$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a6164333a3a2f34382d3438203d3e20323136333131.roa File: 326130613a363034343a6164333a3a2f34382d3438203d3e20323136333131.roa (raw, json) Hash identifier: GTS8CW4NthEkdhdRtmYVHx73yvHqQLcw+9i03tS3TII= Subject key identifier: DB:82:08:E3:35:10:A0:4B:CE:45:6A:1F:D5:AA:CA:EB:EE:47:E0:00 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 654117DDB1AB644B56A3BB3347990C91EC01F5B0 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a6164333a3a2f34382d3438203d3e20323136333131.roa Signing time: Sat 01 Jun 2024 20:14:25 +0000 ROA not before: Sat 01 Jun 2024 20:09:25 +0000 ROA not after: Sat 31 May 2025 20:14:25 +0000 asID: 216311 IP address blocks: 2a0a:6044:ad3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Jun 2024 22:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:41:17:dd:b1:ab:64:4b:56:a3:bb:33:47:99:0c:91:ec:01:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jun 1 20:09:25 2024 GMT Not After : May 31 20:14:25 2025 GMT Subject: CN=DB8208E33510A04BCE456A1FD5AACAEBEE47E000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:79:bd:de:9d:08:8d:17:6c:ac:63:00:e3: 27:04:ed:47:54:7e:2d:f7:7b:41:84:69:85:93:40: ff:c5:47:ef:17:29:8c:08:6f:b9:2b:3a:58:9a:d9: 50:a6:21:fe:9e:65:31:1a:e7:23:7e:07:7c:ed:84: 9c:36:82:21:d9:d2:7e:fa:d8:0a:54:14:a5:be:ef: 4d:df:f3:8b:85:43:24:d8:51:18:08:11:66:58:82: 67:dd:55:68:32:78:37:c4:46:a3:a8:4b:1f:43:91: 7d:1f:9e:c5:97:73:64:ed:90:a3:5e:88:ba:08:20: 2f:55:a2:b9:0b:54:1e:d1:e1:d6:45:68:c2:09:3d: 91:85:b0:4d:0d:67:b9:b7:fb:82:22:67:4e:0c:62: 5a:d4:8e:e4:a9:d0:63:b3:76:6b:d8:fe:4f:da:30: f8:cb:06:aa:8c:79:0d:af:9c:62:cc:7a:f4:8d:e9: 95:4d:bb:65:30:1b:cb:b0:c3:3a:6f:a1:c9:33:83: b8:04:fb:af:9a:54:60:ef:fb:c8:59:e4:30:44:cf: 8c:ab:33:17:ef:41:f2:bc:e0:f5:16:27:3f:06:23: 14:92:04:08:12:bb:ba:09:a4:5b:78:88:cd:a6:b3: 58:ed:9a:8c:82:d7:d6:0a:66:3f:49:ed:b3:65:0b: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:82:08:E3:35:10:A0:4B:CE:45:6A:1F:D5:AA:CA:EB:EE:47:E0:00 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a6164333a3a2f34382d3438203d3e20323136333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ad3::/48 Signature Algorithm: sha256WithRSAEncryption a0:6a:ca:76:93:ff:25:04:79:ef:47:18:07:9e:b1:00:b5:a3: c6:e0:bb:69:12:0d:1d:ca:89:96:cd:38:a5:25:b6:a4:fb:79: dd:2d:c9:4a:2f:79:59:d0:c5:e0:71:50:fd:34:b8:79:c4:3c: 75:be:99:9c:1c:5b:73:d1:0a:c7:3b:9f:3f:ed:f1:17:09:53: 63:6b:39:83:c5:28:01:b3:96:b1:1c:06:a5:0c:e0:4c:ff:b2: d6:e5:5b:23:61:b5:65:d7:c3:67:92:95:f3:85:e7:90:d6:0d: 8b:7e:ce:38:0f:84:62:ba:12:37:dc:dd:0d:0b:bc:f3:77:fc: c4:70:4a:9e:bd:77:d9:a2:a4:54:f6:c5:f6:0e:1f:b4:a3:b0: b6:7f:17:98:f2:3a:1f:92:1e:76:37:5b:1c:f4:10:d4:14:94: 59:71:7e:45:5a:48:27:49:b3:19:4e:27:78:b9:b0:b4:2b:4e: df:5c:50:70:88:fa:63:30:46:ed:f2:de:f1:a7:05:f7:60:7e: 9d:ce:0d:05:05:3a:72:94:a0:c5:21:0a:65:d7:a4:88:ec:97: 72:56:cb:62:8e:8f:8d:1d:6a:64:c0:84:1d:73:75:79:b5:8e: 4b:53:40:3b:0f:fa:1b:de:8d:2c:71:8a:01:9a:cb:36:5c:b9: 0c:d0:8d:8f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZUEX3bGrZEtWo7szR5kMkewB9bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA2MDEyMDA5MjVaFw0yNTA1MzEyMDE0MjVaMDMxMTAvBgNV BAMTKERCODIwOEUzMzUxMEEwNEJDRTQ1NkExRkQ1QUFDQUVCRUU0N0UwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xHm93p0IjRdsrGMA4ycE7UdU fi33e0GEaYWTQP/FR+8XKYwIb7krOlia2VCmIf6eZTEa5yN+B3zthJw2giHZ0n76 2ApUFKW+703f84uFQyTYURgIEWZYgmfdVWgyeDfERqOoSx9DkX0fnsWXc2TtkKNe iLoIIC9VorkLVB7R4dZFaMIJPZGFsE0NZ7m3+4IiZ04MYlrUjuSp0GOzdmvY/k/a MPjLBqqMeQ2vnGLMevSN6ZVNu2UwG8uwwzpvockzg7gE+6+aVGDv+8hZ5DBEz4yr MxfvQfK84PUWJz8GIxSSBAgSu7oJpFt4iM2ms1jtmoyC19YKZj9J7bNlC4wjAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU24II4zUQoEvORWof1arK6+5H4AAwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MTY0MzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzYzMzMxMzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqCmBECtMwDQYJKoZIhvcNAQELBQADggEBAKBqynaT/yUEee9HGAee sQC1o8bgu2kSDR3KiZbNOKUltqT7ed0tyUoveVnQxeBxUP00uHnEPHW+mZwcW3PR Csc7nz/t8RcJU2NrOYPFKAGzlrEcBqUM4Ez/stblWyNhtWXXw2eSlfOF55DWDYt+ zjgPhGK6Ejfc3Q0LvPN3/MRwSp69d9mipFT2xfYOH7SjsLZ/F5jyOh+SHnY3Wxz0 ENQUlFlxfkVaSCdJsxlOJ3i5sLQrTt9cUHCI+mMwRu3y3vGnBfdgfp3ODQUFOnKU oMUhCmXXpIjsl3JWy2KOj40damTAhB1zdXm1jktTQDsP+hvejSxxigGayzZcuQzQ jY8= -----END CERTIFICATE-----Generated at Thu Jun 13 07:02:42 2024 by rpki-client on console-fra.rpki-client.org