$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS198590.roa File: AS198590.roa (raw, json) Hash identifier: lA07R3e2lyaFsQFWMj7tjR/75HTD2Iuy/YT3OLxRVE8= Subject key identifier: 66:A0:8F:17:35:5A:7E:CA:C7:03:0A:9E:EE:93:13:E6:DD:1E:95:78 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 5EC6CD99E47AB84EE738B3A33D855F1763F1AB07 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS198590.roa Signing time: Fri 04 Jul 2025 07:51:27 +0000 ROA not before: Fri 04 Jul 2025 07:46:27 +0000 ROA not after: Fri 03 Jul 2026 07:51:27 +0000 asID: 198590 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 2a07:54c4:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c6:cd:99:e4:7a:b8:4e:e7:38:b3:a3:3d:85:5f:17:63:f1:ab:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:27 2025 GMT Not After : Jul 3 07:51:27 2026 GMT Subject: CN=66A08F17355A7ECAC7030A9EEE9313E6DD1E9578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:da:f1:3d:26:a5:0a:5d:6c:b2:7b:7e:cc: c4:5a:d9:b7:12:41:76:fc:01:3d:5d:ca:4b:32:fd: 7a:d7:ff:50:63:6e:65:9a:7d:86:fc:b3:cd:07:ef: b1:1c:de:d1:cd:6a:50:9c:39:0a:40:77:2e:40:b8: f9:7c:5b:3b:aa:f4:62:17:ad:2a:dc:24:89:fc:41: 21:22:28:cd:af:b8:90:55:4b:0e:89:35:c8:82:bd: 2b:53:32:ba:c8:19:92:b6:20:f3:37:3b:12:16:5f: ac:5f:53:fa:5f:23:a6:f6:01:57:ef:b6:9f:52:33: 10:63:44:ed:36:a3:38:c8:b3:90:da:0e:ac:b8:7d: ea:c2:e7:9f:55:cf:11:a7:7d:43:6d:d0:4f:ba:4c: 1b:00:25:bc:60:bc:66:4f:72:4b:63:e6:31:c4:e8: b6:3e:e6:24:39:f0:f0:ff:72:1f:33:98:d6:60:84: d1:0e:47:97:ae:f0:04:70:7a:5a:a7:67:0e:24:d7: 95:4c:9f:2f:a7:03:5d:e1:18:2a:1e:d2:62:df:03: 02:11:de:ad:8d:ed:6a:79:fb:37:bd:3e:b0:37:34: e4:c0:a8:89:65:a9:a7:ba:19:2e:f9:6b:91:74:a1: 40:4c:cb:98:ae:87:ab:be:b0:e4:fa:ac:71:61:89: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A0:8F:17:35:5A:7E:CA:C7:03:0A:9E:EE:93:13:E6:DD:1E:95:78 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS198590.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 2a07:54c4:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 70:76:03:38:eb:91:42:78:cf:b0:63:14:2e:82:af:e5:0f:2d: ac:17:f4:ab:78:ca:92:0e:9d:7c:45:cf:da:69:f6:c1:cd:9e: b4:0c:5f:7c:ee:b0:45:e5:cc:f8:ff:c3:06:2b:d2:5c:15:46: 21:5c:7b:4d:2a:ec:36:c1:24:61:78:43:c3:c8:dd:1d:bf:20: eb:e7:ea:71:a3:f6:ff:97:55:de:e6:ff:79:14:82:fc:7d:bb: 7e:6b:ac:5f:1b:17:09:50:ba:08:f6:1e:bd:75:b8:7f:19:17: 7e:32:4a:e3:fd:65:4d:93:aa:23:22:88:4c:57:38:dd:ce:c1: 04:2c:69:13:9d:87:d2:aa:76:d9:56:d7:df:32:68:21:94:d4: 7d:68:91:c9:30:1c:3a:3b:8c:0c:b7:a0:53:4f:13:da:2f:f5: c1:8b:e6:38:f4:9c:3e:82:c1:10:f8:b3:ff:7c:fa:24:72:ce: 60:ff:5a:b1:bd:ab:d4:64:bd:24:ba:04:1d:fd:42:a0:75:4d: f2:97:82:af:55:13:e9:8b:2a:ca:e4:47:15:25:d4:d4:60:6b: e1:d8:a4:58:62:4b:10:08:11:0b:fe:ad:ad:32:90:c8:90:7e: 89:a2:67:cb:2e:82:2d:c2:c2:12:0d:4f:c7:60:7c:dc:b5:25: 55:b3:1d:90 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUXsbNmeR6uE7nOLOjPYVfF2PxqwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjdaFw0yNjA3MDMwNzUxMjdaMDMxMTAvBgNV BAMTKDY2QTA4RjE3MzU1QTdFQ0FDNzAzMEE5RUVFOTMxM0U2REQxRTk1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KtrxPSalCl1ssnt+zMRa2bcS QXb8AT1dyksy/XrX/1BjbmWafYb8s80H77Ec3tHNalCcOQpAdy5AuPl8Wzuq9GIX rSrcJIn8QSEiKM2vuJBVSw6JNciCvStTMrrIGZK2IPM3OxIWX6xfU/pfI6b2AVfv tp9SMxBjRO02ozjIs5DaDqy4ferC559VzxGnfUNt0E+6TBsAJbxgvGZPcktj5jHE 6LY+5iQ58PD/ch8zmNZghNEOR5eu8ARwelqnZw4k15VMny+nA13hGCoe0mLfAwIR 3q2N7Wp5+ze9PrA3NOTAqIllqae6GS75a5F0oUBMy5iuh6u+sOT6rHFhiRm9AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUZqCPFzVafsrHAwqe7pMT5t0elXgwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk4NTkwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgdU wrALAwcAKgdUxLALMA0GCSqGSIb3DQEBCwUAA4IBAQBwdgM465FCeM+wYxQugq/l Dy2sF/SreMqSDp18Rc/aafbBzZ60DF987rBF5cz4/8MGK9JcFUYhXHtNKuw2wSRh eEPDyN0dvyDr5+pxo/b/l1Xe5v95FIL8fbt+a6xfGxcJULoI9h69dbh/GRd+Mkrj /WVNk6ojIohMVzjdzsEELGkTnYfSqnbZVtffMmghlNR9aJHJMBw6O4wMt6BTTxPa L/XBi+Y49Jw+gsEQ+LP/fPokcs5g/1qxvavUZL0kugQd/UKgdU3yl4KvVRPpiyrK 5EcVJdTUYGvh2KRYYksQCBEL/q2tMpDIkH6JomfLLoItwsISDU/HYHzctSVVsx2Q -----END CERTIFICATE-----Generated at Sat Jul 5 08:24:21 2025 by rpki-client