$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa File: AS57851.roa (raw, json) Hash identifier: GZA8fSb1LLaQZGrgBWEsmk6jgkb0bE9mtVm68AsDf1A= Subject key identifier: D9:4A:1E:0B:82:25:9E:22:EA:CA:74:2A:B9:D9:DF:24:F7:89:97:12 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 7EEDC293C2298D015448675A270E1762C301EDD1 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 57851 IP address blocks: 2a07:54c2::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ed:c2:93:c2:29:8d:01:54:48:67:5a:27:0e:17:62:c3:01:ed:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=D94A1E0B82259E22EACA742AB9D9DF24F7899712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:1d:ce:3f:47:c4:f9:da:90:e8:05:5f:0a: 35:f5:b7:d9:cb:96:b3:b6:6d:1a:44:35:c8:95:65: c8:3a:88:05:39:10:c2:f4:6e:38:81:e4:54:49:1a: 51:34:1a:35:1b:72:d3:71:bd:de:5d:2f:60:b0:1f: 38:93:bd:16:2c:43:99:e4:ad:ff:ee:50:99:97:66: ab:49:7f:fb:d4:ed:2b:fc:81:2c:8d:dd:36:c6:74: 49:2f:43:5a:f8:41:bd:26:26:60:f8:a9:97:6d:c1: ce:1a:dd:89:57:1f:d3:01:1f:49:03:4a:66:9b:31: 2f:7e:e0:97:ba:fd:f6:32:6c:fd:55:4a:9d:2e:64: b8:2e:56:b6:95:8c:74:9f:f8:f1:07:6c:57:4e:50: b7:fa:b1:5a:0c:5d:51:a2:b2:aa:8d:5b:0f:78:f9: e2:ba:1f:3d:69:de:16:76:a4:5b:dd:2b:64:71:ae: 4b:17:e6:6e:70:5f:db:84:9d:7f:69:15:14:cb:9a: 32:c6:df:8f:f8:7d:72:96:61:5b:fd:aa:bc:51:91: f1:77:2d:7a:50:47:63:59:13:b0:0e:db:30:9c:40: 21:33:4d:cc:93:8e:2d:f9:31:e4:40:15:2d:b9:c3: d0:68:e8:aa:6e:aa:2e:42:a3:92:0c:7b:d3:5f:7e: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4A:1E:0B:82:25:9E:22:EA:CA:74:2A:B9:D9:DF:24:F7:89:97:12 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2::/36 Signature Algorithm: sha256WithRSAEncryption 0c:ad:33:28:13:e6:d4:a3:38:a1:56:84:36:f2:2c:80:26:61: df:5e:84:d5:7e:36:bb:df:c0:43:52:16:c3:e1:4a:b3:ac:92: 14:5f:0f:bf:c0:f9:a2:c5:12:31:43:9a:c9:6a:d8:da:61:1e: bc:67:1f:dd:84:8b:6c:05:eb:14:b7:95:92:f3:9e:4e:71:ae: a6:36:9d:f8:dc:68:32:4f:ad:ec:e6:b8:f6:a1:76:ad:28:f0: 8e:eb:3b:f8:5b:44:c7:a5:c5:a3:a4:db:2c:ec:57:79:25:cd: ed:6f:80:cd:9d:68:26:36:a9:d0:23:56:46:9d:e5:92:48:db: a4:d7:a7:a5:95:5d:86:ce:39:2c:93:6b:ae:4f:33:a2:25:77: ae:c5:32:40:e5:70:ba:01:11:76:1d:67:3c:8a:9a:07:74:f0: 1a:bc:8a:7c:6a:c3:6f:17:af:f3:bc:64:95:c8:37:6b:5b:31: 1f:6a:19:80:fc:d1:90:2c:d6:4f:bf:7c:a2:fe:f1:9d:11:ec: 8b:fa:f5:05:7f:e6:55:30:7b:c8:d8:e2:36:b4:be:98:64:cf: b7:c9:2e:4b:a7:b2:d0:1f:ab:b8:84:58:33:30:cd:4a:17:c4: 8d:5e:b0:e4:58:13:bf:51:e5:16:ed:d6:f5:a9:10:c6:41:05: 29:c7:ba:ee -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUfu3Ck8IpjQFUSGdaJw4XYsMB7dEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKEQ5NEExRTBCODIyNTlFMjJFQUNBNzQyQUI5RDlERjI0Rjc4OTk3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+R3OP0fE+dqQ6AVfCjX1t9nL lrO2bRpENciVZcg6iAU5EML0bjiB5FRJGlE0GjUbctNxvd5dL2CwHziTvRYsQ5nk rf/uUJmXZqtJf/vU7Sv8gSyN3TbGdEkvQ1r4Qb0mJmD4qZdtwc4a3YlXH9MBH0kD SmabMS9+4Je6/fYybP1VSp0uZLguVraVjHSf+PEHbFdOULf6sVoMXVGisqqNWw94 +eK6Hz1p3hZ2pFvdK2RxrksX5m5wX9uEnX9pFRTLmjLG34/4fXKWYVv9qrxRkfF3 LXpQR2NZE7AO2zCcQCEzTcyTji35MeRAFS25w9Bo6Kpuqi5Co5IMe9NffsXtAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2UoeC4IlniLqynQqudnfJPeJlxIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTc4NTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqB1TC ADANBgkqhkiG9w0BAQsFAAOCAQEADK0zKBPm1KM4oVaENvIsgCZh316E1X42u9/A Q1IWw+FKs6ySFF8Pv8D5osUSMUOayWrY2mEevGcf3YSLbAXrFLeVkvOeTnGupjad +NxoMk+t7Oa49qF2rSjwjus7+FtEx6XFo6TbLOxXeSXN7W+AzZ1oJjap0CNWRp3l kkjbpNenpZVdhs45LJNrrk8zoiV3rsUyQOVwugERdh1nPIqaB3TwGryKfGrDbxev 87xklcg3a1sxH2oZgPzRkCzWT798ov7xnRHsi/r1BX/mVTB7yNjiNrS+mGTPt8ku S6ey0B+ruIRYMzDNShfEjV6w5FgTv1HlFu3W9akQxkEFKce67g== -----END CERTIFICATE-----Generated at Sat Jul 5 08:19:01 2025 by rpki-client