$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666366323a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a666366323a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: Lt/aSDwa+4X2NTiKNiJkdyZheQoHeyNgEKCRzjTn1Sw= Subject key identifier: 65:04:DD:BD:3D:82:82:A5:9A:70:AC:1D:A7:B0:86:85:11:A7:E8:A0 Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Certificate serial: 2548FF0512883AB171B29A1B7A368ED8AC5E3F3A Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666366323a3a2f34382d3438203d3e20333936393638.roa Signing time: Thu 26 Jun 2025 12:58:05 +0000 ROA not before: Thu 26 Jun 2025 12:53:05 +0000 ROA not after: Thu 25 Jun 2026 12:58:05 +0000 asID: 396968 IP address blocks: 2a0f:6287:fcf2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 15:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:48:ff:05:12:88:3a:b1:71:b2:9a:1b:7a:36:8e:d8:ac:5e:3f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Validity Not Before: Jun 26 12:53:05 2025 GMT Not After : Jun 25 12:58:05 2026 GMT Subject: CN=6504DDBD3D8282A59A70AC1DA7B0868511A7E8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b4:07:ec:cb:08:b2:80:57:58:c8:01:b4:a7: cd:5f:2f:0f:51:3c:90:60:29:e5:d3:52:7e:a5:5c: d8:40:f2:ee:c1:6a:03:a4:3b:25:e5:cb:0a:d2:a3: d4:0d:05:70:d0:e8:88:ee:89:49:16:40:11:d6:07: e7:f7:0a:f4:7d:71:d0:59:d7:92:0b:a7:c4:c2:a6: 9c:5d:27:d0:cd:42:47:3e:ae:4c:33:b3:60:fa:a8: 55:57:9b:02:df:30:fb:14:a3:ca:54:e6:8b:06:75: 5b:10:84:28:79:90:db:40:40:22:11:5f:dc:14:17: c5:0f:01:ae:71:89:15:de:24:8c:6c:4c:8f:b1:d9: 8f:5a:7e:01:21:88:5d:94:8b:d8:71:82:6c:ad:18: 9e:f5:d4:2d:80:c4:78:39:07:08:95:06:3b:b2:5d: 40:86:21:cb:60:d6:57:bb:87:7f:93:f5:a4:f3:5c: 28:61:5b:20:68:6e:e6:98:0d:7b:c1:37:94:50:09: d5:55:c9:35:36:a1:76:58:28:ea:1f:d5:c4:aa:68: f5:6e:7d:f9:3a:45:45:95:02:79:81:20:75:af:03: 67:96:68:bf:d9:07:4a:95:d3:40:21:cd:c5:ab:ca: 97:7b:b9:2e:32:3d:3a:a7:e2:94:4d:bd:07:99:4f: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:04:DD:BD:3D:82:82:A5:9A:70:AC:1D:A7:B0:86:85:11:A7:E8:A0 X509v3 Authority Key Identifier: keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666366323a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:fcf2::/48 Signature Algorithm: sha256WithRSAEncryption 53:eb:3e:b0:ee:96:23:3f:3e:fc:49:d8:cb:92:9e:78:93:c9: 34:ae:1f:18:89:8c:6b:9a:d1:e0:09:60:89:31:3c:83:a9:cc: aa:62:02:fd:8f:1a:a7:41:68:cf:a3:9c:ad:d2:e9:45:e0:10: 02:dd:a3:85:68:55:1e:45:26:19:b7:3f:83:c7:15:d1:30:db: ba:a9:55:37:c1:6f:17:ed:ea:4d:be:1e:50:5b:de:e5:10:e9: 6f:81:b4:0e:a6:5a:91:99:36:b6:5d:dd:a1:03:ff:ad:cf:79: 3f:40:e5:c8:0a:ae:5e:bc:aa:4e:2e:8d:cb:a3:88:46:6b:fb: 9f:65:17:3d:c6:61:51:50:68:5f:21:d7:03:53:7e:15:6e:ea: 6e:13:5e:f0:f3:81:ef:39:97:99:52:a4:03:0b:e0:26:33:43: 7d:4b:1e:a5:e0:0e:b3:fa:08:3c:f5:1e:2e:e2:30:dd:4c:19: 63:cb:c9:5e:71:f6:9d:ac:09:7a:ce:2e:2e:c6:33:b9:bf:fe: 09:dd:4e:9d:15:44:53:ae:c0:5a:75:23:b1:43:db:dd:3f:39: eb:5d:70:1c:56:1e:f4:a1:21:03:d0:8e:b8:9f:48:60:3c:ed: 4f:6f:7d:76:9c:06:6d:75:6f:5c:27:3f:d9:f8:83:52:bc:2f: 53:4f:6e:70 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUJUj/BRKIOrFxspobejaO2KxePzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF RTI5QThFNzAeFw0yNTA2MjYxMjUzMDVaFw0yNjA2MjUxMjU4MDVaMDMxMTAvBgNV BAMTKDY1MDREREJEM0Q4MjgyQTU5QTcwQUMxREE3QjA4Njg1MTFBN0U4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtAfsywiygFdYyAG0p81fLw9R PJBgKeXTUn6lXNhA8u7BagOkOyXlywrSo9QNBXDQ6IjuiUkWQBHWB+f3CvR9cdBZ 15ILp8TCppxdJ9DNQkc+rkwzs2D6qFVXmwLfMPsUo8pU5osGdVsQhCh5kNtAQCIR X9wUF8UPAa5xiRXeJIxsTI+x2Y9afgEhiF2Ui9hxgmytGJ711C2AxHg5BwiVBjuy XUCGIctg1le7h3+T9aTzXChhWyBobuaYDXvBN5RQCdVVyTU2oXZYKOof1cSqaPVu ffk6RUWVAnmBIHWvA2eWaL/ZB0qV00AhzcWrypd7uS4yPTqn4pRNvQeZT3EVAgMB AAGjggJqMIICZjAdBgNVHQ4EFgQUZQTdvT2CgqWacKwdp7CGhRGn6KAwHwYDVR0j BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4 OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjM2NjMyM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/zy MA0GCSqGSIb3DQEBCwUAA4IBAQBT6z6w7pYjPz78SdjLkp54k8k0rh8YiYxrmtHg CWCJMTyDqcyqYgL9jxqnQWjPo5yt0ulF4BAC3aOFaFUeRSYZtz+DxxXRMNu6qVU3 wW8X7epNvh5QW97lEOlvgbQOplqRmTa2Xd2hA/+tz3k/QOXICq5evKpOLo3Lo4hG a/ufZRc9xmFRUGhfIdcDU34VbupuE17w84HvOZeZUqQDC+AmM0N9Sx6l4A6z+gg8 9R4u4jDdTBljy8lecfadrAl6zi4uxjO5v/4J3U6dFURTrsBadSOxQ9vdPznrXXAc Vh70oSED0I64n0hgPO1Pb312nAZtdW9cJz/Z+INSvC9TT25w -----END CERTIFICATE-----Generated at Tue Jul 1 01:00:03 2025 by rpki-client