$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a3a2f34382d3438203d3e203236303036.roa File: 326130363a313238373a3a2f34382d3438203d3e203236303036.roa (raw, json) Hash identifier: thL3dmlPHCJX1QS3/ZL6JUaOsctEk/xQ5Wem6QfHJSw= Subject key identifier: FC:DC:53:A1:AA:52:92:5D:94:9E:EC:75:C8:AE:07:9C:DC:AC:7E:27 Certificate issuer: /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Certificate serial: 285F71D395D5A97622DD6378502A16AFD3B70074 Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a3a2f34382d3438203d3e203236303036.roa Signing time: Mon 10 Feb 2025 14:55:09 +0000 ROA not before: Mon 10 Feb 2025 14:50:09 +0000 ROA not after: Mon 09 Feb 2026 14:55:09 +0000 asID: 26006 IP address blocks: 2a06:1287::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 15 Apr 2025 19:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5f:71:d3:95:d5:a9:76:22:dd:63:78:50:2a:16:af:d3:b7:00:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Validity Not Before: Feb 10 14:50:09 2025 GMT Not After : Feb 9 14:55:09 2026 GMT Subject: CN=FCDC53A1AA52925D949EEC75C8AE079CDCAC7E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:de:b0:d1:6d:ea:26:0d:3a:43:60:a1:30:e2: 33:b7:ef:bc:dc:be:8d:cf:f1:b8:cf:0a:ae:2c:c0: f4:8e:08:38:a0:3f:1a:1c:12:fc:a6:9d:52:3b:c0: 9c:7d:51:51:12:50:c9:61:7c:8e:07:96:a5:3b:1c: 5b:32:91:2b:4e:99:c2:05:cb:a0:00:5c:03:1d:33: 5f:97:33:d5:9f:f1:47:f9:36:0d:f5:9e:aa:8e:e8: dd:49:61:88:8b:0d:6b:8b:77:67:a6:3f:2a:1c:46: 6e:a1:16:d1:20:2f:93:2c:e6:55:0f:dc:ad:ce:44: 5b:29:2d:c5:fc:1b:f5:24:27:d5:6b:2b:fe:ea:e4: 5f:15:a9:ae:c2:86:e0:ca:0f:27:18:b5:ff:9b:e6: bf:2a:1d:b1:dd:93:0b:9a:37:11:8d:c2:f2:62:cf: b1:bd:09:48:4a:d7:72:5a:61:9c:15:31:60:73:78: b0:1f:7e:e8:c6:ef:19:97:af:f9:5f:c1:a3:d8:00: e1:ca:5c:93:37:54:f3:2c:87:87:9d:7d:99:d7:ce: d4:be:60:4c:58:d6:46:6d:7c:84:18:6d:35:42:00: c9:1c:b5:e7:a0:06:d3:7a:9a:22:22:bb:cb:2a:98: c3:9d:46:69:f8:cb:41:05:b5:ac:66:8d:c2:8e:05: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:53:A1:AA:52:92:5D:94:9E:EC:75:C8:AE:07:9C:DC:AC:7E:27 X509v3 Authority Key Identifier: keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a3a2f34382d3438203d3e203236303036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1287::/48 Signature Algorithm: sha256WithRSAEncryption 25:d9:a5:af:d4:62:53:57:1b:0d:69:38:d3:87:3f:af:a1:51: a2:6e:10:c3:5f:0c:d7:bd:9f:55:e4:cf:e2:39:82:28:b5:59: 93:77:a0:e1:61:11:bf:04:6a:f0:44:38:8e:8e:fd:37:3b:ee: 3d:27:df:4d:bb:a1:1c:b7:4b:c9:22:8c:f1:63:5e:3d:90:d5: 44:e8:19:b4:3d:2d:d5:a8:e6:10:88:07:33:12:df:16:9f:4d: c8:b0:f0:6c:a8:4e:7a:0c:6d:e7:be:9d:7a:79:9c:82:84:88: e3:05:99:ca:25:87:1b:36:40:88:cd:b5:15:e2:79:22:c0:32: 3d:0a:69:7a:1f:fa:fc:35:6d:be:6e:a4:c6:07:a9:e8:fa:c8: 24:34:da:c3:1d:de:de:92:dd:cf:24:cc:9e:1a:cf:56:70:14: 03:ce:8a:1e:bf:bd:9e:4c:6a:e0:aa:9b:c4:4c:9e:ba:23:02: ec:f4:39:7b:03:15:27:a3:83:35:e3:16:a4:ac:18:b4:49:8d: 17:15:e0:5a:4e:6c:9f:f8:9d:0f:7a:a8:87:f0:17:b8:84:2a: c9:e1:04:24:12:c5:43:c1:49:81:98:e3:2c:a3:57:4d:0b:e2: 5f:51:5c:3d:ee:76:cc:43:b8:af:4e:5f:4f:73:63:58:08:84: 93:c9:c3:24 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUKF9x05XVqXYi3WN4UCoWr9O3AHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgz ODk5RDREQjAeFw0yNTAyMTAxNDUwMDlaFw0yNjAyMDkxNDU1MDlaMDMxMTAvBgNV BAMTKEZDREM1M0ExQUE1MjkyNUQ5NDlFRUM3NUM4QUUwNzlDRENBQzdFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3rDRbeomDTpDYKEw4jO377zc vo3P8bjPCq4swPSOCDigPxocEvymnVI7wJx9UVESUMlhfI4HlqU7HFsykStOmcIF y6AAXAMdM1+XM9Wf8Uf5Ng31nqqO6N1JYYiLDWuLd2emPyocRm6hFtEgL5Ms5lUP 3K3ORFspLcX8G/UkJ9VrK/7q5F8Vqa7ChuDKDycYtf+b5r8qHbHdkwuaNxGNwvJi z7G9CUhK13JaYZwVMWBzeLAffujG7xmXr/lfwaPYAOHKXJM3VPMsh4edfZnXztS+ YExY1kZtfIQYbTVCAMkcteegBtN6miIiu8sqmMOdRmn4y0EFtaxmjcKOBUDFAgMB AAGjggJuMIICajAdBgNVHQ4EFgQU/NxToapSkl2Unux1yK4HnNysficwHwYDVR0j BBgwFoAU1YXJZd6u2O0+yq/hibuliDiZ1NswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl ODM3LzEvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5RDREQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5 RDREQi5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQt MzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRlODM3LzEvMzI2MTMwMzYzYTMxMzIzODM3 M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMwMzAzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoG EocAADANBgkqhkiG9w0BAQsFAAOCAQEAJdmlr9RiU1cbDWk404c/r6FRom4Qw18M 172fVeTP4jmCKLVZk3eg4WERvwRq8EQ4jo79NzvuPSffTbuhHLdLySKM8WNePZDV ROgZtD0t1ajmEIgHMxLfFp9NyLDwbKhOegxt576denmcgoSI4wWZyiWHGzZAiM21 FeJ5IsAyPQppeh/6/DVtvm6kxgep6PrIJDTawx3e3pLdzyTMnhrPVnAUA86KHr+9 nkxq4KqbxEyeuiMC7PQ5ewMVJ6ODNeMWpKwYtEmNFxXgWk5sn/idD3qoh/AXuIQq yeEEJBLFQ8FJgZjjLKNXTQviX1FcPe52zEO4r05fT3NjWAiEk8nDJA== -----END CERTIFICATE-----Generated at Tue Apr 15 10:13:25 2025 by rpki-client