$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa File: 326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: jhOULBLoLktsDms2c4IAN3XGzeDwgOQrTcgpGo/c7XM= Subject key identifier: 4A:BB:BE:DC:82:7F:0B:26:5A:99:12:88:20:5A:2E:71:86:AE:CD:5C Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Certificate serial: 319E1A55E79E2F50073FD782B5E0E9BDAB8BE45A Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa Signing time: Thu 26 Jun 2025 12:10:56 +0000 ROA not before: Thu 26 Jun 2025 12:05:56 +0000 ROA not after: Thu 25 Jun 2026 12:10:56 +0000 asID: 16909 IP address blocks: 2a0f:6287:f7f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 03:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9e:1a:55:e7:9e:2f:50:07:3f:d7:82:b5:e0:e9:bd:ab:8b:e4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Validity Not Before: Jun 26 12:05:56 2025 GMT Not After : Jun 25 12:10:56 2026 GMT Subject: CN=4ABBBEDC827F0B265A991288205A2E7186AECD5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:4e:99:61:9e:3f:94:85:14:92:d5:8c:46: cd:04:28:c6:2c:b5:91:d8:23:e3:41:95:f8:8d:f7: 7c:b8:29:ea:69:73:a8:d9:b5:31:70:1d:f2:68:59: 8e:06:01:a0:73:6c:36:f9:01:24:ef:ff:ef:fc:ca: 14:5b:38:bc:b2:03:e1:29:95:c7:16:29:c0:7d:23: 26:50:fa:0a:66:50:a8:c9:f3:3a:72:b9:5f:7e:1d: eb:2c:52:67:44:86:62:06:73:c1:55:f9:bf:75:b3: 8c:2b:d5:08:5c:c4:cb:6e:65:05:80:6b:86:92:2b: 29:59:ca:17:ce:95:0f:99:5f:90:34:cf:2c:74:cf: 7c:53:17:ce:2f:35:1a:c4:c5:b2:d5:65:86:5b:b3: a1:96:df:55:40:63:ef:e3:28:f1:7d:25:22:81:da: 59:25:27:bf:18:57:b9:a9:aa:a1:a5:53:f1:54:19: 66:4b:e3:51:2a:fa:8c:2f:b5:b6:6c:7a:ba:13:24: 50:e0:52:38:5f:4d:c4:59:64:40:d2:f4:7c:42:af: a0:3d:da:b1:12:b7:59:38:68:5a:29:84:cb:42:36: 59:11:ec:f9:36:d8:17:99:7c:2b:79:fd:66:58:a6: 8d:99:b8:fe:76:38:c7:cf:3e:9c:ce:fe:22:45:9e: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BB:BE:DC:82:7F:0B:26:5A:99:12:88:20:5A:2E:71:86:AE:CD:5C X509v3 Authority Key Identifier: keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:f7f0::/48 Signature Algorithm: sha256WithRSAEncryption 26:b7:3c:9d:b9:ba:6a:ed:d8:03:9a:e6:21:92:c0:14:27:cb: a4:a9:81:ad:66:c7:7b:96:71:70:9e:ac:5d:c4:9f:88:7c:7f: 25:98:c8:36:50:f0:68:fc:f5:fc:89:73:11:04:5b:a3:32:4a: a9:28:da:82:1d:0e:2b:11:15:d0:34:0f:46:58:95:f2:60:8f: a3:a7:d9:b4:5f:1d:22:8a:d6:96:47:95:db:95:47:a5:e3:62: 07:3a:51:a3:44:a3:6d:07:31:9d:c0:b6:26:e1:8a:30:db:93: b6:d0:ef:f0:6f:b0:e1:21:bd:c4:de:36:9c:36:30:96:cb:a3: ec:2a:28:ca:46:0c:cf:bc:95:ce:9f:78:ea:7e:52:e2:14:5f: 7f:57:61:01:fe:3b:3e:02:c4:08:ed:29:48:71:02:58:13:56: 6b:19:44:da:f4:a6:a1:ce:ac:0a:0b:5a:4c:50:ad:14:01:b9: 5c:22:60:df:65:21:27:cd:9d:05:88:e0:3a:1d:11:7e:f4:05: e6:8a:91:db:b3:54:7e:7c:51:65:36:55:8d:ff:d5:be:ff:2a: a0:7c:14:a9:1b:ee:1a:92:7b:49:51:16:a3:58:df:ce:22:b1: b3:7a:c0:7a:9b:4e:7f:8d:3f:7e:d0:0a:7c:d8:09:4c:3d:b2: 46:95:8c:87 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUMZ4aVeeeL1AHP9eCteDpvauL5FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF RTI5QThFNzAeFw0yNTA2MjYxMjA1NTZaFw0yNjA2MjUxMjEwNTZaMDMxMTAvBgNV BAMTKDRBQkJCRURDODI3RjBCMjY1QTk5MTI4ODIwNUEyRTcxODZBRUNENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9k6ZYZ4/lIUUktWMRs0EKMYs tZHYI+NBlfiN93y4Keppc6jZtTFwHfJoWY4GAaBzbDb5ASTv/+/8yhRbOLyyA+Ep lccWKcB9IyZQ+gpmUKjJ8zpyuV9+HessUmdEhmIGc8FV+b91s4wr1QhcxMtuZQWA a4aSKylZyhfOlQ+ZX5A0zyx0z3xTF84vNRrExbLVZYZbs6GW31VAY+/jKPF9JSKB 2lklJ78YV7mpqqGlU/FUGWZL41Eq+owvtbZseroTJFDgUjhfTcRZZEDS9HxCr6A9 2rESt1k4aFophMtCNlkR7Pk22BeZfCt5/WZYpo2ZuP52OMfPPpzO/iJFnhQ1AgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUSru+3IJ/CyZamRKIIFoucYauzVwwHwYDVR0j BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4 OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2Mzc2NjMwM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPYof38DAN BgkqhkiG9w0BAQsFAAOCAQEAJrc8nbm6au3YA5rmIZLAFCfLpKmBrWbHe5ZxcJ6s XcSfiHx/JZjINlDwaPz1/IlzEQRbozJKqSjagh0OKxEV0DQPRliV8mCPo6fZtF8d IorWlkeV25VHpeNiBzpRo0SjbQcxncC2JuGKMNuTttDv8G+w4SG9xN42nDYwlsuj 7CooykYMz7yVzp946n5S4hRff1dhAf47PgLECO0pSHECWBNWaxlE2vSmoc6sCgta TFCtFAG5XCJg32UhJ82dBYjgOh0RfvQF5oqR27NUfnxRZTZVjf/Vvv8qoHwUqRvu GpJ7SVEWo1jfziKxs3rAeptOf40/ftAKfNgJTD2yRpWMhw== -----END CERTIFICATE-----Generated at Tue Jul 1 16:46:35 2025 by rpki-client