$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa File: 326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa (raw, json) Hash identifier: 6Pt01QxKKDcX9hPmKKZgZ8vubiKWpaORSKSxKXJA7qU= Subject key identifier: 0F:1B:40:1F:0E:B2:D0:21:98:03:10:C3:A6:AD:17:FC:C1:CC:4D:F4 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 3D0EC1EDCC0BAD3635B6534F90570C6B4B635AAE Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa Signing time: Sun 15 Sep 2024 14:36:43 +0000 ROA not before: Sun 15 Sep 2024 14:31:43 +0000 ROA not after: Sun 14 Sep 2025 14:36:43 +0000 asID: 199689 IP address blocks: 2a06:1283:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0e:c1:ed:cc:0b:ad:36:35:b6:53:4f:90:57:0c:6b:4b:63:5a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Sep 15 14:31:43 2024 GMT Not After : Sep 14 14:36:43 2025 GMT Subject: CN=0F1B401F0EB2D021980310C3A6AD17FCC1CC4DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:2b:94:62:c6:a9:78:14:a1:22:b0:fb:b0: 69:09:53:5e:02:1f:3c:13:58:03:5d:ef:74:89:a5: 25:1a:aa:07:c3:51:e7:1c:b0:a0:5d:1c:0e:d2:b0: 53:a2:c9:fb:12:e3:d2:69:45:65:85:32:bb:0e:85: a6:a9:68:c5:ee:2f:3c:cc:ae:df:33:c9:0a:e4:9a: e4:54:e1:cf:00:fc:8a:81:ee:25:64:9e:2c:4c:f3: 7d:b1:48:0f:57:2e:62:de:f9:bf:e6:bf:c5:72:e4: 0d:63:ed:3e:ea:60:96:81:57:aa:89:22:ce:df:3b: ff:36:10:88:0e:43:77:15:54:63:aa:c3:8e:ad:b7: c9:a4:75:4a:fc:df:94:61:35:05:80:f5:9d:a4:d5: 17:57:3c:46:3f:f9:0f:97:70:d5:50:8b:60:80:6a: 5d:76:30:e8:9a:2f:9c:16:e8:14:eb:4f:75:df:04: ac:66:af:57:e7:24:75:fc:1f:d9:a1:6a:d7:0e:c3: 4c:0c:3b:f9:74:95:68:38:51:0c:0a:2e:7f:a2:2c: 7e:fd:56:42:49:41:a6:e4:57:35:41:41:03:fd:b0: ad:a7:8c:3a:cc:ad:fa:f7:9d:6a:22:93:85:25:95: 52:c3:8c:d1:c4:7e:f7:f5:89:48:59:7b:20:11:f9: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1B:40:1F:0E:B2:D0:21:98:03:10:C3:A6:AD:17:FC:C1:CC:4D:F4 X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:dead::/48 Signature Algorithm: sha256WithRSAEncryption ba:cf:15:d6:7a:f1:d9:d1:9c:f4:ba:77:36:c7:be:d9:8c:88: 43:b5:59:52:c6:3b:b8:86:1e:12:63:48:8e:b0:44:d6:4b:93: 6f:da:3e:ec:70:41:e7:66:cc:fd:79:41:09:6c:42:7d:35:82: 6c:66:a0:03:f4:07:f0:3c:17:6d:0b:23:85:e1:28:90:0c:c4: 82:37:2e:05:c7:fa:3f:72:3f:e4:48:0c:32:ff:f5:c5:69:7b: 01:d9:84:95:85:b5:81:13:fd:a2:98:30:bf:16:29:06:20:3c: 2d:e3:1e:11:94:6f:76:12:ca:e0:99:30:43:71:01:83:80:f0: 3b:4d:ef:10:5b:eb:41:3a:32:9b:fd:bc:9c:31:63:50:e9:a2: e7:a3:74:5d:85:28:5a:95:6d:b6:de:f1:b9:ca:a8:5a:db:19: 85:df:86:7b:7c:b3:06:e4:81:c3:f3:f9:23:1e:b7:87:0e:f5: c6:f0:9c:5f:97:8d:73:b4:43:2a:9c:7e:21:d9:e4:de:b8:81: c8:7d:cc:87:85:f1:be:41:cd:ad:ed:f3:54:be:15:52:d8:8a: 49:e0:82:1d:e1:c5:b0:41:2d:6e:21:2d:40:e1:b7:48:b9:8b: ee:63:d5:d7:db:f8:6c:a2:de:76:0c:d6:12:e2:cc:c4:73:d8: 72:26:77:7f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUPQ7B7cwLrTY1tlNPkFcMa0tjWq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNDA5MTUxNDMxNDNaFw0yNTA5MTQxNDM2NDNaMDMxMTAvBgNV BAMTKDBGMUI0MDFGMEVCMkQwMjE5ODAzMTBDM0E2QUQxN0ZDQzFDQzRERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xyuUYsapeBShIrD7sGkJU14C HzwTWANd73SJpSUaqgfDUeccsKBdHA7SsFOiyfsS49JpRWWFMrsOhaapaMXuLzzM rt8zyQrkmuRU4c8A/IqB7iVknixM832xSA9XLmLe+b/mv8Vy5A1j7T7qYJaBV6qJ Is7fO/82EIgOQ3cVVGOqw46tt8mkdUr835RhNQWA9Z2k1RdXPEY/+Q+XcNVQi2CA al12MOiaL5wW6BTrT3XfBKxmr1fnJHX8H9mhatcOw0wMO/l0lWg4UQwKLn+iLH79 VkJJQabkVzVBQQP9sK2njDrMrfr3nWoik4UllVLDjNHEfvf1iUhZeyAR+dlhAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUDxtAHw6y0CGYAxDDpq0X/MHMTfQwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2NDY1NjE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzOTM2MzgzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoPerTANBgkqhkiG9w0BAQsFAAOCAQEAus8V1nrx2dGc9Lp3 Nse+2YyIQ7VZUsY7uIYeEmNIjrBE1kuTb9o+7HBB52bM/XlBCWxCfTWCbGagA/QH 8DwXbQsjheEokAzEgjcuBcf6P3I/5EgMMv/1xWl7AdmElYW1gRP9opgwvxYpBiA8 LeMeEZRvdhLK4JkwQ3EBg4DwO03vEFvrQToym/28nDFjUOmi56N0XYUoWpVttt7x ucqoWtsZhd+Ge3yzBuSBw/P5Ix63hw71xvCcX5eNc7RDKpx+Idnk3riByH3Mh4Xx vkHNre3zVL4VUtiKSeCCHeHFsEEtbiEtQOG3SLmL7mPV19v4bKLedgzWEuLMxHPY ciZ3fw== -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org