$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS44658.roa File: AS44658.roa (raw, json) Hash identifier: l0m1+/CRXXLgbC930Pnwcr2C70woiWbXLIQNIvdlyC8= Subject key identifier: 73:F8:41:97:45:A4:C7:5E:F1:BD:37:00:E1:FB:A8:3D:AF:F0:D1:61 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 584AE4C51E287CC47A5E6A0D2901C07C764F3D23 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS44658.roa Signing time: Fri 04 Jul 2025 07:51:26 +0000 ROA not before: Fri 04 Jul 2025 07:46:26 +0000 ROA not after: Fri 03 Jul 2026 07:51:26 +0000 asID: 44658 IP address blocks: 2a07:54c4:1300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4a:e4:c5:1e:28:7c:c4:7a:5e:6a:0d:29:01:c0:7c:76:4f:3d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:26 2025 GMT Not After : Jul 3 07:51:26 2026 GMT Subject: CN=73F8419745A4C75EF1BD3700E1FBA83DAFF0D161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:e4:f8:c7:68:87:95:c0:f8:b3:e9:97:eb: ce:14:2c:59:cb:f6:c6:9f:4b:6b:19:cd:46:25:13: 34:f1:f6:c8:9e:f1:f4:52:7c:89:82:59:a1:7e:d3: 24:c6:79:7d:2f:f4:00:ca:e5:aa:ac:81:35:98:58: 0a:8b:a1:71:77:7d:97:52:c0:19:9a:e9:99:6c:b4: 99:36:e4:0b:10:24:b6:73:f4:b0:ad:07:48:32:c3: d5:4b:66:82:c3:31:ea:e4:6c:81:da:70:28:2c:c8: 75:a2:4c:f6:d7:e2:ae:11:97:fe:5c:05:ca:22:f1: c9:4d:e3:ae:d0:f3:ef:f8:e7:37:fb:2f:c8:0d:c2: 15:37:97:ea:78:4f:c7:06:86:b3:d1:c2:aa:19:0d: c7:7e:c5:f1:be:6e:5e:35:2c:2f:ad:61:52:f0:99: 82:c0:69:85:f6:30:1f:86:ef:36:09:e3:11:bf:93: 1e:e9:4d:c9:5a:6a:92:e4:3d:93:1d:7c:e4:d0:31: 52:cb:2c:c0:5d:ce:7f:28:87:b8:ab:a3:0f:6c:37: d9:f5:d6:22:ff:2a:67:21:d3:45:f8:92:21:d6:cd: dc:d4:4b:f8:7d:c6:8c:e4:19:c4:27:ae:28:27:10: be:ed:58:cb:4c:46:ec:1f:54:05:f0:88:a2:83:b8: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F8:41:97:45:A4:C7:5E:F1:BD:37:00:E1:FB:A8:3D:AF:F0:D1:61 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS44658.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1300::/40 Signature Algorithm: sha256WithRSAEncryption be:fb:3c:68:7d:5d:3c:67:bf:d2:a0:0d:68:14:b2:65:88:69: c2:28:2b:e6:e1:04:b5:ab:2a:56:45:1e:0c:e9:6c:ab:cb:61: 10:4f:d6:11:ac:07:e9:0a:5c:48:04:35:90:66:64:a1:a2:22: 20:08:b1:e9:e5:4f:a2:35:1f:0a:22:d8:cb:3b:b2:80:62:25: 24:d3:d2:ca:52:31:01:3e:63:03:1f:f1:5c:74:2b:10:48:02: e5:da:fe:d7:06:b7:2f:fa:ae:4a:d3:7f:9d:85:97:b1:f4:6a: 7e:5c:c9:eb:30:e6:c5:dd:6e:7f:19:08:e4:da:02:50:82:a1: 98:d8:2d:ba:f4:11:03:cf:6f:f6:30:c5:d6:e9:ba:6d:3a:1a: 08:7b:07:02:c6:11:39:79:fc:38:af:16:99:30:f3:91:44:b4: 64:03:7d:a3:9b:17:d3:26:de:a1:a2:c9:f4:e6:68:20:30:8d: c6:92:54:6d:26:0e:69:1a:74:f4:d7:1d:e2:ab:6b:93:50:f8: 4b:bd:25:f8:2f:f6:9e:71:cf:0b:ed:f0:60:b6:b9:ff:6a:3b: ed:81:97:a0:a7:6d:60:24:c6:4a:0a:5e:7d:13:e8:77:fa:e4: 01:f5:e0:14:05:44:70:78:bb:eb:04:05:a3:ca:13:ae:58:02: e6:11:44:f2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWErkxR4ofMR6XmoNKQHAfHZPPSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjZaFw0yNjA3MDMwNzUxMjZaMDMxMTAvBgNV BAMTKDczRjg0MTk3NDVBNEM3NUVGMUJEMzcwMEUxRkJBODNEQUZGMEQxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kuT4x2iHlcD4s+mX684ULFnL 9safS2sZzUYlEzTx9sie8fRSfImCWaF+0yTGeX0v9ADK5aqsgTWYWAqLoXF3fZdS wBma6ZlstJk25AsQJLZz9LCtB0gyw9VLZoLDMerkbIHacCgsyHWiTPbX4q4Rl/5c Bcoi8clN467Q8+/45zf7L8gNwhU3l+p4T8cGhrPRwqoZDcd+xfG+bl41LC+tYVLw mYLAaYX2MB+G7zYJ4xG/kx7pTclaapLkPZMdfOTQMVLLLMBdzn8oh7irow9sN9n1 1iL/Kmch00X4kiHWzdzUS/h9xozkGcQnrignEL7tWMtMRuwfVAXwiKKDuKubAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUc/hBl0Wkx17xvTcA4fuoPa/w0WEwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDQ2NTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqB1TE EzANBgkqhkiG9w0BAQsFAAOCAQEAvvs8aH1dPGe/0qANaBSyZYhpwigr5uEEtasq VkUeDOlsq8thEE/WEawH6QpcSAQ1kGZkoaIiIAix6eVPojUfCiLYyzuygGIlJNPS ylIxAT5jAx/xXHQrEEgC5dr+1wa3L/quStN/nYWXsfRqflzJ6zDmxd1ufxkI5NoC UIKhmNgtuvQRA89v9jDF1um6bToaCHsHAsYROXn8OK8WmTDzkUS0ZAN9o5sX0ybe oaLJ9OZoIDCNxpJUbSYOaRp09Ncd4qtrk1D4S70l+C/2nnHPC+3wYLa5/2o77YGX oKdtYCTGSgpefRPod/rkAfXgFAVEcHi76wQFo8oTrlgC5hFE8g== -----END CERTIFICATE-----Generated at Sat Jul 5 08:16:40 2025 by rpki-client