$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa File: 326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa (raw, json) Hash identifier: oIbkDGM25IkOf/rMtq4KLdUxHB83t7kg8kzqUGM+R98= Subject key identifier: 41:EB:C8:47:CD:15:A0:3E:4C:4E:99:02:DA:04:70:AD:22:1A:C6:48 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 18249E39EC52BC831CF63F9A75DEA33B47194325 Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa Signing time: Sun 15 Sep 2024 14:36:41 +0000 ROA not before: Sun 15 Sep 2024 14:31:41 +0000 ROA not after: Sun 14 Sep 2025 14:36:41 +0000 asID: 212049 IP address blocks: 2a06:1283:b334::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 03:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:24:9e:39:ec:52:bc:83:1c:f6:3f:9a:75:de:a3:3b:47:19:43:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Sep 15 14:31:41 2024 GMT Not After : Sep 14 14:36:41 2025 GMT Subject: CN=41EBC847CD15A03E4C4E9902DA0470AD221AC648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:6b:b7:92:34:09:7b:a7:4f:ec:ab:f8:e3: 27:c8:4d:91:a3:16:3b:c9:ce:28:21:ba:82:97:d0: 4e:81:35:2d:05:f0:ad:44:26:bd:76:fc:09:e8:21: 1b:cd:d5:3b:20:c9:24:0a:d8:04:7b:4a:1c:95:16: 87:b1:a4:91:dc:5c:ff:b4:49:d5:66:c7:a8:8a:41: 8e:ac:3f:b9:53:ca:df:85:39:73:0d:ae:a6:c2:dc: b3:0f:15:31:88:5f:5c:f9:5f:78:6c:77:c4:a6:5c: 35:e7:3d:f4:07:58:ba:bc:48:90:e6:9e:5f:88:e7: b6:42:91:98:20:e1:5d:80:79:86:7f:6d:36:ed:fe: 04:20:fb:67:3f:7a:e0:77:65:7a:7d:ca:39:cb:84: 38:00:86:1c:43:d9:1d:01:6f:06:36:d1:30:b6:4f: 48:8c:ea:e3:c4:63:db:63:6c:95:ef:05:26:6a:e9: 6b:76:c8:b5:75:c1:12:22:af:66:c3:b8:9f:ba:22: c8:99:31:ed:27:f2:a1:93:a3:fe:1a:58:dd:c3:98: 21:4d:ba:c3:8a:a2:c7:c5:c0:41:00:d6:be:48:2f: 01:d4:61:34:d4:e9:98:b6:24:57:45:52:54:b8:ce: 69:ba:14:42:e1:58:21:af:67:3c:b2:25:d9:d5:14: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EB:C8:47:CD:15:A0:3E:4C:4E:99:02:DA:04:70:AD:22:1A:C6:48 X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:b334::/48 Signature Algorithm: sha256WithRSAEncryption 1b:05:9b:09:b4:07:be:bc:d0:fd:e8:10:3a:f7:89:7f:92:38: 5d:f7:2d:ea:0e:be:9d:8e:f6:6f:f9:f7:74:6a:82:cf:39:06: 04:a6:bc:cb:a2:85:04:88:61:60:cc:94:15:c3:63:c0:3d:64: b2:89:5f:f5:a4:f1:38:13:a5:f6:ef:91:99:09:2f:62:be:a2: ac:95:8b:a3:e7:34:54:0b:ed:e6:ef:76:9d:f2:00:40:7d:ce: 21:d4:9a:e0:3f:b1:5e:8b:10:a2:1f:2a:4f:f6:63:b7:96:7c: a9:27:76:4a:6e:88:69:76:43:49:c4:71:ee:92:b9:d3:e4:0b: 3b:1a:c6:47:88:56:b3:71:7a:6f:e9:a4:d0:92:97:43:a5:76: 4e:aa:c7:ce:d6:89:e7:e7:e2:44:42:dc:74:a1:0d:b1:f4:ca: e2:17:cc:d0:6c:b9:f4:08:30:1e:ba:a5:cd:38:f4:d0:49:d3: b8:69:ea:cb:d7:c8:96:cf:a1:47:1e:2e:a9:25:b5:79:3b:15: a8:83:4c:97:6e:07:9f:e0:b8:87:e4:21:ba:52:ee:b1:21:ff: 59:74:fa:12:31:41:da:77:6d:24:0e:c4:29:3f:f5:d9:e8:8c: e9:d9:f7:69:33:df:f2:de:7b:6e:a3:b2:22:8f:a8:c9:7d:12: 98:3b:8c:b4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUGCSeOexSvIMc9j+add6jO0cZQyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNDA5MTUxNDMxNDFaFw0yNTA5MTQxNDM2NDFaMDMxMTAvBgNV BAMTKDQxRUJDODQ3Q0QxNUEwM0U0QzRFOTkwMkRBMDQ3MEFEMjIxQUM2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVmu3kjQJe6dP7Kv44yfITZGj FjvJzighuoKX0E6BNS0F8K1EJr12/AnoIRvN1TsgySQK2AR7ShyVFoexpJHcXP+0 SdVmx6iKQY6sP7lTyt+FOXMNrqbC3LMPFTGIX1z5X3hsd8SmXDXnPfQHWLq8SJDm nl+I57ZCkZgg4V2AeYZ/bTbt/gQg+2c/euB3ZXp9yjnLhDgAhhxD2R0BbwY20TC2 T0iM6uPEY9tjbJXvBSZq6Wt2yLV1wRIir2bDuJ+6IsiZMe0n8qGTo/4aWN3DmCFN usOKosfFwEEA1r5ILwHUYTTU6Zi2JFdFUlS4zmm6FELhWCGvZzyyJdnVFH7jAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUQevIR80VoD5MTpkC2gRwrSIaxkgwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjMzMzMzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjMwMzQzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoOzNDANBgkqhkiG9w0BAQsFAAOCAQEAGwWbCbQHvrzQ/egQ OveJf5I4Xfct6g6+nY72b/n3dGqCzzkGBKa8y6KFBIhhYMyUFcNjwD1ksolf9aTx OBOl9u+RmQkvYr6irJWLo+c0VAvt5u92nfIAQH3OIdSa4D+xXosQoh8qT/Zjt5Z8 qSd2Sm6IaXZDScRx7pK50+QLOxrGR4hWs3F6b+mk0JKXQ6V2TqrHztaJ5+fiRELc dKENsfTK4hfM0Gy59AgwHrqlzTj00EnTuGnqy9fIls+hRx4uqSW1eTsVqINMl24H n+C4h+QhulLusSH/WXT6EjFB2ndtJA7EKT/12eiM6dn3aTPf8t57bqOyIo+oyX0S mDuMtA== -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:52 2025 by rpki-client