$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa File: 323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa (raw, json) Hash identifier: IZrxMk6OV/92rpAnPcsFE+Xu3xGUpjdqBdAs//cVWUA= Subject key identifier: 30:5F:C4:6A:40:6E:9D:53:C4:24:2A:5B:B7:7C:7D:AD:C1:EB:61:6A Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 4A77AC714CE8C7CA714BF0C02AA5339CE59ED2AD Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa Signing time: Thu 30 May 2024 04:13:30 +0000 ROA not before: Thu 30 May 2024 04:08:30 +0000 ROA not after: Thu 29 May 2025 04:13:30 +0000 asID: 401107 IP address blocks: 2602:f992:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 01:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:77:ac:71:4c:e8:c7:ca:71:4b:f0:c0:2a:a5:33:9c:e5:9e:d2:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: May 30 04:08:30 2024 GMT Not After : May 29 04:13:30 2025 GMT Subject: CN=305FC46A406E9D53C4242A5BB77C7DADC1EB616A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:c5:e3:ba:12:17:59:0a:49:ac:a4:fc:1f: 19:67:a0:89:5a:29:c4:d0:d5:46:3c:e6:71:66:83: f4:9e:6a:e0:fe:10:51:4b:b5:16:ca:aa:2a:a9:cc: 30:4f:eb:5e:6b:a7:ed:72:c9:c0:f4:7d:bd:a2:eb: 9a:18:39:a8:37:c0:54:55:9e:49:f5:1b:8a:c4:ae: 12:65:e8:b0:f0:4d:9d:fe:d0:96:5b:9d:4b:99:44: db:dd:f7:ae:a0:25:26:d9:5d:44:0b:0c:91:85:40: 73:2d:5b:49:63:0c:18:96:41:65:16:49:31:7d:30: 53:74:7b:e4:ff:21:1d:7c:bd:b6:08:43:29:c8:cb: bb:d2:d2:d5:28:3e:69:8a:01:38:89:3d:33:92:d0: 66:59:84:81:1b:d3:1b:f1:00:f7:d5:33:f7:97:f8: d1:60:d6:96:90:4d:61:8d:e4:03:6e:f3:5f:d5:0c: a2:ad:5a:e9:f0:72:f4:29:e3:17:7c:46:ab:4f:a5: d5:c5:ca:a3:8d:9e:e6:fc:e3:41:a5:f9:5b:ea:4f: df:e0:09:a4:05:c0:78:4a:d8:c2:ee:3f:4d:4f:a3: 17:fe:10:45:0d:19:c6:91:0a:4f:1b:35:89:86:3b: 7d:bb:88:6b:c5:43:7a:0a:8f:6e:8f:a3:c7:80:13: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5F:C4:6A:40:6E:9D:53:C4:24:2A:5B:B7:7C:7D:AD:C1:EB:61:6A X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:b0::/44 Signature Algorithm: sha256WithRSAEncryption 55:0a:74:61:04:58:49:a1:47:29:41:05:c9:c0:fd:51:d7:0a: 68:32:76:12:fa:9f:70:d8:ac:d3:53:c4:87:f7:e1:20:d5:43: 0f:6c:1a:3d:35:d0:bc:64:5d:65:1f:67:c5:a7:e4:fe:fb:b9: 7a:51:63:bc:cb:be:76:9f:30:21:6c:57:ea:0d:2c:d6:51:31: 54:f7:14:f3:c9:2e:24:95:4f:ba:a8:30:1c:b4:8b:8d:e1:8b: 98:e0:61:cf:84:8b:f0:74:94:d9:a0:b3:79:56:f9:55:a5:c0: 32:76:0e:09:82:96:38:96:59:e6:0a:b3:d2:74:6a:37:66:84: d7:1a:fb:51:1a:df:12:83:b9:d0:64:bb:fb:84:39:a2:8b:40: 26:eb:0c:cb:9e:01:e7:f3:f5:74:98:91:6a:cd:12:8c:9b:75: 9d:97:9a:86:37:81:a7:74:82:ca:b0:f5:74:89:b4:5f:d5:ea: 16:29:97:04:3e:87:c2:40:4b:58:54:4c:ea:16:4a:9e:af:66: 1f:15:d6:a1:4b:cb:41:d7:d8:fb:2f:27:52:15:4b:66:d2:8f: d4:e9:9e:6c:3b:a8:dc:7b:24:76:74:24:b1:8f:9d:aa:6c:9f: f1:8c:0e:90:be:e8:90:d0:11:dc:92:2f:cd:78:11:9b:a6:87: 1e:2d:a3:1c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUSnescUzox8pxS/DAKqUznOWe0q0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjQwNTMwMDQwODMwWhcNMjUwNTI5MDQxMzMw WjAzMTEwLwYDVQQDEygzMDVGQzQ2QTQwNkU5RDUzQzQyNDJBNUJCNzdDN0RBREMx RUI2MTZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKrF47oSF1kK Sayk/B8ZZ6CJWinE0NVGPOZxZoP0nmrg/hBRS7UWyqoqqcwwT+tea6ftcsnA9H29 ouuaGDmoN8BUVZ5J9RuKxK4SZeiw8E2d/tCWW51LmUTb3feuoCUm2V1ECwyRhUBz LVtJYwwYlkFlFkkxfTBTdHvk/yEdfL22CEMpyMu70tLVKD5pigE4iT0zktBmWYSB G9Mb8QD31TP3l/jRYNaWkE1hjeQDbvNf1QyirVrp8HL0KeMXfEarT6XVxcqjjZ7m /ONBpflb6k/f4AmkBcB4StjC7j9NT6MX/hBFDRnGkQpPGzWJhjt9u4hrxUN6Co9u j6PHgBOw7QIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFDBfxGpAbp1TxCQqW7d8fa3B 62FqMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM0MzAzMTMx MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHBCYC+ZIAsDANBgkqhkiG9w0BAQsFAAOCAQEAVQp0YQRY SaFHKUEFycD9UdcKaDJ2EvqfcNis01PEh/fhINVDD2waPTXQvGRdZR9nxafk/vu5 elFjvMu+dp8wIWxX6g0s1lExVPcU88kuJJVPuqgwHLSLjeGLmOBhz4SL8HSU2aCz eVb5VaXAMnYOCYKWOJZZ5gqz0nRqN2aE1xr7URrfEoO50GS7+4Q5ootAJusMy54B 5/P1dJiRas0SjJt1nZeahjeBp3SCyrD1dIm0X9XqFimXBD6HwkBLWFRM6hZKnq9m HxXWoUvLQdfY+y8nUhVLZtKP1OmebDuo3HskdnQksY+dqmyf8YwOkL7okNAR3JIv zXgRm6aHHi2jHA== -----END CERTIFICATE-----Generated at Mon Nov 25 01:46:57 2024 by rpki-client on console-fra.rpki-client.org