$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa File: 326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa (raw, json) Hash identifier: IbEInVZvv3Bh6yqes3LkYu8Jx2baZTc5jXar0OkU+Yg= Subject key identifier: 1A:9F:56:15:84:25:0E:73:A9:B9:0C:FF:D8:0B:3F:A4:9F:44:E2:2B Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 774C8820865CB27FF8A6BA6633C2FFE0E7B10234 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa Signing time: Mon 30 Jun 2025 09:30:08 +0000 ROA not before: Mon 30 Jun 2025 09:25:08 +0000 ROA not after: Mon 29 Jun 2026 09:30:08 +0000 asID: 11967 IP address blocks: 2a0b:4e07:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4c:88:20:86:5c:b2:7f:f8:a6:ba:66:33:c2:ff:e0:e7:b1:02:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 30 09:25:08 2025 GMT Not After : Jun 29 09:30:08 2026 GMT Subject: CN=1A9F561584250E73A9B90CFFD80B3FA49F44E22B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:25:bf:75:64:4a:1c:ae:37:34:aa:6e:c5: b8:b1:c9:dc:31:48:8c:c8:51:e4:8f:b1:4b:97:4e: d7:09:d5:84:66:ec:f2:6d:dd:37:f7:0f:96:44:4f: 32:d0:5a:ba:55:a3:f2:7b:ec:be:92:04:c0:ee:bb: 9b:12:36:7f:5a:47:23:37:22:b7:63:5a:e2:b7:88: 8d:2d:64:e2:79:3d:db:9d:b0:a2:b5:50:67:ad:f9: 25:29:4b:b5:1e:6f:b1:32:be:db:c7:e5:81:86:d6: 28:8d:c1:43:42:1d:6a:ef:dc:43:3e:57:23:ff:0e: 22:44:1e:53:92:d4:ff:18:97:a6:58:d5:9c:b2:ef: 71:b5:da:d9:53:b3:31:55:89:cf:b3:ea:30:4b:94: 22:b6:ba:ed:b3:74:45:06:5e:ec:08:e8:39:4d:aa: 35:4e:51:cc:ab:71:c0:4f:9a:f1:65:6f:28:52:74: dc:c5:6b:52:00:ff:27:55:33:4f:5b:07:3b:e8:74: 21:00:90:1c:f1:1b:0d:4a:b9:39:4b:01:80:66:a0: aa:3d:ba:bf:7b:7c:77:d7:55:05:c1:91:f2:c2:89: 03:a4:ef:ff:6f:e2:ac:d4:e7:14:18:26:80:01:c7: 67:f7:11:d7:a2:90:82:da:09:1f:38:b8:8a:d0:01: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9F:56:15:84:25:0E:73:A9:B9:0C:FF:D8:0B:3F:A4:9F:44:E2:2B X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c1::/48 Signature Algorithm: sha256WithRSAEncryption 90:f2:9f:b2:2d:ef:5f:7e:ec:93:4a:78:4a:db:28:35:16:00: 0f:09:a4:2e:e0:69:b2:51:54:a6:dc:f0:73:80:cb:9d:bb:78: 79:11:bc:46:15:6b:2a:69:ae:a3:b0:9b:cf:59:9c:f8:f8:85: 0f:c6:28:4a:d6:7e:ce:8b:e3:69:d2:22:8b:57:b4:bf:b7:26: 34:bb:a3:de:2b:28:b8:2c:5d:b0:57:28:94:17:e8:37:72:10: f1:da:17:84:9b:0a:94:3d:73:68:7e:a0:d1:a9:05:25:c1:68: 9c:05:2f:09:bb:cb:6e:1d:26:a9:0a:0a:df:88:5c:04:ab:a5: 68:5a:4c:4a:d6:ff:1a:e9:bb:6e:c0:58:a8:da:58:51:f2:b2: f2:36:9e:21:cf:1f:f9:11:c0:ec:ed:b4:90:e9:9a:da:6a:e4: 89:da:a3:33:98:cb:76:2b:9c:b0:62:e2:99:e0:af:b9:86:e7: 16:18:58:01:40:1d:dc:9c:7a:bb:88:e1:dd:54:f0:66:ce:d3: 6d:8c:02:a8:15:f1:a3:c3:9a:24:d4:f7:67:e4:78:56:41:8e: b7:3d:58:e1:08:c4:92:9c:a4:04:fc:56:eb:53:6f:34:e3:94: e2:f4:9c:72:d0:b6:17:4d:14:8a:ab:bc:06:11:47:ed:b7:57: 22:63:24:02 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUd0yIIIZcsn/4prpmM8L/4OexAjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA2MzAwOTI1MDhaFw0yNjA2MjkwOTMwMDhaMDMxMTAvBgNV BAMTKDFBOUY1NjE1ODQyNTBFNzNBOUI5MENGRkQ4MEIzRkE0OUY0NEUyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfiW/dWRKHK43NKpuxbixydwx SIzIUeSPsUuXTtcJ1YRm7PJt3Tf3D5ZETzLQWrpVo/J77L6SBMDuu5sSNn9aRyM3 IrdjWuK3iI0tZOJ5PdudsKK1UGet+SUpS7Ueb7EyvtvH5YGG1iiNwUNCHWrv3EM+ VyP/DiJEHlOS1P8Yl6ZY1Zyy73G12tlTszFVic+z6jBLlCK2uu2zdEUGXuwI6DlN qjVOUcyrccBPmvFlbyhSdNzFa1IA/ydVM09bBzvodCEAkBzxGw1KuTlLAYBmoKo9 ur97fHfXVQXBkfLCiQOk7/9v4qzU5xQYJoABx2f3EdeikILaCR84uIrQAf7rAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUGp9WFYQlDnOpuQz/2As/pJ9E4iswHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYzMzEzYTNhMmYzNDM4 MmQzNDM4MjAzZDNlMjAzMTMxMzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtOBwDBMA0GCSqG SIb3DQEBCwUAA4IBAQCQ8p+yLe9ffuyTSnhK2yg1FgAPCaQu4GmyUVSm3PBzgMud u3h5EbxGFWsqaa6jsJvPWZz4+IUPxihK1n7Oi+Np0iKLV7S/tyY0u6PeKyi4LF2w VyiUF+g3chDx2heEmwqUPXNofqDRqQUlwWicBS8Ju8tuHSapCgrfiFwEq6VoWkxK 1v8a6btuwFio2lhR8rLyNp4hzx/5EcDs7bSQ6ZraauSJ2qMzmMt2K5ywYuKZ4K+5 hucWGFgBQB3cnHq7iOHdVPBmztNtjAKoFfGjw5ok1Pdn5HhWQY63PVjhCMSSnKQE /FbrU28045Ti9Jxy0LYXTRSKq7wGEUftt1ciYyQC -----END CERTIFICATE-----Generated at Tue Nov 4 23:12:02 2025 by rpki-client