$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa File: 323630323a663965383a3a2f34302d3438203d3e203539393933.roa (raw, json) Hash identifier: Gzn+xzZ9wSPyljt5/9UBXPs8i1HllRwsiRhCR/erURU= Subject key identifier: 50:A6:DD:C9:13:87:FE:D4:0F:FC:F6:30:25:2B:5B:7F:53:78:14:5F Certificate issuer: /CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992 Certificate serial: 3FA75FF2AFD51D12C4F2A6B1BD0AE8BB9BC15591 Authority key identifier: C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa Signing time: Wed 27 Nov 2024 14:34:24 +0000 ROA not before: Wed 27 Nov 2024 14:29:24 +0000 ROA not after: Wed 26 Nov 2025 14:34:24 +0000 asID: 59993 IP address blocks: 2602:f9e8::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a7:5f:f2:af:d5:1d:12:c4:f2:a6:b1:bd:0a:e8:bb:9b:c1:55:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992 Validity Not Before: Nov 27 14:29:24 2024 GMT Not After : Nov 26 14:34:24 2025 GMT Subject: CN=50A6DDC91387FED40FFCF630252B5B7F5378145F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:9c:de:6b:bf:20:cf:98:16:20:88:05:87: cc:10:98:c5:e9:b0:03:eb:f7:8d:a3:8a:99:91:96: 97:8f:00:09:0d:16:7f:e6:de:d0:e0:9d:e4:93:36: c5:a5:93:68:16:27:57:a6:ef:17:19:eb:4a:a4:63: 88:16:f9:f7:99:ed:b0:d0:60:80:9e:cf:68:d7:3a: 17:ac:a2:13:f2:f9:ce:de:96:75:e8:59:04:47:08: e3:bb:c5:b7:36:49:d7:9b:46:28:e3:3f:06:af:78: bf:59:cb:a8:a7:bc:88:fc:a8:08:d3:a8:c4:27:34: 68:ec:a0:c3:fc:52:a8:20:86:df:80:a3:9b:71:c3: 85:2b:21:ec:52:ab:15:9c:04:8e:99:6e:c5:95:f4: 4c:f2:1a:3b:1d:91:75:7c:9b:81:52:84:56:87:f3: a5:e2:d9:65:91:da:cb:82:36:93:49:24:e1:27:ee: b1:48:b0:91:e3:9a:ac:06:19:f3:7e:98:4a:3e:ce: 2c:14:72:62:51:e3:e9:19:9d:3f:0b:69:a8:09:3e: 6a:a9:8f:e5:04:d0:17:44:ed:69:5c:1c:82:c3:0c: c8:da:81:ca:97:a4:59:63:14:8c:f7:de:a8:4f:09: 76:99:38:f1:06:12:42:7e:4d:5a:c6:28:73:bb:3e: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A6:DD:C9:13:87:FE:D4:0F:FC:F6:30:25:2B:5B:7F:53:78:14:5F X509v3 Authority Key Identifier: keyid:C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f9e8::/40 Signature Algorithm: sha256WithRSAEncryption 68:82:6c:9f:91:75:a0:ec:a0:ff:58:6f:07:32:09:6f:b9:d3: d5:10:44:b5:02:c4:6c:1c:d9:70:c8:69:d4:ca:5b:4b:e5:f6: c4:71:9f:9b:6f:16:d8:39:f8:fc:60:1d:14:60:83:90:d0:4f: 71:04:ca:8a:d6:2d:c7:af:74:b4:2b:90:19:f3:e1:9d:e2:e5: 13:3d:8d:91:18:13:8b:21:00:12:8c:9f:b4:16:4e:80:4b:bd: 2c:cf:b1:e3:6d:7a:cf:03:6a:4a:a8:9b:ef:2f:5b:ab:b4:95: d0:d6:f3:93:5e:43:a9:69:20:fd:87:f3:4d:bf:b2:25:12:96: f8:64:50:1e:42:c1:c6:16:ed:eb:0d:41:6b:31:be:bb:37:c5: d9:36:59:8f:6e:8e:80:ef:e2:b6:51:e4:f5:eb:db:04:3e:c9: d2:fe:96:05:cf:94:f1:28:19:2f:df:10:7d:a0:95:b6:4b:08: 5e:19:b0:24:28:bc:da:29:93:c6:3e:18:0a:58:05:41:76:8a: c4:64:5d:6b:34:b0:53:21:f7:30:5e:74:7e:69:d3:98:7a:4f: fb:f7:8d:16:e8:96:f4:30:ca:99:8a:c3:86:a9:8a:00:48:f6: 87:3a:e4:7d:ce:3c:b4:ae:d0:e9:d4:ee:6f:44:29:96:e6:72: 38:0a:7b:3e -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIUP6df8q/VHRLE8qaxvQrou5vBVZEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDczNjU2Y2VkODhiZTJkZjI2ZThmZWRlYTc4ZDkwM2Zh MjRkNjk0YjM2YmY5ZjE5OTIwHhcNMjQxMTI3MTQyOTI0WhcNMjUxMTI2MTQzNDI0 WjAzMTEwLwYDVQQDEyg1MEE2RERDOTEzODdGRUQ0MEZGQ0Y2MzAyNTJCNUI3RjUz NzgxNDVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvKc3mu/IM+Y FiCIBYfMEJjF6bAD6/eNo4qZkZaXjwAJDRZ/5t7Q4J3kkzbFpZNoFidXpu8XGetK pGOIFvn3me2w0GCAns9o1zoXrKIT8vnO3pZ16FkERwjju8W3NknXm0Yo4z8Gr3i/ Wcuop7yI/KgI06jEJzRo7KDD/FKoIIbfgKObccOFKyHsUqsVnASOmW7FlfRM8ho7 HZF1fJuBUoRWh/Ol4tllkdrLgjaTSSThJ+6xSLCR45qsBhnzfphKPs4sFHJiUePp GZ0/C2moCT5qqY/lBNAXRO1pXByCwwzI2oHKl6RZYxSM996oTwl2mTjxBhJCfk1a xihzuz7EGwIDAQABo4IC0DCCAswwHQYDVR0OBBYEFFCm3ckTh/7UD/z2MCUrW39T eBRfMB8GA1UdIwQYMBaAFMR6eZsLJp+I6DgerfGqIuk2BU35MA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMTcvQzQ3QTc5OUIwQjI2OUY4OEU4MzgxRUFERjFBQTIy RTkzNjA1NERGOS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkz YS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzYyZGZlMDZhLWQxNzgtNGI2NC1iMTll LWRjNmQxZmJmNTJiMi9kNzM2NTZjZWQ4OGJlMmRmMjZlOGZlZGVhNzhkOTAzZmEy NGQ2OTRiMzZiZjlmMTk5Mi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEF BQcwC4aBjHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzE3LzMyMzYz MDMyM2E2NjM5NjUzODNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM1MzkzOTM5MzMu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgAmAvnoADANBgkqhkiG9w0BAQsFAAOCAQEAaIJsn5F1oOyg/1hv BzIJb7nT1RBEtQLEbBzZcMhp1MpbS+X2xHGfm28W2Dn4/GAdFGCDkNBPcQTKitYt x690tCuQGfPhneLlEz2NkRgTiyEAEoyftBZOgEu9LM+x4216zwNqSqib7y9bq7SV 0Nbzk15DqWkg/YfzTb+yJRKW+GRQHkLBxhbt6w1BazG+uzfF2TZZj26OgO/itlHk 9evbBD7J0v6WBc+U8SgZL98QfaCVtksIXhmwJCi82imTxj4YClgFQXaKxGRdazSw UyH3MF50fmnTmHpP+/eNFuiW9DDKmYrDhqmKAEj2hzrkfc48tK7Q6dTub0QpluZy OAp7Pg== -----END CERTIFICATE-----Generated at Sat Apr 5 04:30:11 2025 by rpki-client