$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa File: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (raw, json) Hash identifier: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU= Subject key identifier: E0:67:73:B4:08:7E:A1:D7:B5:D3:72:57:02:06:FD:ED:03:BB:C7:78 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 204C0941112009579B2904970FBE214D633BFC3B Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa Signing time: Fri 04 Apr 2025 05:59:57 +0000 ROA not before: Fri 04 Apr 2025 05:54:57 +0000 ROA not after: Fri 03 Apr 2026 05:59:57 +0000 asID: 40676 IP address blocks: 2602:f992:fa::/48 maxlen: 49 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 13:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4c:09:41:11:20:09:57:9b:29:04:97:0f:be:21:4d:63:3b:fc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Apr 4 05:54:57 2025 GMT Not After : Apr 3 05:59:57 2026 GMT Subject: CN=E06773B4087EA1D7B5D372570206FDED03BBC778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:c6:74:ba:5f:c0:70:da:6f:97:a4:29:98: 93:b3:d1:b1:32:52:8a:9f:30:7d:e3:84:ac:82:79: 8c:05:61:43:d5:70:8a:46:0a:6a:36:9e:b2:5d:16: f5:ac:03:bd:9e:be:8a:e8:b4:fd:9f:28:d3:3d:de: a2:ca:b8:19:e6:77:d8:36:4d:63:da:52:2f:83:03: 01:22:08:95:34:86:91:c1:f6:fa:49:52:b5:eb:5c: 88:51:95:35:61:17:44:91:b0:88:d5:c8:23:f7:c6: c6:22:cc:b0:51:fb:b2:cc:6d:f2:fd:f3:cb:f2:c4: 65:75:07:f6:61:ff:65:b3:98:f3:a8:68:3c:72:fc: d4:7d:98:fb:17:ef:5b:75:34:db:4a:ae:6c:99:3d: ad:35:50:60:ce:8c:d3:74:6f:d8:ed:b1:3b:55:06: 2e:39:88:3d:a1:61:2e:bf:c7:c3:4d:6e:da:b4:7d: 83:33:24:13:21:4e:e0:86:81:31:b6:c4:65:c4:48: 69:e4:95:cd:8c:71:5d:15:16:79:95:af:ab:bf:e6: e0:96:0e:82:7f:58:b7:2d:cf:02:33:44:a2:f6:8a: a3:07:6d:55:17:92:a5:87:82:51:37:ae:f9:d3:41: 4a:31:f9:bd:da:81:f1:a0:bc:28:f6:4f:bc:32:f2: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:67:73:B4:08:7E:A1:D7:B5:D3:72:57:02:06:FD:ED:03:BB:C7:78 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:fa::/48 Signature Algorithm: sha256WithRSAEncryption 20:a1:e6:40:f7:dc:67:a3:86:6e:23:76:64:51:b8:6d:0b:3e: 4c:0e:23:7d:f4:54:f1:8c:b9:b6:19:69:69:68:9d:87:3e:14: 04:44:51:96:c5:30:35:66:be:3c:d0:57:e7:78:a9:71:b8:ed: 9f:35:6f:7e:9d:38:b8:33:4d:04:fc:3b:56:60:c8:2a:26:81: 50:2f:f0:02:7e:94:7d:68:75:c1:f9:dd:c9:90:e7:de:8f:9d: 61:1c:c2:45:a5:a7:2c:de:23:15:61:d8:63:66:e8:58:93:9a: aa:8c:fd:b2:0a:65:cd:c4:06:9d:3d:e4:91:d0:dc:fc:c4:54: 88:f7:93:3b:58:e2:7b:03:5e:a8:f4:c6:7b:94:b9:45:4e:15: 5c:fc:36:08:f0:85:a3:4a:3c:5a:a7:9c:d0:14:33:62:91:d1: 25:21:c2:ed:11:80:50:e0:67:9f:5a:d1:e1:41:d5:d9:82:39: 8e:34:39:16:19:c4:02:33:1a:65:8f:af:cb:c8:78:dd:78:7f: 28:1c:3b:8d:9b:16:c0:a5:ad:a8:47:42:b5:9e:e4:a2:9a:ca: 1c:ac:9f:2a:15:93:87:47:7e:47:c4:a1:82:85:01:aa:b9:0a: d9:a2:c3:a0:62:1c:17:3b:ed:37:0f:4a:40:54:57:b1:40:4e: d1:61:d7:f3 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUIEwJQREgCVebKQSXD74hTWM7/DswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNDA0MDU1NDU3WhcNMjYwNDAzMDU1OTU3 WjAzMTEwLwYDVQQDEyhFMDY3NzNCNDA4N0VBMUQ3QjVEMzcyNTcwMjA2RkRFRDAz QkJDNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym/GdLpfwHDa b5ekKZiTs9GxMlKKnzB944SsgnmMBWFD1XCKRgpqNp6yXRb1rAO9nr6K6LT9nyjT Pd6iyrgZ5nfYNk1j2lIvgwMBIgiVNIaRwfb6SVK161yIUZU1YRdEkbCI1cgj98bG IsywUfuyzG3y/fPL8sRldQf2Yf9ls5jzqGg8cvzUfZj7F+9bdTTbSq5smT2tNVBg zozTdG/Y7bE7VQYuOYg9oWEuv8fDTW7atH2DMyQTIU7ghoExtsRlxEhp5JXNjHFd FRZ5la+rv+bglg6Cf1i3Lc8CM0Si9oqjB21VF5Klh4JRN67500FKMfm92oHxoLwo 9k+8MvJxeQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFOBnc7QIfqHXtdNyVwIG/e0D u8d4MB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjY2MTNhM2EyZjM0MzgyZDM0MzkyMDNkM2UyMDM0MzAzNjM3 MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAmAvmSAPowDQYJKoZIhvcNAQELBQADggEBACCh5kD33Gej hm4jdmRRuG0LPkwOI330VPGMubYZaWlonYc+FAREUZbFMDVmvjzQV+d4qXG47Z81 b36dOLgzTQT8O1ZgyComgVAv8AJ+lH1odcH53cmQ596PnWEcwkWlpyzeIxVh2GNm 6FiTmqqM/bIKZc3EBp095JHQ3PzEVIj3kztY4nsDXqj0xnuUuUVOFVz8NgjwhaNK PFqnnNAUM2KR0SUhwu0RgFDgZ59a0eFB1dmCOY40ORYZxAIzGmWPr8vIeN14fygc O42bFsClrahHQrWe5KKayhysnyoVk4dHfkfEoYKFAaq5Ctmiw6BiHBc77TcPSkBU V7FATtFh1/M= -----END CERTIFICATE-----Generated at Sat Apr 26 17:39:20 2025 by rpki-client