$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa File: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (raw, json) Hash identifier: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU= Subject key identifier: 9E:22:9E:45:12:D5:FD:E0:F1:79:93:A3:27:1C:49:4F:A1:68:1D:10 Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 11A8810AF95469264A09215209B659D38A804AAC Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa Signing time: Sat 29 Mar 2025 07:29:01 +0000 ROA not before: Sat 29 Mar 2025 07:24:01 +0000 ROA not after: Sat 28 Mar 2026 07:29:01 +0000 asID: 199518 IP address blocks: 2602:f9a2:55::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a8:81:0a:f9:54:69:26:4a:09:21:52:09:b6:59:d3:8a:80:4a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Mar 29 07:24:01 2025 GMT Not After : Mar 28 07:29:01 2026 GMT Subject: CN=9E229E4512D5FDE0F17993A3271C494FA1681D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:45:70:f9:ed:60:7b:c6:e1:f7:61:b1:f1:35: 44:21:28:f4:66:74:a0:cc:5b:b7:2c:11:ae:a8:7a: d7:41:c6:e4:5b:1e:ff:b5:23:bd:4c:4c:52:dc:e5: 99:4a:86:c3:bc:3a:74:77:07:da:11:12:a0:ac:36: a0:84:5b:92:5d:0d:dc:c0:4c:1c:fb:25:88:af:9a: 12:12:c4:d1:c7:b5:f8:5f:b8:34:49:a4:a8:b6:a5: 0a:12:90:66:f9:d9:e5:b6:7d:4b:99:4d:ab:a6:c6: d6:9a:09:ca:f1:a7:d6:0c:b5:f9:19:9b:58:c9:55: 1f:53:c9:18:42:e1:d0:d4:c2:4b:44:3c:74:7a:91: a3:58:1d:1a:b6:3d:2a:74:66:58:73:37:c2:9b:fe: 01:7f:1a:3b:0c:8a:79:7d:14:cc:82:3c:54:e5:c0: 34:7a:7c:21:56:d0:1c:b0:21:3f:ef:f4:d4:9c:af: f6:a2:0c:03:9e:47:88:65:70:bc:a2:6c:0f:f5:53: 27:a0:af:13:cd:26:69:8d:c7:3e:2e:49:79:7f:90: 67:62:9b:e8:25:92:e7:a0:58:f4:3f:4c:b2:16:f2: f9:4b:b4:2d:73:44:67:a5:85:45:c4:3b:d1:f0:b5: fc:db:52:e3:15:59:d7:2d:3f:48:ec:93:10:61:40: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:9E:45:12:D5:FD:E0:F1:79:93:A3:27:1C:49:4F:A1:68:1D:10 X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f9a2:55::/48 Signature Algorithm: sha256WithRSAEncryption 06:9d:f1:f9:96:c2:40:21:d7:96:58:ac:ce:aa:36:b1:c4:84: 87:a1:a7:d9:a5:f6:b2:e1:0e:9c:c1:64:ad:4a:ad:f4:d4:6c: 27:8f:fd:e1:dd:e7:44:7c:de:90:66:48:67:0b:21:a9:ed:76: ea:ec:2a:06:15:e7:cc:68:03:1c:7f:1f:fa:de:a2:cb:9e:6d: 56:91:8a:a7:91:7e:e5:d2:01:84:5b:49:00:be:b4:33:1e:67: 33:a8:de:cc:94:51:f4:fe:b6:d8:e4:b8:95:e1:51:20:4d:47: d2:c6:4a:4f:a2:59:60:c3:32:11:3b:e0:11:21:60:2a:46:83: 73:5e:6a:0a:29:3b:6d:12:90:5f:4b:df:53:82:08:1b:2f:10: 75:af:6a:eb:f3:95:f9:db:8c:d7:52:6f:65:49:a1:04:22:74: 83:f7:08:6a:fa:fb:e7:f3:00:e3:1f:9b:da:73:af:2a:16:33: 85:ff:d7:b3:ae:5c:dc:29:77:75:c0:ee:a1:1d:81:7b:df:d0: 89:14:d4:09:21:81:31:65:ce:c6:88:b2:3a:11:dd:30:27:98: 8f:b7:22:05:41:90:6f:65:c5:32:53:b2:af:5a:66:ab:73:bd: a2:eb:37:cd:52:6d:92:49:54:4c:1d:36:3d:1e:7d:3b:f6:74: ef:8d:3f:3c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUEaiBCvlUaSZKCSFSCbZZ04qASqwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUwMzI5MDcyNDAxWhcNMjYwMzI4MDcyOTAx WjAzMTEwLwYDVQQDEyg5RTIyOUU0NTEyRDVGREUwRjE3OTkzQTMyNzFDNDk0RkEx NjgxRDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Vw+e1ge8bh 92Gx8TVEISj0ZnSgzFu3LBGuqHrXQcbkWx7/tSO9TExS3OWZSobDvDp0dwfaERKg rDaghFuSXQ3cwEwc+yWIr5oSEsTRx7X4X7g0SaSotqUKEpBm+dnltn1LmU2rpsbW mgnK8afWDLX5GZtYyVUfU8kYQuHQ1MJLRDx0epGjWB0atj0qdGZYczfCm/4Bfxo7 DIp5fRTMgjxU5cA0enwhVtAcsCE/7/TUnK/2ogwDnkeIZXC8omwP9VMnoK8TzSZp jcc+Lkl5f5BnYpvoJZLnoFj0P0yyFvL5S7Qtc0RnpYVFxDvR8LX821LjFVnXLT9I 7JMQYUByMwIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFJ4inkUS1f3g8XmToyccSU+h aB0QMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC82LzMyMzYzMDMy M2E2NjM5NjEzMjNhMzUzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzOTM1 MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHACYC+aIAVTANBgkqhkiG9w0BAQsFAAOCAQEABp3x+ZbC QCHXlliszqo2scSEh6Gn2aX2suEOnMFkrUqt9NRsJ4/94d3nRHzekGZIZwshqe12 6uwqBhXnzGgDHH8f+t6iy55tVpGKp5F+5dIBhFtJAL60Mx5nM6jezJRR9P622OS4 leFRIE1H0sZKT6JZYMMyETvgESFgKkaDc15qCik7bRKQX0vfU4IIGy8Qda9q6/OV +duM11JvZUmhBCJ0g/cIavr75/MA4x+b2nOvKhYzhf/Xs65c3Cl3dcDuoR2Be9/Q iRTUCSGBMWXOxoiyOhHdMCeYj7ciBUGQb2XFMlOyr1pmq3O9ous3zVJtkklUTB02 PR59O/Z0740/PA== -----END CERTIFICATE-----Generated at Tue Apr 8 23:38:51 2025 by rpki-client