$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200454.roa File: AS200454.roa (raw, json) Hash identifier: WrOBrkpa2Q5vpOqVO/AxZLdvQTeC6MyhvRcX/hjf3xY= Subject key identifier: 5C:5D:42:EC:10:D9:4A:9B:E6:22:33:18:41:21:73:E2:FB:BE:55:B2 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 025D2B5178783BF5D937792A6DADEC0D4B8FE0F5 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200454.roa Signing time: Fri 04 Jul 2025 07:51:26 +0000 ROA not before: Fri 04 Jul 2025 07:46:26 +0000 ROA not after: Fri 03 Jul 2026 07:51:26 +0000 asID: 200454 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 2a07:54c4:1759::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5d:2b:51:78:78:3b:f5:d9:37:79:2a:6d:ad:ec:0d:4b:8f:e0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:26 2025 GMT Not After : Jul 3 07:51:26 2026 GMT Subject: CN=5C5D42EC10D94A9BE6223318412173E2FBBE55B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:10:e2:75:31:b1:9d:c0:0f:90:03:b4:72: 4f:f7:55:5e:0c:f3:1d:47:3d:b7:39:ff:94:87:cc: 0e:bf:0e:b2:c8:f9:c2:b4:4e:a5:1f:37:27:79:68: 71:91:28:3f:99:17:a2:6c:98:4e:fe:9f:1e:6d:9c: 21:03:3a:6a:ca:ec:c5:06:6f:fb:a8:91:d2:5b:b5: 18:bf:9a:a3:bf:62:a4:2d:c6:b8:fa:08:02:d1:45: 6a:0f:a6:03:53:0c:0d:cc:ab:56:a5:61:21:d7:36: 55:26:69:f9:cc:83:84:08:9f:0d:74:00:55:5e:5e: fb:29:44:3d:fa:ad:48:c8:b6:d1:6d:d4:7b:aa:e9: 24:e1:89:fc:a1:36:30:b9:9d:e1:b8:9a:78:eb:29: 14:82:cc:d5:3f:17:be:86:c9:1b:7a:6b:f5:ea:07: f4:aa:06:27:3b:5d:e6:19:fa:0b:00:69:a3:7a:27: fc:ec:aa:29:b5:1a:46:64:5a:6a:f4:f7:9a:97:45: 95:77:bb:52:91:1c:83:de:e9:e7:2a:6f:95:c1:81: 1a:62:2d:39:73:48:0e:b0:40:05:71:2f:dd:d5:35: b1:c7:e9:6c:80:23:be:93:39:33:dd:f3:ca:07:d3: 12:be:9c:90:d3:f7:cc:ff:c9:c3:28:35:52:96:59: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5D:42:EC:10:D9:4A:9B:E6:22:33:18:41:21:73:E2:FB:BE:55:B2 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 2a07:54c4:1759::/48 Signature Algorithm: sha256WithRSAEncryption 8e:b0:67:69:f3:d1:14:f9:17:bf:10:05:fd:a7:38:82:24:18: 25:34:b1:55:81:fa:e1:51:d2:ad:01:d3:06:95:03:32:cb:29: 55:13:d1:2d:60:5c:a1:a3:1a:39:66:da:97:33:7a:05:fb:0d: 01:55:3b:5b:82:08:c2:53:07:96:92:f3:2a:c9:15:d1:04:43: e0:8b:2c:65:46:1e:25:9d:05:4e:04:27:f4:94:1d:1e:6a:7e: 20:f7:63:3d:03:b2:e9:db:7f:fe:38:bd:99:1c:02:2f:7a:3e: ff:47:49:38:72:5b:0e:a8:41:df:11:33:e7:8a:e1:05:bb:83: 4f:fd:ab:7f:4c:fd:c1:17:b1:ea:96:fa:15:cd:cc:15:fc:c1: 3c:a1:fa:47:c3:3e:13:e1:f3:20:d9:ef:2c:81:73:7c:27:18: 25:03:34:4e:db:d2:24:e0:46:af:dd:12:3c:fb:f2:66:95:22: 56:cd:d6:f3:16:90:63:ae:17:8c:85:8f:46:e1:48:3f:1d:22: 82:a7:88:ea:95:34:5b:5b:1a:f8:b4:f0:b8:29:c9:bf:ed:7a: 0c:18:07:60:13:da:4f:58:eb:6b:86:80:cc:b7:65:81:3e:c3: 17:32:05:74:80:97:97:7f:2f:eb:e3:c1:1b:fa:1c:26:7b:a2: 86:62:92:42 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUAl0rUXh4O/XZN3kqba3sDUuP4PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjZaFw0yNjA3MDMwNzUxMjZaMDMxMTAvBgNV BAMTKDVDNUQ0MkVDMTBEOTRBOUJFNjIyMzMxODQxMjE3M0UyRkJCRTU1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJhDidTGxncAPkAO0ck/3VV4M 8x1HPbc5/5SHzA6/DrLI+cK0TqUfNyd5aHGRKD+ZF6JsmE7+nx5tnCEDOmrK7MUG b/uokdJbtRi/mqO/YqQtxrj6CALRRWoPpgNTDA3Mq1alYSHXNlUmafnMg4QInw10 AFVeXvspRD36rUjIttFt1Huq6SThifyhNjC5neG4mnjrKRSCzNU/F76GyRt6a/Xq B/SqBic7XeYZ+gsAaaN6J/zsqim1GkZkWmr095qXRZV3u1KRHIPe6ecqb5XBgRpi LTlzSA6wQAVxL93VNbHH6WyAI76TOTPd88oH0xK+nJDT98z/ycMoNVKWWYpbAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUXF1C7BDZSpvmIjMYQSFz4vu+VbIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwNDU0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgdU wrALAwcAKgdUxBdZMA0GCSqGSIb3DQEBCwUAA4IBAQCOsGdp89EU+Re/EAX9pziC JBglNLFVgfrhUdKtAdMGlQMyyylVE9EtYFyhoxo5ZtqXM3oF+w0BVTtbggjCUweW kvMqyRXRBEPgiyxlRh4lnQVOBCf0lB0ean4g92M9A7Lp23/+OL2ZHAIvej7/R0k4 clsOqEHfETPniuEFu4NP/at/TP3BF7HqlvoVzcwV/ME8ofpHwz4T4fMg2e8sgXN8 JxglAzRO29Ik4Eav3RI8+/JmlSJWzdbzFpBjrheMhY9G4Ug/HSKCp4jqlTRbWxr4 tPC4Kcm/7XoMGAdgE9pPWOtrhoDMt2WBPsMXMgV0gJeXfy/r48Eb+hwme6KGYpJC -----END CERTIFICATE-----Generated at Sat Jul 5 08:23:46 2025 by rpki-client