$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa File: 326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa (raw, json) Hash identifier: ikTTASgM+m3j2OCIWXFBB97zlmzPqFbZXCXX1QLAcdo= Subject key identifier: 2B:C6:A8:D6:22:12:39:9E:8A:5C:4C:31:45:A8:2F:85:39:DF:0D:E0 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 5379B0244C21F2FA20DDF42412C3847951FDFA80 Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa Signing time: Sun 15 Sep 2024 14:36:39 +0000 ROA not before: Sun 15 Sep 2024 14:31:39 +0000 ROA not after: Sun 14 Sep 2025 14:36:39 +0000 asID: 197634 IP address blocks: 2a06:1283:c050::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:79:b0:24:4c:21:f2:fa:20:dd:f4:24:12:c3:84:79:51:fd:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Sep 15 14:31:39 2024 GMT Not After : Sep 14 14:36:39 2025 GMT Subject: CN=2BC6A8D62212399E8A5C4C3145A82F8539DF0DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:20:ca:be:3c:0e:94:ed:a9:58:3f:cf:6a:00: 7a:8e:88:50:6c:55:e6:90:79:91:6e:62:e4:8f:59: 0e:9a:67:b9:81:95:b8:5f:e5:9a:e4:1d:87:58:de: b7:5b:f4:ec:d4:c5:e5:14:66:d2:0c:74:76:79:3d: d0:f5:2f:a7:40:5f:6c:55:e3:56:58:74:0b:7f:c7: 5d:7c:0a:a7:6a:82:ef:a0:0c:88:bf:63:23:6d:54: 43:34:86:c7:e1:d3:18:68:41:bb:dd:db:bd:be:1d: cf:8e:98:fa:47:19:cd:70:57:9c:b2:4f:49:30:22: 1b:3f:b2:77:3e:a9:dc:7d:31:df:f0:5a:ca:6e:a0: 34:b4:9b:5d:ff:69:f6:73:ab:de:ef:1f:73:13:81: 79:92:ab:10:17:43:d8:a6:64:d4:a6:d2:0e:6b:97: fc:f8:c5:fb:13:29:1f:a2:d7:9a:a6:5c:03:1f:89: dc:5e:c2:cc:67:6c:e4:a6:e0:58:71:96:3f:4e:3b: 20:e6:38:63:dc:42:1e:15:c4:c7:a8:9e:56:3d:25: a8:ab:aa:1f:68:7a:b9:87:1f:74:26:8a:f8:22:0f: 7e:47:54:d5:19:98:93:5f:2c:13:d9:5d:e7:80:25: c4:b1:01:ed:ee:94:fe:ca:3e:2f:db:0d:b1:30:3b: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C6:A8:D6:22:12:39:9E:8A:5C:4C:31:45:A8:2F:85:39:DF:0D:E0 X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c050::/44 Signature Algorithm: sha256WithRSAEncryption 53:82:41:ba:57:28:ba:6f:ba:bf:13:de:b7:7f:da:e2:30:43: 96:58:78:80:ec:0c:19:ef:d3:83:3a:03:15:83:29:61:57:66: 11:2a:7e:b5:a0:15:8d:e9:b7:ae:32:79:33:67:dc:24:69:57: b2:a3:45:c6:0e:f7:df:7e:2e:d5:df:df:ef:ac:f3:3e:ce:20: 62:13:cc:f2:e7:cd:59:b9:71:d3:08:ff:24:06:c1:11:2b:00: a2:0b:ae:47:94:f9:33:e9:14:a4:82:93:e8:3b:90:a3:2f:b0: d7:9c:54:04:43:8d:48:f7:fd:fa:6e:2e:c2:2f:e7:2a:69:8e: 84:9d:4e:03:f1:37:86:b9:a5:24:63:4a:e4:3f:1e:64:a4:23: b2:12:bb:50:75:e0:49:d1:d4:69:3c:4b:42:6e:e5:c4:74:9c: ad:05:9e:b7:02:77:55:c7:2f:d5:96:d6:c1:ca:c3:6b:69:5c: 22:b7:d5:86:42:6c:a7:84:8b:f3:8e:f2:78:fb:54:1a:13:e4: db:5e:9e:61:ec:52:37:c9:e1:be:7f:83:f6:85:46:cd:91:05: 4c:51:5b:8a:d7:4f:a7:3e:6d:90:b0:28:a2:14:b5:bd:0a:1a: 08:78:f1:2b:86:b6:75:d4:ee:c0:52:5b:ca:e5:f8:d4:cd:51: 8c:45:67:9c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUU3mwJEwh8vog3fQkEsOEeVH9+oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNDA5MTUxNDMxMzlaFw0yNTA5MTQxNDM2MzlaMDMxMTAvBgNV BAMTKDJCQzZBOEQ2MjIxMjM5OUU4QTVDNEMzMTQ1QTgyRjg1MzlERjBERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWIMq+PA6U7alYP89qAHqOiFBs VeaQeZFuYuSPWQ6aZ7mBlbhf5ZrkHYdY3rdb9OzUxeUUZtIMdHZ5PdD1L6dAX2xV 41ZYdAt/x118Cqdqgu+gDIi/YyNtVEM0hsfh0xhoQbvd272+Hc+OmPpHGc1wV5yy T0kwIhs/snc+qdx9Md/wWspuoDS0m13/afZzq97vH3MTgXmSqxAXQ9imZNSm0g5r l/z4xfsTKR+i15qmXAMfidxewsxnbOSm4Fhxlj9OOyDmOGPcQh4VxMeonlY9Jair qh9oermHH3QmivgiD35HVNUZmJNfLBPZXeeAJcSxAe3ulP7KPi/bDbEwO+Q3AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUK8ao1iISOZ6KXEwxRagvhTnfDeAwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMwMzUzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzkzNzM2MzMzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoGEoPAUDANBgkqhkiG9w0BAQsFAAOCAQEAU4JBulcoum+6vxPe t3/a4jBDllh4gOwMGe/TgzoDFYMpYVdmESp+taAVjem3rjJ5M2fcJGlXsqNFxg73 334u1d/f76zzPs4gYhPM8ufNWblx0wj/JAbBESsAoguuR5T5M+kUpIKT6DuQoy+w 15xUBEONSPf9+m4uwi/nKmmOhJ1OA/E3hrmlJGNK5D8eZKQjshK7UHXgSdHUaTxL Qm7lxHScrQWetwJ3Vccv1ZbWwcrDa2lcIrfVhkJsp4SL847yePtUGhPk216eYexS N8nhvn+D9oVGzZEFTFFbitdPpz5tkLAoohS1vQoaCHjxK4a2ddTuwFJbyuX41M1R jEVnnA== -----END CERTIFICATE-----Generated at Sat Sep 28 17:45:02 2024 by rpki-client on console-ams.rpki-client.org