$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214999.roa File: AS214999.roa (raw, json) Hash identifier: iO+EQ9UiRV+dV5FYTu0D5N/1Ad0k7GGBGv8Kee1VU+0= Subject key identifier: 58:F1:16:CA:EB:6F:12:C6:EB:3E:73:E9:45:CA:CD:1D:94:CF:25:24 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 18FA5D1A5EE9163C7093D4F09FEE47DB5A6E5E98 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214999.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 214999 IP address blocks: 2a07:54c1:c300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 17:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:fa:5d:1a:5e:e9:16:3c:70:93:d4:f0:9f:ee:47:db:5a:6e:5e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=58F116CAEB6F12C6EB3E73E945CACD1D94CF2524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:d1:b4:06:8d:61:99:c0:c3:bf:c0:3b:dc: c2:cd:c9:ba:03:78:7e:ba:7e:af:6d:73:87:00:ef: 80:df:91:34:75:25:c1:c0:9e:79:ec:d0:9c:7b:8f: 9d:19:a8:0b:2b:62:b4:1c:00:19:70:ca:56:fc:6e: 72:05:8c:68:d6:ae:7e:24:e5:8f:de:a2:9a:95:bd: 01:30:0f:4d:0d:6a:59:7c:fd:02:71:fd:0e:34:9c: d4:81:ee:45:ed:f7:ff:df:8e:fb:69:cc:96:22:2b: 81:a8:9f:00:f2:78:cd:0e:bb:5c:63:d5:3f:04:1a: fb:f4:a4:52:ee:a8:f9:22:26:dd:9b:72:57:0f:d4: aa:ec:74:56:22:b0:49:e6:89:53:2b:77:1f:5f:5c: 10:c8:d6:55:83:55:b9:84:7a:c7:1b:8b:0c:fc:36: 59:9c:22:4e:97:5f:06:51:6c:84:71:32:9e:76:0a: e4:63:7a:60:b7:af:b9:fc:b3:7b:3e:4d:20:74:3b: 9f:3d:1a:06:0d:ab:de:91:9a:ef:8a:84:cc:a8:12: 2e:62:8e:0b:78:62:1a:47:25:8f:4d:69:a8:ed:84: 56:55:66:63:97:cd:08:65:9a:1f:67:11:ee:b9:6c: dc:34:64:ea:dd:14:0f:42:94:15:a2:92:07:ce:75: b3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F1:16:CA:EB:6F:12:C6:EB:3E:73:E9:45:CA:CD:1D:94:CF:25:24 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c300::/40 Signature Algorithm: sha256WithRSAEncryption 57:cd:15:61:25:b1:07:c0:a2:f7:9d:2d:30:45:d3:5e:bd:b0: 3f:6d:40:49:ff:a3:eb:5b:dd:5c:bd:85:34:e0:7f:2f:1b:bf: 41:7b:0e:94:80:a4:10:2b:04:a9:72:9f:73:ee:b7:4f:8c:1c: e6:d3:ed:e3:ee:fc:6c:a4:d1:17:5b:1b:8a:d3:eb:b1:2a:60: c4:31:49:12:7f:e9:83:47:01:4c:f2:b9:54:98:63:b6:26:88: ad:0b:45:76:dc:63:1b:e6:6f:39:47:e3:07:de:3f:83:37:8c: aa:24:3f:de:53:d9:e6:54:9b:38:a6:77:d1:d1:27:dc:21:bc: 25:ce:a9:dc:e3:e4:f8:b7:51:1b:ca:74:8b:fa:3e:ed:df:53: cc:3a:52:58:76:3f:f8:e0:09:1a:fe:be:95:6d:13:c5:f3:ea: be:bd:82:17:a6:d6:e0:f8:bc:36:a0:c2:dd:af:0f:1d:23:a2: 1e:b5:d0:90:9e:89:98:cb:64:9e:26:5a:59:76:96:1d:25:a3: fb:01:16:f3:28:0a:3e:ed:91:cd:4b:e1:6c:ac:14:14:a5:a9: a1:da:ef:59:35:eb:83:71:15:44:ec:e8:46:57:00:d2:41:51: d7:81:68:b2:1c:91:81:a7:e4:2b:f1:34:0c:b8:fe:8c:91:9f: b0:ac:4b:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPpdGl7pFjxwk9Twn+5H21puXpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDU4RjExNkNBRUI2RjEyQzZFQjNFNzNFOTQ1Q0FDRDFEOTRDRjI1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UdG0Bo1hmcDDv8A73MLNyboD eH66fq9tc4cA74DfkTR1JcHAnnns0Jx7j50ZqAsrYrQcABlwylb8bnIFjGjWrn4k 5Y/eopqVvQEwD00Nall8/QJx/Q40nNSB7kXt9//fjvtpzJYiK4GonwDyeM0Ou1xj 1T8EGvv0pFLuqPkiJt2bclcP1KrsdFYisEnmiVMrdx9fXBDI1lWDVbmEescbiwz8 NlmcIk6XXwZRbIRxMp52CuRjemC3r7n8s3s+TSB0O589GgYNq96Rmu+KhMyoEi5i jgt4YhpHJY9NaajthFZVZmOXzQhlmh9nEe65bNw0ZOrdFA9ClBWikgfOdbMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWPEWyutvEsbrPnPpRcrNHZTPJSQwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE0OTk5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wcMwDQYJKoZIhvcNAQELBQADggEBAFfNFWElsQfAovedLTBF0169sD9tQEn/o+tb 3Vy9hTTgfy8bv0F7DpSApBArBKlyn3Put0+MHObT7ePu/Gyk0RdbG4rT67EqYMQx SRJ/6YNHAUzyuVSYY7YmiK0LRXbcYxvmbzlH4wfeP4M3jKokP95T2eZUmzimd9HR J9whvCXOqdzj5Pi3URvKdIv6Pu3fU8w6Ulh2P/jgCRr+vpVtE8Xz6r69ghem1uD4 vDagwt2vDx0joh610JCeiZjLZJ4mWll2lh0lo/sBFvMoCj7tkc1L4WysFBSlqaHa 71k164NxFUTs6EZXANJBUdeBaLIckYGn5CvxNAy4/oyRn7CsSwY= -----END CERTIFICATE-----Generated at Sat Jun 6 05:23:07 2026 by rpki-client