$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa File: 326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa (raw, json) Hash identifier: DYKApsC0Xy9yKLi3q0BaMZa16VHMvjlxYhlK7Vyadxk= Subject key identifier: 02:C3:56:16:BD:AA:9B:FB:EE:EA:98:84:7B:9F:AD:58:07:C1:E9:75 Certificate issuer: /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4 Certificate serial: 3A5AF4F9F27448CB8DD425577092AEB907BFB0B3 Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa Signing time: Sat 22 Mar 2025 21:11:13 +0000 ROA not before: Sat 22 Mar 2025 21:06:13 +0000 ROA not after: Sat 21 Mar 2026 21:11:13 +0000 asID: 215147 IP address blocks: 2a09:54c3:a04f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5a:f4:f9:f2:74:48:cb:8d:d4:25:57:70:92:ae:b9:07:bf:b0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4 Validity Not Before: Mar 22 21:06:13 2025 GMT Not After : Mar 21 21:11:13 2026 GMT Subject: CN=02C35616BDAA9BFBEEEA98847B9FAD5807C1E975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:4f:fe:99:da:b3:9c:84:eb:d5:ee:af:4c: d5:28:d7:b2:90:76:27:3f:2c:3b:da:84:b5:3f:13: a2:46:d3:bf:01:89:e2:b5:b2:a5:e4:ac:5d:e1:49: c7:ff:86:96:22:4c:d5:86:26:30:b6:65:a4:de:81: 96:6c:83:bf:a7:3b:bd:56:0b:4e:60:0a:e5:06:74: 44:76:de:69:57:82:47:94:90:d6:6f:84:d3:70:8c: 69:3c:c3:da:3d:7a:a2:f9:95:5b:36:bc:39:b3:22: 75:de:f5:a1:c2:01:16:36:0a:db:38:70:34:0f:2e: ac:ca:34:5d:f7:27:d9:92:7c:88:62:98:d9:f7:12: 5a:c9:9a:48:37:54:40:a6:0c:aa:cf:44:56:df:26: a6:bc:6b:b6:82:6b:1f:00:fa:fc:cf:3a:ec:a1:0e: b4:6a:2a:97:b3:3b:89:05:f5:a6:8d:44:1b:9b:c1: 5c:a6:ad:20:ea:4e:4e:aa:72:e1:b0:01:42:37:44: 39:96:0f:00:5e:e3:72:fa:62:52:0b:6e:d9:8a:91: fb:c3:62:fa:b0:a5:92:81:c2:12:85:33:df:5a:86: 98:ad:4b:71:d4:bc:05:f2:a9:dc:94:b8:67:e2:2f: 8d:b1:f5:b0:be:88:7c:a2:ca:25:6a:00:51:9e:cd: c5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C3:56:16:BD:AA:9B:FB:EE:EA:98:84:7B:9F:AD:58:07:C1:E9:75 X509v3 Authority Key Identifier: keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a04f::/48 Signature Algorithm: sha256WithRSAEncryption 3e:b4:67:65:5d:6f:87:89:9d:dc:c6:f9:2a:33:64:d9:15:bb: bd:ee:20:6c:2d:f2:a9:0c:aa:26:0a:39:96:a3:f4:a4:26:45: 72:b2:a9:3a:10:f3:e7:03:04:bc:49:99:9b:ed:78:0c:19:47: c2:a1:18:ca:96:ff:f2:10:12:a9:3c:42:0d:15:83:6f:e4:5c: e6:66:9a:ef:45:46:e9:90:8f:f8:39:6d:d6:34:fd:84:6e:36: 2c:50:2b:bf:7a:a2:fb:a4:9e:5a:a1:39:38:6e:53:4d:85:20: 35:5c:e4:60:a5:2c:c8:8c:2e:7b:ea:9c:be:a7:cf:e0:b3:c3: 3f:ab:af:3a:c6:03:80:6d:37:ca:01:e1:da:75:d6:1d:e7:81: a9:c8:b8:7d:68:6c:1b:6d:a7:ec:ee:83:35:93:0d:fb:25:5b: af:46:4f:8a:54:97:51:ce:53:58:63:cb:92:1f:47:3b:4a:a3: 43:c6:8c:cb:ec:ac:30:c9:7b:e9:86:4d:42:82:e9:aa:3e:e0: ad:b7:31:78:07:8a:75:79:a9:6a:37:0c:6d:be:fd:00:ea:ec: f5:9d:b9:55:76:52:d6:f0:3a:b3:b0:b8:d6:db:96:c2:3a:17: af:1e:1a:f1:0d:31:ca:3c:82:e7:03:77:70:34:07:29:66:46: 07:67:c5:73 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUOlr0+fJ0SMuN1CVXcJKuuQe/sLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIy QTM2QzlDNDAeFw0yNTAzMjIyMTA2MTNaFw0yNjAzMjEyMTExMTNaMDMxMTAvBgNV BAMTKDAyQzM1NjE2QkRBQTlCRkJFRUVBOTg4NDdCOUZBRDU4MDdDMUU5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbb0/+mdqznITr1e6vTNUo17KQ dic/LDvahLU/E6JG078BieK1sqXkrF3hScf/hpYiTNWGJjC2ZaTegZZsg7+nO71W C05gCuUGdER23mlXgkeUkNZvhNNwjGk8w9o9eqL5lVs2vDmzInXe9aHCARY2Cts4 cDQPLqzKNF33J9mSfIhimNn3ElrJmkg3VECmDKrPRFbfJqa8a7aCax8A+vzPOuyh DrRqKpezO4kF9aaNRBubwVymrSDqTk6qcuGwAUI3RDmWDwBe43L6YlILbtmKkfvD YvqwpZKBwhKFM99ahpitS3HUvAXyqdyUuGfiL42x9bC+iHyiyiVqAFGezcVtAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUAsNWFr2qm/vu6piEe5+tWAfB6XUwHwYDVR0j BBgwFoAUuXWWqQ7OhNwRXeVT6Jipsio2ycQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzMvQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIyQTM2QzlDNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIyQTM2 QzlDNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzMvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMwMzQ2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMxMzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoJVMOgTzANBgkqhkiG9w0BAQsFAAOCAQEAPrRnZV1vh4md3Mb5 KjNk2RW7ve4gbC3yqQyqJgo5lqP0pCZFcrKpOhDz5wMEvEmZm+14DBlHwqEYypb/ 8hASqTxCDRWDb+Rc5maa70VG6ZCP+Dlt1jT9hG42LFArv3qi+6SeWqE5OG5TTYUg NVzkYKUsyIwue+qcvqfP4LPDP6uvOsYDgG03ygHh2nXWHeeBqci4fWhsG22n7O6D NZMN+yVbr0ZPilSXUc5TWGPLkh9HO0qjQ8aMy+ysMMl76YZNQoLpqj7grbcxeAeK dXmpajcMbb79AOrs9Z25VXZS1vA6s7C41tuWwjoXrx4a8Q0xyjyC5wN3cDQHKWZG B2fFcw== -----END CERTIFICATE-----Generated at Sun Apr 27 23:09:20 2025 by rpki-client