$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200572.roa File: AS200572.roa (raw, json) Hash identifier: ZYdoP7gaSbU91IRboL39vPRStudCVXg0H77SJPJJlZ8= Subject key identifier: 9D:5E:78:46:65:8F:0E:F7:F1:DB:A4:01:8A:D2:35:86:D3:99:34:35 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 44EC1241DBBEE301A7EA7FDE7D51E78080D70406 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200572.roa Signing time: Fri 04 Jul 2025 07:51:27 +0000 ROA not before: Fri 04 Jul 2025 07:46:27 +0000 ROA not after: Fri 03 Jul 2026 07:51:27 +0000 asID: 200572 IP address blocks: 2a07:54c1:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ec:12:41:db:be:e3:01:a7:ea:7f:de:7d:51:e7:80:80:d7:04:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:27 2025 GMT Not After : Jul 3 07:51:27 2026 GMT Subject: CN=9D5E7846658F0EF7F1DBA4018AD23586D3993435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d6:97:da:f6:2c:c2:06:45:fe:b3:75:fc:85: 1c:ef:50:dc:ba:f0:ee:ff:2f:10:e6:12:70:d1:4e: 47:e0:98:73:d4:82:cb:ca:d1:63:15:22:ca:ab:8d: 48:8c:2f:55:d3:49:20:d9:f1:59:46:26:a6:b2:6a: 93:d5:e8:5b:c9:c6:d5:1a:c2:d1:48:fe:dc:3d:cc: 75:04:cc:80:92:38:9c:3d:69:a8:e2:ad:53:80:5c: 27:cb:f6:30:a8:09:a5:1c:bc:40:a8:03:06:86:33: bc:47:83:26:8c:d4:0a:b4:d2:58:99:d1:a7:0c:51: 60:ed:1c:81:04:64:66:3e:8c:94:c4:89:6b:4a:cf: 2d:d6:24:6a:c2:6e:cf:ad:74:ed:ca:ce:88:ea:a9: 25:d7:57:b2:37:f0:0e:ea:ed:95:59:42:72:0e:e1: be:d1:4b:f6:18:9b:2b:f1:31:07:b3:9f:bd:41:39: 75:ad:62:a9:5f:31:04:75:cb:73:26:65:42:ec:06: b6:ac:dc:53:9a:4f:2a:67:78:41:30:f3:db:50:ff: 63:19:b6:58:09:23:8b:b6:d0:28:84:2e:61:c2:85: fd:b6:4a:95:39:15:38:cb:56:b5:72:9f:41:35:f6: ba:5e:57:8e:30:6a:64:58:4d:ca:f9:b8:db:cb:77: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5E:78:46:65:8F:0E:F7:F1:DB:A4:01:8A:D2:35:86:D3:99:34:35 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200572.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4000::/40 Signature Algorithm: sha256WithRSAEncryption 61:e2:f6:fd:e0:3e:8d:19:28:8e:e8:00:88:1f:9c:46:e5:1c: 50:c9:fc:1f:f5:2b:93:f3:41:7c:45:67:03:86:27:de:b0:d4: c6:f3:78:33:6a:a0:1c:8d:86:3a:84:79:cd:90:fd:f8:ed:ad: 5d:cf:a2:0d:4e:fa:1c:61:f0:91:c7:d2:31:8a:39:da:c0:da: b1:85:d0:b8:bf:dc:ca:b0:77:a9:02:a4:b1:e4:cf:35:84:15: 9f:29:91:bb:3b:cd:ea:00:f0:9d:b4:a7:84:f7:51:5a:a9:e6: 98:08:b1:73:19:56:27:e7:95:94:d7:41:9d:61:7e:c3:70:fa: bd:5a:91:ef:36:bf:53:19:4c:b3:2e:4f:ab:2a:94:81:df:58: 34:56:fc:92:79:82:4c:99:88:12:c4:6f:db:32:bf:4c:c1:3e: 2f:25:f9:23:67:91:19:c8:28:87:d9:e2:6a:04:be:4f:70:80: ae:3b:15:60:e7:16:49:63:d9:39:6a:49:e8:89:52:d6:a3:4c: 1f:28:9b:d4:58:81:37:80:ad:a4:f5:dc:ad:cb:d0:66:14:da: 3b:8d:ef:74:5f:ee:c0:1d:b3:47:bd:44:63:d8:83:5b:ed:9b: 82:06:aa:9c:92:2b:a9:24:4b:29:7b:cc:ad:55:f4:55:68:cc: a7:81:bf:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROwSQdu+4wGn6n/efVHngIDXBAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjdaFw0yNjA3MDMwNzUxMjdaMDMxMTAvBgNV BAMTKDlENUU3ODQ2NjU4RjBFRjdGMURCQTQwMThBRDIzNTg2RDM5OTM0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1pfa9izCBkX+s3X8hRzvUNy6 8O7/LxDmEnDRTkfgmHPUgsvK0WMVIsqrjUiML1XTSSDZ8VlGJqayapPV6FvJxtUa wtFI/tw9zHUEzICSOJw9aajirVOAXCfL9jCoCaUcvECoAwaGM7xHgyaM1Aq00liZ 0acMUWDtHIEEZGY+jJTEiWtKzy3WJGrCbs+tdO3KzojqqSXXV7I38A7q7ZVZQnIO 4b7RS/YYmyvxMQezn71BOXWtYqlfMQR1y3MmZULsBras3FOaTypneEEw89tQ/2MZ tlgJI4u20CiELmHChf22SpU5FTjLVrVyn0E19rpeV44wamRYTcr5uNvLd0LNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnV54RmWPDvfx26QBitI1htOZNDUwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwNTcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wUAwDQYJKoZIhvcNAQELBQADggEBAGHi9v3gPo0ZKI7oAIgfnEblHFDJ/B/1K5Pz QXxFZwOGJ96w1MbzeDNqoByNhjqEec2Q/fjtrV3Pog1O+hxh8JHH0jGKOdrA2rGF 0Li/3Mqwd6kCpLHkzzWEFZ8pkbs7zeoA8J20p4T3UVqp5pgIsXMZVifnlZTXQZ1h fsNw+r1ake82v1MZTLMuT6sqlIHfWDRW/JJ5gkyZiBLEb9syv0zBPi8l+SNnkRnI KIfZ4moEvk9wgK47FWDnFklj2TlqSeiJUtajTB8om9RYgTeAraT13K3L0GYU2juN 73Rf7sAds0e9RGPYg1vtm4IGqpySK6kkSyl7zK1V9FVozKeBv2o= -----END CERTIFICATE-----Generated at Sat Jul 5 08:20:30 2025 by rpki-client