$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa File: 326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa (raw, json) Hash identifier: t8XVGgiA3QoCAuAAdZjDXDrEi5qpcUYTd/1MuhgCc1A= Subject key identifier: 97:4E:B1:C3:DB:CB:1B:78:C3:98:68:05:C6:D8:EE:0A:70:5E:36:71 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 592FDF50F2820C926911F43F1DA6A4ACD7A7B8D3 Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa Signing time: Sun 15 Sep 2024 14:36:44 +0000 ROA not before: Sun 15 Sep 2024 14:31:44 +0000 ROA not after: Sun 14 Sep 2025 14:36:44 +0000 asID: 207252 IP address blocks: 2a06:1283:c04f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2f:df:50:f2:82:0c:92:69:11:f4:3f:1d:a6:a4:ac:d7:a7:b8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Sep 15 14:31:44 2024 GMT Not After : Sep 14 14:36:44 2025 GMT Subject: CN=974EB1C3DBCB1B78C3986805C6D8EE0A705E3671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:16:bc:2f:74:0e:e0:22:37:c8:fa:ad:3c: a2:5d:52:cd:0c:3e:74:52:88:e9:9a:7c:39:52:cf: 46:40:91:49:2d:b5:65:0f:97:fa:69:a6:d9:5b:b1: c8:e3:18:69:30:ba:34:c8:24:24:79:0e:12:d8:eb: 0b:40:47:8c:b8:95:ab:cf:90:cd:fd:71:35:73:82: 7f:40:c3:48:82:ad:5c:5e:76:01:50:f6:59:ed:79: 2e:18:e6:34:00:d3:00:ba:00:dd:85:46:c8:bf:96: 11:e1:03:65:45:f2:d4:a5:33:c2:6f:0a:07:a6:fd: 1f:d7:f8:e2:28:e8:e3:b7:ba:af:05:77:6e:4b:03: 49:7e:bc:7f:e8:b2:ce:a3:47:a1:86:9e:80:87:2e: fb:82:2e:fd:ce:f3:42:6b:14:1f:13:90:13:23:fb: 71:1a:a7:b4:32:76:06:34:ba:84:19:bd:a1:b1:11: 0e:5d:06:2d:54:a0:a9:4b:fd:0a:49:e3:74:68:aa: 1b:f3:fe:6a:8f:7f:a0:c0:0e:7a:fe:88:3f:0d:aa: bc:0f:88:e5:09:cf:da:04:1e:a3:5b:e7:10:3e:b4: 82:93:53:02:73:09:1b:11:dc:eb:d7:f8:80:85:2b: 78:0e:bb:16:1b:2f:8d:57:a6:60:f7:5e:1d:88:68: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4E:B1:C3:DB:CB:1B:78:C3:98:68:05:C6:D8:EE:0A:70:5E:36:71 X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c04f::/48 Signature Algorithm: sha256WithRSAEncryption 60:c0:c6:e7:d1:de:bc:40:ea:be:c6:32:33:42:22:b7:dd:18: 32:6f:67:0c:dc:41:f2:fa:08:74:89:2e:41:02:f7:e0:11:7c: fc:4c:7a:bf:95:a1:df:c2:ad:41:79:77:41:c1:6c:22:17:0d: 82:67:9b:92:3a:27:75:f3:ec:fc:e6:80:e3:10:a0:12:0f:74: 5b:76:12:24:37:d7:74:6f:17:13:3d:7f:dd:44:23:00:10:b1: 2e:65:7d:de:6b:51:ef:79:ab:e2:64:77:65:54:c2:4e:99:e6: ed:1d:27:7b:c6:68:3e:66:36:cf:3b:ab:a5:f7:7a:fe:5d:6a: 70:7b:25:29:a9:9d:15:0c:18:e9:ac:a4:01:dc:51:85:c3:21: aa:21:c4:d0:68:9d:cb:d6:a2:26:46:44:8d:42:28:47:26:d9: fe:37:c1:79:8c:ba:13:4a:82:b1:ce:91:87:96:4a:91:43:51: 3b:cf:e2:6a:8b:d6:a5:d0:37:43:58:5a:a3:0d:a5:e3:ef:5f: 12:0e:34:82:db:e1:78:3b:a6:20:54:c1:8c:5b:19:7b:38:df: 56:8c:e8:d2:b7:41:e8:39:d7:db:0f:94:54:57:9d:16:6b:bd: 80:50:bd:82:d3:9f:51:f1:87:4d:5d:49:60:80:0a:5a:53:5e: 93:e2:7c:a4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUWS/fUPKCDJJpEfQ/HaakrNenuNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNDA5MTUxNDMxNDRaFw0yNTA5MTQxNDM2NDRaMDMxMTAvBgNV BAMTKDk3NEVCMUMzREJDQjFCNzhDMzk4NjgwNUM2RDhFRTBBNzA1RTM2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKgRa8L3QO4CI3yPqtPKJdUs0M PnRSiOmafDlSz0ZAkUkttWUPl/ppptlbscjjGGkwujTIJCR5DhLY6wtAR4y4lavP kM39cTVzgn9Aw0iCrVxedgFQ9lnteS4Y5jQA0wC6AN2FRsi/lhHhA2VF8tSlM8Jv Cgem/R/X+OIo6OO3uq8Fd25LA0l+vH/oss6jR6GGnoCHLvuCLv3O80JrFB8TkBMj +3Eap7QydgY0uoQZvaGxEQ5dBi1UoKlL/QpJ43Roqhvz/mqPf6DADnr+iD8NqrwP iOUJz9oEHqNb5xA+tIKTUwJzCRsR3OvX+ICFK3gOuxYbL41XpmD3Xh2IaIoLAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUl06xw9vLG3jDmGgFxtjuCnBeNnEwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMwMzQ2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzMyMzUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoPATzANBgkqhkiG9w0BAQsFAAOCAQEAYMDG59HevEDqvsYy M0Iit90YMm9nDNxB8voIdIkuQQL34BF8/Ex6v5Wh38KtQXl3QcFsIhcNgmebkjon dfPs/OaA4xCgEg90W3YSJDfXdG8XEz1/3UQjABCxLmV93mtR73mr4mR3ZVTCTpnm 7R0ne8ZoPmY2zzurpfd6/l1qcHslKamdFQwY6aykAdxRhcMhqiHE0Gidy9aiJkZE jUIoRybZ/jfBeYy6E0qCsc6Rh5ZKkUNRO8/iaovWpdA3Q1haow2l4+9fEg40gtvh eDumIFTBjFsZezjfVozo0rdB6DnX2w+UVFedFmu9gFC9gtOfUfGHTV1JYIAKWlNe k+J8pA== -----END CERTIFICATE-----Generated at Sat Sep 28 16:24:42 2024 by rpki-client on console-fra.rpki-client.org