$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e203136353039.roa File: 326130353a646663333a663735303a3a2f34342d3438203d3e203136353039.roa (raw, json) Hash identifier: MXTO3DAAzzf1YFzEbykQaoRaV7FaqfsNu4K85rp7u0w= Subject key identifier: 82:95:AF:5F:56:69:09:82:D4:F9:01:A2:9C:E7:B7:5A:4E:18:E8:1F Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6149C6ABA3B14234F3B4D7AA6C0D281654D71194 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e203136353039.roa Signing time: Tue 24 Jun 2025 07:19:35 +0000 ROA not before: Tue 24 Jun 2025 07:14:35 +0000 ROA not after: Tue 23 Jun 2026 07:19:35 +0000 asID: 16509 IP address blocks: 2a05:dfc3:f750::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 12:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:49:c6:ab:a3:b1:42:34:f3:b4:d7:aa:6c:0d:28:16:54:d7:11:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 24 07:14:35 2025 GMT Not After : Jun 23 07:19:35 2026 GMT Subject: CN=8295AF5F56690982D4F901A29CE7B75A4E18E81F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:5d:8f:f1:b4:14:42:92:f6:a1:01:47:8f: 36:a1:55:84:d9:e2:d5:e9:5f:a6:d7:63:af:1a:98: 72:c6:49:eb:a0:41:f5:19:aa:e5:ce:3f:5e:ef:7b: 56:ec:bc:cb:b2:b4:f0:0e:e5:8e:f0:12:6b:59:ea: c6:d4:b2:b3:56:e3:bd:01:38:54:37:52:29:e0:5b: 5f:90:0e:b7:a0:07:ab:02:b3:77:86:85:1b:ab:c0: f4:75:62:e0:40:46:7f:fe:39:c9:e3:42:e6:fb:7c: 85:d4:6a:06:83:48:e5:d6:4c:62:a7:32:5f:1f:bd: f8:d0:ae:58:8c:b8:f3:b2:51:04:60:87:7a:76:55: 94:ff:c8:42:be:ef:b8:99:d0:d6:03:bd:7c:cb:7a: 6e:70:7d:93:4f:77:79:18:55:b3:79:75:8a:d2:5b: a7:7f:1c:71:83:87:26:03:f4:35:e7:96:6d:57:3e: d6:ba:1c:de:2d:83:fa:4b:29:2b:cc:d9:da:6a:aa: 53:ee:1b:54:bd:26:88:a4:d0:aa:cd:12:99:cc:c3: 62:05:07:34:d4:80:0a:f2:e7:62:a4:e9:d8:50:f6: b9:b9:fc:9a:a0:23:e3:be:4b:2c:a5:09:2d:e8:ba: fc:33:52:9d:53:9a:25:6d:f1:33:58:ac:5d:69:7b: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:95:AF:5F:56:69:09:82:D4:F9:01:A2:9C:E7:B7:5A:4E:18:E8:1F X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f750::/44 Signature Algorithm: sha256WithRSAEncryption 61:b3:c7:33:8a:8c:3e:f3:6c:f0:4c:97:c0:85:39:98:cd:a8: 53:d0:48:b3:e2:be:8d:70:10:21:8c:57:d1:32:95:be:87:c7: af:c5:c1:85:0c:0f:aa:6d:5f:e5:05:f7:86:bb:5c:23:d0:25: 68:14:a3:1d:65:48:55:c5:57:56:c6:6b:56:d2:d2:2a:57:71: 03:b6:ab:b4:5c:5d:91:ad:12:23:0a:a0:ea:49:00:b5:3f:07: b1:09:b4:60:e9:e0:61:11:73:f2:37:72:9c:35:0e:7c:8d:81: 83:86:22:02:c6:7d:61:2a:89:4c:9f:e4:69:49:de:57:8a:ca: 26:36:40:4f:75:3a:a9:55:30:a0:3d:c1:3c:9c:86:9c:20:ec: aa:50:8f:1f:ea:5c:54:5d:fb:46:9c:9f:a8:5e:19:be:85:85: d6:37:98:e0:9e:66:9f:57:72:3b:5d:06:7c:68:34:4c:7d:f4: c3:06:d6:a0:5d:39:3a:e9:a4:09:7b:7b:0c:8c:72:63:b2:0f: 65:75:cf:39:dc:b2:68:a4:f4:18:78:66:c1:96:89:22:2c:46: bd:53:a9:cc:f4:0b:3a:f0:88:0f:2c:07:80:8d:c1:ef:1b:d9: e0:12:00:82:90:66:fc:ac:c2:80:d0:8f:de:45:58:3d:2a:88: 2c:9e:9a:01 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUYUnGq6OxQjTztNeqbA0oFlTXEZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MjQwNzE0MzVaFw0yNjA2MjMwNzE5MzVaMDMxMTAvBgNV BAMTKDgyOTVBRjVGNTY2OTA5ODJENEY5MDFBMjlDRTdCNzVBNEUxOEU4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqiF2P8bQUQpL2oQFHjzahVYTZ 4tXpX6bXY68amHLGSeugQfUZquXOP17ve1bsvMuytPAO5Y7wEmtZ6sbUsrNW470B OFQ3UingW1+QDregB6sCs3eGhRurwPR1YuBARn/+OcnjQub7fIXUagaDSOXWTGKn Ml8fvfjQrliMuPOyUQRgh3p2VZT/yEK+77iZ0NYDvXzLem5wfZNPd3kYVbN5dYrS W6d/HHGDhyYD9DXnlm1XPta6HN4tg/pLKSvM2dpqqlPuG1S9Joik0KrNEpnMw2IF BzTUgAry52Kk6dhQ9rm5/JqgI+O+SyylCS3ouvwzUp1TmiVt8TNYrF1pezKBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUgpWvX1ZpCYLU+QGinOe3Wk4Y6B8wHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjM3MzUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzYzNTMwMzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqBd/D91AwDQYJKoZIhvcNAQELBQADggEBAGGzxzOKjD7zbPBMl8CF OZjNqFPQSLPivo1wECGMV9Eylb6Hx6/FwYUMD6ptX+UF94a7XCPQJWgUox1lSFXF V1bGa1bS0ipXcQO2q7RcXZGtEiMKoOpJALU/B7EJtGDp4GERc/I3cpw1DnyNgYOG IgLGfWEqiUyf5GlJ3leKyiY2QE91OqlVMKA9wTychpwg7KpQjx/qXFRd+0acn6he Gb6FhdY3mOCeZp9XcjtdBnxoNEx99MMG1qBdOTrppAl7ewyMcmOyD2V1zzncsmik 9Bh4ZsGWiSIsRr1Tqcz0CzrwiA8sB4CNwe8b2eASAIKQZvyswoDQj95FWD0qiCye mgE= -----END CERTIFICATE-----Generated at Sun Jun 29 04:46:45 2025 by rpki-client