$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373130303a3a2f34302d3438203d3e203537343833.roa File: 326130613a363034343a373130303a3a2f34302d3438203d3e203537343833.roa (raw, json) Hash identifier: F7ht9i71GVEAKKerPcxGIkm8YGRsD1qR8GBaGkEi818= Subject key identifier: 12:EA:8D:BE:6F:60:07:A6:82:44:19:81:40:97:41:D6:76:CF:67:57 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 184806CE9E10A95074B673D8504CD357EA6D83E9 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373130303a3a2f34302d3438203d3e203537343833.roa Signing time: Mon 10 Mar 2025 23:07:42 +0000 ROA not before: Mon 10 Mar 2025 23:02:42 +0000 ROA not after: Mon 09 Mar 2026 23:07:42 +0000 asID: 57483 IP address blocks: 2a0a:6044:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:48:06:ce:9e:10:a9:50:74:b6:73:d8:50:4c:d3:57:ea:6d:83:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Mar 10 23:02:42 2025 GMT Not After : Mar 9 23:07:42 2026 GMT Subject: CN=12EA8DBE6F6007A682441981409741D676CF6757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:54:37:71:d3:88:ee:5a:52:06:69:d0:c1: 86:f7:1e:90:fb:94:8a:f6:fe:73:81:60:62:6f:0c: 1d:6c:e4:74:82:68:85:fc:cb:0b:35:17:c2:68:b0: 71:98:6c:7c:e4:92:69:b9:5a:f8:de:36:e2:37:64: 0a:17:04:87:c1:06:4a:21:4e:30:38:00:6f:bc:d2: 05:96:9b:ba:01:91:1b:c8:42:d9:4b:2e:a1:d0:d4: db:06:bb:25:19:dc:c6:b8:4d:23:d1:46:1d:a3:94: b1:8c:90:4b:3c:12:20:fa:e3:82:f6:fd:f0:de:bd: 34:d8:8d:bb:f7:c6:36:31:39:a9:42:13:fd:e7:1d: fd:78:8f:7e:b1:b3:7f:63:74:f5:36:b4:1e:0b:0d: 33:6a:02:f1:b8:0f:17:4a:0c:e4:4e:ac:36:8c:0d: ba:c2:7d:a5:ed:c1:6e:4f:ff:39:06:f5:ad:fc:82: 5b:fc:51:7d:15:db:6e:8b:7d:de:82:16:28:dd:b5: 94:19:61:58:c7:66:26:15:d2:25:34:c8:f3:e3:7f: b1:8c:04:cb:b3:c0:6d:d4:0f:29:0f:17:e7:0c:f6: 96:70:5a:89:d7:33:c5:c6:61:e9:77:b6:70:6f:64: e3:e9:32:4b:42:6f:26:9a:9f:7a:cf:3b:46:25:0e: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EA:8D:BE:6F:60:07:A6:82:44:19:81:40:97:41:D6:76:CF:67:57 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373130303a3a2f34302d3438203d3e203537343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7100::/40 Signature Algorithm: sha256WithRSAEncryption ab:00:52:02:39:3e:bb:0d:fb:94:c5:44:83:ff:17:dc:06:6c: 8d:ce:b2:10:cd:74:af:0a:f8:ff:b6:df:d7:75:b0:12:0f:f4: 31:b8:41:36:9c:96:a3:e6:e3:00:32:46:8a:10:fb:27:83:21: 57:49:2d:a9:68:6d:08:21:83:2f:29:03:05:78:26:64:fb:d9: 90:e9:93:5f:dc:1c:36:dc:fa:0b:73:0d:0f:f4:4d:e4:2b:c2: ed:97:ac:86:aa:b2:51:c3:ab:9f:ea:f5:80:fd:13:0c:5a:44: 1e:d1:09:b8:bf:2a:68:d0:1a:98:1c:b7:94:c3:6a:aa:5c:c6: 47:48:fb:03:02:0a:be:0a:86:6b:ec:b6:d9:66:15:01:5f:dc: 8b:75:20:84:c7:0b:35:41:f5:4b:80:03:a7:40:fc:ca:79:f0: 3b:d4:0f:7c:bd:0e:1a:07:df:a1:62:17:93:68:ad:51:fb:e1: d8:6e:8e:34:72:11:f1:80:67:3c:db:82:60:d0:d9:08:eb:21: 87:ee:d2:86:c6:d8:f0:17:6d:0b:16:21:11:76:8d:1b:bb:be: d3:de:34:b5:ce:d4:57:d8:da:76:34:10:a5:a8:b8:88:d5:08: e2:5e:e5:01:cb:0c:98:5d:99:ea:41:c9:0a:2d:bf:af:bc:3b: 6b:e6:63:56 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUGEgGzp4QqVB0tnPYUEzTV+ptg+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAzMTAyMzAyNDJaFw0yNjAzMDkyMzA3NDJaMDMxMTAvBgNV BAMTKDEyRUE4REJFNkY2MDA3QTY4MjQ0MTk4MTQwOTc0MUQ2NzZDRjY3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQPlQ3cdOI7lpSBmnQwYb3HpD7 lIr2/nOBYGJvDB1s5HSCaIX8yws1F8JosHGYbHzkkmm5WvjeNuI3ZAoXBIfBBkoh TjA4AG+80gWWm7oBkRvIQtlLLqHQ1NsGuyUZ3Ma4TSPRRh2jlLGMkEs8EiD644L2 /fDevTTYjbv3xjYxOalCE/3nHf14j36xs39jdPU2tB4LDTNqAvG4DxdKDOROrDaM DbrCfaXtwW5P/zkG9a38glv8UX0V226Lfd6CFijdtZQZYVjHZiYV0iU0yPPjf7GM BMuzwG3UDykPF+cM9pZwWonXM8XGYel3tnBvZOPpMktCbyaan3rPO0YlDj9JAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUEuqNvm9gB6aCRBmBQJdB1nbPZ1cwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNzMxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM1MzczNDM4MzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqCmBEcTANBgkqhkiG9w0BAQsFAAOCAQEAqwBSAjk+uw37lMVEg/8X 3AZsjc6yEM10rwr4/7bf13WwEg/0MbhBNpyWo+bjADJGihD7J4MhV0ktqWhtCCGD LykDBXgmZPvZkOmTX9wcNtz6C3MND/RN5CvC7ZeshqqyUcOrn+r1gP0TDFpEHtEJ uL8qaNAamBy3lMNqqlzGR0j7AwIKvgqGa+y22WYVAV/ci3UghMcLNUH1S4ADp0D8 ynnwO9QPfL0OGgffoWIXk2itUfvh2G6ONHIR8YBnPNuCYNDZCOshh+7ShsbY8Bdt CxYhEXaNG7u+0940tc7UV9jadjQQpai4iNUI4l7lAcsMmF2Z6kHJCi2/r7w7a+Zj Vg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:34:16 2025 by rpki-client