$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666333383a3a2f34382d3438203d3e203136393039.roa File: 326130663a363238373a666333383a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: AIWYzhFqCbUHSS52g6wHYHy8N8QytulCNxJ+L1bmNw8= Subject key identifier: DE:0E:86:9B:C7:BE:37:49:C3:A8:3A:4B:9A:47:80:45:E8:21:08:E3 Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Certificate serial: 475360BA1F995BFA44C47696AA05E0FF586FFF90 Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666333383a3a2f34382d3438203d3e203136393039.roa Signing time: Thu 26 Jun 2025 12:10:58 +0000 ROA not before: Thu 26 Jun 2025 12:05:58 +0000 ROA not after: Thu 25 Jun 2026 12:10:58 +0000 asID: 16909 IP address blocks: 2a0f:6287:fc38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 03:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:53:60:ba:1f:99:5b:fa:44:c4:76:96:aa:05:e0:ff:58:6f:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Validity Not Before: Jun 26 12:05:58 2025 GMT Not After : Jun 25 12:10:58 2026 GMT Subject: CN=DE0E869BC7BE3749C3A83A4B9A478045E82108E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:63:b4:0a:03:b6:2e:54:30:65:cb:9c:37: 7d:95:b8:12:92:a2:a0:48:45:2a:03:cf:03:b7:1e: 53:82:21:3e:bc:be:26:ad:4a:04:09:ee:9e:09:14: f7:a0:51:fe:52:f7:9c:88:81:c7:51:58:4c:97:44: 1e:75:fa:63:42:67:4e:73:40:fb:72:d3:a5:69:ca: 94:2f:67:53:20:64:72:27:6d:b4:be:c6:90:15:71: e2:07:c8:ac:8e:ea:43:14:11:22:45:4b:7d:db:cd: 85:03:92:ff:d7:cc:4a:eb:c1:28:08:45:35:1b:90: 73:4e:f7:12:92:0f:a4:1f:94:28:57:84:4d:aa:aa: 0d:81:e9:6b:50:6b:51:72:05:83:74:7a:b3:12:0d: 2b:e9:21:70:08:a3:69:ce:d9:07:3d:0b:9b:22:cb: b6:24:b9:d1:a2:3a:79:9d:17:15:f2:db:46:6c:c4: 72:ee:69:96:ef:2e:8b:d1:c1:a2:64:71:28:6a:b6: 4f:96:32:69:e8:49:6e:16:98:5d:03:9c:31:5b:2b: 08:34:84:2d:e3:d7:65:33:55:3f:00:13:84:53:56: cc:60:0e:c1:3a:e6:c6:f6:74:a8:4d:d2:80:df:cd: 72:80:cc:aa:ce:8e:c2:c5:31:75:9f:6f:75:55:c5: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0E:86:9B:C7:BE:37:49:C3:A8:3A:4B:9A:47:80:45:E8:21:08:E3 X509v3 Authority Key Identifier: keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666333383a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:fc38::/48 Signature Algorithm: sha256WithRSAEncryption bb:68:e0:63:56:e8:1b:20:6f:2e:f2:d2:39:e3:58:b3:6f:cc: 61:e7:0a:be:c2:12:4e:2f:ef:39:dd:d4:c3:f5:ce:4f:9c:a8: 1a:f7:5b:ff:9e:06:e5:ef:b9:4a:42:31:10:89:94:80:16:0e: 38:d7:4e:33:2f:08:a6:83:54:d2:f6:02:ad:79:fd:55:e2:4b: 1a:1d:9e:e2:d5:53:88:4a:c3:ee:3e:a4:5d:3a:9a:ac:6a:76: 8a:9a:44:f5:a1:19:d0:ef:b9:81:85:ca:4a:68:58:e5:44:fa: cc:32:12:de:24:62:c6:67:ff:01:b8:fb:97:72:7e:b1:d2:5c: ab:60:78:30:76:18:43:10:23:b7:4c:3b:e3:72:7b:29:4a:e3: 28:a7:95:1d:97:54:05:5a:59:2c:d3:0f:40:37:72:6a:52:b5: 1d:93:ee:02:de:81:b5:79:07:8c:0d:6f:db:b0:6e:7a:ed:7c: 94:3a:43:9c:8c:ce:a5:a1:c5:85:80:91:cb:8e:d4:d2:de:10: 22:91:21:80:a4:b6:26:8e:3a:c2:38:88:35:a1:92:c7:45:67: c8:09:0a:d1:f8:2e:bc:ac:ab:46:ee:b7:8c:7d:3b:b6:39:b9: 4d:4b:a2:9c:a5:5d:49:34:6b:9c:94:1d:c8:af:f7:66:92:2a: 0d:1f:2f:1c -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUR1Nguh+ZW/pExHaWqgXg/1hv/5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF RTI5QThFNzAeFw0yNTA2MjYxMjA1NThaFw0yNjA2MjUxMjEwNThaMDMxMTAvBgNV BAMTKERFMEU4NjlCQzdCRTM3NDlDM0E4M0E0QjlBNDc4MDQ1RTgyMTA4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5LGO0CgO2LlQwZcucN32VuBKS oqBIRSoDzwO3HlOCIT68viatSgQJ7p4JFPegUf5S95yIgcdRWEyXRB51+mNCZ05z QPty06VpypQvZ1MgZHInbbS+xpAVceIHyKyO6kMUESJFS33bzYUDkv/XzErrwSgI RTUbkHNO9xKSD6QflChXhE2qqg2B6WtQa1FyBYN0erMSDSvpIXAIo2nO2Qc9C5si y7YkudGiOnmdFxXy20ZsxHLuaZbvLovRwaJkcShqtk+WMmnoSW4WmF0DnDFbKwg0 hC3j12UzVT8AE4RTVsxgDsE65sb2dKhN0oDfzXKAzKrOjsLFMXWfb3VVxb41AgMB AAGjggJoMIICZDAdBgNVHQ4EFgQU3g6Gm8e+N0nDqDpLmkeAReghCOMwHwYDVR0j BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4 OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjMzMzM4M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPYof8ODAN BgkqhkiG9w0BAQsFAAOCAQEAu2jgY1boGyBvLvLSOeNYs2/MYecKvsISTi/vOd3U w/XOT5yoGvdb/54G5e+5SkIxEImUgBYOONdOMy8IpoNU0vYCrXn9VeJLGh2e4tVT iErD7j6kXTqarGp2ippE9aEZ0O+5gYXKSmhY5UT6zDIS3iRixmf/Abj7l3J+sdJc q2B4MHYYQxAjt0w743J7KUrjKKeVHZdUBVpZLNMPQDdyalK1HZPuAt6BtXkHjA1v 27Bueu18lDpDnIzOpaHFhYCRy47U0t4QIpEhgKS2Jo46wjiINaGSx0VnyAkK0fgu vKyrRu63jH07tjm5TUuinKVdSTRrnJQdyK/3ZpIqDR8vHA== -----END CERTIFICATE-----Generated at Tue Jul 1 16:09:56 2025 by rpki-client