$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS147020.roa File: AS147020.roa (raw, json) Hash identifier: lvtXhYTH39BhizeX8V+LjkS+1fxzGkOjX7Vu/ETm/Zs= Subject key identifier: 87:CD:B1:2C:51:03:66:54:77:B8:DC:36:39:CE:8B:39:FA:9A:17:1B Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 5A538D7A782A734E15AD2C3F744A9CDE72CBE8F2 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS147020.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 147020 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:53:8d:7a:78:2a:73:4e:15:ad:2c:3f:74:4a:9c:de:72:cb:e8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=87CDB12C5103665477B8DC3639CE8B39FA9A171B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:4c:e0:46:5a:83:60:62:3f:2f:e0:1b:55: f8:7d:4e:cf:c7:83:87:29:e6:d3:2e:ad:9e:f6:38: 8e:c5:4e:28:a5:95:47:54:be:bd:0d:0c:f4:69:87: a9:12:da:db:35:36:ec:ad:05:5e:23:64:4f:80:1b: 20:7f:45:e8:2f:33:5c:94:56:07:1f:12:06:78:19: 8c:20:d7:1b:f5:00:e9:e2:85:8a:83:59:95:80:61: e5:f0:d6:40:92:4e:41:e2:17:30:8d:20:6d:11:58: 49:a3:50:ee:0a:26:d0:96:8d:bd:e8:f5:76:2e:df: 87:95:c7:3f:0d:60:fc:82:ea:d5:d6:af:63:9c:49: 90:12:b6:01:fb:c2:c7:ed:ea:f2:29:61:ce:bc:48: 6c:c3:78:d6:af:f5:d6:50:be:51:9f:97:69:5e:ac: 16:eb:b1:3e:b5:a0:6d:59:f6:4a:b1:e0:89:c6:95: 08:49:6b:64:2d:53:81:c5:48:70:ea:90:39:39:2d: 80:8c:b1:f1:c9:c3:96:8e:ba:70:2a:ba:6d:c4:26: 91:cf:6a:2d:84:b7:7e:1c:a2:66:dd:62:63:06:7b: 32:bb:3a:41:bf:bf:fa:4f:f4:2a:64:2c:a0:5a:1d: 4e:28:11:36:31:29:18:b7:4a:38:e8:64:9e:dc:20: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:B1:2C:51:03:66:54:77:B8:DC:36:39:CE:8B:39:FA:9A:17:1B X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS147020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 77:c9:57:a0:06:c1:6e:1b:6a:b8:83:36:66:a1:cc:20:86:8e: 1e:fe:f3:cd:97:cf:fa:3d:6e:81:3e:cf:0d:08:b6:c1:fc:d1: 36:f9:ed:d3:29:05:f7:22:9c:4c:96:f0:ec:a0:7f:ae:36:3f: 06:9b:85:34:2e:6d:e5:d5:2c:14:b2:9c:fc:57:5d:85:bc:f2: 25:f2:e0:c8:76:63:71:d8:7f:71:ef:25:f8:16:f0:35:22:6b: 39:6a:52:22:83:dc:6d:15:a9:51:58:84:39:d7:e7:6f:ba:62: 4b:74:cc:e4:c9:ac:5e:69:da:55:ce:b9:35:8c:fb:e2:c8:43: 9b:a3:cb:12:e0:c7:27:d1:9e:db:69:ac:6e:29:bb:57:4a:56: fa:c9:e3:1c:86:3c:55:39:c1:fa:91:43:20:89:90:ee:71:39: cf:3c:b1:51:c1:ed:8c:f3:d8:1e:45:4f:5e:3d:ba:87:a1:83: aa:bc:00:f6:b3:a5:58:78:1e:6d:6c:ae:b7:47:7d:a3:23:25: ee:77:2a:44:70:6a:3f:11:99:96:2a:63:b7:4a:7b:e4:b5:35: ed:b6:1e:b1:df:0f:25:85:8d:b0:08:6e:b0:f8:1f:c8:57:8c: d8:9e:82:29:e6:f3:f4:ba:12:50:d7:b0:cd:f3:18:4b:52:62: 10:15:33:6d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWlONengqc04VrSw/dEqc3nLL6PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDg3Q0RCMTJDNTEwMzY2NTQ3N0I4REMzNjM5Q0U4QjM5RkE5QTE3MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzEzgRlqDYGI/L+AbVfh9Ts/H g4cp5tMurZ72OI7FTiillUdUvr0NDPRph6kS2ts1NuytBV4jZE+AGyB/RegvM1yU VgcfEgZ4GYwg1xv1AOnihYqDWZWAYeXw1kCSTkHiFzCNIG0RWEmjUO4KJtCWjb3o 9XYu34eVxz8NYPyC6tXWr2OcSZAStgH7wsft6vIpYc68SGzDeNav9dZQvlGfl2le rBbrsT61oG1Z9kqx4InGlQhJa2QtU4HFSHDqkDk5LYCMsfHJw5aOunAqum3EJpHP ai2Et34combdYmMGezK7OkG/v/pP9CpkLKBaHU4oETYxKRi3SjjoZJ7cIJc3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUh82xLFEDZlR3uNw2Oc6LOfqaFxswHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTQ3MDIwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQB3yVegBsFuG2q4gzZmocwgho4e/vPNl8/6 PW6BPs8NCLbB/NE2+e3TKQX3IpxMlvDsoH+uNj8Gm4U0Lm3l1SwUspz8V12FvPIl 8uDIdmNx2H9x7yX4FvA1Ims5alIig9xtFalRWIQ51+dvumJLdMzkyaxeadpVzrk1 jPviyEObo8sS4Mcn0Z7baaxuKbtXSlb6yeMchjxVOcH6kUMgiZDucTnPPLFRwe2M 89geRU9ePbqHoYOqvAD2s6VYeB5tbK63R32jIyXudypEcGo/EZmWKmO3SnvktTXt th6x3w8lhY2wCG6w+B/IV4zYnoIp5vP0uhJQ17DN8xhLUmIQFTNt -----END CERTIFICATE-----Generated at Sat Jul 5 08:18:06 2025 by rpki-client