$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa File: 323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (raw, json) Hash identifier: 0zlxQTxh7vvfaeWuK2Hw3nih0UKatPrmAKiXcV1p/ig= Subject key identifier: 01:23:FB:B0:E0:EA:ED:A3:2F:57:A3:6F:95:3C:96:8D:56:93:4D:B8 Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 1ADA5D11B0E7C17B6D49DD78806EC5149DD7C91E Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa Signing time: Tue 21 Jan 2025 15:15:00 +0000 ROA not before: Tue 21 Jan 2025 15:10:00 +0000 ROA not after: Tue 20 Jan 2026 15:15:00 +0000 asID: 214768 IP address blocks: 2602:f761:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:da:5d:11:b0:e7:c1:7b:6d:49:dd:78:80:6e:c5:14:9d:d7:c9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: Jan 21 15:10:00 2025 GMT Not After : Jan 20 15:15:00 2026 GMT Subject: CN=0123FBB0E0EAEDA32F57A36F953C968D56934DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:ad:8a:72:5a:17:5a:93:c0:f1:18:5e:e4: f1:b7:74:3b:d5:c7:7e:ff:da:b9:de:52:07:af:e4: 23:86:06:20:c4:9a:46:a2:90:01:f1:5e:c2:66:c2: 5a:fb:be:ea:22:98:05:5a:fb:bd:85:20:5c:f6:c2: 4a:83:e8:6c:b8:49:df:e7:6b:ee:87:05:21:9a:07: 13:dd:2c:f7:3f:a3:e0:52:2e:87:87:d8:96:42:71: 68:dc:7b:b6:fc:14:0c:d0:06:5b:e0:01:fb:55:65: af:e4:33:2d:27:df:ca:c3:f3:29:20:27:4c:06:60: b0:26:92:14:ac:b9:75:02:05:9f:0c:fa:1a:34:7a: ad:2c:88:5e:aa:65:0c:b2:fe:c6:73:6c:e4:46:d1: 01:5a:d8:73:90:b4:38:cf:c7:c4:6a:3c:57:4b:63: fd:99:fd:a5:2c:7d:be:35:c0:f8:ce:e3:74:b0:15: bb:f5:42:ae:d0:a1:f0:0b:92:81:bb:32:9a:b5:8e: 95:16:4c:f8:3b:80:15:55:01:e7:ae:97:9d:1a:36: 82:b6:02:af:8a:c6:a1:50:a4:97:4d:60:a5:fa:e9: dc:38:99:ae:23:08:40:fe:22:92:83:37:76:aa:f5: c1:d1:1d:09:ab:69:1d:a8:bb:e8:b1:0b:7d:cf:77: f1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:23:FB:B0:E0:EA:ED:A3:2F:57:A3:6F:95:3C:96:8D:56:93:4D:B8 X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f761:30::/44 Signature Algorithm: sha256WithRSAEncryption 9d:c2:bc:12:71:10:31:11:24:11:4a:4b:fb:72:36:f6:b7:ce: 15:75:f6:d4:5d:09:4c:60:9d:48:88:88:77:be:25:f1:dd:3f: 16:c1:90:46:b4:b4:2c:b2:b1:64:86:3d:53:64:d4:0f:d3:f4: 00:d0:6c:e5:aa:4e:d7:5f:2d:5d:79:ae:ea:c1:e7:bf:68:cd: 18:44:b9:c7:ef:5d:b7:a3:f1:19:ec:1c:fc:5e:e0:47:a6:1a: 97:16:60:51:1c:9a:d1:1c:48:11:b6:f1:65:a9:5a:97:2d:04: 5b:4f:d2:38:f5:d1:3f:c1:e4:d0:0b:ee:90:e6:f3:5e:89:3a: 2f:bd:7a:4f:ab:34:85:f9:64:f6:ae:10:8e:ec:38:78:11:e6: db:14:b7:25:91:38:bf:8c:42:fd:12:0b:1c:78:4a:11:be:73: 44:8f:3e:9d:0f:ce:94:e1:51:c1:ad:09:ce:df:7a:da:aa:87: 71:66:a4:a2:ec:d9:ac:55:f6:35:d5:19:ff:47:9f:d6:a0:34: db:6f:1a:80:9f:1d:7b:3f:01:f8:21:bf:90:9e:59:3f:f5:66: ea:bd:13:d6:79:58:94:5c:5a:af:b4:07:59:bd:29:4a:ac:59: b1:36:20:2c:27:2a:20:f8:14:9a:f0:2d:01:35:a1:b2:b5:40: 36:50:d3:c2 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUGtpdEbDnwXttSd14gG7FFJ3XyR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwMTIxMTUxMDAwWhcNMjYwMTIwMTUxNTAw WjAzMTEwLwYDVQQDEygwMTIzRkJCMEUwRUFFREEzMkY1N0EzNkY5NTNDOTY4RDU2 OTM0REI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cGtinJaF1qT wPEYXuTxt3Q71cd+/9q53lIHr+QjhgYgxJpGopAB8V7CZsJa+77qIpgFWvu9hSBc 9sJKg+hsuEnf52vuhwUhmgcT3Sz3P6PgUi6Hh9iWQnFo3Hu2/BQM0AZb4AH7VWWv 5DMtJ9/Kw/MpICdMBmCwJpIUrLl1AgWfDPoaNHqtLIheqmUMsv7Gc2zkRtEBWthz kLQ4z8fEajxXS2P9mf2lLH2+NcD4zuN0sBW79UKu0KHwC5KBuzKatY6VFkz4O4AV VQHnrpedGjaCtgKvisahUKSXTWCl+uncOJmuIwhA/iKSgzd2qvXB0R0Jq2kdqLvo sQt9z3fxhwIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFAEj+7Dg6u2jL1ejb5U8lo1W k024MB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYzLTBmMzJiOGU3ZmU3OS8zLzMyMzYzMDMy M2E2NjM3MzYzMTNhMzMzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzEzNDM3 MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHBCYC92EAMDANBgkqhkiG9w0BAQsFAAOCAQEAncK8EnEQ MREkEUpL+3I29rfOFXX21F0JTGCdSIiId74l8d0/FsGQRrS0LLKxZIY9U2TUD9P0 ANBs5apO118tXXmu6sHnv2jNGES5x+9dt6PxGewc/F7gR6YalxZgURya0RxIEbbx Zalaly0EW0/SOPXRP8Hk0AvukObzXok6L716T6s0hflk9q4Qjuw4eBHm2xS3JZE4 v4xC/RILHHhKEb5zRI8+nQ/OlOFRwa0Jzt962qqHcWakouzZrFX2NdUZ/0ef1qA0 228agJ8dez8B+CG/kJ5ZP/Vm6r0T1nlYlFxar7QHWb0pSqxZsTYgLCcqIPgUmvAt ATWhsrVANlDTwg== -----END CERTIFICATE-----Generated at Mon Apr 28 12:34:50 2025 by rpki-client