$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207341.roa File: AS207341.roa (raw, json) Hash identifier: EMUW0GxB2CtXb5qo79bOtvQsi+g0Fl5XHKRB+Z6c9YI= Subject key identifier: A9:64:A0:F5:21:A4:24:50:DA:55:ED:32:FA:DE:7D:4D:81:D3:6E:B9 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 5D4AB5A5DBDB1686385951C938F4F3DFD34D5879 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207341.roa Signing time: Fri 04 Jul 2025 07:51:27 +0000 ROA not before: Fri 04 Jul 2025 07:46:27 +0000 ROA not after: Fri 03 Jul 2026 07:51:27 +0000 asID: 207341 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4a:b5:a5:db:db:16:86:38:59:51:c9:38:f4:f3:df:d3:4d:58:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:27 2025 GMT Not After : Jul 3 07:51:27 2026 GMT Subject: CN=A964A0F521A42450DA55ED32FADE7D4D81D36EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:ad:b1:e6:52:6f:8b:70:41:1b:ce:53:48: 3a:0b:ac:cd:b0:54:34:e8:1f:50:4d:83:50:70:5e: 1a:65:5f:a2:a6:24:d5:4f:88:6a:4f:22:50:2f:c7: df:18:ee:5c:7c:20:d0:e0:2c:01:30:1d:2d:cf:6d: 0d:63:01:49:ba:4d:ec:72:33:e3:66:63:0c:e4:7e: fd:fe:97:fe:cd:86:e0:f5:9d:8c:b1:9d:5d:d5:85: 2c:8c:d0:56:b9:c2:c2:d5:37:e9:52:9c:58:4a:78: 49:db:f5:58:7e:c2:aa:7e:f8:a1:de:33:05:97:99: 91:8b:90:39:c3:8a:96:4b:bc:07:27:f5:8f:a4:7c: 86:70:cb:b2:e1:60:98:e0:8b:e0:a5:22:38:a5:7e: 07:d3:07:4a:48:be:ab:9f:fb:a6:8f:81:d9:28:2d: a2:7a:e0:05:2a:2b:d4:ab:f3:7f:02:fa:aa:8d:8c: c3:41:bb:8f:f5:51:24:14:ee:66:0f:19:77:c3:1e: 66:71:31:e2:fa:0d:ec:f0:51:67:d1:ba:84:1b:b5: 7b:73:47:4a:a5:25:6e:f8:88:9c:65:5f:69:ae:da: 4b:79:2d:bd:c4:82:f2:03:f0:40:da:02:98:a0:53: 96:cf:cb:67:ca:c3:e1:42:97:f4:71:c8:86:e4:22: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:64:A0:F5:21:A4:24:50:DA:55:ED:32:FA:DE:7D:4D:81:D3:6E:B9 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207341.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a9:37:4b:69:dc:a6:4b:9a:9b:a0:9e:26:02:0f:6c:c0:3a:39: cb:41:dd:f0:d7:92:19:e7:f4:f1:13:b1:3c:c9:8f:f6:f0:60: f2:6e:03:36:38:6c:8c:ae:77:83:c4:6d:6c:e4:29:2a:f8:15: a0:f4:19:ec:8a:41:c2:d2:c3:2f:e9:a6:c4:4f:cc:de:ad:0f: bb:21:6e:0a:a6:67:d2:32:61:ef:a7:73:87:85:10:cd:e7:48: e1:21:62:54:1a:e0:e9:6e:8e:ba:b8:e0:e6:86:a4:36:27:2f: 8e:f2:6d:46:fd:7a:a4:21:ae:f1:51:71:a7:86:cd:55:42:6b: b7:24:a2:21:ad:b6:59:97:af:5e:1a:2e:f4:f9:40:6d:bf:8b: f0:76:d7:b4:cc:28:ac:15:3f:37:67:e1:f0:87:2a:b6:93:fd: e8:46:63:c5:fa:54:82:3e:f1:f1:53:65:44:35:15:ac:02:4b: ca:55:e7:26:9e:69:22:87:11:40:e1:70:f8:86:af:d4:96:9e: 94:28:10:33:16:17:2c:01:a6:0b:50:43:ff:52:b8:75:35:92: 31:57:c0:79:f9:fc:c9:c7:2b:d8:80:f6:7a:fd:4c:4e:f4:4c: 05:0f:a0:c4:e0:5e:ce:b6:9b:d8:75:a2:c8:cc:00:9e:0b:32: 36:3f:36:80 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXUq1pdvbFoY4WVHJOPTz39NNWHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjdaFw0yNjA3MDMwNzUxMjdaMDMxMTAvBgNV BAMTKEE5NjRBMEY1MjFBNDI0NTBEQTU1RUQzMkZBREU3RDREODFEMzZFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcq2x5lJvi3BBG85TSDoLrM2w VDToH1BNg1BwXhplX6KmJNVPiGpPIlAvx98Y7lx8INDgLAEwHS3PbQ1jAUm6Texy M+NmYwzkfv3+l/7NhuD1nYyxnV3VhSyM0Fa5wsLVN+lSnFhKeEnb9Vh+wqp++KHe MwWXmZGLkDnDipZLvAcn9Y+kfIZwy7LhYJjgi+ClIjilfgfTB0pIvquf+6aPgdko LaJ64AUqK9Sr838C+qqNjMNBu4/1USQU7mYPGXfDHmZxMeL6DezwUWfRuoQbtXtz R0qlJW74iJxlX2mu2kt5Lb3EgvID8EDaApigU5bPy2fKw+FCl/RxyIbkIsNNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqWSg9SGkJFDaVe0y+t59TYHTbrkwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA3MzQxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCpN0tp3KZLmpugniYCD2zAOjnLQd3w15IZ 5/TxE7E8yY/28GDybgM2OGyMrneDxG1s5Ckq+BWg9BnsikHC0sMv6abET8zerQ+7 IW4KpmfSMmHvp3OHhRDN50jhIWJUGuDpbo66uODmhqQ2Jy+O8m1G/XqkIa7xUXGn hs1VQmu3JKIhrbZZl69eGi70+UBtv4vwdte0zCisFT83Z+Hwhyq2k/3oRmPF+lSC PvHxU2VENRWsAkvKVecmnmkihxFA4XD4hq/Ulp6UKBAzFhcsAaYLUEP/Urh1NZIx V8B5+fzJxyvYgPZ6/UxO9EwFD6DE4F7OtpvYdaLIzACeCzI2PzaA -----END CERTIFICATE-----Generated at Sat Jul 5 08:19:42 2025 by rpki-client