$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa File: 326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa (raw, json) Hash identifier: 90Z0Er53Pkvnex4NHNPjJE68ibxHSB+NPB1TWxanm38= Subject key identifier: 19:A2:59:A7:6E:67:5E:92:04:2C:CA:83:A6:92:41:A2:87:67:14:63 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 7030D399F6799DB75858138A941311022FBBDF59 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa Signing time: Fri 11 Apr 2025 14:28:56 +0000 ROA not before: Fri 11 Apr 2025 14:23:56 +0000 ROA not after: Fri 10 Apr 2026 14:28:56 +0000 asID: 214372 IP address blocks: 2a0b:4e07:c25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:30:d3:99:f6:79:9d:b7:58:58:13:8a:94:13:11:02:2f:bb:df:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 11 14:23:56 2025 GMT Not After : Apr 10 14:28:56 2026 GMT Subject: CN=19A259A76E675E92042CCA83A69241A287671463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:6d:bb:e5:f3:c9:b7:2a:8e:30:2e:08:0e: 1a:e6:a4:45:80:9b:82:26:06:40:34:f0:4a:b3:a7: 34:6d:60:e2:35:f8:be:1d:38:a8:02:e3:77:28:9e: ae:a6:73:3b:5d:28:6f:63:70:78:35:7b:90:cf:82: 23:1b:a1:dc:5d:c0:ae:a8:b3:39:be:b1:ef:62:76: 71:e6:09:05:12:c0:63:0e:6c:aa:ac:f5:42:7c:1d: d8:51:b7:a2:03:82:89:b1:60:98:a9:20:4f:71:90: 95:5c:35:d0:c4:b0:f0:33:57:b4:15:80:ae:66:ce: 98:1c:46:85:d2:d7:1d:d5:17:f7:a6:85:5b:7e:54: bd:47:cc:46:a8:a4:25:ae:ee:2b:ee:67:ce:c7:8c: 87:28:c9:28:71:67:eb:f6:d7:fe:df:58:2e:10:74: 98:ae:3c:ad:10:a6:0a:a7:f3:72:51:f0:9c:57:9f: 59:af:ee:49:0b:8c:aa:3c:66:41:02:14:92:2b:f3: 5c:23:0f:1f:81:cb:34:c1:21:9a:3f:fb:81:e7:3f: 26:b7:1f:ad:fd:44:cd:1f:65:c6:39:d9:6a:ff:5e: 18:ea:d9:32:d8:5d:08:4f:91:74:ff:c6:3a:14:ad: 9c:bd:fe:d5:ea:15:6c:e6:c9:73:3b:cc:a8:c8:68: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A2:59:A7:6E:67:5E:92:04:2C:CA:83:A6:92:41:A2:87:67:14:63 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c25::/48 Signature Algorithm: sha256WithRSAEncryption 8c:ca:d6:e9:7a:08:7e:f1:d2:98:51:21:58:31:d3:f5:f8:ad: 73:05:5d:3c:c2:3d:df:9c:53:01:b2:45:18:05:23:b7:4c:15: 6a:bc:c1:51:54:e0:04:24:67:4c:14:80:65:9f:57:12:0b:3c: b7:ff:05:61:18:6a:eb:6f:ef:80:70:28:08:21:7e:0b:30:57: 02:e9:33:7d:42:10:fe:06:07:18:ea:ec:d2:6a:3b:ff:22:75: 59:24:ee:95:4e:40:f6:96:89:d6:58:27:f0:b8:78:93:8e:40: ac:f1:09:f4:2a:61:25:fe:8d:ff:9c:dd:12:b2:a2:05:e3:bc: ea:0e:b4:40:7d:02:84:45:2d:0d:59:b1:2f:4c:c3:62:43:69: 97:06:f6:b0:7d:47:66:69:4b:c5:51:63:83:9c:48:94:49:bb: ba:50:07:e3:79:66:32:a2:3c:5c:e1:8b:c4:b4:ee:01:71:ef: 0b:73:28:04:67:ca:a3:27:ab:e6:b7:ed:73:5a:89:ff:d9:2e: f3:fe:26:11:5d:c7:a7:f6:aa:0f:1b:4a:cf:9f:b3:6d:3f:5f: fd:a5:85:77:99:92:d9:a0:1b:bc:90:da:ba:9f:b0:7f:d7:3c: fd:0f:c8:22:a5:92:5f:25:0e:e4:33:20:24:93:8d:44:f1:b1: 3f:46:71:ba -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUcDDTmfZ5nbdYWBOKlBMRAi+731kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA0MTExNDIzNTZaFw0yNjA0MTAxNDI4NTZaMDMxMTAvBgNV BAMTKDE5QTI1OUE3NkU2NzVFOTIwNDJDQ0E4M0E2OTI0MUEyODc2NzE0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmx2275fPJtyqOMC4IDhrmpEWA m4ImBkA08EqzpzRtYOI1+L4dOKgC43conq6mcztdKG9jcHg1e5DPgiMbodxdwK6o szm+se9idnHmCQUSwGMObKqs9UJ8HdhRt6IDgomxYJipIE9xkJVcNdDEsPAzV7QV gK5mzpgcRoXS1x3VF/emhVt+VL1HzEaopCWu7ivuZ87HjIcoyShxZ+v21/7fWC4Q dJiuPK0Qpgqn83JR8JxXn1mv7kkLjKo8ZkECFJIr81wjDx+ByzTBIZo/+4HnPya3 H639RM0fZcY52Wr/Xhjq2TLYXQhPkXT/xjoUrZy9/tXqFWzmyXM7zKjIaJirAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUGaJZp25nXpIELMqDppJBoodnFGMwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYzMzIzNTNhM2EyZjM0 MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLTgcMJTAN BgkqhkiG9w0BAQsFAAOCAQEAjMrW6XoIfvHSmFEhWDHT9fitcwVdPMI935xTAbJF GAUjt0wVarzBUVTgBCRnTBSAZZ9XEgs8t/8FYRhq62/vgHAoCCF+CzBXAukzfUIQ /gYHGOrs0mo7/yJ1WSTulU5A9paJ1lgn8Lh4k45ArPEJ9CphJf6N/5zdErKiBeO8 6g60QH0ChEUtDVmxL0zDYkNplwb2sH1HZmlLxVFjg5xIlEm7ulAH43lmMqI8XOGL xLTuAXHvC3MoBGfKoyer5rftc1qJ/9ku8/4mEV3Hp/aqDxtKz5+zbT9f/aWFd5mS 2aAbvJDaup+wf9c8/Q/IIqWSXyUO5DMgJJONRPGxP0Zxug== -----END CERTIFICATE-----Generated at Sun Apr 27 22:06:14 2025 by rpki-client