$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa File: 323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa (raw, json) Hash identifier: jpCL4m4b5cSnTNdPRoZCWkZcs8gb1dSXSE6j140G924= Subject key identifier: BB:F4:B2:87:23:33:8A:51:17:E9:FE:BB:00:0B:23:8A:A9:C5:BA:70 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 22FE54FAC4207B16EA26534E68F1345E95BDDE9D Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa Signing time: Fri 21 Jun 2024 17:38:55 +0000 ROA not before: Fri 21 Jun 2024 17:33:55 +0000 ROA not after: Fri 20 Jun 2025 17:38:55 +0000 asID: 701 IP address blocks: 2602:f992:a0::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fe:54:fa:c4:20:7b:16:ea:26:53:4e:68:f1:34:5e:95:bd:de:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jun 21 17:33:55 2024 GMT Not After : Jun 20 17:38:55 2025 GMT Subject: CN=BBF4B28723338A5117E9FEBB000B238AA9C5BA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:cb:fc:3e:9c:64:6b:43:ba:60:95:81:e2: 39:b2:db:01:ca:5a:37:9b:e2:fa:3f:ee:68:10:e7: 8e:61:18:e5:bd:ec:df:9f:cf:7a:ac:aa:a6:e5:44: 31:86:cf:44:97:91:94:ba:ed:5c:92:b0:00:81:4a: 35:65:a0:a0:e2:04:7c:53:b9:05:55:58:fe:b5:e7: a3:b2:c5:cb:df:b0:97:da:68:0a:38:47:32:da:51: c4:cc:ca:12:56:74:1e:29:ed:fd:08:8f:ec:87:3a: 36:0f:87:b4:a4:02:74:ba:4f:a1:32:33:8c:38:3c: bb:18:8f:8f:8e:45:3f:90:b3:72:04:a6:45:71:8d: 21:ef:53:b8:fa:9b:bc:ed:89:45:fd:ce:c2:a0:69: 3f:99:fa:37:c8:be:d6:51:0a:f5:f5:e8:0c:08:79: de:a4:27:b4:fb:93:b4:75:8f:0e:03:ce:f1:39:dc: 5d:6f:c9:dd:a3:c1:f7:ec:34:bf:42:ee:c7:41:b2: 45:4e:67:22:ec:6a:5a:d4:b6:f0:dc:e3:ed:20:9e: 2e:cc:5f:0b:3f:a3:7d:3a:b1:df:a8:6e:89:19:0f: 49:b1:72:c0:1a:93:46:8a:f3:d9:3b:f0:80:c2:01: 26:be:b7:16:14:48:d9:df:bd:03:28:5b:59:38:80: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:B2:87:23:33:8A:51:17:E9:FE:BB:00:0B:23:8A:A9:C5:BA:70 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:a0::/46 Signature Algorithm: sha256WithRSAEncryption 93:cf:5b:e1:1d:0f:f8:5b:84:1e:6d:e1:c5:4e:6c:37:ec:e7: d6:91:d7:df:12:62:63:9b:96:df:35:44:c1:8c:2e:60:77:2e: 70:6f:9f:6c:64:c8:d6:32:05:aa:76:e5:9b:59:34:ed:33:69: ea:2a:4f:ff:32:a6:76:4d:67:2e:e3:03:90:3b:7a:6f:c7:dc: 48:b7:e0:6f:23:1c:36:75:fd:13:c8:1a:c3:08:fe:40:1e:04: 11:9c:a0:20:de:9a:11:28:6f:a8:00:3f:4c:93:85:5a:4d:25: 98:7f:b1:dc:10:d7:44:f1:5f:57:eb:0a:a0:67:74:a1:2c:65: 66:e2:bb:7b:f9:5e:4f:4e:f9:8a:a1:58:7e:8a:8d:88:5d:92: 62:69:83:3c:16:b3:2d:8a:ee:47:56:b8:00:e7:9f:6b:63:08: 13:b3:f0:e7:47:6e:fb:8c:f4:fd:46:a3:d5:b6:58:17:62:2c: c8:b7:b2:a7:03:61:d4:8d:49:5d:0e:45:a9:cb:79:55:d5:6f: e3:56:3d:15:89:d6:5f:13:bc:4f:a9:8b:38:93:c6:05:5f:d4: 47:af:d0:33:39:7d:6c:b1:36:3a:28:7b:bc:35:41:59:8b:34: 6d:cc:e8:c3:63:88:9e:17:14:df:c7:d6:61:b2:47:8b:d6:d1: 1d:75:20:10 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIUIv5U+sQgexbqJlNOaPE0XpW93p0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjQwNjIxMTczMzU1WhcNMjUwNjIwMTczODU1 WjAzMTEwLwYDVQQDEyhCQkY0QjI4NzIzMzM4QTUxMTdFOUZFQkIwMDBCMjM4QUE5 QzVCQTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/jL/D6cZGtD umCVgeI5stsBylo3m+L6P+5oEOeOYRjlvezfn896rKqm5UQxhs9El5GUuu1ckrAA gUo1ZaCg4gR8U7kFVVj+teejssXL37CX2mgKOEcy2lHEzMoSVnQeKe39CI/shzo2 D4e0pAJ0uk+hMjOMODy7GI+PjkU/kLNyBKZFcY0h71O4+pu87YlF/c7CoGk/mfo3 yL7WUQr19egMCHnepCe0+5O0dY8OA87xOdxdb8ndo8H37DS/Qu7HQbJFTmci7Gpa 1Lbw3OPtIJ4uzF8LP6N9OrHfqG6JGQ9JsXLAGpNGivPZO/CAwgEmvrcWFEjZ370D KFtZOIAzNQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFLv0socjM4pRF+n+uwALI4qp xbpwMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjEzMDNhM2EyZjM0MzYyZDM0MzgyMDNkM2UyMDM3MzAzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHAiYC+ZIAoDANBgkqhkiG9w0BAQsFAAOCAQEAk89b4R0P+FuEHm3h xU5sN+zn1pHX3xJiY5uW3zVEwYwuYHcucG+fbGTI1jIFqnblm1k07TNp6ipP/zKm dk1nLuMDkDt6b8fcSLfgbyMcNnX9E8gawwj+QB4EEZygIN6aEShvqAA/TJOFWk0l mH+x3BDXRPFfV+sKoGd0oSxlZuK7e/leT075iqFYfoqNiF2SYmmDPBazLYruR1a4 AOefa2MIE7Pw50du+4z0/Uaj1bZYF2IsyLeypwNh1I1JXQ5Fqct5VdVv41Y9FYnW XxO8T6mLOJPGBV/UR6/QMzl9bLE2Oih7vDVBWYs0bczow2OInhcU38fWYbJHi9bR HXUgEA== -----END CERTIFICATE-----Generated at Tue Oct 22 16:58:19 2024 by rpki-client on console-ams.rpki-client.org