$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f33322d3438203d3e2030.roa File: 326130363a313238323a3a2f33322d3438203d3e2030.roa (raw, json) Hash identifier: vJ0qkMWpV2OnLAFXaBz+BxlK7kNKmj7zan157wdGWzQ= Subject key identifier: DF:CB:38:48:18:9F:E9:21:E5:FB:F7:63:DC:2A:99:49:71:70:71:93 Certificate issuer: /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593 Certificate serial: 7CEA47F91DDDCF90DE70E782F1BE28CC0687BCB3 Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer Subject info access: rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f33322d3438203d3e2030.roa Signing time: Thu 03 Jul 2025 15:52:55 +0000 ROA not before: Thu 03 Jul 2025 15:47:55 +0000 ROA not after: Thu 02 Jul 2026 15:52:55 +0000 asID: 0 IP address blocks: 2a06:1282::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ea:47:f9:1d:dd:cf:90:de:70:e7:82:f1:be:28:cc:06:87:bc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593 Validity Not Before: Jul 3 15:47:55 2025 GMT Not After : Jul 2 15:52:55 2026 GMT Subject: CN=DFCB3848189FE921E5FBF763DC2A994971707193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:25:9c:39:8c:d6:33:46:9c:87:b2:d8:98: 48:7a:1a:db:19:64:a9:69:5b:e3:6b:da:52:b3:cc: 56:02:76:2c:9f:54:68:2c:f5:f1:06:02:df:da:cf: 17:52:23:17:f8:ef:9f:56:32:38:42:18:5d:31:ed: f7:93:66:c7:99:64:2f:02:28:56:b4:b3:37:d1:f7: 67:f4:a4:5b:af:2d:aa:4d:e1:92:f1:3f:4c:84:4b: f2:1d:f6:8a:eb:7a:a3:c8:a6:95:b7:54:b4:83:db: 6b:27:cb:ed:bc:03:26:d5:96:63:57:7f:d7:60:4c: b9:7d:a0:5e:6a:84:f2:af:a3:83:69:3d:dc:f9:35: 28:6e:1b:9d:b6:5f:38:33:f2:66:2b:34:25:3a:7b: 83:c4:c8:bc:bc:a2:bd:2b:7a:47:7c:4a:a1:6c:a9: f2:c1:9c:36:55:f2:dd:ca:a9:97:a2:e2:a4:fa:ef: e1:9f:ac:70:89:2c:d6:93:00:08:c3:1d:07:83:75: 6d:90:47:18:0c:ef:3b:15:df:b8:e7:ce:61:29:26: 0a:11:b5:08:69:09:34:b9:9c:14:ba:7e:1e:ec:da: 91:f7:3d:34:59:5c:59:f1:7e:0c:15:2e:24:57:79: ea:3d:d7:b8:f6:fa:de:0c:d1:ba:49:65:5b:0f:a8: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CB:38:48:18:9F:E9:21:E5:FB:F7:63:DC:2A:99:49:71:70:71:93 X509v3 Authority Key Identifier: keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer Subject Information Access: Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f33322d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1282::/32 Signature Algorithm: sha256WithRSAEncryption 3b:16:2f:47:73:78:9f:ca:0c:a9:a7:d3:e0:5a:c7:87:57:80: 82:d9:eb:18:8b:a3:f0:40:3f:9f:b8:e3:9f:6b:a9:69:6d:2d: 8b:71:cc:bf:e5:13:91:6c:c5:61:3b:48:4f:92:9d:14:90:35: a8:b4:a9:fe:0a:cb:34:23:79:83:be:8f:b6:55:d0:b8:aa:31: 00:cf:bc:17:f2:5e:81:f1:ef:60:2c:89:52:eb:fe:dc:09:b5: c6:ee:26:da:7d:01:f4:8c:97:f8:c0:e0:4b:a3:9d:6b:e1:49: 36:9f:14:a4:35:a5:5c:c6:77:1b:b7:40:a0:1e:f6:37:6f:07: 3f:34:b6:2c:1d:6e:3f:94:b7:77:fc:36:58:ef:fa:36:73:9a: 1c:fe:6c:81:ad:3e:3c:bb:75:67:df:19:ce:8f:ce:b1:e7:93: 5d:c6:34:eb:b9:02:35:56:7e:e7:2a:fe:5a:7b:55:59:1e:1b: 45:9f:e4:80:ea:44:45:eb:8b:8a:10:e0:43:39:4d:59:e0:a0: 42:82:d0:e9:aa:84:79:6d:9f:83:80:87:10:ba:b2:ee:6a:4a: 86:cb:40:a4:e5:3c:75:0e:3f:71:c7:38:80:cf:47:f0:74:19: 17:e1:85:76:96:7d:a4:12:2f:e1:f9:a6:7b:e8:32:e4:2d:e6: cd:c5:92:79 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUfOpH+R3dz5DecOeC8b4ozAaHvLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMwRjlGN0FBOTNCQTE3MzVGNTlBMDA0RTM3NzEwQzUx REZCQjU5MzAeFw0yNTA3MDMxNTQ3NTVaFw0yNjA3MDIxNTUyNTVaMDMxMTAvBgNV BAMTKERGQ0IzODQ4MTg5RkU5MjFFNUZCRjc2M0RDMkE5OTQ5NzE3MDcxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssyWcOYzWM0ach7LYmEh6GtsZ ZKlpW+Nr2lKzzFYCdiyfVGgs9fEGAt/azxdSIxf4759WMjhCGF0x7feTZseZZC8C KFa0szfR92f0pFuvLapN4ZLxP0yES/Id9orreqPIppW3VLSD22sny+28AybVlmNX f9dgTLl9oF5qhPKvo4NpPdz5NShuG522Xzgz8mYrNCU6e4PEyLy8or0rekd8SqFs qfLBnDZV8t3KqZei4qT67+GfrHCJLNaTAAjDHQeDdW2QRxgM7zsV37jnzmEpJgoR tQhpCTS5nBS6fh7s2pH3PTRZXFnxfgwVLiRXeeo917j2+t4M0bpJZVsPqBHLAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQU38s4SBif6SHl+/dj3CqZSXFwcZMwHwYDVR0j BBgwFoAUjA+feqk7oXNfWaAE43cQxR37tZMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5zbi1wLmlvL3JlcG8vc24tcC1pby8y LzhDMEY5RjdBQTkzQkExNzM1RjU5QTAwNEUzNzcxMEM1MURGQkI1OTMuY3JsMIGT BggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83LzhDMEY5RjdBQTkzQkExNzM1RjU5QTAwNEUzNzcxMEM1MURGQkI1OTMu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLnNu LXAuaW8vcmVwby9zbi1wLWlvLzIvMzI2MTMwMzYzYTMxMzIzODMyM2EzYTJmMzMz MjJkMzQzODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqBhKCMA0GCSqGSIb3DQEBCwUA A4IBAQA7Fi9Hc3ifygypp9PgWseHV4CC2esYi6PwQD+fuOOfa6lpbS2Lccy/5ROR bMVhO0hPkp0UkDWotKn+Css0I3mDvo+2VdC4qjEAz7wX8l6B8e9gLIlS6/7cCbXG 7ibafQH0jJf4wOBLo51r4Uk2nxSkNaVcxncbt0CgHvY3bwc/NLYsHW4/lLd3/DZY 7/o2c5oc/myBrT48u3Vn3xnOj86x55NdxjTruQI1Vn7nKv5ae1VZHhtFn+SA6kRF 64uKEOBDOU1Z4KBCgtDpqoR5bZ+DgIcQurLuakqGy0Ck5Tx1Dj9xxziAz0fwdBkX 4YV2ln2kEi/h+aZ76DLkLebNxZJ5 -----END CERTIFICATE-----Generated at Sat Jul 5 08:29:38 2025 by rpki-client