$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa File: 326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa (raw, json) Hash identifier: Cshc8nekROqGT7Tsmb3KQp1HAASVsdDSZVlEvtSk5EY= Subject key identifier: E7:C7:2A:A9:1C:21:DF:AB:E4:64:97:E2:F9:17:44:B1:80:D6:8F:5C Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 5348A2300F5FE3FEA61BFADE08118A7F0330D5BB Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa Signing time: Sat 08 Mar 2025 16:43:03 +0000 ROA not before: Sat 08 Mar 2025 16:38:03 +0000 ROA not after: Sat 07 Mar 2026 16:43:03 +0000 asID: 212049 IP address blocks: 2a06:1283:b300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 23:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:48:a2:30:0f:5f:e3:fe:a6:1b:fa:de:08:11:8a:7f:03:30:d5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Mar 8 16:38:03 2025 GMT Not After : Mar 7 16:43:03 2026 GMT Subject: CN=E7C72AA91C21DFABE46497E2F91744B180D68F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:65:77:5e:df:e0:5c:32:f7:5a:6b:d1:54:dc: d4:11:49:29:ad:36:63:ce:22:51:58:88:3f:c9:90: bd:58:1a:31:07:34:b9:06:ad:22:12:eb:07:32:86: 83:3d:8a:14:7d:02:55:5a:f7:ab:03:76:7a:1e:15: 8a:52:41:65:c5:7e:19:85:57:94:e5:66:50:94:21: 03:e2:43:dd:a6:cb:cc:ea:35:35:40:4b:dd:07:76: 8a:c2:5d:5f:86:42:4d:8a:45:56:66:ae:70:b2:58: 22:61:7a:06:02:9c:86:64:64:be:c3:8d:41:a0:d0: 84:dd:db:b5:8c:6f:8b:7a:9c:d9:a0:5e:4f:17:66: 05:1e:ae:37:81:fd:69:f2:b1:bb:aa:71:09:4f:72: 1c:b1:02:a3:04:89:2e:64:42:e6:ca:ca:ba:8c:fd: 98:87:09:7d:f4:8d:4c:4e:45:86:41:75:10:94:52: 92:05:97:58:d0:65:ec:c7:13:d1:25:11:0c:17:83: d4:55:88:eb:e3:e0:6a:ab:23:e2:e9:6b:8a:f0:6f: d3:69:e1:78:89:1a:42:f8:ba:4c:85:8a:4a:a5:bb: 32:c2:a2:38:3e:cd:14:db:fb:5a:e3:e4:77:8b:6c: 02:2d:ce:30:c5:b6:81:3b:86:7d:85:b2:54:4f:b8: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C7:2A:A9:1C:21:DF:AB:E4:64:97:E2:F9:17:44:B1:80:D6:8F:5C X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:b300::/40 Signature Algorithm: sha256WithRSAEncryption 12:ef:7c:4b:ff:4c:91:af:45:46:63:e1:63:fd:19:41:07:8d: 40:da:ef:0e:53:ed:f7:7c:6b:26:4a:ca:0b:8e:3c:62:0c:ea: f4:54:79:69:b2:e5:f5:d8:b4:0f:3f:2b:83:b0:87:f5:c0:3c: fa:3e:53:9c:68:e7:d0:4b:f3:73:e1:cc:3b:da:d9:5f:ca:73: 59:13:82:77:03:0c:29:82:6e:35:f5:fe:d7:ba:36:25:fb:b4: 4a:45:a7:d8:c9:55:ad:3d:72:a3:79:38:2b:ee:d1:f7:6c:25: 6e:fa:f3:9e:e5:76:0b:8a:eb:1c:e5:05:ca:85:3a:05:b6:c7: 51:ce:4e:d8:d4:d5:61:90:78:ff:26:53:3c:3c:6e:a0:00:8f: ed:f9:36:3a:cf:bd:36:15:77:bb:d2:a4:77:2d:08:8e:ec:da: 7d:3b:df:ec:eb:15:06:9d:d4:03:55:96:58:ca:a3:54:6e:93: 1e:f7:c5:e9:e7:aa:bd:05:0d:7d:87:f8:0c:72:a5:95:64:53: 01:93:af:06:2c:1e:d6:6a:81:e6:72:81:6a:31:e8:45:cf:8a: 99:80:b9:25:a9:ee:b5:6d:31:39:90:0e:a7:f0:64:f0:5a:cc: 49:48:f4:4c:d1:28:2e:c1:f8:58:27:1e:79:3e:57:13:a0:4a: 39:51:7f:fd -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUU0iiMA9f4/6mG/reCBGKfwMw1bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNTAzMDgxNjM4MDNaFw0yNjAzMDcxNjQzMDNaMDMxMTAvBgNV BAMTKEU3QzcyQUE5MUMyMURGQUJFNDY0OTdFMkY5MTc0NEIxODBENjhGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjZXde3+BcMvdaa9FU3NQRSSmt NmPOIlFYiD/JkL1YGjEHNLkGrSIS6wcyhoM9ihR9AlVa96sDdnoeFYpSQWXFfhmF V5TlZlCUIQPiQ92my8zqNTVAS90HdorCXV+GQk2KRVZmrnCyWCJhegYCnIZkZL7D jUGg0ITd27WMb4t6nNmgXk8XZgUerjeB/WnysbuqcQlPchyxAqMEiS5kQubKyrqM /ZiHCX30jUxORYZBdRCUUpIFl1jQZezHE9ElEQwXg9RViOvj4GqrI+Lpa4rwb9Np 4XiJGkL4ukyFikqluzLCojg+zRTb+1rj5HeLbAItzjDFtoE7hn2FslRPuFgpAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQU58cqqRwh36vkZJfi+RdEsYDWj1wwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjMzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjMwMzQzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoGEoOzMA0GCSqGSIb3DQEBCwUAA4IBAQAS73xL/0yRr0VGY+Fj /RlBB41A2u8OU+33fGsmSsoLjjxiDOr0VHlpsuX12LQPPyuDsIf1wDz6PlOcaOfQ S/Nz4cw72tlfynNZE4J3Awwpgm419f7XujYl+7RKRafYyVWtPXKjeTgr7tH3bCVu +vOe5XYLiusc5QXKhToFtsdRzk7Y1NVhkHj/JlM8PG6gAI/t+TY6z702FXe70qR3 LQiO7Np9O9/s6xUGndQDVZZYyqNUbpMe98Xp56q9BQ19h/gMcqWVZFMBk68GLB7W aoHmcoFqMehFz4qZgLklqe61bTE5kA6n8GTwWsxJSPRM0SguwfhYJx55PlcToEo5 UX/9 -----END CERTIFICATE-----Generated at Sat Apr 5 09:57:12 2025 by rpki-client