$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa File: 326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: a2tJG8EzdU+YbNTQkDYRd5pLF9IX6Q9Wj2cylzNdOTI= Subject key identifier: EE:82:87:20:CB:C4:F6:2D:4C:34:2F:AB:5A:A5:DB:96:F9:1B:97:1C Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Certificate serial: 584BEC750C7A457C74FD7413A9E7759971F200B0 Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa Signing time: Thu 26 Jun 2025 12:10:55 +0000 ROA not before: Thu 26 Jun 2025 12:05:55 +0000 ROA not after: Thu 25 Jun 2026 12:10:55 +0000 asID: 16909 IP address blocks: 2a0f:6287:ffc6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 10:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4b:ec:75:0c:7a:45:7c:74:fd:74:13:a9:e7:75:99:71:f2:00:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Validity Not Before: Jun 26 12:05:55 2025 GMT Not After : Jun 25 12:10:55 2026 GMT Subject: CN=EE828720CBC4F62D4C342FAB5AA5DB96F91B971C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:54:d3:5b:3e:15:ae:00:98:76:be:c5:f8: 85:f7:7d:80:25:b0:0e:56:7d:2d:60:c9:e8:06:1c: 18:6e:1d:3f:f5:28:bd:a3:4b:55:7d:9f:eb:5f:20: 16:d3:5f:dc:0e:5b:d1:74:1e:31:16:64:d1:58:7b: 81:cc:80:0e:2b:9f:77:25:5c:cc:8e:fd:99:6b:42: e6:f7:cf:56:5d:b1:0a:70:ca:6a:e4:9c:85:2c:07: c4:82:62:82:b8:c4:55:39:c7:b6:86:fc:92:64:70: cb:29:99:b4:4e:63:5d:11:a3:67:32:e1:93:8d:52: c6:9d:b9:25:c0:41:83:a3:b8:a4:92:25:e9:d4:01: 39:c7:ec:88:d1:8a:45:be:af:7d:92:67:c1:db:c7: 1a:48:a1:cd:84:62:71:79:13:2e:86:81:ed:6f:7b: ef:49:78:d4:b0:96:20:1f:2b:0a:4b:d6:1f:9a:1a: 72:b9:6f:d4:2e:bd:50:b7:5e:f7:14:1b:71:04:90: c0:ef:10:a9:78:60:0f:70:ac:ff:f7:12:6d:64:f6: 17:f5:97:6c:4e:a2:d5:45:10:34:20:1c:4e:08:64: d0:d9:1a:24:35:91:47:51:1e:e9:a9:3a:64:b5:3d: 29:5e:37:32:ec:e0:d4:07:9a:4d:6d:0d:54:f1:3a: 72:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:87:20:CB:C4:F6:2D:4C:34:2F:AB:5A:A5:DB:96:F9:1B:97:1C X509v3 Authority Key Identifier: keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:ffc6::/48 Signature Algorithm: sha256WithRSAEncryption 22:6f:f4:6c:df:5e:3f:6e:45:b3:cc:cd:5f:67:3a:c9:1b:59: 2e:df:1c:e9:7d:5b:29:09:7f:69:57:dc:df:6a:b2:78:82:9e: 18:a6:76:66:66:ab:a7:0e:58:4f:ad:01:e8:ed:54:dd:d3:ce: 10:1c:03:50:87:96:a5:1d:4d:22:e3:ab:3e:ad:23:1a:09:5e: 5e:08:d6:0f:39:91:98:c9:05:67:bf:51:81:f9:cc:cd:2a:91: 86:48:23:0a:20:e8:d2:33:b3:5f:5b:6a:89:9f:4f:ed:a7:d7: 39:6b:53:0c:f9:11:57:7b:cb:21:72:65:e3:d5:41:4f:c2:5a: df:4d:d2:b1:e1:29:dd:a5:f6:9e:81:78:3f:30:34:96:6e:9e: f8:f6:e1:82:38:3f:88:1c:81:d0:e4:d3:e7:a9:33:2c:a0:89: e2:6a:43:e7:74:04:87:87:88:d1:46:df:09:01:fe:39:82:ac: 33:d9:ea:f5:e8:1e:a8:b3:ec:d5:ca:56:5d:96:3b:67:bd:4a: 35:d9:76:58:fb:ef:83:76:b9:90:cf:6e:8d:a9:ce:b5:5d:1a: 95:6f:66:2c:55:6e:aa:1d:5e:d8:f6:b4:0e:b3:1a:95:ed:fc: 3c:f7:07:b4:4d:97:ff:f2:c2:90:f0:77:30:50:85:35:2b:94: 99:30:55:ad -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUWEvsdQx6RXx0/XQTqed1mXHyALAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF RTI5QThFNzAeFw0yNTA2MjYxMjA1NTVaFw0yNjA2MjUxMjEwNTVaMDMxMTAvBgNV BAMTKEVFODI4NzIwQ0JDNEY2MkQ0QzM0MkZBQjVBQTVEQjk2RjkxQjk3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCFTTWz4VrgCYdr7F+IX3fYAl sA5WfS1gyegGHBhuHT/1KL2jS1V9n+tfIBbTX9wOW9F0HjEWZNFYe4HMgA4rn3cl XMyO/ZlrQub3z1ZdsQpwymrknIUsB8SCYoK4xFU5x7aG/JJkcMspmbROY10Ro2cy 4ZONUsaduSXAQYOjuKSSJenUATnH7IjRikW+r32SZ8HbxxpIoc2EYnF5Ey6Gge1v e+9JeNSwliAfKwpL1h+aGnK5b9QuvVC3XvcUG3EEkMDvEKl4YA9wrP/3Em1k9hf1 l2xOotVFEDQgHE4IZNDZGiQ1kUdRHumpOmS1PSleNzLs4NQHmk1tDVTxOnJtAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQU7oKHIMvE9i1MNC+rWqXblvkblxwwHwYDVR0j BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4 OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjY2MzM2M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPYof/xjAN BgkqhkiG9w0BAQsFAAOCAQEAIm/0bN9eP25Fs8zNX2c6yRtZLt8c6X1bKQl/aVfc 32qyeIKeGKZ2Zmarpw5YT60B6O1U3dPOEBwDUIeWpR1NIuOrPq0jGgleXgjWDzmR mMkFZ79RgfnMzSqRhkgjCiDo0jOzX1tqiZ9P7afXOWtTDPkRV3vLIXJl49VBT8Ja 303SseEp3aX2noF4PzA0lm6e+Pbhgjg/iByB0OTT56kzLKCJ4mpD53QEh4eI0Ubf CQH+OYKsM9nq9egeqLPs1cpWXZY7Z71KNdl2WPvvg3a5kM9ujanOtV0alW9mLFVu qh1e2Pa0DrMale38PPcHtE2X//LCkPB3MFCFNSuUmTBVrQ== -----END CERTIFICATE-----Generated at Mon Jun 30 23:44:53 2025 by rpki-client