$ rpki-client -vvf rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466313a3a2f34382d3438203d3e20323133363035.roa File: 326131343a373538333a663466313a3a2f34382d3438203d3e20323133363035.roa (raw, json) Hash identifier: U53fIzL7ugCEwOCmZC2T+VMtdvJRIGokgDG7ODOLKwQ= Subject key identifier: 98:D5:A3:D2:77:AA:D7:AB:F4:8C:56:87:AB:AC:56:83:2F:B7:18:64 Certificate issuer: /CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229 Certificate serial: 2B887EF9326F7CF526B2B6B3480508F6679B1B60 Authority key identifier: E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer Subject info access: rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466313a3a2f34382d3438203d3e20323133363035.roa Signing time: Tue 30 Sep 2025 13:54:03 +0000 ROA not before: Tue 30 Sep 2025 13:49:03 +0000 ROA not after: Tue 29 Sep 2026 13:54:03 +0000 asID: 213605 IP address blocks: 2a14:7583:f4f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 17:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:88:7e:f9:32:6f:7c:f5:26:b2:b6:b3:48:05:08:f6:67:9b:1b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229 Validity Not Before: Sep 30 13:49:03 2025 GMT Not After : Sep 29 13:54:03 2026 GMT Subject: CN=98D5A3D277AAD7ABF48C5687ABAC56832FB71864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:c9:81:db:af:93:64:84:25:c6:58:c1:01: 18:ac:f3:75:6d:6e:a5:e8:d5:ed:3a:91:77:ac:d6: b7:11:e1:83:c1:23:29:9a:65:8c:b7:3a:14:1c:be: e7:8b:5e:54:7f:c0:02:db:17:33:48:cd:33:ae:24: 12:d9:58:d8:1d:61:98:b9:94:45:e2:30:10:36:f8: c4:9e:54:85:fd:f9:1b:fc:c0:6f:99:45:cd:a4:fe: 53:f1:e7:81:42:43:20:ba:57:92:17:fa:44:e1:c1: 3f:0b:33:41:f6:e8:41:92:d5:5f:bf:38:99:a0:d7: 20:a0:5c:ce:cf:d3:cc:45:c0:d7:fc:46:e7:35:58: 91:f1:3e:06:a2:1d:46:e2:90:aa:9a:8c:d7:f9:fd: 22:bc:e1:bd:15:51:38:d8:ea:6d:52:cd:e3:5f:35: cb:43:90:ba:73:cd:ef:34:b4:dd:86:9d:a2:72:98: 8b:31:bf:6a:f9:82:c0:6e:4c:5f:a1:8e:07:f9:50: 64:39:19:2a:f0:31:c8:0d:62:02:ee:0d:bd:50:9a: c8:ad:cd:bd:90:60:5b:c0:e8:27:11:8d:d4:e6:a2: 11:ff:9a:a6:a0:b6:a3:84:93:97:33:bc:b6:85:a3: 45:00:65:7d:fc:d9:73:a4:09:2c:ed:aa:5b:f2:08: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D5:A3:D2:77:AA:D7:AB:F4:8C:56:87:AB:AC:56:83:2F:B7:18:64 X509v3 Authority Key Identifier: keyid:E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer Subject Information Access: Signed Object - URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466313a3a2f34382d3438203d3e20323133363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f4f1::/48 Signature Algorithm: sha256WithRSAEncryption 86:a7:aa:10:3a:7b:08:7b:6f:8b:e0:c4:d6:6d:ef:e2:4c:ca: 1d:6e:8d:2a:99:ec:a6:07:3d:bc:32:e3:a5:a9:da:05:5e:40: 66:8e:de:bd:a6:33:c1:8f:00:9f:ef:14:f4:43:2f:5f:73:44: 5a:53:a8:a6:11:1c:e2:69:6e:6b:f2:71:ef:51:b6:7a:e2:8d: 7c:26:4e:db:bc:dc:e0:63:ee:15:5e:e7:60:8a:71:c5:16:60: 35:ad:0e:a7:50:af:56:30:a8:c5:7e:ab:3f:5f:87:53:f6:28: 43:f0:64:ef:2d:10:78:69:a3:1d:f4:21:9d:4e:85:0e:df:a8: 5e:01:a0:31:d9:2d:fc:85:15:fd:05:8c:2a:0c:f8:1b:52:13: b4:ac:dd:bf:bc:da:c9:1a:c2:2a:14:d8:22:1c:f1:ae:68:79: 39:84:a1:5d:63:a6:21:85:36:27:0f:11:41:49:5d:70:73:e4: ff:57:18:67:2a:f1:b1:ae:d7:cd:b3:4b:80:db:c0:5e:67:d2: 51:1e:7c:af:42:a6:51:02:6c:6d:f9:ba:05:8a:e9:ac:b9:3e: 2c:80:9c:b8:04:2f:60:ab:77:89:0f:0f:fd:2d:96:e0:8d:e5: d2:a4:87:fc:df:63:e5:bd:09:80:8d:f2:37:8d:01:98:06:b3: 44:d1:86:ef -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUK4h++TJvfPUmsrazSAUI9mebG2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJEODA2M0MyMEM1RkYxQzFDMUFDQzNBRDRFOUQwQzBD ODY0ODIyOTAeFw0yNTA5MzAxMzQ5MDNaFw0yNjA5MjkxMzU0MDNaMDMxMTAvBgNV BAMTKDk4RDVBM0QyNzdBQUQ3QUJGNDhDNTY4N0FCQUM1NjgzMkZCNzE4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUmcmB26+TZIQlxljBARis83Vt bqXo1e06kXes1rcR4YPBIymaZYy3OhQcvueLXlR/wALbFzNIzTOuJBLZWNgdYZi5 lEXiMBA2+MSeVIX9+Rv8wG+ZRc2k/lPx54FCQyC6V5IX+kThwT8LM0H26EGS1V+/ OJmg1yCgXM7P08xFwNf8Ruc1WJHxPgaiHUbikKqajNf5/SK84b0VUTjY6m1SzeNf NctDkLpzze80tN2GnaJymIsxv2r5gsBuTF+hjgf5UGQ5GSrwMcgNYgLuDb1Qmsit zb2QYFvA6CcRjdTmohH/mqagtqOEk5czvLaFo0UAZX382XOkCSztqlvyCHIDAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUmNWj0neq16v0jFaHq6xWgy+3GGQwHwYDVR0j BBgwFoAU4tgGPCDF/xwcGsw61OnQwMhkgikwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnBraS5ydWluZXQud29yay9yZXBvL0Nvd0dy YXNzbGFuZC8wL0UyRDgwNjNDMjBDNUZGMUMxQzFBQ0MzQUQ0RTlEMEMwQzg2NDgy MjkuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8v cnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4 ZS00YjgzLTk1ZTYtNGZmNGFiNzVjOWRjLzIvRTJEODA2M0MyMEM1RkYxQzFDMUFD QzNBRDRFOUQwQzBDODY0ODIyOS5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYB BQUHMAuGcXJzeW5jOi8vcnBraS5ydWluZXQud29yay9yZXBvL0Nvd0dyYXNzbGFu ZC8wLzMyNjEzMTM0M2EzNzM1MzgzMzNhNjYzNDY2MzEzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMjMxMzMzNjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqFHWD9PEwDQYJKoZIhvcN AQELBQADggEBAIanqhA6ewh7b4vgxNZt7+JMyh1ujSqZ7KYHPbwy46Wp2gVeQGaO 3r2mM8GPAJ/vFPRDL19zRFpTqKYRHOJpbmvyce9RtnrijXwmTtu83OBj7hVe52CK ccUWYDWtDqdQr1YwqMV+qz9fh1P2KEPwZO8tEHhpox30IZ1OhQ7fqF4BoDHZLfyF Ff0FjCoM+BtSE7Ss3b+82skawioU2CIc8a5oeTmEoV1jpiGFNicPEUFJXXBz5P9X GGcq8bGu182zS4DbwF5n0lEefK9CplECbG35ugWK6ay5PiyAnLgEL2Crd4kPD/0t luCN5dKkh/zfY+W9CYCN8jeNAZgGs0TRhu8= -----END CERTIFICATE-----Generated at Thu Oct 9 06:00:22 2025 by rpki-client