$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3730303a3a2f34302d3430203d3e20323134393736.roa File: 326131343a373538333a3730303a3a2f34302d3430203d3e20323134393736.roa (raw, json) Hash identifier: mdPIsjImm3Eov7vPFeQtRSCN6wSJCAI1UyJtxVzVYR4= Subject key identifier: 30:EC:3E:6D:08:2F:0B:DA:AD:0D:0D:C5:D5:E4:A2:ED:3C:00:DF:BB Certificate issuer: /CN=A609E97AC39E3F53678C0C9422F89947B6146002 Certificate serial: 088D9FBD080C1ACF1215F615F05E14808F74C194 Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3730303a3a2f34302d3430203d3e20323134393736.roa Signing time: Sat 06 Sep 2025 10:45:00 +0000 ROA not before: Sat 06 Sep 2025 10:40:00 +0000 ROA not after: Sat 05 Sep 2026 10:45:00 +0000 asID: 214976 IP address blocks: 2a14:7583:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Sep 2025 07:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8d:9f:bd:08:0c:1a:cf:12:15:f6:15:f0:5e:14:80:8f:74:c1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002 Validity Not Before: Sep 6 10:40:00 2025 GMT Not After : Sep 5 10:45:00 2026 GMT Subject: CN=30EC3E6D082F0BDAAD0D0DC5D5E4A2ED3C00DFBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cb:e6:56:12:3d:7f:94:ec:4e:1b:08:f7:19: 7b:4f:c8:e9:e3:c0:cb:03:d8:39:bc:55:b1:58:f1: bd:1f:ce:a3:54:ca:55:45:b8:47:38:5e:78:01:82: 1c:c8:37:eb:d7:e8:e3:05:47:1a:7f:8b:59:6a:f6: 22:79:b6:2e:4c:a9:65:ce:6f:52:70:e6:a8:50:f2: 8c:18:78:2d:a9:2b:20:ae:69:fd:1a:0b:94:02:d8: 1e:a5:4c:28:15:b1:3f:34:1f:0a:ea:e3:c8:9c:6f: e8:cc:da:44:39:79:c4:37:b3:25:55:05:1d:f0:49: 0c:d7:8c:8d:48:a3:e2:a8:76:7c:fa:fa:30:8c:e8: 44:81:46:f0:29:45:3f:67:46:d4:25:ea:58:32:d4: 29:22:53:8e:3a:5c:8e:73:a3:38:04:98:24:4d:48: da:7b:99:8f:a1:ce:7e:40:35:8e:03:a8:08:c7:42: e9:96:d3:b7:e2:5a:90:7c:d6:12:3d:de:43:bb:5d: f6:50:04:93:8c:e2:2e:cd:9b:95:1e:bd:d6:28:93: f7:5d:ff:9a:63:87:66:5b:78:ad:07:ac:53:6a:fb: 49:40:ba:44:18:10:73:2c:17:0f:dc:e1:80:d0:4e: f6:44:8c:4d:e0:3e:2a:d5:24:40:5b:c8:66:54:5c: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EC:3E:6D:08:2F:0B:DA:AD:0D:0D:C5:D5:E4:A2:ED:3C:00:DF:BB X509v3 Authority Key Identifier: keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer Subject Information Access: Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3730303a3a2f34302d3430203d3e20323134393736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:700::/40 Signature Algorithm: sha256WithRSAEncryption 33:b8:21:71:3e:e4:e8:e8:7d:ec:47:f5:4c:2f:9d:74:bb:e0: f3:e6:f1:61:b6:f9:c5:c2:44:85:1f:14:fb:7c:eb:63:63:20: 17:d6:9f:ef:7c:32:73:17:5b:3c:00:21:23:a7:81:7f:68:9f: f4:22:02:eb:22:71:c3:2a:b6:8f:11:4f:d7:84:42:35:e9:d5: b2:ea:1a:d1:dd:87:87:4f:6d:c7:78:98:de:13:e2:82:f9:e9: 48:86:30:f4:74:f1:11:68:5a:29:79:3f:68:a0:3d:da:e3:36: c1:1a:13:7e:58:04:c0:bf:68:4c:af:06:7f:8c:93:63:05:42: 96:21:d0:e1:5c:98:64:22:28:af:6b:82:82:6f:41:64:c9:40: d7:fd:55:15:e1:3d:25:32:25:4a:53:bd:09:6f:04:68:23:c1: b4:8c:87:5f:ad:49:63:6e:1a:32:5b:f1:cb:f7:d8:5f:37:fe: 7c:c7:80:4f:ff:a1:9f:90:0c:99:a7:ce:dc:79:f8:4a:27:ad: 42:e2:07:5c:97:47:58:e9:80:d6:f2:c3:2e:33:14:c5:28:ab: 82:87:db:82:35:07:fb:d8:22:e2:83:a3:30:78:21:03:db:b1: b8:d8:f8:4e:bd:3e:71:82:a0:ab:ab:13:1e:b8:69:fc:3e:50: bc:2a:1f:fb -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUCI2fvQgMGs8SFfYV8F4UgI90wZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdC NjE0NjAwMjAeFw0yNTA5MDYxMDQwMDBaFw0yNjA5MDUxMDQ1MDBaMDMxMTAvBgNV BAMTKDMwRUMzRTZEMDgyRjBCREFBRDBEMERDNUQ1RTRBMkVEM0MwMERGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWy+ZWEj1/lOxOGwj3GXtPyOnj wMsD2Dm8VbFY8b0fzqNUylVFuEc4XngBghzIN+vX6OMFRxp/i1lq9iJ5ti5MqWXO b1Jw5qhQ8owYeC2pKyCuaf0aC5QC2B6lTCgVsT80Hwrq48icb+jM2kQ5ecQ3syVV BR3wSQzXjI1Io+Kodnz6+jCM6ESBRvApRT9nRtQl6lgy1CkiU446XI5zozgEmCRN SNp7mY+hzn5ANY4DqAjHQumW07fiWpB81hI93kO7XfZQBJOM4i7Nm5UevdYok/dd /5pjh2ZbeK0HrFNq+0lAukQYEHMsFw/c4YDQTvZEjE3gPirVJEBbyGZUXFaLAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUMOw+bQgvC9qtDQ3F1eSi7TwA37swHwYDVR0j BBgwFoAUpgnpesOeP1NnjAyUIviZR7YUYAIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ LzAvQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5jcmww gZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTkt YjA3OS0zMDllZDk3ZjM4MjQvMC9BNjA5RTk3QUMzOUUzRjUzNjc4QzBDOTQyMkY4 OTk0N0I2MTQ2MDAyLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhy c3luYzovL3Jwa2kuYXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8wLzMyNjEzMTM0M2Ez NzM1MzgzMzNhMzczMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzMTM0Mzkz NzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKhR1gwcwDQYJKoZIhvcNAQELBQADggEBADO4IXE+5Ojo fexH9UwvnXS74PPm8WG2+cXCRIUfFPt862NjIBfWn+98MnMXWzwAISOngX9on/Qi AusiccMqto8RT9eEQjXp1bLqGtHdh4dPbcd4mN4T4oL56UiGMPR08RFoWil5P2ig PdrjNsEaE35YBMC/aEyvBn+Mk2MFQpYh0OFcmGQiKK9rgoJvQWTJQNf9VRXhPSUy JUpTvQlvBGgjwbSMh1+tSWNuGjJb8cv32F83/nzHgE//oZ+QDJmnztx5+EonrULi B1yXR1jpgNbywy4zFMUoq4KH24I1B/vYIuKDozB4IQPbsbjY+E69PnGCoKurEx64 afw+ULwqH/s= -----END CERTIFICATE-----Generated at Sun Sep 14 19:07:53 2025 by rpki-client