$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa File: 326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa (raw, json) Hash identifier: xYUitT2HUWdZQdWhhtvOL/N6dHGaHT8vesYBPh3VEWk= Subject key identifier: 31:AC:2C:61:23:A4:90:5C:57:D8:A7:D1:20:CF:32:4E:ED:AE:27:03 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 452BB7BDB161A1E8BFF17C95DBA0E806FF213E1B Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa Signing time: Mon 05 May 2025 21:26:20 +0000 ROA not before: Mon 05 May 2025 21:21:20 +0000 ROA not after: Mon 04 May 2026 21:26:20 +0000 asID: 214223 IP address blocks: 2a05:dfc3:fa00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 04:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2b:b7:bd:b1:61:a1:e8:bf:f1:7c:95:db:a0:e8:06:ff:21:3e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 5 21:21:20 2025 GMT Not After : May 4 21:26:20 2026 GMT Subject: CN=31AC2C6123A4905C57D8A7D120CF324EEDAE2703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:e4:35:5f:cd:cb:0b:8b:69:2a:df:1a:96:30: 09:e8:f4:6a:16:53:2a:eb:2a:04:b0:75:0a:ad:d6: bf:38:3d:46:e7:19:d2:95:c4:70:03:6a:c1:00:d8: 0a:75:ec:fe:b0:a9:9e:29:bd:bb:69:c3:66:0e:32: da:46:bb:e6:1e:a5:2e:2a:b2:c0:54:59:ee:15:44: 92:76:d1:1e:bd:ae:d3:3b:79:cf:f2:f4:05:d3:73: 45:c6:7b:cd:0d:f2:29:12:2e:ec:48:fa:84:ca:81: 54:d5:ef:0a:ad:8d:0d:66:0c:ed:35:40:af:01:f6: 52:ce:f5:92:d4:64:98:c9:d2:db:0c:f2:73:51:c2: 8a:b6:20:01:e1:63:ca:c3:1f:04:f3:ed:fc:d2:4e: 5c:5c:73:9a:45:28:66:e7:66:67:a8:11:8e:fd:8e: 60:07:1b:da:e9:1d:7c:cb:42:a6:7b:83:13:5e:31: 19:be:d6:f2:12:e9:1f:38:05:42:0d:57:66:81:e1: 73:e4:7a:4c:37:c5:ed:c8:e2:31:b6:3c:55:42:93: 24:8f:cf:84:54:73:e6:2e:d9:fa:5a:c3:3f:d9:0f: 9c:56:51:74:d5:98:45:ce:6f:f8:2c:2a:dd:01:58: 11:88:11:a4:85:e4:6c:3f:d1:bf:17:3f:64:20:76: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AC:2C:61:23:A4:90:5C:57:D8:A7:D1:20:CF:32:4E:ED:AE:27:03 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 Signature Algorithm: sha256WithRSAEncryption 04:a6:1c:09:b6:70:5b:b0:84:38:b8:33:c7:0a:33:73:b5:de: f0:19:bc:d5:76:2e:f1:80:b0:33:bb:e7:ea:73:45:d4:1f:d6: 95:c7:58:d5:53:9c:f4:23:e5:6e:f1:a6:50:13:1e:b5:04:6c: 48:1c:84:1f:25:ef:9f:26:a1:8e:da:7c:11:fb:00:bc:ce:47: 83:70:db:f5:2a:bd:10:a4:00:07:c9:24:ea:22:7a:01:04:bf: fe:50:bd:3e:3b:0d:2e:a5:4e:2b:ce:53:16:ad:da:ed:43:ce: f6:a8:5a:84:46:32:b4:e5:98:19:3f:51:11:6f:94:dc:00:5a: 14:19:b6:19:e4:af:9f:3b:da:93:c9:1f:d0:6d:fa:ef:a8:d8: 2b:d1:1d:bc:07:c2:c9:12:34:90:0f:e4:3d:5a:54:3c:a1:55: b3:a1:a2:17:5e:d5:6e:06:a6:f2:8b:7f:fc:d4:16:26:b5:78: 1a:70:1c:8d:07:cc:58:fe:f4:78:3d:c6:3a:59:81:3a:e8:6f: 7f:94:fe:9e:79:39:c9:be:26:49:2e:58:d8:1c:64:42:00:93: 15:88:cc:12:e4:88:c3:f8:ec:b6:5d:8e:ea:df:8c:76:fe:29: 52:d2:c6:47:3f:eb:47:4b:9d:e4:f8:86:3d:af:59:b1:ba:e3: ad:18:30:a2 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIURSu3vbFhoei/8XyV26DoBv8hPhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MDUyMTIxMjBaFw0yNjA1MDQyMTI2MjBaMDMxMTAvBgNV BAMTKDMxQUMyQzYxMjNBNDkwNUM1N0Q4QTdEMTIwQ0YzMjRFRURBRTI3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD95DVfzcsLi2kq3xqWMAno9GoW UyrrKgSwdQqt1r84PUbnGdKVxHADasEA2Ap17P6wqZ4pvbtpw2YOMtpGu+YepS4q ssBUWe4VRJJ20R69rtM7ec/y9AXTc0XGe80N8ikSLuxI+oTKgVTV7wqtjQ1mDO01 QK8B9lLO9ZLUZJjJ0tsM8nNRwoq2IAHhY8rDHwTz7fzSTlxcc5pFKGbnZmeoEY79 jmAHG9rpHXzLQqZ7gxNeMRm+1vIS6R84BUINV2aB4XPkekw3xe3I4jG2PFVCkySP z4RUc+Yu2fpawz/ZD5xWUXTVmEXOb/gsKt0BWBGIEaSF5Gw/0b8XP2QgdtLzAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUMawsYSOkkFxX2KfRIM8yTu2uJwMwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjYxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDMyMzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoF38P6MA0GCSqGSIb3DQEBCwUAA4IBAQAEphwJtnBbsIQ4uDPH CjNztd7wGbzVdi7xgLAzu+fqc0XUH9aVx1jVU5z0I+Vu8aZQEx61BGxIHIQfJe+f JqGO2nwR+wC8zkeDcNv1Kr0QpAAHySTqInoBBL/+UL0+Ow0upU4rzlMWrdrtQ872 qFqERjK05ZgZP1ERb5TcAFoUGbYZ5K+fO9qTyR/QbfrvqNgr0R28B8LJEjSQD+Q9 WlQ8oVWzoaIXXtVuBqbyi3/81BYmtXgacByNB8xY/vR4PcY6WYE66G9/lP6eeTnJ viZJLljYHGRCAJMViMwS5IjD+Oy2XY7q34x2/ilS0sZHP+tHS53k+IY9r1mxuuOt GDCi -----END CERTIFICATE-----Generated at Fri May 9 12:56:50 2025 by rpki-client