$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204585.roa File: AS204585.roa (raw, json) Hash identifier: 4TRsdtlfLikfIc2tebY1RRIsoxHlF5DFYoHkIXSEoBU= Subject key identifier: 83:31:E3:C9:62:A5:62:21:02:D8:35:C3:4C:5B:68:9D:49:89:8C:C5 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 35F4789FA8A5FDB8DED4196C05958AF3EE35AADA Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204585.roa Signing time: Sun 08 Jun 2025 22:23:45 +0000 ROA not before: Sun 08 Jun 2025 22:18:45 +0000 ROA not after: Sun 07 Jun 2026 22:23:45 +0000 asID: 204585 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 2a07:54c7:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 20:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f4:78:9f:a8:a5:fd:b8:de:d4:19:6c:05:95:8a:f3:ee:35:aa:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Jun 8 22:18:45 2025 GMT Not After : Jun 7 22:23:45 2026 GMT Subject: CN=8331E3C962A5622102D835C34C5B689D49898CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:5a:81:67:d5:44:1e:f8:12:25:72:04:24: 7d:15:ee:fb:2f:74:73:fc:fc:3f:90:38:eb:15:5c: 42:8b:5b:4b:4d:4c:f5:28:aa:b2:3a:3c:57:5d:7a: 78:1c:38:ac:f6:63:fd:36:0b:a8:1e:18:a9:2b:fc: 57:23:59:ab:ec:71:8a:cb:32:f9:fd:f0:6b:22:7b: 09:42:9f:6d:9d:b4:37:ad:6f:e5:04:c5:40:85:57: 4a:0c:1e:65:f6:9f:75:3c:7e:b2:78:c9:1b:16:f0: 50:42:e6:72:8e:74:7a:19:1e:b7:52:e0:23:eb:e8: d7:f9:ab:91:cd:c7:a4:33:4c:f0:59:14:30:6b:f0: bc:b9:51:50:eb:fb:ac:29:47:09:f1:fb:8a:c2:81: 96:41:c4:bb:66:39:83:9a:ef:44:84:94:f0:15:c0: 9c:6b:aa:fe:8b:23:75:8b:cb:5e:f9:8e:f0:3c:1c: 6d:b9:17:5b:68:9c:ff:14:b7:f7:63:ac:3b:7c:e5: 0a:29:fe:d5:d2:a1:77:f3:30:7b:dc:5c:54:d8:8b: 79:97:93:41:ee:98:47:77:be:c3:78:f1:56:b8:38: ef:23:fa:5b:f6:46:37:f7:72:ab:bd:35:d9:b5:19: 79:3d:b0:81:a4:85:81:85:b6:73:3f:f4:aa:d0:a9: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:31:E3:C9:62:A5:62:21:02:D8:35:C3:4C:5B:68:9D:49:89:8C:C5 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 2a07:54c7:8000::/36 Signature Algorithm: sha256WithRSAEncryption a4:32:45:e1:82:f2:62:92:e5:37:df:b7:cd:8a:90:15:10:d4: 7d:1e:0e:64:d3:b9:eb:2c:17:a7:4f:e2:25:2a:0a:85:f4:6b: 8c:17:57:84:af:50:fd:2d:de:fd:62:6c:35:00:0b:7a:44:a3: 67:cc:25:0a:bb:5c:3e:ab:30:29:eb:70:4b:2b:51:d4:6a:62: 85:e6:e9:c2:9e:01:36:58:5e:c8:9e:19:1c:75:ae:0c:9f:77: 9f:63:02:1d:50:fa:f8:24:95:8b:48:34:f6:a7:42:99:dc:61: e0:c2:52:78:d1:14:e0:26:36:79:68:bf:e7:9d:bc:d9:da:b1: b1:0a:69:8b:3f:18:57:0e:62:c7:1d:a9:1b:7b:f2:f2:ee:00: 74:8e:45:81:01:15:b4:69:6d:b9:28:94:30:85:21:37:69:ad: 77:28:44:82:03:8f:50:6c:88:0c:a5:c9:c3:0b:cf:a4:4e:f7: d7:08:74:5f:45:8a:be:54:19:6d:24:93:c4:ea:77:c8:c0:83: 3a:78:89:1d:cd:fd:a3:18:56:c1:7a:89:3b:76:aa:20:65:f9: a7:ce:0f:1c:8e:f5:bd:4d:70:26:1c:75:66:a3:08:ea:e3:22: af:9d:2f:4e:6c:c9:a9:5f:80:13:3b:af:ea:95:d7:81:23:29: 23:fe:bb:f6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUNfR4n6il/bje1BlsBZWK8+41qtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTA2MDgyMjE4NDVaFw0yNjA2MDcyMjIzNDVaMDMxMTAvBgNV BAMTKDgzMzFFM0M5NjJBNTYyMjEwMkQ4MzVDMzRDNUI2ODlENDk4OThDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoFqBZ9VEHvgSJXIEJH0V7vsv dHP8/D+QOOsVXEKLW0tNTPUoqrI6PFddengcOKz2Y/02C6geGKkr/FcjWavscYrL Mvn98GsiewlCn22dtDetb+UExUCFV0oMHmX2n3U8frJ4yRsW8FBC5nKOdHoZHrdS 4CPr6Nf5q5HNx6QzTPBZFDBr8Ly5UVDr+6wpRwnx+4rCgZZBxLtmOYOa70SElPAV wJxrqv6LI3WLy175jvA8HG25F1tonP8Ut/djrDt85Qop/tXSoXfzMHvcXFTYi3mX k0HumEd3vsN48Va4OO8j+lv2Rjf3cqu9Ndm1GXk9sIGkhYGFtnM/9KrQqYoJAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUgzHjyWKlYiEC2DXDTFtonUmJjMUwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjA0NTg1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgdU wrALAwYEKgdUx4AwDQYJKoZIhvcNAQELBQADggEBAKQyReGC8mKS5Tfft82KkBUQ 1H0eDmTTuessF6dP4iUqCoX0a4wXV4SvUP0t3v1ibDUAC3pEo2fMJQq7XD6rMCnr cEsrUdRqYoXm6cKeATZYXsieGRx1rgyfd59jAh1Q+vgklYtINPanQpncYeDCUnjR FOAmNnlov+edvNnasbEKaYs/GFcOYscdqRt78vLuAHSORYEBFbRpbbkolDCFITdp rXcoRIIDj1BsiAylycMLz6RO99cIdF9Fir5UGW0kk8Tqd8jAgzp4iR3N/aMYVsF6 iTt2qiBl+afODxyO9b1NcCYcdWajCOrjIq+dL05syalfgBM7r+qV14EjKSP+u/Y= -----END CERTIFICATE-----Generated at Sun Jun 15 06:10:11 2025 by rpki-client