$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a326330303a3a2f33382d3438203d3e20323134323233.roa File: 326130623a346530373a326330303a3a2f33382d3438203d3e20323134323233.roa (raw, json) Hash identifier: B9eU0cDJ6cxq+3+wLFYEvsc+IiiVEF9AUIfop0K+RRU= Subject key identifier: E8:00:D7:E0:8D:BA:2A:FC:91:BF:26:D0:BF:3B:6B:46:95:49:7C:7A Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 6D17EADAD44DA8114A429C97CD99ADFD038AF1A8 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a326330303a3a2f33382d3438203d3e20323134323233.roa Signing time: Sun 29 Jun 2025 21:14:25 +0000 ROA not before: Sun 29 Jun 2025 21:09:25 +0000 ROA not after: Sun 28 Jun 2026 21:14:25 +0000 asID: 214223 IP address blocks: 2a0b:4e07:2c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:17:ea:da:d4:4d:a8:11:4a:42:9c:97:cd:99:ad:fd:03:8a:f1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 29 21:09:25 2025 GMT Not After : Jun 28 21:14:25 2026 GMT Subject: CN=E800D7E08DBA2AFC91BF26D0BF3B6B4695497C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:28:ac:39:a7:f9:28:48:cb:ca:a6:62:3c: 67:10:6b:ca:a6:66:d2:be:9e:00:0c:b0:68:43:77: c7:69:d9:af:47:70:fc:94:a7:16:8e:97:3e:c0:47: 65:a2:5f:d0:69:cb:fa:3f:36:99:67:7e:35:90:3c: 4f:52:da:0d:9f:13:8d:8a:8c:d3:dd:eb:7e:cc:c5: 32:81:7d:18:26:ea:c9:cc:d3:b4:27:a1:32:62:46: df:29:c4:e9:96:d3:8b:fe:da:f8:49:32:23:cc:3c: b3:11:09:80:47:c8:f7:04:f0:b4:e5:0c:06:ba:6b: 3f:10:de:be:7d:1c:12:11:95:5f:4b:fe:61:52:f6: bb:47:8a:ab:fe:b8:b7:17:30:c8:bb:c5:b0:31:81: a6:c5:3f:fd:43:b9:5d:65:68:4f:06:48:4c:83:96: 5b:4e:72:f6:b1:2f:03:11:5f:19:00:fa:04:34:d2: 5c:d6:2c:72:bf:99:73:c8:eb:e5:1d:03:32:f9:12: cd:a4:e4:c1:88:41:e9:89:5d:4b:4f:13:e9:6b:c0: ef:d0:7e:fc:b3:3d:b9:84:ff:61:fe:18:9d:8a:1e: 65:f9:55:8e:5c:b8:c3:8e:61:a0:d3:97:6c:98:ce: d4:62:36:b4:96:62:46:a3:10:54:ba:e8:49:cb:3d: 87:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:00:D7:E0:8D:BA:2A:FC:91:BF:26:D0:BF:3B:6B:46:95:49:7C:7A X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a326330303a3a2f33382d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2c00::/38 Signature Algorithm: sha256WithRSAEncryption 8a:a9:e0:d6:6e:a8:02:c1:63:ce:4a:7c:e4:52:3b:9d:9b:cc: c2:a2:4c:3c:7d:b6:89:aa:64:28:d5:7f:45:46:68:3a:98:eb: 84:e3:70:42:f4:9d:40:a8:b6:09:a8:93:24:f6:73:c0:fa:b8: 86:53:b1:c9:75:eb:b7:9f:f3:7b:74:9f:41:28:34:72:5f:67: c5:6d:ba:30:43:d7:5c:52:f7:d4:1a:b4:87:29:39:99:54:94: 91:50:63:84:c2:b5:19:4d:bf:09:c8:30:13:6b:80:8d:db:64: fe:32:20:af:d2:16:e4:d5:bf:f7:b0:42:08:f6:0d:c7:fb:83: 62:ba:4e:e3:e8:23:c2:7e:01:87:a5:44:24:1a:67:e0:1c:e7: f8:5b:4f:1d:33:f2:ba:01:bb:72:73:24:a5:e7:fd:e6:18:ed: 86:3d:72:04:9a:56:f9:fa:b6:32:59:40:5a:6d:f4:38:6b:c8: d2:b5:29:3d:b2:f6:c2:1f:e8:66:f5:90:17:c9:3d:db:ef:90: 7c:fd:95:84:fe:a7:26:9e:0d:99:9b:52:fb:b3:91:7f:d9:74: 3b:fe:ee:72:c8:cb:73:f3:16:63:09:f9:84:df:50:b4:26:6b: 8a:78:ed:7f:c7:61:54:08:65:d1:d5:91:8b:c7:c2:99:27:aa: 09:92:9d:28 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUbRfq2tRNqBFKQpyXzZmt/QOK8agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA2MjkyMTA5MjVaFw0yNjA2MjgyMTE0MjVaMDMxMTAvBgNV BAMTKEU4MDBEN0UwOERCQTJBRkM5MUJGMjZEMEJGM0I2QjQ2OTU0OTdDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypyisOaf5KEjLyqZiPGcQa8qm ZtK+ngAMsGhDd8dp2a9HcPyUpxaOlz7AR2WiX9Bpy/o/NplnfjWQPE9S2g2fE42K jNPd637MxTKBfRgm6snM07QnoTJiRt8pxOmW04v+2vhJMiPMPLMRCYBHyPcE8LTl DAa6az8Q3r59HBIRlV9L/mFS9rtHiqv+uLcXMMi7xbAxgabFP/1DuV1laE8GSEyD lltOcvaxLwMRXxkA+gQ00lzWLHK/mXPI6+UdAzL5Es2k5MGIQemJXUtPE+lrwO/Q fvyzPbmE/2H+GJ2KHmX5VY5cuMOOYaDTl2yYztRiNrSWYkajEFS66EnLPYcXAgMB AAGjggJpMIICZTAdBgNVHQ4EFgQU6ADX4I26KvyRvybQvztrRpVJfHowHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMyNjMzMDMwM2EzYTJm MzMzODJkMzQzODIwM2QzZTIwMzIzMTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgtOByww DQYJKoZIhvcNAQELBQADggEBAIqp4NZuqALBY85KfORSO52bzMKiTDx9tomqZCjV f0VGaDqY64TjcEL0nUCotgmokyT2c8D6uIZTscl167ef83t0n0EoNHJfZ8VtujBD 11xS99QatIcpOZlUlJFQY4TCtRlNvwnIMBNrgI3bZP4yIK/SFuTVv/ewQgj2Dcf7 g2K6TuPoI8J+AYelRCQaZ+Ac5/hbTx0z8roBu3JzJKXn/eYY7YY9cgSaVvn6tjJZ QFpt9DhryNK1KT2y9sIf6Gb1kBfJPdvvkHz9lYT+pyaeDZmbUvuzkX/ZdDv+7nLI y3PzFmMJ+YTfULQma4p47X/HYVQIZdHVkYvHwpknqgmSnSg= -----END CERTIFICATE-----Generated at Mon Jun 30 14:36:55 2025 by rpki-client