$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62633a3a2f34372d3438203d3e20323134303739.roa File: 326130623a346530373a62633a3a2f34372d3438203d3e20323134303739.roa (raw, json) Hash identifier: UvgL1ejjkkGV2FaAIlEGrxTG45SStp3qVZ0XgWBjkUA= Subject key identifier: 5B:7B:6F:53:E5:A1:FE:96:99:D1:EF:6E:29:50:5C:45:C1:E2:FC:D3 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1ADABF34CCC6B59AF3AA089CF307AB1B1786D217 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62633a3a2f34372d3438203d3e20323134303739.roa Signing time: Tue 06 May 2025 20:45:42 +0000 ROA not before: Tue 06 May 2025 20:40:42 +0000 ROA not after: Tue 05 May 2026 20:45:42 +0000 asID: 214079 IP address blocks: 2a0b:4e07:bc::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 20:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:da:bf:34:cc:c6:b5:9a:f3:aa:08:9c:f3:07:ab:1b:17:86:d2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: May 6 20:40:42 2025 GMT Not After : May 5 20:45:42 2026 GMT Subject: CN=5B7B6F53E5A1FE9699D1EF6E29505C45C1E2FCD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:90:4e:84:c5:88:56:99:e5:db:18:42:eb: 44:a8:f7:48:15:99:15:fe:11:da:fe:87:d3:5c:ff: 7a:3c:f7:3c:11:df:73:47:89:f3:bf:4e:3c:71:a4: 3e:f2:15:67:22:db:49:98:d2:00:59:6d:24:a9:f0: d0:b4:92:f7:30:4b:19:c0:ed:1e:08:ac:8f:16:5b: 23:51:18:5e:19:6d:76:55:70:ad:dd:c4:2d:83:c3: e1:8e:be:a4:08:24:68:cc:04:5e:2e:de:e3:16:d2: c0:09:af:02:f7:fd:d7:c7:dc:fb:28:cf:4d:bd:89: c7:7f:81:ea:b1:11:6b:e2:fc:c7:2a:2b:6d:45:8f: 49:18:be:a8:61:e3:66:a8:64:99:88:e0:96:59:84: 42:c7:2f:ed:16:52:41:70:dc:28:ed:b2:bb:c0:3e: 7a:25:89:72:53:c5:4b:73:dd:af:e4:5c:41:6e:9f: ec:9c:c0:80:18:60:80:9d:41:d2:74:3e:f4:37:44: 9a:a4:ab:da:5a:41:e6:cd:ce:d2:4e:0b:a6:0a:75: 03:d3:a9:cc:50:0f:0e:2f:8f:8c:c1:05:c5:71:30: 19:b4:9a:d7:4a:41:d5:5f:20:11:5f:50:f6:36:44: 06:2e:fc:92:a0:26:b1:40:ee:b9:12:c9:4c:b1:7c: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7B:6F:53:E5:A1:FE:96:99:D1:EF:6E:29:50:5C:45:C1:E2:FC:D3 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62633a3a2f34372d3438203d3e20323134303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:bc::/47 Signature Algorithm: sha256WithRSAEncryption 66:43:cf:02:38:ae:1b:01:51:4c:ba:1a:fc:d6:05:b1:98:2e: cf:23:5b:ad:7d:9a:fd:61:39:4e:c4:3a:ad:5e:fa:89:03:e6: 1d:ff:c3:4b:5c:ad:c5:5f:bc:2a:97:9a:fc:44:f7:5d:6f:39: 7f:9a:3f:48:7b:09:aa:a3:18:b5:90:2e:37:97:7d:0b:ce:2f: f1:22:0e:d9:ca:1e:ad:bd:5c:54:f2:1f:6c:c8:d1:d6:b8:97: 8a:6a:fd:d2:04:f1:b0:d2:2d:64:7a:66:f1:84:c5:b6:00:97: f2:d3:0b:67:ce:e3:98:d8:44:41:b9:f5:86:90:65:3a:19:e9: 44:b6:e9:33:29:3f:bc:89:16:af:e4:8a:55:c9:8f:a2:70:b5: cb:52:b8:74:f1:60:4a:4c:6c:45:64:7c:92:c0:b4:08:26:8e: 56:56:79:8f:27:d4:26:4a:22:88:fe:4c:61:fe:57:ea:ba:97: 87:5c:d2:48:7d:c7:7e:d0:1d:a4:4f:89:96:2b:f9:d6:13:9c: 08:3c:1d:31:23:ba:55:43:02:8f:13:cf:9f:e0:c0:b1:ac:f7: 55:6b:f5:27:8e:ef:3e:b2:aa:ac:b1:c6:b6:d3:b0:12:25:9e: a9:b2:41:e6:12:0f:75:4d:68:96:68:fd:0a:5f:be:b8:8e:e1: 7a:11:95:bf -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUGtq/NMzGtZrzqgic8werGxeG0hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA1MDYyMDQwNDJaFw0yNjA1MDUyMDQ1NDJaMDMxMTAvBgNV BAMTKDVCN0I2RjUzRTVBMUZFOTY5OUQxRUY2RTI5NTA1QzQ1QzFFMkZDRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOYZBOhMWIVpnl2xhC60So90gV mRX+Edr+h9Nc/3o89zwR33NHifO/TjxxpD7yFWci20mY0gBZbSSp8NC0kvcwSxnA 7R4IrI8WWyNRGF4ZbXZVcK3dxC2Dw+GOvqQIJGjMBF4u3uMW0sAJrwL3/dfH3Pso z029icd/geqxEWvi/McqK21Fj0kYvqhh42aoZJmI4JZZhELHL+0WUkFw3CjtsrvA PnoliXJTxUtz3a/kXEFun+ycwIAYYICdQdJ0PvQ3RJqkq9paQebNztJOC6YKdQPT qcxQDw4vj4zBBcVxMBm0mtdKQdVfIBFfUPY2RAYu/JKgJrFA7rkSyUyxfIqHAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUW3tvU+Wh/paZ0e9uKVBcRcHi/NMwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYyNjMzYTNhMmYzNDM3 MmQzNDM4MjAzZDNlMjAzMjMxMzQzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEqC04HALwwDQYJ KoZIhvcNAQELBQADggEBAGZDzwI4rhsBUUy6GvzWBbGYLs8jW619mv1hOU7EOq1e +okD5h3/w0tcrcVfvCqXmvxE911vOX+aP0h7CaqjGLWQLjeXfQvOL/EiDtnKHq29 XFTyH2zI0da4l4pq/dIE8bDSLWR6ZvGExbYAl/LTC2fO45jYREG59YaQZToZ6US2 6TMpP7yJFq/kilXJj6JwtctSuHTxYEpMbEVkfJLAtAgmjlZWeY8n1CZKIoj+TGH+ V+q6l4dc0kh9x37QHaRPiZYr+dYTnAg8HTEjulVDAo8Tz5/gwLGs91Vr9SeO7z6y qqyxxrbTsBIlnqmyQeYSD3VNaJZo/QpfvriO4XoRlb8= -----END CERTIFICATE-----Generated at Sun May 11 11:40:16 2025 by rpki-client