$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (raw, json) Hash identifier: Cv4+F1ln272U03efG/5t3VQladOvMl7nBetVBj5s4zE= Subject key identifier: EB:51:DA:44:E1:4D:EF:1D:D1:B5:D1:94:F6:04:73:19:B8:6D:F3:E4 Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA Certificate serial: 1A3896CB656F39F820D299DF912A77ED0C2FCEB8 Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa Signing time: Mon 27 Jan 2025 12:14:13 +0000 ROA not before: Mon 27 Jan 2025 12:09:13 +0000 ROA not after: Mon 26 Jan 2026 12:14:13 +0000 asID: 211380 IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 06:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:38:96:cb:65:6f:39:f8:20:d2:99:df:91:2a:77:ed:0c:2f:ce:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892843788777A43273322096510EA10880E7E5EA Validity Not Before: Jan 27 12:09:13 2025 GMT Not After : Jan 26 12:14:13 2026 GMT Subject: CN=EB51DA44E14DEF1DD1B5D194F6047319B86DF3E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:62:00:94:d6:46:db:35:31:91:a3:21:b8:12: 5c:58:34:89:a5:1e:45:64:79:7a:61:41:ed:50:42: ca:40:30:4e:33:6a:b4:24:f7:a0:bc:41:a5:bd:ed: 41:4c:f1:1d:4b:85:8c:f4:7b:2f:ed:f7:94:1d:16: 12:26:bb:d7:67:d6:2d:ff:11:8f:7f:87:d5:54:e5: 70:9b:06:17:d2:8c:63:69:6b:c3:8e:69:e5:eb:9a: 04:1d:6e:75:59:1f:f5:bd:41:30:4c:61:7a:95:71: de:90:dd:77:d3:ea:d9:10:41:3b:38:15:8b:a0:06: e5:5b:43:36:fd:08:48:f3:59:cb:e4:ba:fa:76:9a: ed:22:6f:32:55:19:09:c7:31:07:1d:bc:ed:0b:3f: f4:5d:73:8a:ff:61:2f:b5:2d:ae:15:9f:a0:e4:4f: fc:18:d8:fd:ef:38:e7:34:88:9b:86:7f:95:56:d8: d9:59:a1:29:f0:56:05:0c:3b:4f:a5:69:46:06:67: ba:9b:84:23:7b:03:88:67:51:55:44:92:e5:c6:3b: ca:b0:09:1e:73:3a:fa:24:50:27:cf:d9:9b:36:bf: 87:e0:55:cc:6e:eb:d7:e8:3e:2a:b9:45:b7:9f:52: 80:76:45:5c:91:0c:bd:ec:18:08:46:22:1e:5d:43: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:51:DA:44:E1:4D:EF:1D:D1:B5:D1:94:F6:04:73:19:B8:6D:F3:E4 X509v3 Authority Key Identifier: keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0:ffee::/48 Signature Algorithm: sha256WithRSAEncryption 8c:f7:eb:50:8f:51:c5:91:31:1e:ff:02:7f:58:e2:5f:69:43: bb:cf:76:7b:15:b7:e7:e4:c4:0d:ca:ce:ca:1c:90:5e:ee:41: ae:4f:d5:bb:c0:b7:f8:5f:b7:73:16:ac:40:a1:ea:4f:11:06: c6:7e:31:6e:59:08:b9:16:ee:f8:6c:16:b3:74:cd:d8:fc:21: 0c:bb:37:ff:7b:55:69:d4:20:1e:84:c6:12:6e:20:56:72:d9: 16:a5:a3:ce:bf:d9:93:d6:ff:48:19:01:42:fb:c5:3f:21:4e: 59:88:34:c5:5c:9f:5c:07:ca:85:39:b1:57:e5:2e:47:50:d8: a5:af:39:5e:b0:e8:90:04:c7:80:26:e4:32:49:a0:2d:c5:f8: f3:93:e2:2e:8d:31:4a:98:51:a6:ed:be:25:d3:86:14:50:ae: bf:98:79:7e:de:77:ac:74:35:d0:c3:0e:d4:71:80:bf:b5:e2: ea:2a:77:bd:75:32:b9:76:13:72:a4:44:a6:ac:9e:41:a0:de: f6:02:27:0d:86:3d:de:80:ff:d3:b7:53:e6:9f:0c:fb:fd:e6: f5:3c:9c:2f:2e:1e:a1:c3:b9:35:b7:e2:69:3a:ab:cb:dd:fc: aa:67:3f:f9:e7:3c:14:8a:d3:f0:84:83:51:74:62:39:96:54: 41:18:68:3d -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUGjiWy2VvOfgg0pnfkSp37QwvzrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4 MEU3RTVFQTAeFw0yNTAxMjcxMjA5MTNaFw0yNjAxMjYxMjE0MTNaMDMxMTAvBgNV BAMTKEVCNTFEQTQ0RTE0REVGMUREMUI1RDE5NEY2MDQ3MzE5Qjg2REYzRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvYgCU1kbbNTGRoyG4ElxYNIml HkVkeXphQe1QQspAME4zarQk96C8QaW97UFM8R1LhYz0ey/t95QdFhImu9dn1i3/ EY9/h9VU5XCbBhfSjGNpa8OOaeXrmgQdbnVZH/W9QTBMYXqVcd6Q3XfT6tkQQTs4 FYugBuVbQzb9CEjzWcvkuvp2mu0ibzJVGQnHMQcdvO0LP/Rdc4r/YS+1La4Vn6Dk T/wY2P3vOOc0iJuGf5VW2NlZoSnwVgUMO0+laUYGZ7qbhCN7A4hnUVVEkuXGO8qw CR5zOvokUCfP2Zs2v4fgVcxu69foPiq5RbefUoB2RVyRDL3sGAhGIh5dQ/ZHAgMB AAGjggJqMIICZjAdBgNVHQ4EFgQU61HaROFN7x3RtdGU9gRzGbht8+QwHwYDVR0j BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3 NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzIzMTMxMzMzODMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u MA0GCSqGSIb3DQEBCwUAA4IBAQCM9+tQj1HFkTEe/wJ/WOJfaUO7z3Z7Fbfn5MQN ys7KHJBe7kGuT9W7wLf4X7dzFqxAoepPEQbGfjFuWQi5Fu74bBazdM3Y/CEMuzf/ e1Vp1CAehMYSbiBWctkWpaPOv9mT1v9IGQFC+8U/IU5ZiDTFXJ9cB8qFObFX5S5H UNilrzlesOiQBMeAJuQySaAtxfjzk+IujTFKmFGm7b4l04YUUK6/mHl+3nesdDXQ ww7UcYC/teLqKne9dTK5dhNypESmrJ5BoN72AicNhj3egP/Tt1Pmnwz7/eb1PJwv Lh6hw7k1t+JpOqvL3fyqZz/55zwUitPwhINRdGI5llRBGGg9 -----END CERTIFICATE-----Generated at Mon Apr 28 18:01:32 2025 by rpki-client