$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa File: AS926.roa (raw, json) Hash identifier: 66mYVDvCles2Yw/HWpylI2DwwjfKWDuZEnlAPv0e3lA= Subject key identifier: 0C:D5:A8:60:03:9F:03:E1:CD:25:16:4E:37:B9:A5:1F:DD:1C:0E:B0 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 406B2580274BFF6D3A58F80DFD01AFADEF4401C7 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa Signing time: Tue 20 Aug 2024 02:31:54 +0000 ROA not before: Tue 20 Aug 2024 02:26:54 +0000 ROA not after: Tue 19 Aug 2025 02:31:54 +0000 asID: 926 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6b:25:80:27:4b:ff:6d:3a:58:f8:0d:fd:01:af:ad:ef:44:01:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 02:26:54 2024 GMT Not After : Aug 19 02:31:54 2025 GMT Subject: CN=0CD5A860039F03E1CD25164E37B9A51FDD1C0EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:c0:28:4a:cd:0f:63:e4:d4:75:24:7f:01: 94:20:22:9e:68:60:b1:af:e0:32:7a:21:c9:75:db: 72:89:e3:ab:b8:73:57:3f:cd:51:9c:70:3c:bf:03: a9:34:37:f9:2f:a2:58:3a:14:34:55:49:16:5e:98: 1e:71:4d:88:96:1b:d0:17:a1:b2:df:0f:d4:c2:5f: c2:9a:77:e1:1e:82:76:42:33:c6:b5:b2:38:5d:90: 99:c3:35:fd:7a:33:07:97:64:cd:02:2d:24:5d:f8: b3:6c:99:ea:52:45:55:39:c8:bb:ec:0b:38:cd:4d: e4:02:76:3e:7f:d0:03:51:44:d6:7e:47:9d:a3:aa: 04:27:59:ec:ef:46:59:fe:a7:30:c8:d9:36:55:49: e7:3a:65:ac:0e:77:5f:4c:b2:07:96:7c:49:e6:80: ce:24:62:24:75:6f:c3:dd:70:92:c4:37:f9:e1:a2: 5a:dc:fa:35:12:84:5f:35:e9:61:72:16:4a:a0:65: 9d:6c:e0:89:1a:96:d9:38:53:ca:26:ef:82:48:20: 9b:10:34:1c:a2:5c:4e:2c:93:77:4c:25:03:66:61: 9c:50:b0:b4:f6:60:98:34:03:a7:22:47:e0:d7:0c: 4a:03:a5:3a:15:fd:a2:77:dd:e2:0e:36:18:a3:e7: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:A8:60:03:9F:03:E1:CD:25:16:4E:37:B9:A5:1F:DD:1C:0E:B0 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 01:c0:75:7a:62:ef:25:45:b8:cd:40:c7:ba:4f:66:0c:67:82: 74:08:0a:12:c4:42:77:cf:81:48:95:61:2a:4d:e2:d7:27:12: 1c:19:e6:fc:9b:64:74:aa:62:08:86:4c:42:6d:0b:1d:4d:fe: cc:d9:66:ab:24:ab:d8:08:00:62:74:6a:db:1e:3a:3e:9d:fa: 5b:98:8d:b5:89:9a:11:1f:ff:0d:10:e0:bc:6f:fb:51:a2:5e: 9d:25:18:49:fe:90:ae:a9:c6:96:e1:a5:96:a8:f6:7f:a5:d6: 3f:41:d3:a1:3a:40:05:1d:09:f3:46:e6:cd:93:10:ca:3a:66: e8:91:93:5f:31:5b:48:af:3b:50:75:b2:dc:5c:8b:97:e4:c2: 39:29:41:06:3d:25:eb:96:23:06:26:27:d8:66:fe:fc:32:b0: 28:f0:3c:7c:ed:de:f1:71:d7:00:ed:42:a5:d5:8a:4e:1d:81: ca:7c:10:95:bc:03:08:9e:39:c5:2f:2b:bf:4b:1c:ac:d5:c9: b4:93:d7:98:40:3f:64:f4:ff:91:9a:1f:0f:04:2f:68:92:a9: 66:47:c7:6b:ff:05:3c:02:f1:26:1d:f0:2b:76:f3:d9:c0:66: e2:29:92:91:2d:c4:6b:50:59:a2:d6:74:c7:60:9b:e3:e0:11: 91:b4:29:f8 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUQGslgCdL/206WPgN/QGvre9EAccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTRaFw0yNTA4MTkwMjMxNTRaMDMxMTAvBgNV BAMTKDBDRDVBODYwMDM5RjAzRTFDRDI1MTY0RTM3QjlBNTFGREQxQzBFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbycAoSs0PY+TUdSR/AZQgIp5o YLGv4DJ6Icl123KJ46u4c1c/zVGccDy/A6k0N/kvolg6FDRVSRZemB5xTYiWG9AX obLfD9TCX8Kad+EegnZCM8a1sjhdkJnDNf16MweXZM0CLSRd+LNsmepSRVU5yLvs CzjNTeQCdj5/0ANRRNZ+R52jqgQnWezvRln+pzDI2TZVSec6ZawOd19MsgeWfEnm gM4kYiR1b8PdcJLEN/nholrc+jUShF816WFyFkqgZZ1s4Ikaltk4U8om74JIIJsQ NByiXE4sk3dMJQNmYZxQsLT2YJg0A6ciR+DXDEoDpToV/aJ33eIONhij5/KDAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUDNWoYAOfA+HNJRZON7mlH90cDrAwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTOTI2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL MA0GCSqGSIb3DQEBCwUAA4IBAQABwHV6Yu8lRbjNQMe6T2YMZ4J0CAoSxEJ3z4FI lWEqTeLXJxIcGeb8m2R0qmIIhkxCbQsdTf7M2WarJKvYCABidGrbHjo+nfpbmI21 iZoRH/8NEOC8b/tRol6dJRhJ/pCuqcaW4aWWqPZ/pdY/QdOhOkAFHQnzRubNkxDK OmbokZNfMVtIrztQdbLcXIuX5MI5KUEGPSXrliMGJifYZv78MrAo8Dx87d7xcdcA 7UKl1YpOHYHKfBCVvAMInjnFLyu/Sxys1cm0k9eYQD9k9P+Rmh8PBC9okqlmR8dr /wU8AvEmHfArdvPZwGbiKZKRLcRrUFmi1nTHYJvj4BGRtCn4 -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org