$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e203134363138.roa File: 326130353a646663333a663735303a3a2f34342d3438203d3e203134363138.roa (raw, json) Hash identifier: RWU0GxClNECtBBvhyrsu+D17HkADBi4SGnWRxHDo8F4= Subject key identifier: 7A:4A:04:2E:34:8F:33:4F:46:42:1B:80:F1:54:31:AD:EF:4F:66:E6 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 35E2B1AEB993D3ADDC8ADB0F193B9E9E21C1D3D4 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e203134363138.roa Signing time: Tue 24 Jun 2025 07:19:05 +0000 ROA not before: Tue 24 Jun 2025 07:14:05 +0000 ROA not after: Tue 23 Jun 2026 07:19:05 +0000 asID: 14618 IP address blocks: 2a05:dfc3:f750::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 01:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e2:b1:ae:b9:93:d3:ad:dc:8a:db:0f:19:3b:9e:9e:21:c1:d3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 24 07:14:05 2025 GMT Not After : Jun 23 07:19:05 2026 GMT Subject: CN=7A4A042E348F334F46421B80F15431ADEF4F66E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:4f:26:be:65:e8:62:f9:56:4d:dc:f3:0d: 38:3a:10:fa:a0:e5:f8:9a:7e:35:18:74:a8:7e:b3: 24:f8:2d:9e:d1:30:aa:72:bb:7d:9d:97:cc:e3:42: 45:3b:cb:f6:09:ff:dc:18:f5:bf:07:e8:1d:82:27: e7:3a:ba:be:e0:e7:26:06:7e:60:e5:c6:9d:13:56: 68:31:ed:bf:4c:42:40:91:54:64:fb:d1:8f:ed:9c: ba:da:86:dc:65:6f:17:45:25:a7:87:70:c4:aa:fb: 00:1f:fd:01:c2:ff:3a:a9:4b:1c:5a:ba:05:68:49: 8d:9d:bb:32:6f:b1:f1:69:d0:a0:70:a6:ee:1c:94: 1d:78:b5:a9:78:61:26:4a:28:3d:1f:46:79:0f:88: aa:73:23:83:2a:66:95:8d:3f:d8:56:9f:03:af:b7: bc:6d:0b:01:2d:f3:e4:24:67:72:ab:43:56:ab:56: 79:81:81:d2:16:eb:3b:2d:f7:4a:e6:69:47:85:0a: 51:1f:c7:6a:66:a1:f7:06:ee:5f:aa:33:03:76:0a: ef:ac:d6:3a:12:f8:06:e1:4e:4d:09:65:a2:2f:4f: ff:6a:2d:2b:03:0d:02:47:95:f8:d9:cf:06:ae:6a: 4a:a9:9b:46:2e:46:c7:cb:f4:54:91:49:c8:8e:91: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4A:04:2E:34:8F:33:4F:46:42:1B:80:F1:54:31:AD:EF:4F:66:E6 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f750::/44 Signature Algorithm: sha256WithRSAEncryption 2e:de:e0:74:1c:a5:31:53:11:31:b5:e5:9c:83:f0:ad:cb:14: a5:71:ac:a9:b4:7b:f0:45:0b:43:b0:e7:49:2c:74:06:39:04: 4e:36:a8:33:55:d1:3c:42:13:57:8e:b9:b8:3b:c9:03:ce:05: 35:c9:b6:28:d0:ce:7b:e4:ea:9d:5c:82:f0:92:0e:c9:f7:de: fa:f9:01:29:92:40:dd:c0:74:e1:9e:a8:2f:88:ba:3d:7f:9c: 78:75:ea:a3:85:24:53:ba:23:cf:d9:5b:f6:62:1f:09:12:ad: 1b:7e:8d:25:53:ae:a6:5e:8d:eb:37:20:a6:d0:87:1c:53:ca: b8:ab:af:d9:9b:e3:f5:d5:21:08:12:1c:db:7e:31:be:8f:e4: d7:f0:08:5d:54:0e:7d:23:3b:53:96:cf:95:46:4a:77:02:80: be:a3:11:a8:b4:4b:f9:7a:7c:dc:3c:14:cc:6b:43:d4:38:1f: 9c:2a:8d:00:0e:a8:7a:a8:ef:b5:c1:ad:71:ed:06:50:db:2d: b6:9a:69:87:71:17:a4:c4:0d:7d:8d:54:2f:e9:9a:0d:83:89: cf:b9:11:7f:25:9f:b0:0a:7a:0a:00:1f:47:48:ec:a0:7d:22: c2:9d:58:d6:1e:b2:e4:02:0c:70:47:b4:4b:d1:ef:c1:8c:cc: b5:6b:ee:aa -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNeKxrrmT063citsPGTueniHB09QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MjQwNzE0MDVaFw0yNjA2MjMwNzE5MDVaMDMxMTAvBgNV BAMTKDdBNEEwNDJFMzQ4RjMzNEY0NjQyMUI4MEYxNTQzMUFERUY0RjY2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdU8mvmXoYvlWTdzzDTg6EPqg 5fiafjUYdKh+syT4LZ7RMKpyu32dl8zjQkU7y/YJ/9wY9b8H6B2CJ+c6ur7g5yYG fmDlxp0TVmgx7b9MQkCRVGT70Y/tnLrahtxlbxdFJaeHcMSq+wAf/QHC/zqpSxxa ugVoSY2duzJvsfFp0KBwpu4clB14tal4YSZKKD0fRnkPiKpzI4MqZpWNP9hWnwOv t7xtCwEt8+QkZ3KrQ1arVnmBgdIW6zst90rmaUeFClEfx2pmofcG7l+qMwN2Cu+s 1joS+AbhTk0JZaIvT/9qLSsDDQJHlfjZzwauakqpm0YuRsfL9FSRSciOkU2NAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUekoELjSPM09GQhuA8VQxre9PZuYwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjM3MzUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzQzNjMxMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqBd/D91AwDQYJKoZIhvcNAQELBQADggEBAC7e4HQcpTFTETG15ZyD 8K3LFKVxrKm0e/BFC0Ow50ksdAY5BE42qDNV0TxCE1eOubg7yQPOBTXJtijQznvk 6p1cgvCSDsn33vr5ASmSQN3AdOGeqC+Iuj1/nHh16qOFJFO6I8/ZW/ZiHwkSrRt+ jSVTrqZejes3IKbQhxxTyrirr9mb4/XVIQgSHNt+Mb6P5NfwCF1UDn0jO1OWz5VG SncCgL6jEai0S/l6fNw8FMxrQ9Q4H5wqjQAOqHqo77XBrXHtBlDbLbaaaYdxF6TE DX2NVC/pmg2Dic+5EX8ln7AKegoAH0dI7KB9IsKdWNYesuQCDHBHtEvR78GMzLVr 7qo= -----END CERTIFICATE-----Generated at Sun Jun 29 09:20:30 2025 by rpki-client