$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e203236303432.roa File: 323630323a663939323a39303a3a2f34342d3438203d3e203236303432.roa (raw, json) Hash identifier: MoXC/8DWDCDJNU7C3Mk26mgfoj92Dv/12Z/ZM6kBr4o= Subject key identifier: 6A:93:37:14:1D:74:59:6E:14:B1:6E:EE:33:23:7B:6F:B1:9E:E6:D3 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 0EAD5B37C15FB4DC03DD6D1DED2AED58CBD4748C Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e203236303432.roa Signing time: Mon 07 Apr 2025 15:06:39 +0000 ROA not before: Mon 07 Apr 2025 15:01:39 +0000 ROA not after: Mon 06 Apr 2026 15:06:39 +0000 asID: 26042 IP address blocks: 2602:f992:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ad:5b:37:c1:5f:b4:dc:03:dd:6d:1d:ed:2a:ed:58:cb:d4:74:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Apr 7 15:01:39 2025 GMT Not After : Apr 6 15:06:39 2026 GMT Subject: CN=6A9337141D74596E14B16EEE33237B6FB19EE6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:3d:ab:47:15:8a:30:92:5a:aa:db:44:33: 2f:0b:86:97:ec:64:94:09:a7:c3:79:c6:9d:2f:48: 1e:15:f9:44:88:ab:28:a4:a1:a0:bc:af:e1:3d:53: 45:ad:b8:01:b1:cf:b9:c4:23:56:d1:97:07:de:ac: 39:5d:33:88:89:5a:da:53:bd:35:5a:e2:11:fd:84: 50:73:e1:fc:2d:41:0c:39:38:05:8c:3d:e4:91:67: 29:a2:84:ce:f3:d4:3f:64:ac:fa:51:24:c7:7d:31: b0:35:08:71:17:00:29:1b:47:8a:35:ca:bf:6c:39: c6:30:68:cb:10:a4:9a:e0:38:46:04:3e:92:bf:17: cb:96:a1:55:4f:6d:12:a9:b0:d7:b0:11:3f:3a:86: ff:00:bd:13:de:97:1e:18:ca:b1:ec:f6:a8:75:60: a9:a9:b5:9b:4d:bc:b2:c6:09:52:bf:f8:02:ee:e6: b6:b4:cf:9d:65:95:78:60:0c:c3:ee:66:bd:87:6c: 08:03:fd:9f:2f:f6:8d:6a:a6:e8:7e:fc:e6:a5:2e: 63:1b:5d:76:42:b1:e6:78:1f:ce:ad:11:84:b5:14: 45:b0:0f:c7:9b:0c:53:2a:c0:38:4e:06:bb:53:eb: 91:81:46:99:45:3a:ff:17:dc:92:62:56:a8:12:c1: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:93:37:14:1D:74:59:6E:14:B1:6E:EE:33:23:7B:6F:B1:9E:E6:D3 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e203236303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:90::/44 Signature Algorithm: sha256WithRSAEncryption 48:ef:f9:6b:51:42:c3:02:3c:b9:44:9e:0f:8b:10:dd:2c:e6: 21:8a:52:7c:ec:c0:46:db:b6:4f:6a:cf:1d:ae:11:da:a2:90: af:44:ad:82:ce:4b:c2:a1:9b:f2:57:2a:4e:0b:89:f1:09:75: 96:4b:4d:0f:4c:38:77:42:d4:dc:24:b1:61:b7:53:7f:40:ac: 7a:74:57:77:3a:dc:e0:75:1f:a6:e1:eb:fd:5f:40:a5:b5:75: 29:f3:a1:a7:85:ad:61:69:1d:83:fe:7d:d7:fc:20:66:2a:38: 9b:3d:00:50:cc:4c:f0:81:58:b3:04:a8:e3:ec:a1:30:04:0c: 5e:5f:64:27:cd:1c:75:2c:cb:c4:c9:aa:ad:ec:a2:fd:dd:87: 4f:8f:02:ef:63:72:37:a7:57:35:04:40:cd:03:8a:2c:4b:80: 70:2a:92:2f:08:08:ef:e2:f6:0a:09:b1:06:42:b7:2e:13:48: ba:61:93:c1:c6:00:38:a5:03:3c:65:37:59:87:53:7e:1b:6e: a1:76:4c:fc:ad:84:b7:f3:85:4d:d6:c4:30:73:98:41:3c:3e: 1b:81:9e:df:d1:0c:d2:a3:06:86:42:91:36:1f:61:2b:02:73: da:17:68:08:c0:cf:be:31:5c:cb:97:54:b8:89:1f:27:38:b4: 61:69:e1:1b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUDq1bN8FftNwD3W0d7SrtWMvUdIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNDA3MTUwMTM5WhcNMjYwNDA2MTUwNjM5 WjAzMTEwLwYDVQQDEyg2QTkzMzcxNDFENzQ1OTZFMTRCMTZFRUUzMzIzN0I2RkIx OUVFNkQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTg9q0cVijCS WqrbRDMvC4aX7GSUCafDecadL0geFflEiKsopKGgvK/hPVNFrbgBsc+5xCNW0ZcH 3qw5XTOIiVraU701WuIR/YRQc+H8LUEMOTgFjD3kkWcpooTO89Q/ZKz6USTHfTGw NQhxFwApG0eKNcq/bDnGMGjLEKSa4DhGBD6SvxfLlqFVT20SqbDXsBE/Oob/AL0T 3pceGMqx7PaodWCpqbWbTbyyxglSv/gC7ua2tM+dZZV4YAzD7ma9h2wIA/2fL/aN aqbofvzmpS5jG112QrHmeB/OrRGEtRRFsA/HmwxTKsA4Tga7U+uRgUaZRTr/F9yS YlaoEsEI2wIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFGqTNxQddFluFLFu7jMje2+x nubTMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhMzkzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzYzMDM0 MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQmAvmSAJAwDQYJKoZIhvcNAQELBQADggEBAEjv+WtRQsMC PLlEng+LEN0s5iGKUnzswEbbtk9qzx2uEdqikK9ErYLOS8Khm/JXKk4LifEJdZZL TQ9MOHdC1NwksWG3U39ArHp0V3c63OB1H6bh6/1fQKW1dSnzoaeFrWFpHYP+fdf8 IGYqOJs9AFDMTPCBWLMEqOPsoTAEDF5fZCfNHHUsy8TJqq3sov3dh0+PAu9jcjen VzUEQM0DiixLgHAqki8ICO/i9goJsQZCty4TSLphk8HGADilAzxlN1mHU34bbqF2 TPythLfzhU3WxDBzmEE8PhuBnt/RDNKjBoZCkTYfYSsCc9oXaAjAz74xXMuXVLiJ Hyc4tGFp4Rs= -----END CERTIFICATE-----Generated at Sun Apr 27 12:16:29 2025 by rpki-client