$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa File: 323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa (raw, json) Hash identifier: eobko1RHEuygwb5xzmp8S9ttEUfkWYEqroNfG+R88ts= Subject key identifier: 83:3E:28:32:D3:A3:90:65:79:38:40:CE:81:4A:8E:25:94:40:38:1A Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Certificate serial: 0E483B10DF242C4308BDD2F8300DCEBFB42A7A34 Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa Signing time: Fri 07 Feb 2025 11:42:01 +0000 ROA not before: Fri 07 Feb 2025 11:37:01 +0000 ROA not after: Fri 06 Feb 2026 11:42:01 +0000 asID: 47272 IP address blocks: 2602:f96d:f71::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Apr 2025 18:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:48:3b:10:df:24:2c:43:08:bd:d2:f8:30:0d:ce:bf:b4:2a:7a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Validity Not Before: Feb 7 11:37:01 2025 GMT Not After : Feb 6 11:42:01 2026 GMT Subject: CN=833E2832D3A39065793840CE814A8E259440381A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:cd:a7:2c:c3:c3:cf:7c:d7:6a:ad:29:dd: 70:aa:fd:78:3e:a4:77:d6:46:7b:9b:04:55:77:7d: ed:68:dc:c1:21:3a:b7:e3:2c:08:89:5a:19:ef:81: dd:3c:a9:88:7b:58:eb:d4:1f:57:73:44:ce:65:a1: cd:58:b7:a5:60:9d:1f:a8:85:cf:85:d9:13:fe:e0: f4:c9:cb:0b:0f:f8:71:61:5f:d2:b8:9b:85:50:f2: fe:56:77:75:0c:55:b5:4b:4e:cf:5b:0a:7e:2c:7a: 5f:30:c8:e7:22:08:06:0b:82:35:39:29:ff:53:1e: 41:02:68:c2:fc:1b:8d:27:8d:01:a2:42:7c:30:ac: 90:49:0b:39:92:45:db:53:5b:36:1a:fc:9f:e2:78: 10:e7:be:e5:6d:72:a3:50:17:27:d7:76:83:4a:84: 76:aa:5f:4d:8f:c6:c4:dd:43:59:68:92:9b:49:86: 61:c9:2d:15:88:ff:89:e9:3d:6f:d1:9a:80:52:80: 7d:0f:2e:39:ac:82:a7:ee:81:08:af:0d:c2:60:26: 79:58:61:c6:92:ed:12:0c:d5:52:57:c1:dc:78:0e: 31:66:8b:89:76:11:62:d0:a1:79:6b:41:f9:26:73: 01:fe:d4:be:42:1b:74:cf:ec:33:19:d6:4e:a0:24: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3E:28:32:D3:A3:90:65:79:38:40:CE:81:4A:8E:25:94:40:38:1A X509v3 Authority Key Identifier: keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f96d:f71::/48 Signature Algorithm: sha256WithRSAEncryption 60:aa:70:1f:d6:50:12:e1:94:36:06:f7:2c:f2:cf:58:2a:63: 45:c8:7a:65:18:5c:01:39:cc:5c:d7:2f:c8:da:76:34:c6:ca: 2f:ba:6e:db:a6:b1:ed:70:9b:21:e7:8b:f8:91:2d:65:79:a2: d0:d9:32:e7:f7:55:e0:0f:e5:75:8d:ad:5a:6a:2e:7d:ba:67: 31:69:97:34:bb:7b:4a:26:17:7a:3d:ab:78:4c:50:8d:bc:3e: 61:19:c4:37:e8:02:35:a7:6c:ad:ae:7d:d8:74:17:2f:37:02: d7:55:e5:68:ee:fb:c8:85:79:6b:e2:10:2c:2c:cc:f7:41:e3: 36:43:b0:2e:cb:a2:0f:28:20:0e:64:a7:51:a3:7e:b0:89:81: 31:d5:52:43:91:3e:a6:a1:f8:e3:1a:39:ae:fc:d9:09:22:51: cc:57:82:a9:38:33:5e:b1:81:34:bb:c1:35:dc:84:6d:7a:d2: 94:3d:e5:28:a3:bb:d0:3d:64:d6:4c:58:68:27:be:ef:74:13: 9d:04:10:c5:33:cf:12:58:f7:39:67:5e:1d:a4:19:bd:7f:0d: a8:52:74:60:ce:13:1b:9d:d9:e0:3f:9c:eb:46:ad:41:dd:9d: e4:0b:c7:7c:30:ca:11:d0:46:97:a5:44:95:fc:ea:0c:6d:ae: 01:7c:a5:f8 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUDkg7EN8kLEMIvdL4MA3Ov7QqejQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1 NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwMjA3MTEzNzAxWhcNMjYwMjA2MTE0MjAx WjAzMTEwLwYDVQQDEyg4MzNFMjgzMkQzQTM5MDY1NzkzODQwQ0U4MTRBOEUyNTk0 NDAzODFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4vNpyzDw898 12qtKd1wqv14PqR31kZ7mwRVd33taNzBITq34ywIiVoZ74HdPKmIe1jr1B9Xc0TO ZaHNWLelYJ0fqIXPhdkT/uD0ycsLD/hxYV/SuJuFUPL+Vnd1DFW1S07PWwp+LHpf MMjnIggGC4I1OSn/Ux5BAmjC/BuNJ40BokJ8MKyQSQs5kkXbU1s2Gvyf4ngQ577l bXKjUBcn13aDSoR2ql9Nj8bE3UNZaJKbSYZhyS0ViP+J6T1v0ZqAUoB9Dy45rIKn 7oEIrw3CYCZ5WGHGku0SDNVSV8HceA4xZouJdhFi0KF5a0H5JnMB/tS+Qht0z+wz GdZOoCRckwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFIM+KDLTo5BleThAzoFKjiWU QDgaMB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3 NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03 ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl NjEyNTY2MWI5MmJkYTcuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4OTk1ZC8xLzMyMzYzMDMy M2E2NjM5MzY2NDNhNjYzNzMxM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAzNDM3 MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH AQH/BBMwETAPBAIAAjAJAwcAJgL5bQ9xMA0GCSqGSIb3DQEBCwUAA4IBAQBgqnAf 1lAS4ZQ2Bvcs8s9YKmNFyHplGFwBOcxc1y/I2nY0xsovum7bprHtcJsh54v4kS1l eaLQ2TLn91XgD+V1ja1aai59umcxaZc0u3tKJhd6Pat4TFCNvD5hGcQ36AI1p2yt rn3YdBcvNwLXVeVo7vvIhXlr4hAsLMz3QeM2Q7Auy6IPKCAOZKdRo36wiYEx1VJD kT6mofjjGjmu/NkJIlHMV4KpODNesYE0u8E13IRtetKUPeUoo7vQPWTWTFhoJ77v dBOdBBDFM88SWPc5Z14dpBm9fw2oUnRgzhMbndngP5zrRq1B3Z3kC8d8MMoR0EaX pUSV/OoMba4BfKX4 -----END CERTIFICATE-----Generated at Thu Apr 3 07:09:28 2025 by rpki-client