$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa File: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (raw, json) Hash identifier: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ= Subject key identifier: 15:1E:A2:77:9B:36:8F:3B:B5:B9:2F:AE:A5:13:87:DF:9D:B3:79:84 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 1F47BA7693B7BBB6CC39BB54A1921606785816BB Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa Signing time: Wed 25 Sep 2024 03:50:29 +0000 ROA not before: Wed 25 Sep 2024 03:45:29 +0000 ROA not after: Wed 24 Sep 2025 03:50:29 +0000 asID: 53667 IP address blocks: 2602:f992:f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:47:ba:76:93:b7:bb:b6:cc:39:bb:54:a1:92:16:06:78:58:16:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Sep 25 03:45:29 2024 GMT Not After : Sep 24 03:50:29 2025 GMT Subject: CN=151EA2779B368F3BB5B92FAEA51387DF9DB37984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:89:81:a6:b2:a3:d1:65:d0:78:d8:23:4f: c6:21:da:7a:0d:75:f3:10:43:c9:00:ae:23:97:40: 19:b3:0f:d2:9d:03:e7:3a:1a:39:fe:a0:05:46:91: 9d:44:61:03:9d:bf:4d:1f:34:a7:f7:50:49:13:dc: 8f:cc:fa:36:02:cd:e1:01:73:25:49:b4:45:7d:92: b0:d2:05:4e:b3:e6:1c:0f:d7:53:c7:2c:53:5e:01: 2b:6d:cf:57:0f:98:19:82:7d:05:57:6c:38:a0:f0: 7a:94:64:9f:77:7d:5a:12:87:be:3c:13:39:1e:3e: d9:6c:41:e1:f9:1d:98:7a:bb:61:7a:16:bf:17:bd: 34:dd:6a:27:6b:32:e3:e5:80:5e:c6:5a:40:17:2b: af:45:f3:33:bc:6d:f1:04:87:db:fa:d0:fc:a4:4d: 7a:3e:47:63:4b:d0:89:b2:cb:e4:ea:ef:77:2d:9b: c2:3e:c5:97:4b:cd:65:fc:b3:bd:3b:95:dc:55:93: 0f:12:a9:ae:46:05:29:5d:7a:87:53:d8:82:41:04: 53:f3:d5:7d:85:de:19:df:66:24:97:20:f9:0d:2c: bf:16:d9:b8:0e:1e:7a:c5:f5:c2:80:9d:eb:71:c7: 9f:a1:b7:82:a1:48:7b:38:a9:8f:64:a2:ce:83:ab: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1E:A2:77:9B:36:8F:3B:B5:B9:2F:AE:A5:13:87:DF:9D:B3:79:84 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:f6::/48 Signature Algorithm: sha256WithRSAEncryption 00:b1:43:0b:25:0d:71:0f:3c:9d:42:21:dd:05:d9:11:cd:9e: 51:6f:cb:6e:c8:a9:d9:be:62:82:9f:19:b7:6d:df:41:52:0f: ad:bc:07:f1:2e:72:10:b4:92:c4:31:06:68:0a:44:2e:43:2c: 5c:78:0a:bf:b1:45:71:c2:72:2f:ec:1b:0e:3c:39:d2:cc:5c: 12:98:a4:7e:76:f2:51:2c:f7:f8:4a:1e:d7:e3:87:6b:0b:a3: 05:fc:18:c1:cc:05:b9:8c:01:d9:91:ff:20:1a:9c:83:b1:31: 64:5e:82:7f:9f:21:3c:0c:6f:50:ee:20:b4:21:08:a9:3d:0f: 76:1c:4d:43:00:95:e8:fa:a8:9e:4f:ce:38:b5:d1:97:d8:e8: 34:c8:0e:74:90:8b:43:bf:26:49:58:ec:03:e0:0e:9e:59:40: 0c:e6:ab:f8:16:b3:77:2a:13:71:4b:03:ed:dd:08:df:9d:c7: cd:fe:5a:8b:f6:75:fe:6d:9d:b2:64:c7:a5:ab:68:f2:e4:c4: 8c:3a:c0:a6:64:6e:cf:e2:67:c6:a0:40:e4:9f:46:f2:67:4c: 56:9d:de:0a:35:c8:e1:11:e3:83:fc:a1:d8:63:e9:59:d5:5e: 5b:39:54:fc:ac:9c:b4:2e:7e:80:22:bc:75:af:71:70:a3:61: db:17:08:f1 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUH0e6dpO3u7bMObtUoZIWBnhYFrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjQwOTI1MDM0NTI5WhcNMjUwOTI0MDM1MDI5 WjAzMTEwLwYDVQQDEygxNTFFQTI3NzlCMzY4RjNCQjVCOTJGQUVBNTEzODdERjlE QjM3OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tSJgaayo9Fl 0HjYI0/GIdp6DXXzEEPJAK4jl0AZsw/SnQPnOho5/qAFRpGdRGEDnb9NHzSn91BJ E9yPzPo2As3hAXMlSbRFfZKw0gVOs+YcD9dTxyxTXgErbc9XD5gZgn0FV2w4oPB6 lGSfd31aEoe+PBM5Hj7ZbEHh+R2Yertheha/F7003WonazLj5YBexlpAFyuvRfMz vG3xBIfb+tD8pE16PkdjS9CJssvk6u93LZvCPsWXS81l/LO9O5XcVZMPEqmuRgUp XXqHU9iCQQRT89V9hd4Z32YklyD5DSy/Ftm4Dh56xfXCgJ3rccefobeCoUh7OKmP ZKLOg6uBGQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFBUeonebNo87tbkvrqUTh9+d s3mEMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjYzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzMzNjM2 Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAmAvmSAPYwDQYJKoZIhvcNAQELBQADggEBAACxQwslDXEP PJ1CId0F2RHNnlFvy27Iqdm+YoKfGbdt30FSD628B/EuchC0ksQxBmgKRC5DLFx4 Cr+xRXHCci/sGw48OdLMXBKYpH528lEs9/hKHtfjh2sLowX8GMHMBbmMAdmR/yAa nIOxMWRegn+fITwMb1DuILQhCKk9D3YcTUMAlej6qJ5Pzji10ZfY6DTIDnSQi0O/ JklY7APgDp5ZQAzmq/gWs3cqE3FLA+3dCN+dx83+Wov2df5tnbJkx6WraPLkxIw6 wKZkbs/iZ8agQOSfRvJnTFad3go1yOER44P8odhj6VnVXls5VPysnLQufoAivHWv cXCjYdsXCPE= -----END CERTIFICATE-----Generated at Tue Oct 22 16:10:16 2024 by rpki-client on console-fra.rpki-client.org