$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210965.roa File: AS210965.roa (raw, json) Hash identifier: VXVstoDNAqw8/9HFXuDnejOvz5/ct+k5dsl5voXV89c= Subject key identifier: 01:95:97:75:FA:F9:AC:22:20:D4:B5:9E:0B:69:3D:FB:CC:87:01:3B Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 504522C6F51CE87765EAB4583CCFF38945094533 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210965.roa Signing time: Thu 04 Jan 2024 16:33:39 +0000 ROA not before: Thu 04 Jan 2024 16:28:39 +0000 ROA not after: Thu 02 Jan 2025 16:33:39 +0000 asID: 210965 IP address blocks: 2a07:54c4:1764::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:45:22:c6:f5:1c:e8:77:65:ea:b4:58:3c:cf:f3:89:45:09:45:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Jan 4 16:28:39 2024 GMT Not After : Jan 2 16:33:39 2025 GMT Subject: CN=01959775FAF9AC2220D4B59E0B693DFBCC87013B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:36:c7:71:6a:18:3d:71:dc:fc:18:66:06: 36:11:a1:77:2d:24:39:ae:5f:68:43:28:9b:be:1a: 1f:d8:6a:d3:44:14:48:32:24:05:6d:85:c4:8a:20: 45:63:fc:b4:bc:2e:ac:43:a4:66:a9:b2:fb:77:bf: e0:8e:a2:25:80:0d:b7:08:fd:f2:2f:18:e4:99:73: 04:9e:ac:b5:3b:d9:0a:cf:b5:1d:13:a6:14:6b:1b: f2:f2:cd:a2:bd:e5:3f:79:fd:d6:60:b6:48:d0:be: d0:0c:1a:08:66:0b:d2:2d:61:8c:22:c7:4d:b8:89: 26:ca:cc:25:11:3e:3d:4a:7a:1a:38:a2:f4:bd:29: 46:2b:e2:0b:e2:24:e5:00:5c:05:d0:15:30:e1:35: f4:b6:e7:93:8e:b8:ca:6b:9d:f1:3e:c3:b7:b0:20: bf:2e:bd:f9:42:98:48:ba:97:92:7e:55:7d:37:6e: 6c:55:87:49:cf:83:55:e7:d8:15:d9:28:09:46:99: 0a:03:e4:49:ca:84:a4:99:2a:bc:b7:cc:f9:0c:dc: ee:f1:84:ff:b5:4d:c4:2a:da:52:99:7b:4a:bd:e9: 64:61:1e:aa:c0:ba:2a:f7:6b:d8:c0:e7:52:59:5c: 8d:f0:78:49:0e:8a:cc:63:23:d3:90:6f:32:1b:1f: 20:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:95:97:75:FA:F9:AC:22:20:D4:B5:9E:0B:69:3D:FB:CC:87:01:3B X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210965.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1764::/48 Signature Algorithm: sha256WithRSAEncryption 5b:25:42:f5:17:76:8e:2d:69:d5:f4:1e:3b:39:1b:3c:5a:f7: f7:0d:88:05:bd:85:5d:a4:f7:7c:e4:5d:a8:cb:7f:94:c0:db: 7f:2a:d2:a0:1e:13:38:05:36:83:e3:fb:e0:90:d6:62:5c:00: da:a2:7f:e0:07:15:9f:88:da:3d:7e:00:cc:3f:94:86:76:83: dd:b7:15:e6:8d:62:9e:0b:68:4c:ec:06:88:cd:b7:6b:88:02: 39:bc:69:22:36:13:81:94:23:3d:52:29:9a:79:69:4c:2b:ff: ae:63:33:be:a5:f8:71:27:88:0f:c0:5b:64:43:ce:56:12:47: 69:63:3d:ff:7a:22:e7:85:38:af:96:04:0d:f4:77:99:d0:b0: 89:4a:d9:b9:4f:7b:0f:d4:75:5a:54:d3:ca:51:ba:24:11:60: 95:fa:08:ee:a4:63:d9:e3:40:4e:29:9c:88:0d:33:62:51:b1: 88:dd:e7:c7:8d:63:62:ff:dc:fc:41:f3:0d:9a:27:d6:3d:03: 77:c6:a2:f6:74:be:cc:bf:ca:ac:0f:8d:e4:a8:6c:f2:13:06: 10:fb:14:ab:88:fa:b3:42:c0:87:ae:a8:39:ec:4d:04:25:55: 44:17:b1:c4:88:28:a9:ea:79:85:89:61:65:3f:4e:2a:d6:66: 8d:4a:a9:d1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUEUixvUc6Hdl6rRYPM/ziUUJRTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDAxMDQxNjI4MzlaFw0yNTAxMDIxNjMzMzlaMDMxMTAvBgNV BAMTKDAxOTU5Nzc1RkFGOUFDMjIyMEQ0QjU5RTBCNjkzREZCQ0M4NzAxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdDzbHcWoYPXHc/BhmBjYRoXct JDmuX2hDKJu+Gh/YatNEFEgyJAVthcSKIEVj/LS8LqxDpGapsvt3v+COoiWADbcI /fIvGOSZcwSerLU72QrPtR0TphRrG/LyzaK95T95/dZgtkjQvtAMGghmC9ItYYwi x024iSbKzCURPj1Keho4ovS9KUYr4gviJOUAXAXQFTDhNfS255OOuMprnfE+w7ew IL8uvflCmEi6l5J+VX03bmxVh0nPg1Xn2BXZKAlGmQoD5EnKhKSZKry3zPkM3O7x hP+1TcQq2lKZe0q96WRhHqrAuir3a9jA51JZXI3weEkOisxjI9OQbzIbHyBZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUAZWXdfr5rCIg1LWeC2k9+8yHATswHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjEwOTY1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xBdkMA0GCSqGSIb3DQEBCwUAA4IBAQBbJUL1F3aOLWnV9B47ORs8Wvf3DYgFvYVd pPd85F2oy3+UwNt/KtKgHhM4BTaD4/vgkNZiXADaon/gBxWfiNo9fgDMP5SGdoPd txXmjWKeC2hM7AaIzbdriAI5vGkiNhOBlCM9UimaeWlMK/+uYzO+pfhxJ4gPwFtk Q85WEkdpYz3/eiLnhTivlgQN9HeZ0LCJStm5T3sP1HVaVNPKUbokEWCV+gjupGPZ 40BOKZyIDTNiUbGI3efHjWNi/9z8QfMNmifWPQN3xqL2dL7Mv8qsD43kqGzyEwYQ +xSriPqzQsCHrqg57E0EJVVEF7HEiCip6nmFiWFlP04q1maNSqnR -----END CERTIFICATE-----Generated at Sat Jun 1 06:15:08 2024 by rpki-client on console-ams.rpki-client.org