$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a3a2f33322d3332203d3e2030.roa File: 326130393a353463373a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: IMO+SXaG9uf0EquuyDOHayndAKuoIVjOZECwMNEmt88= Subject key identifier: 4E:81:B1:70:A6:C9:F4:8B:76:59:84:FE:53:6C:42:D7:0A:75:4A:3A Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 47042695B9673F8EEE42A5C2A987C5663A00A2D8 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a3a2f33322d3332203d3e2030.roa Signing time: Thu 10 Apr 2025 17:59:46 +0000 ROA not before: Thu 10 Apr 2025 17:54:46 +0000 ROA not after: Thu 09 Apr 2026 17:59:46 +0000 asID: 0 IP address blocks: 2a09:54c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 09:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:04:26:95:b9:67:3f:8e:ee:42:a5:c2:a9:87:c5:66:3a:00:a2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Apr 10 17:54:46 2025 GMT Not After : Apr 9 17:59:46 2026 GMT Subject: CN=4E81B170A6C9F48B765984FE536C42D70A754A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:3d:af:fd:3f:91:a8:e4:27:77:d9:75:64: 25:2a:9a:5b:12:90:b7:ec:ef:37:0c:ad:c1:2c:ef: ba:2f:59:57:6c:9d:da:f8:56:aa:00:f3:4e:5d:3f: 40:4a:78:6a:aa:71:0e:99:e3:48:93:f7:1a:fe:5c: 0c:9c:dd:f0:8b:8f:71:cb:20:d1:90:fa:89:bc:17: c6:29:95:3e:a7:a1:11:db:25:0d:9f:b1:f2:38:04: 50:69:88:13:55:57:ef:1a:dd:91:2f:be:97:b2:83: 8b:9a:c7:b0:d8:18:6b:30:63:26:bd:05:57:39:36: 9c:c8:61:13:68:d1:4c:3c:69:7d:0e:8d:25:59:3a: 37:45:e9:ae:52:ee:4f:4f:5c:1b:e2:e7:e1:7a:5e: 25:71:94:42:bd:50:a7:d8:02:2e:91:7a:be:e1:49: d2:bc:ed:d3:55:51:a6:ef:5f:92:f9:51:8c:f9:d0: 91:73:f2:84:d2:21:75:cb:d5:e7:b9:7c:6c:a3:ef: cd:7d:64:6a:79:77:bd:49:c0:d4:39:e6:b9:aa:9c: 70:f7:be:ae:43:3e:49:8e:c7:e4:28:e7:ee:49:1d: 9f:20:1b:4d:6f:25:64:9c:d3:33:dd:91:51:75:e7: 53:b3:f9:81:e6:91:11:8f:52:70:a4:97:0b:92:bf: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:81:B1:70:A6:C9:F4:8B:76:59:84:FE:53:6C:42:D7:0A:75:4A:3A X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7::/32 Signature Algorithm: sha256WithRSAEncryption 24:74:51:16:b2:30:a4:59:9a:e1:79:c7:4f:eb:04:a4:e1:5d: 33:70:dc:81:27:b0:2a:1a:62:a0:a4:a1:c1:cc:4e:74:74:2c: 1f:13:5f:da:29:11:29:a6:77:57:2d:ff:eb:7d:c2:78:87:bc: d6:3e:7d:49:41:a9:db:9f:e5:f4:89:99:a6:03:d9:49:47:1b: a5:43:17:cc:79:a1:e4:08:b5:97:e3:8b:b0:5e:62:d2:58:a5: 67:81:93:f4:02:94:06:63:27:e0:de:6d:c4:c5:2f:dc:8b:23: 66:bf:4d:9f:b9:db:18:df:fa:9d:11:d1:a1:a8:ab:1b:21:5d: 77:1b:e2:36:8d:36:83:82:ad:c8:10:af:a2:d7:9c:07:e2:7e: c6:ad:c4:9a:20:93:dc:81:4d:cb:3c:05:7b:0e:e9:6d:1e:3f: f6:f5:bb:68:c6:bc:89:9a:5a:5f:fa:cf:0d:4a:bd:4c:a5:25: 4c:5c:6d:bf:64:04:c4:df:0f:8f:74:a8:0b:df:69:92:da:25: c7:97:06:13:39:5a:fd:40:6a:ef:71:93:e9:e6:51:93:94:d2: e0:97:8b:12:2f:c5:27:b2:1d:77:be:ab:99:6d:97:45:39:7e: 3a:d5:d4:3e:0d:c0:b9:e4:c5:6b:85:eb:5b:50:96:32:47:e0: 15:57:30:ac -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIURwQmlblnP47uQqXCqYfFZjoAotgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA0MTAxNzU0NDZaFw0yNjA0MDkxNzU5NDZaMDMxMTAvBgNV BAMTKDRFODFCMTcwQTZDOUY0OEI3NjU5ODRGRTUzNkM0MkQ3MEE3NTRBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHD2v/T+RqOQnd9l1ZCUqmlsS kLfs7zcMrcEs77ovWVdsndr4VqoA805dP0BKeGqqcQ6Z40iT9xr+XAyc3fCLj3HL INGQ+om8F8YplT6noRHbJQ2fsfI4BFBpiBNVV+8a3ZEvvpeyg4uax7DYGGswYya9 BVc5NpzIYRNo0Uw8aX0OjSVZOjdF6a5S7k9PXBvi5+F6XiVxlEK9UKfYAi6Rer7h SdK87dNVUabvX5L5UYz50JFz8oTSIXXL1ee5fGyj7819ZGp5d71JwNQ55rmqnHD3 vq5DPkmOx+Qo5+5JHZ8gG01vJWSc0zPdkVF151Oz+YHmkRGPUnCklwuSv0MPAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUToGxcKbJ9It2WYT+U2xC1wp1SjowHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM3 M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqCVTHMA0GCSqG SIb3DQEBCwUAA4IBAQAkdFEWsjCkWZrhecdP6wSk4V0zcNyBJ7AqGmKgpKHBzE50 dCwfE1/aKREppndXLf/rfcJ4h7zWPn1JQanbn+X0iZmmA9lJRxulQxfMeaHkCLWX 44uwXmLSWKVngZP0ApQGYyfg3m3ExS/ciyNmv02fudsY3/qdEdGhqKsbIV13G+I2 jTaDgq3IEK+i15wH4n7GrcSaIJPcgU3LPAV7DultHj/29btoxryJmlpf+s8NSr1M pSVMXG2/ZATE3w+PdKgL32mS2iXHlwYTOVr9QGrvcZPp5lGTlNLgl4sSL8Unsh13 vquZbZdFOX461dQ+DcC55MVrhetbUJYyR+AVVzCs -----END CERTIFICATE-----Generated at Thu May 8 23:22:19 2025 by rpki-client