$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: SAH1Jd1WpIWxTy6kW82v+JcwHdHdc9D98eH+UtKKb8M= Subject key identifier: AF:8C:F4:42:E6:4D:2F:B2:A4:4A:B9:BC:88:4C:14:6C:21:8B:02:18 Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Certificate serial: 038647748D39FD576DBCEA008108DA673608BB49 Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa Signing time: Thu 26 Jun 2025 12:56:06 +0000 ROA not before: Thu 26 Jun 2025 12:51:06 +0000 ROA not after: Thu 25 Jun 2026 12:56:06 +0000 asID: 396968 IP address blocks: 2a0f:6287:fc5c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 03:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:86:47:74:8d:39:fd:57:6d:bc:ea:00:81:08:da:67:36:08:bb:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Validity Not Before: Jun 26 12:51:06 2025 GMT Not After : Jun 25 12:56:06 2026 GMT Subject: CN=AF8CF442E64D2FB2A44AB9BC884C146C218B0218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:9a:31:fd:26:ae:5b:68:8c:30:03:00:13: 04:40:01:32:f0:ec:89:8c:27:20:0b:a0:2f:17:e2: 5e:62:5d:69:21:bc:87:96:67:45:76:7b:66:9d:22: 49:30:bf:3d:47:16:aa:77:a0:9a:cb:4d:3f:85:73: 82:64:6d:62:c9:6f:5a:a2:ea:d0:01:95:b6:b1:d4: 3b:ae:aa:45:41:d8:4c:e7:89:34:54:a1:99:20:2a: 3c:29:2e:5b:9a:16:93:92:ec:c1:da:0d:ab:f7:ac: 9e:90:01:a1:ef:49:87:ae:3e:4c:ec:aa:2f:39:94: 1b:8a:da:82:a0:47:37:0c:ea:7c:79:04:48:e4:59: a4:05:6e:75:d3:c4:b9:b0:6e:be:92:86:87:7a:10: 00:20:2f:aa:6f:03:c2:0f:14:ea:77:ee:fa:ad:d6: a0:09:19:0f:ad:c6:ab:0c:26:1e:95:ea:80:50:89: 95:c5:cb:a7:06:1c:67:cd:77:d2:6d:cc:26:22:3b: 6f:a6:c7:4e:25:24:1b:41:dd:68:13:68:d9:6f:dc: 74:b3:81:91:53:c8:28:a8:24:ab:f7:df:03:26:e8: 6d:f9:56:06:f0:fd:13:ae:51:a2:ee:3d:bc:00:3e: 6c:e6:3c:69:ab:77:76:ab:46:70:1b:70:78:30:d0: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8C:F4:42:E6:4D:2F:B2:A4:4A:B9:BC:88:4C:14:6C:21:8B:02:18 X509v3 Authority Key Identifier: keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:fc5c::/48 Signature Algorithm: sha256WithRSAEncryption 40:a5:cb:0f:02:79:57:40:dd:0d:ef:74:e1:5d:b7:82:e7:a3: ac:44:c4:d9:22:85:33:c2:02:22:86:9f:54:21:05:03:e4:91: 59:19:e3:38:b9:74:9f:55:e8:10:91:db:88:ec:c1:f3:72:55: 58:f6:68:38:ab:87:51:ad:f3:09:39:8c:dc:e7:f9:3b:f1:a4: 17:5a:6f:14:42:0a:09:4e:23:dc:11:63:eb:73:e9:d0:94:f0: fc:67:fa:2e:68:1c:65:62:1e:66:55:ab:0a:a3:50:fb:06:19: 5a:72:f1:83:88:ee:ca:51:a4:3d:71:fe:55:0f:ef:b0:e0:d7: 1d:fe:04:4c:bf:b1:87:a7:24:9f:c0:3c:0e:86:ad:c5:89:bd: e4:80:2f:29:ee:cc:2a:59:34:66:20:54:c7:38:04:44:d1:c3: d7:71:52:69:c6:6b:f3:24:06:6a:6a:9e:cd:f8:7d:6f:8d:58: 35:e3:c4:7b:ef:b0:a4:98:fd:fd:19:0e:d1:eb:18:d8:09:34: 53:4d:bc:51:01:7b:0b:24:30:25:50:ce:8e:44:61:d7:b9:20: 2b:c0:e2:92:3c:90:84:6d:f4:5d:da:f9:6a:0c:01:e6:fa:f8: c8:1b:9c:5c:10:09:b2:d1:f6:d5:3b:88:ca:22:63:93:36:65: 39:e4:d6:8e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUA4ZHdI05/VdtvOoAgQjaZzYIu0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF RTI5QThFNzAeFw0yNTA2MjYxMjUxMDZaFw0yNjA2MjUxMjU2MDZaMDMxMTAvBgNV BAMTKEFGOENGNDQyRTY0RDJGQjJBNDRBQjlCQzg4NEMxNDZDMjE4QjAyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODZox/SauW2iMMAMAEwRAATLw 7ImMJyALoC8X4l5iXWkhvIeWZ0V2e2adIkkwvz1HFqp3oJrLTT+Fc4JkbWLJb1qi 6tABlbax1DuuqkVB2EzniTRUoZkgKjwpLluaFpOS7MHaDav3rJ6QAaHvSYeuPkzs qi85lBuK2oKgRzcM6nx5BEjkWaQFbnXTxLmwbr6Shod6EAAgL6pvA8IPFOp37vqt 1qAJGQ+txqsMJh6V6oBQiZXFy6cGHGfNd9JtzCYiO2+mx04lJBtB3WgTaNlv3HSz gZFTyCioJKv33wMm6G35Vgbw/ROuUaLuPbwAPmzmPGmrd3arRnAbcHgw0B/vAgMB AAGjggJqMIICZjAdBgNVHQ4EFgQUr4z0QuZNL7KkSrm8iEwUbCGLAhgwHwYDVR0j BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4 OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjMzNTYzM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/xc MA0GCSqGSIb3DQEBCwUAA4IBAQBApcsPAnlXQN0N73ThXbeC56OsRMTZIoUzwgIi hp9UIQUD5JFZGeM4uXSfVegQkduI7MHzclVY9mg4q4dRrfMJOYzc5/k78aQXWm8U QgoJTiPcEWPrc+nQlPD8Z/ouaBxlYh5mVasKo1D7BhlacvGDiO7KUaQ9cf5VD++w 4Ncd/gRMv7GHpySfwDwOhq3Fib3kgC8p7swqWTRmIFTHOARE0cPXcVJpxmvzJAZq ap7N+H1vjVg148R777CkmP39GQ7R6xjYCTRTTbxRAXsLJDAlUM6ORGHXuSArwOKS PJCEbfRd2vlqDAHm+vjIG5xcEAmy0fbVO4jKImOTNmU55NaO -----END CERTIFICATE-----Generated at Tue Jul 1 18:39:05 2025 by rpki-client