$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34302d3438203d3e20333937373330.roa File: 323630323a663736313a3a2f34302d3438203d3e20333937373330.roa (raw, json) Hash identifier: UabIBDSP/jRxPjVYe42Rz6FfziQlrmtKMNVTrVjL1tk= Subject key identifier: 13:C5:C0:4B:63:47:C6:53:40:D7:51:F1:89:97:1A:99:EB:90:6E:50 Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 1779749D88FF0B713D364B329D3930C8EF1B21CC Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34302d3438203d3e20333937373330.roa Signing time: Tue 28 Jan 2025 19:05:02 +0000 ROA not before: Tue 28 Jan 2025 19:00:02 +0000 ROA not after: Tue 27 Jan 2026 19:05:02 +0000 asID: 397730 IP address blocks: 2602:f761::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 18:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:79:74:9d:88:ff:0b:71:3d:36:4b:32:9d:39:30:c8:ef:1b:21:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: Jan 28 19:00:02 2025 GMT Not After : Jan 27 19:05:02 2026 GMT Subject: CN=13C5C04B6347C65340D751F189971A99EB906E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:42:23:c2:43:78:86:17:e7:dc:ef:b5:fb: 76:61:24:bd:c8:3c:1b:98:7e:33:38:c2:65:69:f2: ab:13:c8:7c:6e:a2:9a:f4:60:b6:d9:31:c1:eb:43: 5f:e5:91:a4:9b:64:77:38:fa:c1:b3:1d:1a:22:6c: 69:2c:77:94:71:da:46:c9:bc:ed:29:27:0c:81:f5: a1:d9:51:cb:6c:5e:a7:79:f4:52:68:be:0e:39:84: f7:7e:fd:f3:16:b3:f5:21:9a:30:c7:c0:c6:69:0b: 96:2d:f3:19:8d:b5:b8:93:6b:0c:cb:b9:f5:44:8c: 64:bc:8d:74:6f:ad:b0:45:91:77:1c:cf:05:2b:58: d0:63:ed:f0:ef:e5:f5:83:5b:99:06:68:55:4c:0b: df:43:3f:7e:e2:15:95:ab:fb:c5:da:16:53:45:d6: 1f:85:8b:28:f9:18:8e:44:e1:00:ee:86:ea:25:6c: aa:40:a4:88:2a:37:0d:98:66:25:c4:2a:21:ef:a8: 3d:f2:50:71:af:6e:68:13:3b:56:bd:40:fe:25:2b: c7:e7:6f:10:5a:de:08:b4:09:e2:e9:0a:63:49:b1: da:3d:57:15:c8:81:e5:50:43:b2:77:65:8f:25:96: 8b:a8:c5:ec:c6:65:67:d0:9c:28:4e:61:6c:f2:47: 6d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C5:C0:4B:63:47:C6:53:40:D7:51:F1:89:97:1A:99:EB:90:6E:50 X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34302d3438203d3e20333937373330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f761::/40 Signature Algorithm: sha256WithRSAEncryption 08:7a:2e:7a:0b:1f:be:ea:af:65:34:9f:01:64:c8:c7:8a:cd: 0b:6f:7d:b3:20:9b:f6:56:e7:6e:d4:b8:19:f3:7d:ff:b4:6d: 9c:65:7c:a8:3b:63:52:25:2f:3b:08:d4:80:af:98:c8:84:5d: aa:d6:81:a1:24:d8:c8:3a:20:46:09:a0:b9:be:d1:20:de:be: 45:fb:da:8a:61:16:ee:b3:d6:51:c1:94:4c:cd:2b:fc:bf:58: ed:1a:bd:b1:1d:e8:ec:aa:1f:df:a2:7a:20:29:4a:3d:cd:58: 9a:0a:aa:82:55:7e:7f:d5:14:19:07:fd:98:39:61:80:34:b3: 97:e0:4d:32:0c:73:ec:1c:9b:7d:77:7e:8e:ef:00:48:35:41: 0f:ef:77:ad:18:51:2b:82:8c:ae:29:2c:6b:64:87:53:aa:fe: 5f:91:8b:e8:a5:3a:06:ed:b2:44:f4:96:7c:5f:24:18:b8:5f: 75:77:4b:0f:02:6e:c8:12:ca:00:32:d1:4e:0d:23:b1:70:6b: 46:c4:94:9f:f2:5e:06:9f:94:fe:21:8f:2c:71:d8:b5:e8:ac: 49:92:ef:1e:fc:4f:53:f4:38:b4:7c:be:d7:62:1c:36:09:e8: 0a:94:f6:a9:c7:d1:17:ce:4e:cd:60:2d:c9:6c:18:6a:24:1b: cd:07:df:17 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIUF3l0nYj/C3E9NksynTkwyO8bIcwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwMTI4MTkwMDAyWhcNMjYwMTI3MTkwNTAy WjAzMTEwLwYDVQQDEygxM0M1QzA0QjYzNDdDNjUzNDBENzUxRjE4OTk3MUE5OUVC OTA2RTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN9CI8JDeIYX 59zvtft2YSS9yDwbmH4zOMJlafKrE8h8bqKa9GC22THB60Nf5ZGkm2R3OPrBsx0a ImxpLHeUcdpGybztKScMgfWh2VHLbF6nefRSaL4OOYT3fv3zFrP1IZowx8DGaQuW LfMZjbW4k2sMy7n1RIxkvI10b62wRZF3HM8FK1jQY+3w7+X1g1uZBmhVTAvfQz9+ 4hWVq/vF2hZTRdYfhYso+RiOROEA7obqJWyqQKSIKjcNmGYlxCoh76g98lBxr25o EztWvUD+JSvH528QWt4ItAni6QpjSbHaPVcVyIHlUEOyd2WPJZaLqMXsxmVn0Jwo TmFs8kdtyQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFBPFwEtjR8ZTQNdR8YmXGpnr kG5QMB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYzLTBmMzJiOGU3ZmU3OS8zLzMyMzYzMDMy M2E2NjM3MzYzMTNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMzMzkzNzM3MzMzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACYC92EAMA0GCSqGSIb3DQEBCwUAA4IBAQAIei56Cx++6q9lNJ8B ZMjHis0Lb32zIJv2Vudu1LgZ833/tG2cZXyoO2NSJS87CNSAr5jIhF2q1oGhJNjI OiBGCaC5vtEg3r5F+9qKYRbus9ZRwZRMzSv8v1jtGr2xHejsqh/fonogKUo9zVia CqqCVX5/1RQZB/2YOWGANLOX4E0yDHPsHJt9d36O7wBINUEP73etGFErgoyuKSxr ZIdTqv5fkYvopToG7bJE9JZ8XyQYuF91d0sPAm7IEsoAMtFODSOxcGtGxJSf8l4G n5T+IY8scdi16KxJku8e/E9T9Di0fL7XYhw2CegKlPapx9EXzk7NYC3JbBhqJBvN B98X -----END CERTIFICATE-----Generated at Fri May 9 22:06:21 2025 by rpki-client