$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214731.roa File: AS214731.roa (raw, json) Hash identifier: TU6ljXBc9o/rY9vgZsF0DZctKZ622vDiRXd7Eqqxro4= Subject key identifier: 33:B0:3F:37:CD:61:10:0A:6F:E5:E7:57:73:A4:AA:33:58:A2:E5:4A Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 42B65BEA0DC435EEBCB23F95EAED9B6F95ABDD49 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214731.roa Signing time: Thu 29 Aug 2024 03:41:18 +0000 ROA not before: Thu 29 Aug 2024 03:36:18 +0000 ROA not after: Thu 28 Aug 2025 03:41:18 +0000 asID: 214731 IP address blocks: 2a06:1281:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b6:5b:ea:0d:c4:35:ee:bc:b2:3f:95:ea:ed:9b:6f:95:ab:dd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:18 2024 GMT Not After : Aug 28 03:41:18 2025 GMT Subject: CN=33B03F37CD61100A6FE5E75773A4AA3358A2E54A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:d3:16:2f:3f:d6:e2:78:3a:6f:38:08:fa: 92:33:5a:58:66:7d:95:78:a3:c5:6b:3a:5f:41:ec: f3:c1:4f:d8:78:a2:fc:b3:bd:29:d6:43:38:3e:3c: f0:40:32:c3:54:27:3b:48:9e:d5:33:68:1f:4c:84: 83:57:0a:7c:91:a3:a9:9c:95:58:78:2b:43:16:94: 9f:2f:9b:30:b3:51:a4:1e:b1:6e:df:6c:05:28:de: 97:c2:42:3e:a8:8f:96:bb:93:21:0d:04:df:a0:17: 07:cb:ba:fd:63:98:d5:54:b4:be:71:9e:84:8a:04: 92:6d:f0:ac:5d:49:a9:e8:06:2b:45:ff:50:a6:45: cf:56:48:8d:0c:01:32:c3:95:a3:eb:32:2e:06:2c: 9b:ff:61:e9:4c:6b:41:53:b0:cb:b7:6d:94:c2:f1: 98:d4:9f:15:bf:a2:89:2d:fd:36:f9:7b:94:81:01: 71:5f:15:7c:d6:06:44:b2:7e:f1:82:88:02:55:6f: 7e:4d:8f:62:e2:d0:81:fb:e4:f1:3f:e1:c0:75:68: 91:83:e9:62:e5:98:7b:20:4d:e5:a9:3e:7b:d9:92: a4:ab:79:85:19:17:b8:c4:da:57:a3:64:8b:04:ea: dd:ac:82:8b:87:fa:53:69:0e:23:2f:82:e7:11:03: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:3F:37:CD:61:10:0A:6F:E5:E7:57:73:A4:AA:33:58:A2:E5:4A X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:4000::/36 Signature Algorithm: sha256WithRSAEncryption 8e:b6:0e:61:c2:fb:ac:3f:bb:2a:f8:c8:1e:d7:a6:24:14:be: 91:71:1e:ed:e8:49:4f:f7:ce:9f:3c:75:6a:fb:00:5c:17:fb: c6:74:8d:fb:4b:a7:9c:76:b2:f7:cd:17:dc:a5:74:06:bd:a3: aa:2f:c8:4f:9e:f0:f7:f7:07:ca:31:32:02:30:8e:b8:3f:bc: c6:4f:57:91:c5:92:4f:c9:25:a6:a5:68:0b:b1:7f:32:38:4f: 80:8f:a3:bb:65:c6:bd:b0:35:16:b5:e7:3a:1f:d7:ca:cb:b2: e0:0b:5c:eb:cb:ed:e1:ee:f8:a3:eb:74:75:38:d0:43:f4:c7: a4:c2:1c:4e:6c:fb:42:1a:a0:32:da:2a:f2:e8:a8:97:e1:7c: da:8f:22:fd:36:8f:d9:2e:69:61:b6:a0:c5:b3:87:07:39:d8: 5e:8c:0b:2b:a4:9f:fd:58:2f:62:5f:01:5a:e4:d4:e8:e5:c8: b1:4b:9c:d0:96:b7:83:d9:69:6a:a7:f8:ca:64:e3:c0:18:b6: d2:d5:9d:06:f5:41:d6:3f:b0:95:9c:64:01:5f:d1:a6:50:44: 22:83:57:9f:a0:a3:5b:34:fe:e9:a7:ea:4c:21:22:61:92:7d: 98:46:9b:19:be:f1:4f:fe:70:9a:70:35:c9:36:f1:10:d7:d1: 4f:1e:05:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrZb6g3ENe68sj+V6u2bb5Wr3UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MThaFw0yNTA4MjgwMzQxMThaMDMxMTAvBgNV BAMTKDMzQjAzRjM3Q0Q2MTEwMEE2RkU1RTc1NzczQTRBQTMzNThBMkU1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06tMWLz/W4ng6bzgI+pIzWlhm fZV4o8VrOl9B7PPBT9h4ovyzvSnWQzg+PPBAMsNUJztIntUzaB9MhINXCnyRo6mc lVh4K0MWlJ8vmzCzUaQesW7fbAUo3pfCQj6oj5a7kyENBN+gFwfLuv1jmNVUtL5x noSKBJJt8KxdSanoBitF/1CmRc9WSI0MATLDlaPrMi4GLJv/YelMa0FTsMu3bZTC 8ZjUnxW/ookt/Tb5e5SBAXFfFXzWBkSyfvGCiAJVb35Nj2Li0IH75PE/4cB1aJGD 6WLlmHsgTeWpPnvZkqSreYUZF7jE2lejZIsE6t2sgouH+lNpDiMvgucRA0qhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7A/N81hEApv5edXc6SqM1ii5UowHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0NzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgYS gUAwDQYJKoZIhvcNAQELBQADggEBAI62DmHC+6w/uyr4yB7XpiQUvpFxHu3oSU/3 zp88dWr7AFwX+8Z0jftLp5x2svfNF9yldAa9o6ovyE+e8Pf3B8oxMgIwjrg/vMZP V5HFkk/JJaalaAuxfzI4T4CPo7tlxr2wNRa15zof18rLsuALXOvL7eHu+KPrdHU4 0EP0x6TCHE5s+0IaoDLaKvLoqJfhfNqPIv02j9kuaWG2oMWzhwc52F6MCyukn/1Y L2JfAVrk1OjlyLFLnNCWt4PZaWqn+Mpk48AYttLVnQb1QdY/sJWcZAFf0aZQRCKD V5+go1s0/umn6kwhImGSfZhGmxm+8U/+cJpwNck28RDX0U8eBb0= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org