$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533303a3a2f34382d3438203d3e203136393039.roa File: 326131343a373538313a333533303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: Bd6yXBUpoPF+hYuIfFqAPjVU5fz9MqxpaV5ObqZvP6I= Subject key identifier: D5:3F:49:6A:2B:94:E7:65:25:63:92:C2:06:7A:CC:CC:5B:16:7A:56 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 5578375E5F29E202CD29DF6D21F908843CFAFAEC Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533303a3a2f34382d3438203d3e203136393039.roa Signing time: Thu 26 Jun 2025 08:52:54 +0000 ROA not before: Thu 26 Jun 2025 08:47:54 +0000 ROA not after: Thu 25 Jun 2026 08:52:54 +0000 asID: 16909 IP address blocks: 2a14:7581:3530::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:78:37:5e:5f:29:e2:02:cd:29:df:6d:21:f9:08:84:3c:fa:fa:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Jun 26 08:47:54 2025 GMT Not After : Jun 25 08:52:54 2026 GMT Subject: CN=D53F496A2B94E765256392C2067ACCCC5B167A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c5:58:f7:af:7c:c0:bc:60:ec:14:3c:ad:c7: 5b:44:de:11:1d:96:bf:06:f9:d3:d5:7d:21:06:43: 78:d7:26:12:2e:e5:b5:f1:25:a0:67:55:63:89:74: e9:cd:90:8e:9b:79:e0:e5:95:58:1a:29:20:91:21: e7:83:f9:95:32:59:3e:06:69:2d:a0:7e:b0:cd:90: d6:b7:ff:0d:76:b2:95:47:3c:08:8e:07:c2:fc:45: 2e:8c:07:a4:c8:0a:f9:42:c4:6a:d2:46:1d:4b:f2: ca:11:c4:6f:fa:0f:ce:70:3b:d8:ea:11:6c:c5:ff: 52:17:21:7b:03:7b:ea:1b:16:69:29:08:9b:25:42: f5:87:e4:39:56:11:cc:c2:6b:b1:cf:23:4e:62:96: 0a:e4:b4:9e:a1:13:c1:34:25:d8:73:bd:b6:39:81: 9c:86:62:dd:65:a6:ce:dd:80:b3:a4:08:11:21:55: 66:c4:a7:a3:3f:5c:a9:b5:f4:6e:03:a7:9e:00:b9: d1:84:94:56:23:fb:53:c6:0b:95:a4:19:5d:3c:95: 08:37:0c:bc:a1:2f:5f:e5:ab:02:ea:19:a5:a5:22: 34:3a:4b:8b:3a:4a:23:26:aa:1c:b3:4b:d8:32:2c: e5:d9:d5:bb:f6:16:38:85:d3:d6:a5:4b:3b:7f:8c: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3F:49:6A:2B:94:E7:65:25:63:92:C2:06:7A:CC:CC:5B:16:7A:56 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3530::/48 Signature Algorithm: sha256WithRSAEncryption 29:24:da:ee:63:b9:9c:5f:0f:ff:fc:08:08:c3:3a:f0:ff:27: 7b:65:a7:4e:78:58:43:c9:a6:23:1a:87:5a:2f:56:b0:eb:95: 49:dd:5e:73:4c:c5:9a:cb:6e:0a:99:a3:a2:c5:38:4b:f6:b8: 92:a4:ce:6f:81:3f:96:6a:39:11:58:7f:c2:00:91:71:37:5c: 5d:ed:c1:96:d4:81:1f:43:1a:37:c7:95:58:da:3f:f3:ba:55: 7e:af:09:74:58:57:c4:c2:16:01:ec:cb:a0:3f:e1:7a:fb:3d: 96:d2:7d:44:74:ce:ba:f3:26:2c:86:b3:f8:7b:fb:5b:96:cc: c3:e9:ff:94:a5:33:a8:6b:fd:32:a0:5c:45:37:4d:99:7f:dd: 3f:26:25:68:c6:46:3f:d0:f4:ed:93:16:86:cd:a4:90:7c:99: 35:33:40:d6:bf:b6:39:fe:27:02:42:dd:8d:d6:61:c7:af:6e: cf:5a:86:6c:82:81:93:b8:7f:d5:f4:a5:27:dc:d9:fb:9a:70: db:ee:b2:21:05:d5:14:bf:49:a4:99:cf:dd:50:3e:44:a4:a5: a9:7f:e6:99:f7:5f:48:62:c6:08:dc:b7:ad:84:f1:7e:43:83: 4e:6c:84:6c:6c:ee:21:b7:4b:1c:f2:6a:0b:ac:dc:05:7a:91: e4:30:5a:7e -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUVXg3Xl8p4gLNKd9tIfkIhDz6+uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTA2MjYwODQ3NTRaFw0yNjA2MjUwODUyNTRaMDMxMTAvBgNV BAMTKEQ1M0Y0OTZBMkI5NEU3NjUyNTYzOTJDMjA2N0FDQ0NDNUIxNjdBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPxVj3r3zAvGDsFDytx1tE3hEd lr8G+dPVfSEGQ3jXJhIu5bXxJaBnVWOJdOnNkI6beeDllVgaKSCRIeeD+ZUyWT4G aS2gfrDNkNa3/w12spVHPAiOB8L8RS6MB6TICvlCxGrSRh1L8soRxG/6D85wO9jq EWzF/1IXIXsDe+obFmkpCJslQvWH5DlWEczCa7HPI05ilgrktJ6hE8E0JdhzvbY5 gZyGYt1lps7dgLOkCBEhVWbEp6M/XKm19G4Dp54AudGElFYj+1PGC5WkGV08lQg3 DLyhL1/lqwLqGaWlIjQ6S4s6SiMmqhyzS9gyLOXZ1bv2FjiF09alSzt/jAwrAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQU1T9JaiuU52UlY5LCBnrMzFsWelYwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzMzMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE1MDAN BgkqhkiG9w0BAQsFAAOCAQEAKSTa7mO5nF8P//wICMM68P8ne2WnTnhYQ8mmIxqH Wi9WsOuVSd1ec0zFmstuCpmjosU4S/a4kqTOb4E/lmo5EVh/wgCRcTdcXe3BltSB H0MaN8eVWNo/87pVfq8JdFhXxMIWAezLoD/hevs9ltJ9RHTOuvMmLIaz+Hv7W5bM w+n/lKUzqGv9MqBcRTdNmX/dPyYlaMZGP9D07ZMWhs2kkHyZNTNA1r+2Of4nAkLd jdZhx69uz1qGbIKBk7h/1fSlJ9zZ+5pw2+6yIQXVFL9JpJnP3VA+RKSlqX/mmfdf SGLGCNy3rYTxfkODTmyEbGzuIbdLHPJqC6zcBXqR5DBafg== -----END CERTIFICATE-----Generated at Sun Jun 29 09:28:35 2025 by rpki-client