$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa File: 326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa (raw, json) Hash identifier: HgVZBCaEOQO3vVGFp3tFMEQPLkH1j52F4ehEji34FEo= Subject key identifier: 5D:0F:23:33:41:66:3E:79:F1:38:F0:09:97:13:15:AE:DC:D3:30:E3 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 10E42B800C446976592174D1AA64E437DA97105C Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa Signing time: Sun 15 Sep 2024 14:36:42 +0000 ROA not before: Sun 15 Sep 2024 14:31:42 +0000 ROA not after: Sun 14 Sep 2025 14:36:42 +0000 asID: 207252 IP address blocks: 2a06:1283:c040::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e4:2b:80:0c:44:69:76:59:21:74:d1:aa:64:e4:37:da:97:10:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Sep 15 14:31:42 2024 GMT Not After : Sep 14 14:36:42 2025 GMT Subject: CN=5D0F233341663E79F138F009971315AEDCD330E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:b4:0b:a5:de:59:9e:62:38:43:d3:a4:9a: 6b:a4:f7:64:23:be:d8:e5:2d:8f:24:cb:16:ee:f4: fe:0e:39:9c:84:3d:27:5e:bd:f8:eb:3f:49:85:2b: 7b:9a:cd:91:b4:95:8e:3a:fa:6d:af:88:82:63:59: 78:4d:81:7e:d5:ed:52:06:a6:1e:1e:9b:b8:c2:a5: 6c:bf:f7:0a:d1:02:b8:4a:26:b6:6c:a9:cf:b6:e3: eb:23:dd:2f:e1:29:ec:6a:08:59:36:0b:56:f9:27: af:96:b2:39:85:69:f1:cb:bb:52:91:17:8f:e2:2c: 89:03:5e:ba:8e:ba:9a:67:d3:d0:c0:7f:a5:95:eb: 80:bb:62:6f:13:93:ac:f1:97:c0:34:34:a6:ef:32: 97:a5:6a:ac:6c:f7:82:1f:38:3d:6c:3e:1d:d8:44: 6b:38:b1:e2:40:bd:8f:ed:8b:4b:23:83:2d:00:0c: 0f:85:77:6a:ad:a4:d0:ce:50:35:66:78:e6:33:a9: f1:2c:f3:30:31:73:4c:a6:5a:2e:1c:73:71:1a:0c: 0e:1a:5e:10:5d:5e:ac:7b:33:d0:ad:ae:9c:df:0d: 99:74:56:17:a0:20:58:92:2a:ce:e4:96:65:ce:7c: 47:e3:a3:45:bf:df:2d:b7:a4:93:3a:5b:b2:22:c1: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0F:23:33:41:66:3E:79:F1:38:F0:09:97:13:15:AE:DC:D3:30:E3 X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c040::/44 Signature Algorithm: sha256WithRSAEncryption 6f:2e:d5:27:fa:b8:19:ba:24:94:c9:ba:09:69:b0:a0:30:d7: a3:f0:ef:b7:64:47:61:32:a7:c2:04:ee:a3:40:cb:fb:93:ac: 7f:c5:78:2b:45:07:02:1a:a1:ef:cc:f0:6b:6b:eb:aa:55:1b: 26:82:38:5c:1a:41:22:82:28:63:6c:7d:12:25:3e:a6:02:73: cb:66:97:19:2f:17:76:8b:90:28:7c:12:5d:6e:c1:33:b3:ab: cd:06:d8:fe:03:25:a1:ab:f1:29:57:73:e5:fe:17:22:4e:99: 57:eb:56:d0:bd:70:14:d6:ea:c3:f4:f0:12:f2:1a:d8:fc:13: b2:1f:b3:bd:0a:50:4f:16:a7:a0:95:e3:52:f8:67:bb:98:37: 40:20:0a:66:9b:7a:c3:bc:cb:88:6f:50:d6:01:de:1b:a4:56: 9e:35:a7:f1:35:7d:11:72:46:68:c3:d9:70:7c:4d:10:94:d6: e4:24:ed:6e:24:db:0a:90:2c:06:90:a0:df:49:22:ef:bb:e7: 13:1b:39:0c:a5:80:4c:e2:5e:ff:30:fc:2c:8e:8b:5d:1f:85: 2c:6d:15:f3:ff:5f:f0:79:83:64:ee:e2:8f:83:2f:fa:04:5d: 33:15:a7:c4:6a:5f:98:99:c2:51:98:50:35:f6:d6:41:1e:e1: ef:2f:c1:ac -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUEOQrgAxEaXZZIXTRqmTkN9qXEFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNDA5MTUxNDMxNDJaFw0yNTA5MTQxNDM2NDJaMDMxMTAvBgNV BAMTKDVEMEYyMzMzNDE2NjNFNzlGMTM4RjAwOTk3MTMxNUFFRENEMzMwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ27QLpd5ZnmI4Q9Okmmuk92Qj vtjlLY8kyxbu9P4OOZyEPSdevfjrP0mFK3uazZG0lY46+m2viIJjWXhNgX7V7VIG ph4em7jCpWy/9wrRArhKJrZsqc+24+sj3S/hKexqCFk2C1b5J6+WsjmFafHLu1KR F4/iLIkDXrqOuppn09DAf6WV64C7Ym8Tk6zxl8A0NKbvMpelaqxs94IfOD1sPh3Y RGs4seJAvY/ti0sjgy0ADA+Fd2qtpNDOUDVmeOYzqfEs8zAxc0ymWi4cc3EaDA4a XhBdXqx7M9CtrpzfDZl0VhegIFiSKs7klmXOfEfjo0W/3y23pJM6W7IiwYLVAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUXQ8jM0FmPnnxOPAJlxMVrtzTMOMwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMwMzQzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzAzNzMyMzUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoGEoPAQDANBgkqhkiG9w0BAQsFAAOCAQEAby7VJ/q4GboklMm6 CWmwoDDXo/Dvt2RHYTKnwgTuo0DL+5Osf8V4K0UHAhqh78zwa2vrqlUbJoI4XBpB IoIoY2x9EiU+pgJzy2aXGS8XdouQKHwSXW7BM7OrzQbY/gMloavxKVdz5f4XIk6Z V+tW0L1wFNbqw/TwEvIa2PwTsh+zvQpQTxanoJXjUvhnu5g3QCAKZpt6w7zLiG9Q 1gHeG6RWnjWn8TV9EXJGaMPZcHxNEJTW5CTtbiTbCpAsBpCg30ki77vnExs5DKWA TOJe/zD8LI6LXR+FLG0V8/9f8HmDZO7ij4Mv+gRdMxWnxGpfmJnCUZhQNfbWQR7h 7y/BrA== -----END CERTIFICATE-----Generated at Sat Sep 28 17:45:02 2024 by rpki-client on console-ams.rpki-client.org