$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e20323134333933.roa File: 326130613a363034343a386666643a3a2f34382d3438203d3e20323134333933.roa (raw, json) Hash identifier: /orrWh5sREf5AlWuDggeJg9XsY+x+QrLIhYRlIQkLx8= Subject key identifier: C6:3E:F4:7D:A5:28:BD:32:AC:EB:5E:41:C1:35:66:98:3C:0D:35:C1 Certificate issuer: /CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02 Certificate serial: 41BBECA3802B323385E21110C32DEE0AAECA0F7D Authority key identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e20323134333933.roa Signing time: Sat 24 Aug 2024 03:59:46 +0000 ROA not before: Sat 24 Aug 2024 03:54:46 +0000 ROA not after: Sat 23 Aug 2025 03:59:46 +0000 asID: 214393 IP address blocks: 2a0a:6044:8ffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.mft rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Sep 2024 12:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bb:ec:a3:80:2b:32:33:85:e2:11:10:c3:2d:ee:0a:ae:ca:0f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02 Validity Not Before: Aug 24 03:54:46 2024 GMT Not After : Aug 23 03:59:46 2025 GMT Subject: CN=C63EF47DA528BD32ACEB5E41C13566983C0D35C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a2:e3:33:0b:d4:3d:f3:65:9d:eb:f0:54:76: 07:09:45:07:80:b1:6e:53:18:5b:ec:57:29:ef:dc: 0c:dc:9f:af:a0:1c:a7:8a:df:e3:a8:1d:cc:79:f8: b8:4e:bd:ef:b8:4e:25:c5:a0:c6:3e:83:d4:fa:c0: c4:0b:2e:84:5e:46:1a:06:0d:8c:8a:20:68:f7:dd: fc:15:bf:83:c5:92:87:be:f7:72:bd:ad:a8:47:5b: 8f:26:83:b1:f5:8f:86:6c:d5:c9:2f:8b:fe:44:8e: b3:29:f1:10:82:2e:76:51:5c:84:4c:d0:5b:23:39: 47:39:78:3d:b1:6a:70:bb:24:0b:80:47:4d:8e:81: 01:68:98:30:35:49:b8:d3:73:38:bc:b0:77:66:6e: 53:72:1c:76:04:d1:84:59:22:23:4b:b7:8c:1c:8e: 57:47:f6:4e:82:4c:ca:ad:bc:57:5f:8c:c3:14:6d: 3d:65:85:3e:a4:e4:74:b3:a4:88:6c:76:15:42:16: c4:8a:7c:f4:3d:47:95:56:0e:96:e0:f2:27:76:ce: 92:d4:e0:09:12:e4:fc:41:d6:7b:2e:e3:be:b0:70: 73:ce:3e:7b:3b:4d:71:e1:db:3a:2e:1c:9b:00:f8: aa:e8:80:6e:4a:0f:0a:fa:89:5f:6c:d6:26:bd:2c: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3E:F4:7D:A5:28:BD:32:AC:EB:5E:41:C1:35:66:98:3C:0D:35:C1 X509v3 Authority Key Identifier: keyid:92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666643a3a2f34382d3438203d3e20323134333933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8ffd::/48 Signature Algorithm: sha256WithRSAEncryption 38:55:9b:bc:64:0b:80:17:4b:71:50:32:63:64:b5:4a:57:62: 74:43:e0:b0:c6:c7:86:ce:7a:b3:ca:19:e7:aa:77:68:f1:ad: 44:7e:5a:1d:90:7d:bb:96:9c:2c:90:97:82:c5:40:74:9d:1b: 43:df:d6:29:a0:f1:a1:dd:51:93:14:b6:2c:6b:fe:ea:d2:96: 24:dd:7e:d0:78:b9:45:37:9c:f8:12:c1:88:e5:6e:54:bd:e0: 0d:cd:77:41:34:5c:97:43:a9:0c:98:f8:ea:a5:8b:88:8a:dd: e4:39:47:9f:84:81:df:ab:6f:79:3e:de:43:98:d7:28:6d:60: 1c:f9:f1:b5:fa:bf:71:14:0c:14:2c:64:a6:80:d5:06:2e:b1: 95:d3:a0:b3:f1:05:89:a5:13:00:16:16:4b:da:8a:f8:36:6c: fc:0e:2f:4f:44:9f:42:30:83:ef:88:09:06:61:33:8e:90:95: 8a:a5:d5:d9:7a:2d:87:46:60:2f:fc:fc:ec:92:dd:d6:c0:82: 2e:12:e2:34:f0:a8:a9:04:dd:b4:3f:83:b9:9a:72:52:35:30: 93:52:dc:bb:ab:a5:27:b2:aa:96:68:ee:e9:1e:c5:f4:3e:d1: 77:81:57:58:b9:7c:4b:fa:98:f8:6f:2e:b1:80:97:6b:57:23: 60:42:64:15 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQbvso4ArMjOF4hEQwy3uCq7KD30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFOTgzRjc2NkMxNDRBMENFQUMwQjZGQzVDMjA5MzQw OTFEN0UwMjAeFw0yNDA4MjQwMzU0NDZaFw0yNTA4MjMwMzU5NDZaMDMxMTAvBgNV BAMTKEM2M0VGNDdEQTUyOEJEMzJBQ0VCNUU0MUMxMzU2Njk4M0MwRDM1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjouMzC9Q982Wd6/BUdgcJRQeA sW5TGFvsVynv3Azcn6+gHKeK3+OoHcx5+LhOve+4TiXFoMY+g9T6wMQLLoReRhoG DYyKIGj33fwVv4PFkoe+93K9rahHW48mg7H1j4Zs1ckvi/5EjrMp8RCCLnZRXIRM 0FsjOUc5eD2xanC7JAuAR02OgQFomDA1SbjTczi8sHdmblNyHHYE0YRZIiNLt4wc jldH9k6CTMqtvFdfjMMUbT1lhT6k5HSzpIhsdhVCFsSKfPQ9R5VWDpbg8id2zpLU 4AkS5PxB1nsu476wcHPOPns7TXHh2zouHJsA+KrogG5KDwr6iV9s1ia9LEXJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUxj70faUovTKs615BwTVmmDwNNcEwHwYDVR0j BBgwFoAUkumD92bBRKDOrAtvxcIJNAkdfgIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDg4Yjg1NGUtMDkyYy00ZDc5LWFjMDYtYWYzODBiMDhk MTJiLzAvOTJFOTgzRjc2NkMxNDRBMENFQUMwQjZGQzVDMjA5MzQwOTFEN0UwMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTFhNDNiYy03NmVjLTRh YmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS85MkU5ODNGNzY2QzE0NEEwQ0VBQzBCNkZD NUMyMDkzNDA5MUQ3RTAyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kODhiODU0ZS0wOTJjLTRkNzktYWMwNi1hZjM4MGIwOGQxMmIvMC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4NjY2NjY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRI/9MA0GCSqGSIb3DQEBCwUAA4IBAQA4 VZu8ZAuAF0txUDJjZLVKV2J0Q+CwxseGznqzyhnnqndo8a1EflodkH27lpwskJeC xUB0nRtD39YpoPGh3VGTFLYsa/7q0pYk3X7QeLlFN5z4EsGI5W5UveANzXdBNFyX Q6kMmPjqpYuIit3kOUefhIHfq295Pt5DmNcobWAc+fG1+r9xFAwULGSmgNUGLrGV 06Cz8QWJpRMAFhZL2or4Nmz8Di9PRJ9CMIPviAkGYTOOkJWKpdXZei2HRmAv/Pzs kt3WwIIuEuI08KipBN20P4O5mnJSNTCTUty7q6UnsqqWaO7pHsX0PtF3gVdYuXxL +pj4by6xgJdrVyNgQmQV -----END CERTIFICATE-----Generated at Thu Sep 19 07:23:31 2024 by rpki-client on console-ams.rpki-client.org