$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa File: 326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa (raw, json) Hash identifier: hIoQygfqMh2G9k4J9hWJhvsQdJwhbbOaJb9sXnIydIg= Subject key identifier: 42:51:96:12:C1:1B:AC:03:7B:07:93:29:E6:FE:D0:77:39:0C:57:B1 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 0CCB3667748166B660209DA3F830651839720A11 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa Signing time: Fri 17 May 2024 14:45:12 +0000 ROA not before: Fri 17 May 2024 14:40:12 +0000 ROA not after: Fri 16 May 2025 14:45:12 +0000 asID: 47509 IP address blocks: 2a0a:6044:b100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Jun 2024 05:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cb:36:67:74:81:66:b6:60:20:9d:a3:f8:30:65:18:39:72:0a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: May 17 14:40:12 2024 GMT Not After : May 16 14:45:12 2025 GMT Subject: CN=42519612C11BAC037B079329E6FED077390C57B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:18:71:33:5c:5d:e9:4b:1f:5a:b9:f6:99: 18:4b:1d:27:a7:22:97:c5:69:88:de:da:47:ae:4a: 41:cb:07:01:33:fb:8f:c0:d5:3c:ab:cd:67:2d:6c: 50:fc:3e:67:6f:7a:f6:71:c8:0d:b2:8f:16:25:b9: d5:f0:81:fb:d1:f5:86:4a:ef:10:7c:5c:bf:4e:8f: d9:05:34:93:ad:f6:1e:2d:b2:c6:01:38:71:45:29: c7:fa:54:7c:c3:33:ff:dc:60:07:a3:43:a5:68:6d: 26:52:c7:7c:50:4a:e7:3f:f1:6b:d0:44:ae:2a:91: 30:7b:27:43:d4:c6:d7:80:95:90:c8:6f:b2:53:09: b5:f3:8a:e2:12:00:be:b8:2d:15:24:ec:a2:bb:3d: 26:05:75:09:34:91:47:66:cc:09:ef:93:3a:81:aa: 74:6a:85:8f:b9:19:e9:f9:e6:d7:4c:04:1f:91:f3: 34:9b:ff:fd:96:31:a1:eb:82:8c:0f:49:17:b6:00: b0:2d:68:44:b6:f5:bf:0b:03:b8:70:bc:d6:64:27: 86:e7:be:62:ac:50:23:fd:fb:8a:00:8b:2c:63:52: 08:b1:6b:66:35:9f:6d:1e:82:41:61:43:2e:61:98: 47:4d:29:5c:e5:81:d1:a2:1a:23:b9:1d:3d:f8:16: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:51:96:12:C1:1B:AC:03:7B:07:93:29:E6:FE:D0:77:39:0C:57:B1 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b100::/40 Signature Algorithm: sha256WithRSAEncryption 52:54:b1:19:88:e5:b5:dd:9e:d1:b6:a9:1b:2b:46:99:b9:b8: 65:eb:29:be:63:f1:cb:49:da:59:b1:de:cc:18:0a:e5:38:ad: 00:fd:66:72:16:59:3f:15:57:8f:de:05:8d:c6:cc:26:4c:4a: 9a:b9:d0:28:9b:12:36:3b:31:ab:d3:d5:17:a1:cf:99:01:35: 55:5f:ae:99:a2:b9:e2:58:00:bb:e6:00:29:76:4f:df:21:a5: 76:cf:ab:89:b8:e1:ad:ee:8e:bc:61:8a:32:5b:ff:0c:09:51: 6c:8e:7b:55:76:c8:86:d2:54:b4:3e:25:63:c3:1d:83:6c:a4: 5f:05:73:a2:c5:79:02:d1:4c:08:2d:f5:c1:d6:0f:28:3c:e5: 6c:4e:72:a0:7b:e5:3e:e4:6d:1c:20:c0:b8:be:18:e5:37:62: 6b:98:8a:ba:6f:4d:5f:12:e4:84:4a:fc:8e:a0:27:d9:d9:d5: 5f:31:41:82:d2:1a:36:83:3a:ce:be:e2:77:b7:bd:86:0a:63: a7:ff:60:88:1b:f8:aa:b4:65:48:db:37:37:02:c2:ee:1d:12: 85:32:4e:b4:ae:ee:46:81:0b:8a:e3:b4:a3:99:c9:16:a3:6d: 0d:c6:ea:95:3a:d5:a8:77:87:7c:ec:b0:3e:65:0e:88:4e:b8: c9:2d:ac:d1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUDMs2Z3SBZrZgIJ2j+DBlGDlyChEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA1MTcxNDQwMTJaFw0yNTA1MTYxNDQ1MTJaMDMxMTAvBgNV BAMTKDQyNTE5NjEyQzExQkFDMDM3QjA3OTMyOUU2RkVEMDc3MzkwQzU3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ARhxM1xd6UsfWrn2mRhLHSen IpfFaYje2keuSkHLBwEz+4/A1TyrzWctbFD8PmdvevZxyA2yjxYludXwgfvR9YZK 7xB8XL9Oj9kFNJOt9h4tssYBOHFFKcf6VHzDM//cYAejQ6VobSZSx3xQSuc/8WvQ RK4qkTB7J0PUxteAlZDIb7JTCbXziuISAL64LRUk7KK7PSYFdQk0kUdmzAnvkzqB qnRqhY+5Gen55tdMBB+R8zSb//2WMaHrgowPSRe2ALAtaES29b8LA7hwvNZkJ4bn vmKsUCP9+4oAiyxjUgixa2Y1n20egkFhQy5hmEdNKVzlgdGiGiO5HT34FrYDAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUQlGWEsEbrAN7B5Mp5v7QdzkMV7EwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MjMxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM0MzczNTMwMzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqCmBEsTANBgkqhkiG9w0BAQsFAAOCAQEAUlSxGYjltd2e0bapGytG mbm4ZespvmPxy0naWbHezBgK5TitAP1mchZZPxVXj94FjcbMJkxKmrnQKJsSNjsx q9PVF6HPmQE1VV+umaK54lgAu+YAKXZP3yGlds+ribjhre6OvGGKMlv/DAlRbI57 VXbIhtJUtD4lY8Mdg2ykXwVzosV5AtFMCC31wdYPKDzlbE5yoHvlPuRtHCDAuL4Y 5Tdia5iKum9NXxLkhEr8jqAn2dnVXzFBgtIaNoM6zr7id7e9hgpjp/9giBv4qrRl SNs3NwLC7h0ShTJOtK7uRoELiuO0o5nJFqNtDcbqlTrVqHeHfOywPmUOiE64yS2s 0Q== -----END CERTIFICATE-----Generated at Sun Jun 23 14:13:43 2024 by rpki-client on console-fra.rpki-client.org