$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a3a2f33342d3334203d3e20313937343737.roa File: 326130363a313238333a3a2f33342d3334203d3e20313937343737.roa (raw, json) Hash identifier: F0aVKXLZ5zGgBoYHSRhJa6U+1dmk5XRJ/tZExK1LLAo= Subject key identifier: F7:8B:FE:BF:DF:52:6B:7C:B6:DC:E2:8B:4A:BF:8F:4E:93:C4:09:1C Certificate issuer: /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24 Certificate serial: 1FAC292CBAF1917CE5B5A3042F47D88EC5FF12CB Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a3a2f33342d3334203d3e20313937343737.roa Signing time: Sun 28 Apr 2024 20:15:54 +0000 ROA not before: Sun 28 Apr 2024 20:10:54 +0000 ROA not after: Sun 27 Apr 2025 20:15:54 +0000 asID: 197477 IP address blocks: 2a06:1283::/34 maxlen: 34 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jul 2024 03:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ac:29:2c:ba:f1:91:7c:e5:b5:a3:04:2f:47:d8:8e:c5:ff:12:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24 Validity Not Before: Apr 28 20:10:54 2024 GMT Not After : Apr 27 20:15:54 2025 GMT Subject: CN=F78BFEBFDF526B7CB6DCE28B4ABF8F4E93C4091C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:92:7a:74:76:f2:77:08:da:7e:e7:8a:18: 26:fb:e8:4d:a7:80:a3:ae:29:ce:89:7a:d9:d9:9e: 91:76:e9:2b:75:e2:05:c5:3d:34:b0:70:f8:ef:3a: 06:ce:61:10:31:ab:68:5f:c2:ac:a8:c9:f9:20:4d: 40:61:df:9a:b0:db:6c:cd:69:d3:cc:4e:28:a3:76: d8:c3:8e:c4:08:51:f6:df:91:6e:fa:bc:d4:bb:a1: 73:13:ad:3d:23:5d:01:a7:e6:d4:c7:f6:34:4e:24: e1:e6:f8:40:c9:92:c2:47:27:74:2a:e6:10:fa:b6: 99:33:eb:79:af:8c:d8:8f:e3:1d:14:21:92:c5:2c: 52:bc:41:81:b5:f0:94:e1:e0:cf:63:f0:96:f6:3a: 14:7a:e8:3f:5a:4a:d1:bc:af:92:4c:a9:15:aa:a4: 34:c3:f2:dd:48:dd:10:b7:3b:a8:1f:66:35:04:b6: 4d:1f:a4:86:0a:40:c5:92:7b:f3:4c:e1:3e:5b:f7: 41:5d:cf:9f:31:7c:96:4b:40:0d:33:9a:1c:52:2b: 3e:02:1f:e3:9c:3e:ae:24:f1:b2:61:9a:18:25:bb: fd:50:bf:35:f8:ac:19:c0:62:63:4e:33:d4:97:4b: 80:60:86:5d:13:70:77:df:bf:ab:d9:d3:15:50:ab: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8B:FE:BF:DF:52:6B:7C:B6:DC:E2:8B:4A:BF:8F:4E:93:C4:09:1C X509v3 Authority Key Identifier: keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a3a2f33342d3334203d3e20313937343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283::/34 Signature Algorithm: sha256WithRSAEncryption 1a:9a:85:bc:8d:69:c6:26:52:40:10:7a:c2:6a:f7:95:00:d9: cd:61:b0:c5:90:7b:eb:37:a3:53:e6:24:9f:ec:7c:11:be:7a: fa:26:82:ea:a6:0a:aa:c7:fc:bc:9c:67:28:82:f9:e2:9b:54: d7:d0:1a:0c:11:3a:a3:67:cf:29:c8:8b:f5:b6:8d:01:5a:05: 4c:88:f1:47:5b:79:31:e2:d3:e3:a6:1d:ca:6f:e9:bd:36:a1: 45:49:0a:cf:d5:6a:ac:1c:91:e4:dc:b7:4c:20:18:8b:50:5f: ff:37:41:09:69:32:74:54:03:2e:42:94:63:0d:82:d8:33:9d: 9c:70:1a:5b:c2:1d:3e:c1:c4:ba:59:fc:94:3e:f4:46:cd:30: 3f:20:bc:65:9f:74:2f:29:73:c4:c2:07:f5:da:48:e6:1a:e9: 00:c0:c5:fe:bc:35:da:e8:27:43:e5:3c:09:5a:73:03:71:9e: 25:ea:f7:1a:7b:a3:24:18:f5:b8:09:11:43:b3:a9:c7:7e:b4: 7b:52:b6:6d:1e:21:fc:41:b7:1e:86:8f:5e:02:48:07:5b:4d: af:55:8b:a5:fd:37:d0:0d:4e:16:14:0f:86:84:a8:42:49:44: a0:d1:a4:67:87:e7:80:48:6a:81:9e:d5:db:4a:50:d9:e4:c1: e4:a1:df:8d -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUH6wpLLrxkXzltaMEL0fYjsX/EsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJD QUJCOUYyNDAeFw0yNDA0MjgyMDEwNTRaFw0yNTA0MjcyMDE1NTRaMDMxMTAvBgNV BAMTKEY3OEJGRUJGREY1MjZCN0NCNkRDRTI4QjRBQkY4RjRFOTNDNDA5MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmZJ6dHbydwjafueKGCb76E2n gKOuKc6JetnZnpF26St14gXFPTSwcPjvOgbOYRAxq2hfwqyoyfkgTUBh35qw22zN adPMTiijdtjDjsQIUfbfkW76vNS7oXMTrT0jXQGn5tTH9jROJOHm+EDJksJHJ3Qq 5hD6tpkz63mvjNiP4x0UIZLFLFK8QYG18JTh4M9j8Jb2OhR66D9aStG8r5JMqRWq pDTD8t1I3RC3O6gfZjUEtk0fpIYKQMWSe/NM4T5b90Fdz58xfJZLQA0zmhxSKz4C H+OcPq4k8bJhmhglu/1QvzX4rBnAYmNOM9SXS4Bghl0TcHffv6vZ0xVQqz1ZAgMB AAGjggJvMIICazAdBgNVHQ4EFgQU94v+v99Sa3y23OKLSr+PTpPECRwwHwYDVR0j BBgwFoAUcpiWy0Id6O1qWY0n8vZJG8q7nyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTg4MzNlOTgtNmYyMS00ZDMwLThkODMtMTQwYWNhOTM4 ZDcxLzEvNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJDQUJCOUYyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJDQUJC OUYyNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTg4MzNlOTgt NmYyMS00ZDMwLThkODMtMTQwYWNhOTM4ZDcxLzEvMzI2MTMwMzYzYTMxMzIzODMz M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzEzOTM3MzQzNzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYG KgYSgwAwDQYJKoZIhvcNAQELBQADggEBABqahbyNacYmUkAQesJq95UA2c1hsMWQ e+s3o1PmJJ/sfBG+evomguqmCqrH/LycZyiC+eKbVNfQGgwROqNnzynIi/W2jQFa BUyI8UdbeTHi0+OmHcpv6b02oUVJCs/VaqwckeTct0wgGItQX/83QQlpMnRUAy5C lGMNgtgznZxwGlvCHT7BxLpZ/JQ+9EbNMD8gvGWfdC8pc8TCB/XaSOYa6QDAxf68 NdroJ0PlPAlacwNxniXq9xp7oyQY9bgJEUOzqcd+tHtStm0eIfxBtx6Gj14CSAdb Ta9Vi6X9N9ANThYUD4aEqEJJRKDRpGeH54BIaoGe1dtKUNnkweSh340= -----END CERTIFICATE-----Generated at Tue Jul 2 11:42:49 2024 by rpki-client on console-fra.rpki-client.org