$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa File: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (raw, json) Hash identifier: 0unAsI8V1gSzCFkFuiXCKj+qBRO+IDm5TxOFvRQfPXM= Subject key identifier: D8:60:80:7D:24:7D:F0:C7:83:78:5F:70:58:71:35:F5:39:FF:58:58 Certificate issuer: /CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Certificate serial: 22C8B4DF322521123BDAF6AAE879B2A706217B96 Authority key identifier: 5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa Signing time: Mon 14 Apr 2025 21:24:12 +0000 ROA not before: Mon 14 Apr 2025 21:19:12 +0000 ROA not after: Mon 13 Apr 2026 21:24:12 +0000 asID: 151704 IP address blocks: 2a0b:4e07:1c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c8:b4:df:32:25:21:12:3b:da:f6:aa:e8:79:b2:a7:06:21:7b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Validity Not Before: Apr 14 21:19:12 2025 GMT Not After : Apr 13 21:24:12 2026 GMT Subject: CN=D860807D247DF0C783785F70587135F539FF5858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:36:85:ff:25:86:d1:2a:e7:ca:6f:fb:fe: ba:48:92:97:e9:bd:18:58:5d:80:df:a4:35:94:ea: 54:5c:24:61:e1:df:97:c8:20:33:d4:79:1d:f5:8c: a4:4c:f5:83:bd:63:2d:4b:a2:c8:4c:2c:8c:45:a7: e5:58:fb:3f:5e:b3:4b:21:79:ed:a3:66:af:ce:63: 7d:1a:e4:bd:f0:50:23:8e:48:26:78:ae:5c:65:54: 71:a0:b8:6e:b1:81:8f:70:ea:36:67:45:97:32:22: 54:f6:a1:83:a9:ae:cf:b7:7d:ec:32:8b:45:cb:37: 5b:d3:4e:e6:d5:67:35:65:1c:94:ad:2c:24:11:b7: e7:54:ee:af:cc:9c:12:1c:cb:f5:a1:4b:41:7c:d9: b0:24:62:30:20:36:8c:09:15:fe:8a:3f:54:23:a1: db:fa:4a:b9:d9:90:6f:e3:3d:6b:e3:18:1f:59:f5: 16:c8:ec:3a:3f:15:14:28:db:d9:c8:14:58:be:ac: 4c:ac:a6:42:7d:3d:61:ac:6c:cb:d0:57:ac:03:3c: 36:47:1d:1f:a5:5d:2b:c9:d5:bc:2c:15:19:cb:c9: af:1b:6a:b0:77:b8:99:db:d2:f1:13:31:b7:5a:0b: ee:9f:31:3b:03:38:70:32:e1:6b:3d:8b:2b:91:c5: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:60:80:7D:24:7D:F0:C7:83:78:5F:70:58:71:35:F5:39:FF:58:58 X509v3 Authority Key Identifier: keyid:5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c01::/48 Signature Algorithm: sha256WithRSAEncryption 11:d6:9a:8b:7f:cf:d3:93:d9:ca:7f:a3:7c:34:89:83:22:5b: 1f:57:7f:71:6f:ee:d4:56:69:67:ea:76:9c:6f:8f:75:37:cb: f1:d3:7f:fb:d5:39:14:de:0d:46:d8:a1:94:4e:e2:83:fd:ea: 3a:e1:41:5a:d1:79:f5:8f:8a:0c:99:c7:ad:2c:53:8b:ad:fa: 39:60:a2:69:5c:96:d5:8d:55:e0:d2:b5:19:26:40:28:d7:96: cc:33:fb:fd:81:77:7d:83:67:f1:65:75:01:2e:64:46:c7:ce: 42:28:f5:ef:b3:02:6e:82:a6:f6:4f:80:4c:4a:10:63:e0:38: ea:ac:a1:0c:4e:ee:48:6e:90:bf:a7:0c:f1:34:64:50:9e:25: 86:8a:3f:75:55:00:5e:43:0e:46:40:c9:6d:66:ef:be:4e:5d: 58:72:2a:e8:63:10:be:42:d0:6b:fa:15:ef:fe:6e:56:77:d6: 81:52:a5:4d:2c:60:91:97:04:f7:d0:01:37:2a:ea:7b:32:e5: 79:82:e6:cb:86:21:7b:49:96:92:0e:de:0a:ff:34:0a:e6:cb: 39:5f:a2:4f:02:99:5d:68:f1:b5:14:a9:91:ad:58:53:fb:c6: d6:e5:9b:bf:23:77:10:d5:7d:bd:42:0e:93:49:8c:9e:29:0d: 3b:09:0b:1a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUIsi03zIlIRI72vaq6HmypwYhe5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVF Q0RERjdBOTAeFw0yNTA0MTQyMTE5MTJaFw0yNjA0MTMyMTI0MTJaMDMxMTAvBgNV BAMTKEQ4NjA4MDdEMjQ3REYwQzc4Mzc4NUY3MDU4NzEzNUY1MzlGRjU4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohTaF/yWG0Srnym/7/rpIkpfp vRhYXYDfpDWU6lRcJGHh35fIIDPUeR31jKRM9YO9Yy1LoshMLIxFp+VY+z9es0sh ee2jZq/OY30a5L3wUCOOSCZ4rlxlVHGguG6xgY9w6jZnRZcyIlT2oYOprs+3fewy i0XLN1vTTubVZzVlHJStLCQRt+dU7q/MnBIcy/WhS0F82bAkYjAgNowJFf6KP1Qj odv6SrnZkG/jPWvjGB9Z9RbI7Do/FRQo29nIFFi+rEyspkJ9PWGsbMvQV6wDPDZH HR+lXSvJ1bwsFRnLya8barB3uJnb0vETMbdaC+6fMTsDOHAy4Ws9iyuRxSBpAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU2GCAfSR98MeDeF9wWHE19Tn/WFgwHwYDVR0j BBgwFoAUX5WFRQp/khqzuEXUTX7PVezd96kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzIvNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RERjdBOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RE RjdBOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAt MGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzIvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMTYzMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTM3MzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgccATANBgkqhkiG9w0BAQsFAAOCAQEAEdaai3/P05PZyn+j fDSJgyJbH1d/cW/u1FZpZ+p2nG+PdTfL8dN/+9U5FN4NRtihlE7ig/3qOuFBWtF5 9Y+KDJnHrSxTi636OWCiaVyW1Y1V4NK1GSZAKNeWzDP7/YF3fYNn8WV1AS5kRsfO Qij177MCboKm9k+ATEoQY+A46qyhDE7uSG6Qv6cM8TRkUJ4lhoo/dVUAXkMORkDJ bWbvvk5dWHIq6GMQvkLQa/oV7/5uVnfWgVKlTSxgkZcE99ABNyrqezLleYLmy4Yh e0mWkg7eCv80CubLOV+iTwKZXWjxtRSpka1YU/vG1uWbvyN3ENV9vUIOk0mMnikN OwkLGg== -----END CERTIFICATE-----Generated at Wed Apr 16 12:12:42 2025 by rpki-client