$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/4/326130393a353463333a393030303a3a2f33362d3438203d3e20323131303636.roa File: 326130393a353463333a393030303a3a2f33362d3438203d3e20323131303636.roa (raw, json) Hash identifier: YzCTSWchL+hTRgeNYqGdYhqwpAwgNFx7ePmmASLAuwg= Subject key identifier: 4B:B8:8C:B0:2B:13:5F:28:B7:84:36:72:01:F3:AB:78:1E:56:68:B2 Certificate issuer: /CN=050C4BF608C9D558DB4A44BBED5A23D005379356 Certificate serial: 25EB743A38A227B9EA087BE6712EECB3DB295442 Authority key identifier: 05:0C:4B:F6:08:C9:D5:58:DB:4A:44:BB:ED:5A:23:D0:05:37:93:56 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/050C4BF608C9D558DB4A44BBED5A23D005379356.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/4/326130393a353463333a393030303a3a2f33362d3438203d3e20323131303636.roa Signing time: Wed 11 Jun 2025 05:33:35 +0000 ROA not before: Wed 11 Jun 2025 05:28:35 +0000 ROA not after: Wed 10 Jun 2026 05:33:35 +0000 asID: 211066 IP address blocks: 2a09:54c3:9000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/4/050C4BF608C9D558DB4A44BBED5A23D005379356.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/4/050C4BF608C9D558DB4A44BBED5A23D005379356.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/050C4BF608C9D558DB4A44BBED5A23D005379356.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 02:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:eb:74:3a:38:a2:27:b9:ea:08:7b:e6:71:2e:ec:b3:db:29:54:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050C4BF608C9D558DB4A44BBED5A23D005379356 Validity Not Before: Jun 11 05:28:35 2025 GMT Not After : Jun 10 05:33:35 2026 GMT Subject: CN=4BB88CB02B135F28B784367201F3AB781E5668B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:6f:fb:b3:2b:c2:a3:70:ee:1f:c1:c6:9d: 1f:e7:a8:4d:cc:35:11:89:ce:3f:fd:2e:e2:c0:27: ea:c6:f3:72:56:82:66:15:7e:f1:e9:f9:15:55:de: 08:6e:93:bb:23:0f:24:31:2c:38:c9:c0:99:c9:6e: 75:10:e8:20:15:c1:2b:bd:b5:95:fb:f3:23:9c:a5: 97:f3:f2:8b:33:21:18:87:60:f3:0c:35:c9:eb:79: c9:07:5f:e1:3d:89:01:88:ae:32:cb:00:20:9d:be: 19:0f:7d:67:d8:cd:91:2f:20:a2:c9:11:04:8d:1d: 23:d1:b2:18:70:c7:79:0b:a5:4b:83:dc:4d:4d:f5: 83:bd:db:35:1b:2d:0a:35:ed:2e:8e:0b:29:62:6c: 76:99:d7:2c:a9:c3:ff:3a:7b:03:43:e9:6f:71:52: 43:32:85:27:a3:21:6c:ec:cf:92:79:1f:19:3e:af: e5:ee:67:67:c5:5f:69:f0:cc:26:42:fd:28:95:53: 85:3c:3b:24:00:9b:9f:95:5a:b6:f8:c0:76:4e:72: 30:e2:e9:be:57:76:12:2f:c8:da:6b:4a:c5:6f:f8: 40:a5:3f:52:35:aa:c7:fb:de:1c:2b:9c:d2:8f:86: a8:3f:59:3b:6b:6c:ea:d7:88:23:44:24:d3:ea:c7: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B8:8C:B0:2B:13:5F:28:B7:84:36:72:01:F3:AB:78:1E:56:68:B2 X509v3 Authority Key Identifier: keyid:05:0C:4B:F6:08:C9:D5:58:DB:4A:44:BB:ED:5A:23:D0:05:37:93:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/4/050C4BF608C9D558DB4A44BBED5A23D005379356.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/050C4BF608C9D558DB4A44BBED5A23D005379356.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/4/326130393a353463333a393030303a3a2f33362d3438203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:9000::/36 Signature Algorithm: sha256WithRSAEncryption 6f:b1:d9:6c:67:36:dd:8a:66:47:32:39:a4:34:15:d9:75:3d: 50:4f:0c:57:83:fa:79:e9:c9:16:16:24:00:ea:9b:30:5c:81: 34:a8:26:5d:df:7e:1a:25:37:20:b7:d7:54:aa:90:1d:79:1f: ab:7c:98:6c:ef:46:94:7e:aa:f9:6b:15:e7:46:10:2a:3b:dc: c4:b0:8d:50:3c:f8:37:f4:dd:bd:cd:0c:85:c5:b4:4a:e2:c1: 28:86:b2:98:b3:39:8c:53:1d:54:bb:be:8d:d4:96:a5:a7:43: 6d:9d:54:13:05:35:eb:04:3f:4e:cd:89:91:15:0b:69:6f:a9: 92:f2:9f:ab:e4:b8:9f:38:9d:4f:0a:6e:25:37:92:d3:83:8b: cd:12:fa:ad:b5:d4:7f:28:e9:f2:e7:ba:97:c5:16:e0:57:a9: 3e:0f:5a:e1:d4:99:da:5a:09:cd:b3:22:95:90:4f:a7:a0:c3: 5f:69:4f:fd:4c:56:50:54:d6:d6:02:64:22:64:06:de:a7:c4: 0a:2c:55:a6:fa:f2:19:84:d5:91:10:52:e7:49:a8:e1:35:c4: 4f:51:a4:1f:0a:bf:02:92:d4:df:bf:84:dd:05:05:c3:e5:1b: 50:64:93:15:dd:12:84:c1:8b:64:92:84:05:24:3f:b8:4f:4f: 23:f5:78:85 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUJet0OjiiJ7nqCHvmcS7ss9spVEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUwQzRCRjYwOEM5RDU1OERCNEE0NEJCRUQ1QTIzRDAw NTM3OTM1NjAeFw0yNTA2MTEwNTI4MzVaFw0yNjA2MTAwNTMzMzVaMDMxMTAvBgNV BAMTKDRCQjg4Q0IwMkIxMzVGMjhCNzg0MzY3MjAxRjNBQjc4MUU1NjY4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49m/7syvCo3DuH8HGnR/nqE3M NRGJzj/9LuLAJ+rG83JWgmYVfvHp+RVV3ghuk7sjDyQxLDjJwJnJbnUQ6CAVwSu9 tZX78yOcpZfz8oszIRiHYPMMNcnreckHX+E9iQGIrjLLACCdvhkPfWfYzZEvIKLJ EQSNHSPRshhwx3kLpUuD3E1N9YO92zUbLQo17S6OCylibHaZ1yypw/86ewND6W9x UkMyhSejIWzsz5J5Hxk+r+XuZ2fFX2nwzCZC/SiVU4U8OyQAm5+VWrb4wHZOcjDi 6b5XdhIvyNprSsVv+EClP1I1qsf73hwrnNKPhqg/WTtrbOrXiCNEJNPqx98zAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUS7iMsCsTXyi3hDZyAfOreB5WaLIwHwYDVR0j BBgwFoAUBQxL9gjJ1VjbSkS77Voj0AU3k1YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzQvMDUwQzRCRjYwOEM5RDU1OERCNEE0NEJCRUQ1QTIzRDAwNTM3OTM1Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMDUwQzRCRjYwOEM5RDU1OERCNEE0NEJCRUQ1QTIzRDAwNTM3 OTM1Ni5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzQvMzI2MTMwMzkzYTM1MzQ2MzMz M2EzOTMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzEzMTMwMzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMOQMA0GCSqGSIb3DQEBCwUAA4IBAQBvsdlsZzbdimZHMjmk NBXZdT1QTwxXg/p56ckWFiQA6pswXIE0qCZd334aJTcgt9dUqpAdeR+rfJhs70aU fqr5axXnRhAqO9zEsI1QPPg39N29zQyFxbRK4sEohrKYszmMUx1Uu76N1Jalp0Nt nVQTBTXrBD9OzYmRFQtpb6mS8p+r5LifOJ1PCm4lN5LTg4vNEvqttdR/KOny57qX xRbgV6k+D1rh1JnaWgnNsyKVkE+noMNfaU/9TFZQVNbWAmQiZAbep8QKLFWm+vIZ hNWREFLnSajhNcRPUaQfCr8CktTfv4TdBQXD5RtQZJMV3RKEwYtkkoQFJD+4T08j 9XiF -----END CERTIFICATE-----Generated at Mon Jun 30 18:25:03 2025 by rpki-client