$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa File: AS926.roa (raw, json) Hash identifier: AInSivQ92LQLFt3iTmcKcA3qR//G+Xn1HJtbwEns+FE= Subject key identifier: 5E:64:9E:4B:E9:EC:86:6B:20:D6:88:2F:20:BE:E6:A0:53:FB:47:73 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 7395B258F77CBF2D7CC4BCE0A331B38816F465EF Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa Signing time: Tue 19 Sep 2023 02:14:56 +0000 ROA not before: Tue 19 Sep 2023 02:09:56 +0000 ROA not after: Tue 17 Sep 2024 02:14:56 +0000 asID: 926 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:95:b2:58:f7:7c:bf:2d:7c:c4:bc:e0:a3:31:b3:88:16:f4:65:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 19 02:09:56 2023 GMT Not After : Sep 17 02:14:56 2024 GMT Subject: CN=5E649E4BE9EC866B20D6882F20BEE6A053FB4773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:82:23:95:c0:06:ad:e4:2c:6b:07:0c:7e: 1c:bc:c2:6d:22:8b:6c:23:fd:55:ae:7e:78:69:11: ef:43:51:af:a7:df:37:73:ad:d0:c5:27:28:26:60: de:e9:e1:5e:25:c8:90:af:94:f3:43:e9:72:cf:7f: 49:ae:c8:97:32:81:30:e9:fb:9f:2e:6c:8b:00:20: 06:2e:ed:d7:6a:47:b2:43:a2:a4:87:61:3c:89:c2: a7:58:31:9e:cd:0f:52:a5:dd:63:cf:39:31:6a:9f: fa:7e:18:e0:5a:56:6a:06:78:b4:40:5d:57:bc:0a: 84:d1:89:11:31:ee:21:22:dd:a2:5d:88:65:bd:50: 74:20:0c:68:29:54:ce:58:7b:5d:f5:16:66:a1:c5: 00:87:5a:c9:9c:85:de:bd:24:e2:5f:0d:01:73:e1: b3:ab:af:c0:61:4b:2e:4e:3a:5e:d7:16:71:b8:ff: 77:06:9a:e0:16:70:02:23:87:ba:69:2c:18:52:a0: b0:51:d4:5b:51:4b:3f:1f:75:9b:1f:69:88:4d:76: d9:b6:d5:ce:c9:4d:ed:8c:01:9d:70:17:fe:7c:45: cd:41:4b:1e:fa:a3:a2:5e:b8:af:66:cc:93:fd:26: 23:7b:a1:7a:05:c7:d0:4a:97:4d:84:d3:39:12:de: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:64:9E:4B:E9:EC:86:6B:20:D6:88:2F:20:BE:E6:A0:53:FB:47:73 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 2b:05:e7:ae:17:70:19:2f:19:22:dc:fa:f6:0d:e6:f4:04:a9: 79:b6:0b:dc:8a:d8:b5:75:4b:88:8b:00:a8:af:98:c3:14:7b: 2f:66:9f:10:db:88:f4:aa:6a:72:29:61:bb:9b:bb:d3:d8:c9: 59:96:74:91:7a:8a:b1:05:cd:72:da:54:fd:32:cb:3b:92:36: 77:9a:88:30:c1:dd:e0:c9:97:67:ff:82:2f:c9:69:98:f5:07: 23:c2:15:81:f7:5a:2f:91:f1:b2:c5:80:9e:4d:5f:f8:52:93: a4:a6:cb:a0:52:81:f9:db:9d:53:ff:14:05:c6:34:75:cd:3f: ac:ae:c9:53:2e:b7:80:52:22:95:c3:5f:7e:81:10:cb:c1:86: bc:c3:11:7b:67:a2:3a:6b:fb:57:01:e6:a2:c0:96:b3:95:a2: 3a:56:30:d5:0c:55:bf:d8:5e:ca:ce:f7:ed:dc:0f:f7:40:e9: e6:af:a7:d3:28:ad:28:ec:57:9d:10:fd:fa:94:29:f0:41:9a: 23:20:31:48:93:56:ab:03:8e:86:b4:db:f7:56:22:ef:3d:bf: 39:bf:a6:ef:9f:40:b8:83:05:05:1a:21:d3:98:87:f9:1d:fe: f7:bb:37:b8:5c:42:d5:cb:35:92:c8:2a:f4:f5:a9:56:3d:dc: 14:f9:4b:de -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUc5WyWPd8vy18xLzgozGziBb0Ze8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTZaFw0yNDA5MTcwMjE0NTZaMDMxMTAvBgNV BAMTKDVFNjQ5RTRCRTlFQzg2NkIyMEQ2ODgyRjIwQkVFNkEwNTNGQjQ3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1YIjlcAGreQsawcMfhy8wm0i i2wj/VWufnhpEe9DUa+n3zdzrdDFJygmYN7p4V4lyJCvlPND6XLPf0muyJcygTDp +58ubIsAIAYu7ddqR7JDoqSHYTyJwqdYMZ7ND1Kl3WPPOTFqn/p+GOBaVmoGeLRA XVe8CoTRiREx7iEi3aJdiGW9UHQgDGgpVM5Ye131FmahxQCHWsmchd69JOJfDQFz 4bOrr8BhSy5OOl7XFnG4/3cGmuAWcAIjh7ppLBhSoLBR1FtRSz8fdZsfaYhNdtm2 1c7JTe2MAZ1wF/58Rc1BSx76o6JeuK9mzJP9JiN7oXoFx9BKl02E0zkS3vYbAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUXmSeS+nshmsg1ogvIL7moFP7R3MwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTOTI2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL MA0GCSqGSIb3DQEBCwUAA4IBAQArBeeuF3AZLxki3Pr2Deb0BKl5tgvciti1dUuI iwCor5jDFHsvZp8Q24j0qmpyKWG7m7vT2MlZlnSReoqxBc1y2lT9Mss7kjZ3mogw wd3gyZdn/4IvyWmY9QcjwhWB91ovkfGyxYCeTV/4UpOkpsugUoH5251T/xQFxjR1 zT+srslTLreAUiKVw19+gRDLwYa8wxF7Z6I6a/tXAeaiwJazlaI6VjDVDFW/2F7K zvft3A/3QOnmr6fTKK0o7FedEP36lCnwQZojIDFIk1arA46GtNv3ViLvPb85v6bv n0C4gwUFGiHTmIf5Hf73uze4XELVyzWSyCr09alWPdwU+Uve -----END CERTIFICATE-----Generated at Sat Jun 1 06:15:08 2024 by rpki-client on console-ams.rpki-client.org