$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: o+NJtFw8/031zxhsg+Hc6XloF9s4UDJOlRRj9noaxsI= Subject key identifier: ED:5F:F9:87:1B:FB:5F:66:09:FC:8E:9F:C7:14:CD:D1:3E:17:FF:D4 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3637B2B5EE3321DE272A3AD6113A23AD6E1C0509 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS14618.roa Signing time: Fri 04 Jul 2025 07:51:28 +0000 ROA not before: Fri 04 Jul 2025 07:46:28 +0000 ROA not after: Fri 03 Jul 2026 07:51:28 +0000 asID: 14618 IP address blocks: 2a07:54c1:4500::/40 maxlen: 48 2a07:54c4:175c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:37:b2:b5:ee:33:21:de:27:2a:3a:d6:11:3a:23:ad:6e:1c:05:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:28 2025 GMT Not After : Jul 3 07:51:28 2026 GMT Subject: CN=ED5FF9871BFB5F6609FC8E9FC714CDD13E17FFD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:17:4a:db:a3:b2:11:b7:fe:75:e2:a8:32: 30:d2:5d:db:1a:18:57:38:7d:13:72:47:83:65:de: cb:a1:ba:60:2c:a3:d4:a7:a3:88:71:27:0e:74:44: 06:bb:dc:47:69:57:8e:8d:8c:93:d7:92:a0:b6:9d: 4b:02:5e:88:cb:03:2b:e7:6b:d4:32:0a:48:6c:0f: 54:2b:35:d4:92:27:71:b3:40:94:2e:92:23:17:a7: ac:77:83:77:c3:2b:a8:fa:65:19:71:47:4c:27:34: 88:d7:f8:c6:05:ac:8f:09:36:dd:03:26:3e:e1:93: a8:3b:b1:6f:50:a5:4a:fc:8e:a2:23:bf:4b:43:de: 45:fa:5d:ee:74:e9:0d:16:e8:bb:bb:52:7e:67:d8: b5:21:cd:5d:1c:75:44:8b:4a:1d:12:70:5f:02:15: 04:22:87:ae:41:cf:07:c1:e3:cf:87:e0:6a:3a:48: 02:40:fa:78:5a:d0:62:22:12:20:03:c3:fb:70:32: 81:25:d8:49:13:81:70:03:a1:1d:d6:cc:10:3d:51: c4:20:a9:d8:5f:42:4a:00:0c:fa:e6:3a:66:63:ce: 54:7e:3b:f7:58:ef:20:4c:d7:da:ea:ce:fa:b6:b8: 98:40:60:96:dc:fb:78:89:36:25:08:08:59:54:fa: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5F:F9:87:1B:FB:5F:66:09:FC:8E:9F:C7:14:CD:D1:3E:17:FF:D4 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4500::/40 2a07:54c4:175c::/48 Signature Algorithm: sha256WithRSAEncryption 66:a9:7d:9c:5e:a6:6b:7d:13:7f:d1:1a:c1:6e:b8:9a:8c:d7: 5b:20:6f:ec:68:54:de:55:89:b8:4c:5a:1a:f2:10:1d:c3:c1: fc:5b:28:71:7d:f2:5c:33:2c:6e:d5:55:65:39:34:64:7d:d2: 53:c1:6a:68:0e:66:22:81:fc:b0:dd:75:5c:46:34:b2:82:37: 65:25:1e:5c:5e:44:af:2a:d9:0f:e5:81:6d:c7:71:b9:8d:3a: 50:9b:73:83:b9:a0:97:40:3c:2d:65:f8:d4:3b:6e:51:ad:21: 8a:15:78:e9:72:c8:a4:59:f0:17:52:09:25:2e:4b:e4:00:5c: 1a:c3:2d:e5:b0:26:01:ba:b4:72:f3:bf:8a:19:bc:6f:d2:73: 17:27:5a:c2:2f:24:fc:51:fd:71:f4:04:77:9e:ec:6a:b5:fc: e9:46:83:fa:c7:de:83:0c:75:fb:32:25:df:29:c6:17:37:98: 71:83:f1:8a:ab:27:b4:64:b2:68:5a:6b:a4:ad:aa:98:70:be: 80:48:fe:90:75:9d:57:bc:08:e5:34:d4:88:89:2b:00:0e:73: 06:14:8b:f1:cf:9f:0a:93:4c:99:81:bb:bd:be:66:e3:e8:42: fc:9f:18:0a:d0:25:0a:c2:32:5a:aa:99:e9:91:e8:cd:12:f3: 37:39:d6:c0 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUNjeyte4zId4nKjrWETojrW4cBQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjhaFw0yNjA3MDMwNzUxMjhaMDMxMTAvBgNV BAMTKEVENUZGOTg3MUJGQjVGNjYwOUZDOEU5RkM3MTRDREQxM0UxN0ZGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RRdK26OyEbf+deKoMjDSXdsa GFc4fRNyR4Nl3suhumAso9Sno4hxJw50RAa73EdpV46NjJPXkqC2nUsCXojLAyvn a9QyCkhsD1QrNdSSJ3GzQJQukiMXp6x3g3fDK6j6ZRlxR0wnNIjX+MYFrI8JNt0D Jj7hk6g7sW9QpUr8jqIjv0tD3kX6Xe506Q0W6Lu7Un5n2LUhzV0cdUSLSh0ScF8C FQQih65BzwfB48+H4Go6SAJA+nha0GIiEiADw/twMoEl2EkTgXADoR3WzBA9UcQg qdhfQkoADPrmOmZjzlR+O/dY7yBM19rqzvq2uJhAYJbc+3iJNiUICFlU+lLJAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU7V/5hxv7X2YJ/I6fxxTN0T4X/9QwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTQ2MTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBgAqB1TB RQMHACoHVMQXXDANBgkqhkiG9w0BAQsFAAOCAQEAZql9nF6ma30Tf9EawW64mozX WyBv7GhU3lWJuExaGvIQHcPB/FsocX3yXDMsbtVVZTk0ZH3SU8FqaA5mIoH8sN11 XEY0soI3ZSUeXF5EryrZD+WBbcdxuY06UJtzg7mgl0A8LWX41DtuUa0hihV46XLI pFnwF1IJJS5L5ABcGsMt5bAmAbq0cvO/ihm8b9JzFydawi8k/FH9cfQEd57sarX8 6UaD+sfegwx1+zIl3ynGFzeYcYPxiqsntGSyaFprpK2qmHC+gEj+kHWdV7wI5TTU iIkrAA5zBhSL8c+fCpNMmYG7vb5m4+hC/J8YCtAlCsIyWqqZ6ZHozRLzNznWwA== -----END CERTIFICATE-----Generated at Sat Jul 5 08:15:13 2025 by rpki-client