$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666434303a3a2f34342d3532203d3e20323134323939.roa File: 326130353a646663333a666434303a3a2f34342d3532203d3e20323134323939.roa (raw, json) Hash identifier: Lv80blmrFY/iGPcSKrCm79YwpEPiPCttWTl4aBqvD2I= Subject key identifier: 86:0C:6D:7D:4A:9B:5D:68:3A:39:D4:29:D8:A1:6D:F8:0A:7B:A4:52 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 07E37641603A9A10EA29CBCC0ACE8D54DA3650C5 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666434303a3a2f34342d3532203d3e20323134323939.roa Signing time: Sat 17 May 2025 19:14:53 +0000 ROA not before: Sat 17 May 2025 19:09:53 +0000 ROA not after: Sat 16 May 2026 19:14:53 +0000 asID: 214299 IP address blocks: 2a05:dfc3:fd40::/44 maxlen: 52 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e3:76:41:60:3a:9a:10:ea:29:cb:cc:0a:ce:8d:54:da:36:50:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 17 19:09:53 2025 GMT Not After : May 16 19:14:53 2026 GMT Subject: CN=860C6D7D4A9B5D683A39D429D8A16DF80A7BA452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:d5:60:b7:1c:fb:80:28:c4:46:d0:e8:da: 06:2f:54:8e:a9:d4:ba:6c:6c:a4:30:c9:a0:97:dd: 38:35:77:eb:79:68:0d:12:4c:e4:37:e7:3b:0b:4e: b5:51:84:c1:f5:fd:3d:3d:dd:66:cf:8e:f3:42:00: b3:68:ca:a8:ac:79:25:6d:39:97:86:d0:fc:93:2f: 13:68:b1:8d:3e:f5:37:70:e8:08:9e:f4:4c:d4:34: 6b:00:44:1a:55:9e:47:6c:29:57:f1:e4:0d:35:bc: 2e:6d:9b:cc:b2:7d:ce:46:52:d2:b8:bd:2d:c8:fb: ff:a0:02:dc:78:20:ea:6f:bd:d2:8a:00:78:4d:8c: 1e:f3:01:a6:b4:8e:c6:fc:8d:10:5e:91:6c:61:2f: 33:47:df:de:ef:be:4c:e4:fd:99:41:39:b3:ec:8a: 69:39:2f:78:b8:a6:57:c3:d6:49:c6:05:e8:dd:51: e0:75:c6:67:fa:f7:d0:de:5d:17:5c:e2:f9:20:fa: 85:87:5e:b4:79:45:3a:87:25:53:2b:ce:04:55:0d: ba:c8:73:99:3a:0f:37:56:df:33:86:93:61:10:13: 47:ac:8a:b7:30:da:9d:d6:b3:f1:96:7c:15:29:11: 13:39:2e:d1:48:95:51:d7:a2:41:f1:ab:1e:f9:c9: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:6D:7D:4A:9B:5D:68:3A:39:D4:29:D8:A1:6D:F8:0A:7B:A4:52 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666434303a3a2f34342d3532203d3e20323134323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd40::/44 Signature Algorithm: sha256WithRSAEncryption 31:63:9a:be:e4:f1:4b:e3:e7:76:b6:99:a3:db:ab:6b:70:ae: 59:26:8c:a9:78:fe:0a:08:24:50:87:ed:22:ef:95:dd:3b:d1: 7c:70:19:44:ee:ca:e6:88:b4:49:60:ab:f8:2c:df:99:64:ce: 82:76:c8:8e:da:ce:a0:37:0d:09:5c:33:2e:b7:d8:ff:76:ac: b5:cd:f6:9a:d9:70:93:0d:0b:40:8d:4b:99:60:23:1e:9f:61: dd:1c:d0:ef:46:3c:67:5f:15:00:83:a5:f8:4c:c0:73:54:44: 5f:17:01:8e:14:e9:3b:6c:d9:04:c1:83:df:39:42:3a:d8:0d: ca:47:f9:30:8a:e3:e2:a0:6b:b4:59:20:54:a7:7a:e3:be:44: fd:b8:75:a1:1a:65:40:ad:df:e2:e2:e4:5d:c1:3c:93:b8:af: e5:9f:51:5f:a5:91:87:7d:82:48:39:bb:82:82:13:8e:f8:84: 27:a8:8b:f4:6a:cc:40:c4:f6:f6:9b:9b:1c:18:a1:7a:f5:37: 6d:6e:7d:cb:06:77:46:49:c6:9c:c9:92:de:93:89:6d:54:92: b5:4d:a0:df:15:00:d2:b3:28:cb:99:f1:34:79:34:3f:0a:05: 66:87:4f:ab:22:06:66:b2:b1:de:f6:b0:0a:17:c0:fe:58:8e: bb:3a:9c:ff -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUB+N2QWA6mhDqKcvMCs6NVNo2UMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MTcxOTA5NTNaFw0yNjA1MTYxOTE0NTNaMDMxMTAvBgNV BAMTKDg2MEM2RDdENEE5QjVENjgzQTM5RDQyOUQ4QTE2REY4MEE3QkE0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP79Vgtxz7gCjERtDo2gYvVI6p 1LpsbKQwyaCX3Tg1d+t5aA0STOQ35zsLTrVRhMH1/T093WbPjvNCALNoyqiseSVt OZeG0PyTLxNosY0+9Tdw6Aie9EzUNGsARBpVnkdsKVfx5A01vC5tm8yyfc5GUtK4 vS3I+/+gAtx4IOpvvdKKAHhNjB7zAaa0jsb8jRBekWxhLzNH397vvkzk/ZlBObPs imk5L3i4plfD1knGBejdUeB1xmf699DeXRdc4vkg+oWHXrR5RTqHJVMrzgRVDbrI c5k6DzdW3zOGk2EQE0esircw2p3Ws/GWfBUpERM5LtFIlVHXokHxqx75ycX5AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUhgxtfUqbXWg6OdQp2KFt+Ap7pFIwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjY0MzQzMDNhM2EyZjM0MzQyZDM1MzIyMDNkM2UyMDMyMzEzNDMyMzkzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoF38P9QDANBgkqhkiG9w0BAQsFAAOCAQEAMWOavuTxS+PndraZ o9ura3CuWSaMqXj+CggkUIftIu+V3TvRfHAZRO7K5oi0SWCr+CzfmWTOgnbIjtrO oDcNCVwzLrfY/3astc32mtlwkw0LQI1LmWAjHp9h3RzQ70Y8Z18VAIOl+EzAc1RE XxcBjhTpO2zZBMGD3zlCOtgNykf5MIrj4qBrtFkgVKd6475E/bh1oRplQK3f4uLk XcE8k7iv5Z9RX6WRh32CSDm7goITjviEJ6iL9GrMQMT29pubHBihevU3bW59ywZ3 RknGnMmS3pOJbVSStU2g3xUA0rMoy5nxNHk0PwoFZodPqyIGZrKx3vawChfA/liO uzqc/w== -----END CERTIFICATE-----Generated at Tue Jun 3 10:13:04 2025 by rpki-client