$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa File: 323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa (raw, json) Hash identifier: X3gobtjIiU6Ju/3ZCACUFgs37xuvMmCHuGD6b0L4z1E= Subject key identifier: A4:BC:AC:46:70:C9:1A:D1:25:ED:BC:42:42:AD:C2:93:96:C0:CB:A2 Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Certificate serial: 764F7A6EF598FC80972D73484E156E0AEC97864A Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa Signing time: Fri 14 Mar 2025 19:06:51 +0000 ROA not before: Fri 14 Mar 2025 19:01:51 +0000 ROA not after: Fri 13 Mar 2026 19:06:51 +0000 asID: 47272 IP address blocks: 2602:f96d:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 10:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4f:7a:6e:f5:98:fc:80:97:2d:73:48:4e:15:6e:0a:ec:97:86:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Validity Not Before: Mar 14 19:01:51 2025 GMT Not After : Mar 13 19:06:51 2026 GMT Subject: CN=A4BCAC4670C91AD125EDBC4242ADC29396C0CBA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:7e:12:5f:c2:78:a4:10:26:b5:3a:a2:a1: 89:97:5f:bb:ed:d4:06:94:c2:69:7f:14:eb:bd:3a: 3c:0c:e8:25:00:f0:22:52:e4:d2:a2:56:e5:6c:58: 77:61:f2:2f:a4:50:22:b6:3e:40:9f:cc:a8:20:bf: 95:7b:09:03:55:c1:ed:ae:bc:67:c8:1a:bf:8e:77: 7c:a4:89:25:29:94:b0:f1:63:6a:ff:6d:62:59:63: 13:06:06:c2:59:70:10:80:ad:30:4e:47:ae:84:96: cb:a4:21:0a:49:e3:f9:3b:ae:50:56:a6:d7:88:12: 6a:ce:f7:e9:06:19:c0:5e:cb:ee:75:4d:69:0a:f1: fc:55:36:47:a3:9c:4c:45:f7:27:b0:51:ae:59:4a: 50:24:b2:63:1b:21:46:8d:4b:98:12:52:53:e6:72: 77:96:9a:f4:fc:e9:8e:9a:03:4e:4d:eb:71:1b:b1: 5d:44:d9:82:00:c7:c1:e3:55:90:b7:a6:91:1f:6d: 05:c7:c4:b6:02:9d:c9:ae:75:88:5b:37:14:7f:56: 82:ac:03:00:59:a7:6d:7e:3c:d7:79:97:6b:4b:fd: 8b:aa:f9:16:f6:08:4f:61:c9:d9:ad:6f:3b:92:f7: 29:8c:67:dd:68:e4:d1:6b:da:37:a0:42:d1:20:79: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BC:AC:46:70:C9:1A:D1:25:ED:BC:42:42:AD:C2:93:96:C0:CB:A2 X509v3 Authority Key Identifier: keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f96d:e00::/40 Signature Algorithm: sha256WithRSAEncryption 80:8b:d6:30:e6:1d:00:b4:52:4a:dd:54:40:e2:99:dc:33:cd: 3e:70:1d:6e:f0:0c:2f:9f:9f:33:b7:0b:b7:41:3c:f5:3f:ab: b8:dd:12:2b:9b:2c:7a:6d:8c:7d:09:5a:a9:0f:1d:e7:65:df: 24:8c:3a:b6:e3:2d:af:4a:5a:bd:c3:36:62:9f:5f:2a:df:d6: d9:c2:a3:b9:0d:65:fe:9a:a2:a0:94:55:69:5d:cc:c8:ae:a6: f6:94:c2:d1:b9:27:6b:13:1a:06:0a:8e:c5:e9:27:ed:d7:77: 37:d5:60:1c:f6:bf:fd:cf:b5:7a:6b:ad:61:e2:b3:46:3e:c1: 80:94:7d:22:63:83:ce:9f:29:f7:ea:ba:2d:da:74:6c:80:64: 6f:1a:91:94:e3:c9:1e:6d:4b:ad:b7:9a:18:4b:08:b0:ce:b6: e4:f4:3b:df:59:08:32:53:18:1c:09:48:47:c7:a9:ae:08:3d: f0:8f:b4:33:66:23:06:6d:a5:b9:76:fb:9f:fd:84:76:b6:05: 4d:65:db:57:f9:73:b1:28:d0:a3:b5:62:a5:ca:61:2f:42:cb: 3d:42:2c:8f:e5:dc:9b:89:f8:0d:4c:d8:68:5e:94:72:ea:0d: 73:53:96:6c:de:1d:4d:9f:f3:85:b9:1b:6e:b0:31:af:3d:0e: ea:47:b3:fc -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUdk96bvWY/ICXLXNIThVuCuyXhkowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1 NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwMzE0MTkwMTUxWhcNMjYwMzEzMTkwNjUx WjAzMTEwLwYDVQQDEyhBNEJDQUM0NjcwQzkxQUQxMjVFREJDNDI0MkFEQzI5Mzk2 QzBDQkEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDt+El/CeKQQ JrU6oqGJl1+77dQGlMJpfxTrvTo8DOglAPAiUuTSolblbFh3YfIvpFAitj5An8yo IL+VewkDVcHtrrxnyBq/jnd8pIklKZSw8WNq/21iWWMTBgbCWXAQgK0wTkeuhJbL pCEKSeP5O65QVqbXiBJqzvfpBhnAXsvudU1pCvH8VTZHo5xMRfcnsFGuWUpQJLJj GyFGjUuYElJT5nJ3lpr0/OmOmgNOTetxG7FdRNmCAMfB41WQt6aRH20Fx8S2Ap3J rnWIWzcUf1aCrAMAWadtfjzXeZdrS/2LqvkW9ghPYcnZrW87kvcpjGfdaOTRa9o3 oELRIHnmqwIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFKS8rEZwyRrRJe28QkKtwpOW wMuiMB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3 NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03 ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl NjEyNTY2MWI5MmJkYTcuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4OTk1ZC8xLzMyMzYzMDMy M2E2NjM5MzY2NDNhNjUzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQzNzMy MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwDgQCAAIwCAMGACYC+W0OMA0GCSqGSIb3DQEBCwUAA4IBAQCAi9Yw5h0A tFJK3VRA4pncM80+cB1u8Awvn58ztwu3QTz1P6u43RIrmyx6bYx9CVqpDx3nZd8k jDq24y2vSlq9wzZin18q39bZwqO5DWX+mqKglFVpXczIrqb2lMLRuSdrExoGCo7F 6Sft13c31WAc9r/9z7V6a61h4rNGPsGAlH0iY4POnyn36rot2nRsgGRvGpGU48ke bUutt5oYSwiwzrbk9DvfWQgyUxgcCUhHx6muCD3wj7QzZiMGbaW5dvuf/YR2tgVN ZdtX+XOxKNCjtWKlymEvQss9QiyP5dybifgNTNhoXpRy6g1zU5Zs3h1Nn/OFuRtu sDGvPQ7qR7P8 -----END CERTIFICATE-----Generated at Thu May 8 15:49:02 2025 by rpki-client