa:bc:16:c9:47:ab: e0:a4:6f:9c:2c:84:a1:79:cd:5f:43:3f:35:71:22: e7:09:19:33:c9:c9:3f:3a:5a:9b:93:a9:d0:56:19: 0a:aa:5d:2c:5f:74:54:ad:d5:fd:a0:e8:14:d0:ea: 45:4f:60:eb:de:94:d8:57:06:7c:ac:cc:e9:0c:47: 3f:63:60:17:ee:d7:8e:42:f2:be:f4:e9:8f:c0:17: 9f:bd:ae:a4:ee:84:34:61:6f:b4:60:27:63:0c:bf: 7f:d0:a4:c7:cc:64:7f:be:35:d2:5d:4a:92:72:31: d2:e5:f1:17:c5:61:9b:d1:e7:50:cb:60:cb:af:67: fe:33:1d:33:aa:b2:be:03:b7:f2:ff:6b:3c:6e:ae: 2c:88:81:87:46:07:a5:1b:f0:f8:9a:07:d3:2e:dc: 4d:e8:1a:bc:7f:8a:93:2b:d7:21:ea:08:33:6a:cc: 03:0c:d8:09:7c:fe:58:e0:e8:7b:a7:1d:4b:cb:e8: 96:c5:02:e3:c2:37:99:dd:b5:30:f6:01:f0:10:83: dc:09:8f:64:c2:30:29:92:9f:b5:d7:44:0b:9a:76: 9d:74:56:1e:d0:7a:aa:f0:99:9b:ac:3f:29:22:25: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:65:71:CB:BA:1B:FE:AD:C2:23:B1:7E:25:1C:6C:6D:2D:91:93 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b1e::/48 Signature Algorithm: sha256WithRSAEncryption 9b:cf:e4:51:0c:39:8d:62:4d:0e:6a:4f:03:48:7d:4d:4a:0b: bb:bd:c9:e3:0d:5d:65:d0:63:0f:69:59:b9:d6:40:64:07:93: fa:94:72:ce:c6:7c:94:eb:dc:71:9f:97:b9:da:49:f1:a4:c9: 79:f1:83:44:f0:02:66:11:f0:23:46:b8:12:b3:59:82:9c:1f: 88:77:e2:5c:e0:8b:b9:9d:e9:18:01:1e:10:a4:74:07:1a:dd: e9:14:91:56:cc:50:28:60:34:87:e3:57:a9:bc:98:c6:70:02: 5c:18:e2:41:ba:ab:4a:d6:0a:d5:ec:5b:2e:ad:d5:b6:bc:69: 57:81:2e:94:e1:33:1e:29:81:d6:f2:97:c7:84:16:e9:14:ba: 87:92:01:4a:40:dd:f5:32:0c:73:37:16:f2:fa:6e:5b:8e:85: 6f:6c:1e:ae:21:b9:67:10:41:78:8b:96:e4:a4:06:df:d7:02: e0:b8:b4:24:9c:36:57:0d:ca:ac:c9:34:58:3a:e0:e2:bf:be: df:83:35:3f:17:37:8b:18:d2:40:67:1f:e5:77:42:55:8e:43: e4:0d:cb:c9:10:80:99:07:dd:fd:79:15:cf:75:8b:64:14:c7: 0c:4c:48:63:f7:b3:67:9c:40:c4:75:f3:90:cc:84:13:f4:d5: 98:03:7d:d4 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUea3jjpbRgyrAv8lqfwlvvFQKN2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA0MTEyMTA2MDFaFw0yNjA0MTAyMTExMDFaMDMxMTAvBgNV BAMTKDNDNDY2NTcxQ0JCQTFCRkVBREMyMjNCMTdFMjUxQzZDNkQyRDkxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53xUrc8enKhljVYV9RxaTW4lq F81tRPq8FslHq+Ckb5wshKF5zV9DPzVxIucJGTPJyT86WpuTqdBWGQqqXSxfdFSt 1f2g6BTQ6kVPYOvelNhXBnyszOkMRz9jYBfu145C8r706Y/AF5+9rqTuhDRhb7Rg J2MMv3/QpMfMZH++NdJdSpJyMdLl8RfFYZvR51DLYMuvZ/4zHTOqsr4Dt/L/azxu riyIgYdGB6Ub8PiaB9Mu3E3oGrx/ipMr1yHqCDNqzAMM2Al8/ljg6HunHUvL6JbF AuPCN5ndtTD2AfAQg9wJj2TCMCmSn7XXRAuadp10Vh7QeqrwmZusPykiJTgbAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUPEZlccu6G/6twiOxfiUcbG0tkZMwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYyMzE2NTNhM2EyZjM0 MzgyZDM0MzgyMDNkM2UyMDM0MzQzMzMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HCx4wDQYJ KoZIhvcNAQELBQADggEBAJvP5FEMOY1iTQ5qTwNIfU1KC7u9yeMNXWXQYw9pWbnW QGQHk/qUcs7GfJTr3HGfl7naSfGkyXnxg0TwAmYR8CNGuBKzWYKcH4h34lzgi7md 6RgBHhCkdAca3ekUkVbMUChgNIfjV6m8mMZwAlwY4kG6q0rWCtXsWy6t1ba8aVeB LpThMx4pgdbyl8eEFukUuoeSAUpA3fUyDHM3FvL6bluOhW9sHq4huWcQQXiLluSk Bt/XAuC4tCScNlcNyqzJNFg64OK/vt+DNT8XN4sY0kBnH+V3QlWOQ+QNy8kQgJkH 3f15Fc91i2QUxwxMSGP3s2ecQMR185DMhBP01ZgDfdQ= -----END CERTIFICATE-----Generated at Mon Apr 28 12:30:16 2025 by rpki-client