$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa File: 326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa (raw, json) Hash identifier: Fh8SsLgQsFrzfHmR9MK8Np3pK42GYdpRl5qXFH7TC9I= Subject key identifier: 46:74:9C:BB:4B:D2:C3:89:40:D2:55:74:DA:53:FF:11:59:03:71:05 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 2E207C137214170D1EE8BF43827038D4BD84DD5C Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa Signing time: Fri 29 Dec 2023 17:17:54 +0000 ROA not before: Fri 29 Dec 2023 17:12:54 +0000 ROA not after: Fri 27 Dec 2024 17:17:54 +0000 asID: 203635 IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Apr 2024 01:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:20:7c:13:72:14:17:0d:1e:e8:bf:43:82:70:38:d4:bd:84:dd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Dec 29 17:12:54 2023 GMT Not After : Dec 27 17:17:54 2024 GMT Subject: CN=46749CBB4BD2C38940D25574DA53FF1159037105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:2d:af:41:fc:af:cd:81:9a:64:20:22:91: f4:3e:90:68:68:e6:40:4a:e6:af:e5:3c:ba:d2:76: 6a:9a:93:c7:53:d7:dc:bd:26:46:25:b7:67:3c:34: aa:24:11:02:f3:23:fe:95:08:e2:20:4e:a3:d5:ae: c2:2a:c9:2c:e4:3a:a5:66:ca:0d:41:ce:0d:0e:cb: 9c:c6:da:cf:ac:02:b5:64:0f:49:d7:5e:eb:78:bc: 5e:c9:b3:72:d3:1e:e8:8c:a8:68:c6:42:9a:b6:1f: 56:87:2d:8b:9f:40:b1:30:6a:e3:8c:5b:3a:7c:40: c5:bf:b1:e1:cf:a1:b2:73:57:da:52:d7:eb:a6:b0: bd:21:2e:09:e8:2b:ad:f8:20:7d:24:43:3e:be:86: 0a:84:e5:3f:56:9d:bd:44:6a:92:64:d2:0f:bc:99: e9:32:60:48:00:27:6f:7c:30:a9:d1:f5:71:b1:c1: 68:95:19:63:8d:11:52:c0:03:ee:09:35:38:5e:9f: 8a:fb:f7:a2:27:5a:b9:5b:78:98:76:80:e4:1b:35: 72:31:b9:0d:56:12:c6:fa:f3:da:74:c6:d9:de:fd: 8e:7d:c8:80:72:36:e2:5a:44:9f:2b:22:75:ce:63: 4e:08:d2:20:7f:7d:b2:72:cb:77:9a:5b:37:f3:af: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:74:9C:BB:4B:D2:C3:89:40:D2:55:74:DA:53:FF:11:59:03:71:05 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a5:4c:6b:a3:34:39:5b:64:7a:ef:d1:20:3b:04:68:ee:ad:49: d9:d2:45:32:f2:55:e4:bb:52:77:8c:0a:35:18:30:86:02:5c: 07:f1:e0:01:dd:74:a8:34:94:98:67:f7:7e:68:c5:b0:a8:d0: b2:6b:2b:b6:9d:33:e8:ab:ec:bc:8a:ea:8e:d6:3b:38:39:c9: c9:8f:a8:ca:4d:9e:94:c6:a5:0f:7d:02:17:23:7c:7d:3d:82: 43:4d:7d:b8:5c:c8:c9:49:f7:f8:d1:df:b7:55:66:ed:fc:96: 63:4e:bc:02:88:87:ae:7d:8b:69:e5:a1:63:8e:d4:76:df:6a: ec:ab:40:e7:f6:6b:fc:22:65:c1:03:8f:f1:d3:aa:d6:14:68: c8:11:d2:a2:76:ef:4e:7b:e8:db:c2:b6:ce:6a:75:b9:a8:e8: 92:5c:a4:c7:20:bc:65:c7:a4:8d:a5:8e:1f:2a:a1:67:28:4a: d0:89:9a:c8:4b:c5:b6:93:8d:b8:39:02:47:86:9a:ac:cb:1e: c8:ed:49:e7:c8:6f:55:66:6b:f5:7d:5f:75:cd:25:4c:84:75: 96:92:74:b4:0e:6b:fb:e5:55:fb:c2:d5:49:68:bf:77:59:82: 3b:42:c2:6b:05:b6:64:c3:5f:44:56:0b:22:6b:69:bf:52:22: 26:13:f0:e1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIULiB8E3IUFw0e6L9DgnA41L2E3VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yMzEyMjkxNzEyNTRaFw0yNDEyMjcxNzE3NTRaMDMxMTAvBgNV BAMTKDQ2NzQ5Q0JCNEJEMkMzODk0MEQyNTU3NERBNTNGRjExNTkwMzcxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjS2vQfyvzYGaZCAikfQ+kGho 5kBK5q/lPLrSdmqak8dT19y9JkYlt2c8NKokEQLzI/6VCOIgTqPVrsIqySzkOqVm yg1Bzg0Oy5zG2s+sArVkD0nXXut4vF7Js3LTHuiMqGjGQpq2H1aHLYufQLEwauOM Wzp8QMW/seHPobJzV9pS1+umsL0hLgnoK634IH0kQz6+hgqE5T9Wnb1EapJk0g+8 mekyYEgAJ298MKnR9XGxwWiVGWONEVLAA+4JNThen4r796InWrlbeJh2gOQbNXIx uQ1WEsb689p0xtne/Y59yIByNuJaRJ8rInXOY04I0iB/fbJyy3eaWzfzr3V3AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQURnScu0vSw4lA0lV02lP/EVkDcQUwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMzM2MzMzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoKYESwCzANBgkqhkiG9w0BAQsFAAOCAQEApUxrozQ5W2R679Eg OwRo7q1J2dJFMvJV5LtSd4wKNRgwhgJcB/HgAd10qDSUmGf3fmjFsKjQsmsrtp0z 6KvsvIrqjtY7ODnJyY+oyk2elMalD30CFyN8fT2CQ019uFzIyUn3+NHft1Vm7fyW Y068AoiHrn2LaeWhY47Udt9q7KtA5/Zr/CJlwQOP8dOq1hRoyBHSonbvTnvo28K2 zmp1uajoklykxyC8ZcekjaWOHyqhZyhK0ImayEvFtpONuDkCR4aarMseyO1J58hv VWZr9X1fdc0lTIR1lpJ0tA5r++VV+8LVSWi/d1mCO0LCawW2ZMNfRFYLImtpv1Ii JhPw4Q== -----END CERTIFICATE-----Generated at Sun Apr 28 11:23:46 2024 by rpki-client on console-ams.rpki-client.org