$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323136313133.roa File: 326130363a313238333a623030623a3a2f34382d3438203d3e20323136313133.roa (raw, json) Hash identifier: zTgVbONJzmBiCn8rwYE84aLhkh8xyOnACF5GXE4dgCg= Subject key identifier: EA:DB:FA:8B:38:56:13:6E:BA:79:0B:15:AB:21:52:D7:83:FB:78:79 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 104A0EAB1BFAC60AB95FBBC1357BCB18CB383E4C Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323136313133.roa Signing time: Sun 15 Sep 2024 14:36:38 +0000 ROA not before: Sun 15 Sep 2024 14:31:38 +0000 ROA not after: Sun 14 Sep 2025 14:36:38 +0000 asID: 216113 IP address blocks: 2a06:1283:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4a:0e:ab:1b:fa:c6:0a:b9:5f:bb:c1:35:7b:cb:18:cb:38:3e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Sep 15 14:31:38 2024 GMT Not After : Sep 14 14:36:38 2025 GMT Subject: CN=EADBFA8B3856136EBA790B15AB2152D783FB7879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c1:a6:6f:88:40:ae:2b:23:66:93:15:f3:44: 95:ff:87:a0:b3:ec:fd:a9:5e:57:f7:c9:62:4b:e4: f7:8c:e1:ae:e9:83:b5:9d:36:fe:0d:60:de:41:d1: 55:7a:38:5d:d7:e6:a4:1c:47:62:e5:37:0e:9a:2a: e9:ec:e3:f8:e3:78:0b:8a:e5:1c:2f:87:84:25:49: 61:08:d3:a0:f6:de:b8:62:ef:67:9a:a6:1c:f9:4d: e7:12:31:ee:21:de:18:f3:b9:66:fb:35:28:86:2a: ed:41:25:cf:3f:cf:09:5b:17:62:c9:8d:f0:39:27: 12:b2:17:a0:fb:65:80:ff:95:80:d7:5d:b6:51:00: 10:3e:26:b7:35:f2:76:34:bf:6c:72:db:21:1a:c1: ef:46:56:0c:17:dc:93:ca:46:5c:e4:50:a7:1e:cd: 81:52:e7:57:65:3b:3b:ec:a8:11:fb:8b:1b:fd:0b: 31:91:c4:50:0a:24:e0:96:29:b0:73:77:69:65:f1: a4:07:8f:93:87:26:5e:8f:5e:48:a3:f0:0f:14:b1: f0:e2:cd:d7:8a:ca:dc:d4:98:1c:7b:de:1f:ba:fc: fb:f3:e7:e3:20:15:c0:39:4e:08:d3:d9:04:cd:78: 31:a8:ae:c7:21:4c:be:4f:89:39:f6:76:8a:6b:26: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DB:FA:8B:38:56:13:6E:BA:79:0B:15:AB:21:52:D7:83:FB:78:79 X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323136313133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 62:a3:dd:bf:99:67:40:a8:27:6f:c1:ff:1f:2a:ea:fa:e1:cc: 43:96:8a:03:39:98:fe:3f:4d:6a:19:fc:16:a7:f1:fe:61:7f: 67:43:d2:ba:4a:16:55:9f:3b:17:d8:68:1c:af:73:26:62:57: 12:02:4b:45:1f:e8:64:f3:ed:24:5a:eb:09:f1:60:d1:b8:69: bc:c3:9e:a7:14:5d:cf:6b:33:34:4c:7a:5c:f6:92:0e:47:cc: 86:8c:5d:ce:5d:7f:c7:9e:53:07:5d:16:b3:5a:ef:d0:8b:93: bc:4a:b9:46:92:40:31:06:54:4a:e3:03:3d:21:1f:ba:93:bd: 3b:ad:ba:9e:15:72:e1:45:23:ca:f1:7a:14:66:ce:0d:e1:5c: 3e:51:7f:0d:0b:0f:c3:e6:38:d8:41:b6:f4:96:81:21:b7:57: 1a:39:41:ac:a1:aa:df:0a:e5:bc:3c:57:a2:a0:43:e9:59:c1: 39:5f:4f:be:f6:9a:f0:ed:51:e9:cd:49:50:95:05:04:8d:17: 79:53:ea:74:0b:91:51:b3:2d:ca:0b:c1:56:a3:ae:b4:ff:6a: 07:8f:a9:39:4f:1b:a0:87:d7:cc:f5:43:bd:e2:01:83:ad:d1: be:64:68:4e:d0:59:39:66:85:ae:59:5f:95:49:51:b8:67:38: d1:76:51:62 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUEEoOqxv6xgq5X7vBNXvLGMs4PkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNDA5MTUxNDMxMzhaFw0yNTA5MTQxNDM2MzhaMDMxMTAvBgNV BAMTKEVBREJGQThCMzg1NjEzNkVCQTc5MEIxNUFCMjE1MkQ3ODNGQjc4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMwaZviECuKyNmkxXzRJX/h6Cz 7P2pXlf3yWJL5PeM4a7pg7WdNv4NYN5B0VV6OF3X5qQcR2LlNw6aKuns4/jjeAuK 5Rwvh4QlSWEI06D23rhi72eaphz5TecSMe4h3hjzuWb7NSiGKu1BJc8/zwlbF2LJ jfA5JxKyF6D7ZYD/lYDXXbZRABA+Jrc18nY0v2xy2yEawe9GVgwX3JPKRlzkUKce zYFS51dlOzvsqBH7ixv9CzGRxFAKJOCWKbBzd2ll8aQHj5OHJl6PXkij8A8UsfDi zdeKytzUmBx73h+6/Pvz5+MgFcA5TgjT2QTNeDGorschTL5PiTn2doprJsfFAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU6tv6izhWE266eQsVqyFS14P7eHkwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMxMzEzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoOwCzANBgkqhkiG9w0BAQsFAAOCAQEAYqPdv5lnQKgnb8H/ Hyrq+uHMQ5aKAzmY/j9Nahn8Fqfx/mF/Z0PSukoWVZ87F9hoHK9zJmJXEgJLRR/o ZPPtJFrrCfFg0bhpvMOepxRdz2szNEx6XPaSDkfMhoxdzl1/x55TB10Ws1rv0IuT vEq5RpJAMQZUSuMDPSEfupO9O626nhVy4UUjyvF6FGbODeFcPlF/DQsPw+Y42EG2 9JaBIbdXGjlBrKGq3wrlvDxXoqBD6VnBOV9Pvvaa8O1R6c1JUJUFBI0XeVPqdAuR UbMtygvBVqOutP9qB4+pOU8boIfXzPVDveIBg63RvmRoTtBZOWaFrllflUlRuGc4 0XZRYg== -----END CERTIFICATE-----Generated at Sat Sep 28 17:45:02 2024 by rpki-client on console-ams.rpki-client.org