$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200360.roa File: AS200360.roa (raw, json) Hash identifier: ckCyFwS+NopeR5C4eHFTeOBtliK+o9rJf8z4g11pQ5o= Subject key identifier: 37:77:7C:B1:B3:3A:A8:9D:E2:55:8D:61:02:A9:93:44:B1:B6:E0:AD Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 483D6B5D85A03C70E1E680100AF160AA2290B352 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200360.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 200360 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3d:6b:5d:85:a0:3c:70:e1:e6:80:10:0a:f1:60:aa:22:90:b3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=37777CB1B33AA89DE2558D6102A99344B1B6E0AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:06:bc:88:c6:cc:10:35:35:88:e6:26:61: 1a:2b:dc:d5:a4:b2:98:c6:2a:ff:54:33:f9:68:82: 0e:23:fc:7e:e1:a5:ae:59:e8:0c:bb:6b:5b:c8:4c: 8e:df:f9:5d:e8:23:a1:58:37:10:39:0c:15:f0:93: 52:03:99:82:85:01:d1:02:e9:ae:31:5a:6c:56:ad: 4a:6c:4d:2e:b9:a2:7d:d8:ee:22:9f:9a:96:f9:a6: d9:7b:ff:18:23:67:56:cf:67:c0:82:f3:4e:83:f4: 11:5f:9e:fc:6a:eb:c8:fd:80:6b:06:74:04:e0:1d: 17:f8:c4:04:6a:f4:fa:23:12:12:0e:b7:ff:f2:9e: 99:c0:47:73:ec:18:3d:eb:6f:ca:a1:31:35:34:e7: f7:f0:98:b2:93:79:46:76:39:43:da:72:2c:46:95: 24:d6:4e:84:8f:e0:7d:97:26:11:08:a1:9a:f5:c4: b5:d5:7b:6e:d9:14:c1:57:c2:91:c9:48:e6:2c:f7: 55:69:25:79:93:53:56:b3:dd:48:48:74:84:eb:fd: 8a:14:34:c9:69:a7:35:a7:f5:63:bc:86:25:e0:75: 64:e1:0b:98:37:d7:8f:21:e9:57:5b:5b:ef:c5:5c: 4d:ff:14:dd:41:84:7a:f4:87:8d:90:5e:3c:e9:8c: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:77:7C:B1:B3:3A:A8:9D:E2:55:8D:61:02:A9:93:44:B1:B6:E0:AD X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200360.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption bc:b2:9f:8d:01:7d:ae:ab:f3:00:0c:0a:ab:7e:c4:a8:ca:53: b4:0a:aa:64:fd:35:fd:fd:0e:74:45:0f:8f:68:e4:c7:5a:f4: 4b:19:ea:4b:3e:52:97:1c:62:d6:e4:23:1a:3e:8b:ee:25:00: 38:06:ef:d2:6a:7d:73:65:a1:15:7f:bb:42:e6:a6:1a:2e:19: 2d:76:e2:ca:b3:23:6b:1c:1f:9e:bd:18:6d:c1:93:4d:a7:25: bd:d5:0e:81:22:d7:12:48:a2:6d:75:4d:0d:7d:91:e7:22:ee: 20:65:b0:45:f5:f4:16:c7:5c:cf:72:14:bc:7b:5d:45:e4:f7: 82:92:31:1c:8d:af:6e:c7:73:86:ec:12:51:35:4f:8d:b0:ef: f3:a3:87:dc:33:72:9e:04:34:70:02:4a:f2:22:24:b6:82:9e: 62:23:28:75:02:02:e7:69:72:d0:38:17:9d:0f:b4:66:f5:69: 7e:a8:3b:2b:19:60:c3:98:4a:df:42:06:53:5c:89:a9:5e:ad: 2b:cc:5d:00:a6:5f:df:9c:71:02:47:b7:f7:0e:0d:dc:a2:6d: 2b:76:a0:65:32:fb:b1:97:e1:e0:1d:02:2d:66:53:78:20:91: cf:dc:83:95:04:93:c4:15:cf:5e:e4:31:97:60:58:3b:0b:ed: 32:97:1d:86 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSD1rXYWgPHDh5oAQCvFgqiKQs1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDM3Nzc3Q0IxQjMzQUE4OURFMjU1OEQ2MTAyQTk5MzQ0QjFCNkUwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Aga8iMbMEDU1iOYmYRor3NWk spjGKv9UM/logg4j/H7hpa5Z6Ay7a1vITI7f+V3oI6FYNxA5DBXwk1IDmYKFAdEC 6a4xWmxWrUpsTS65on3Y7iKfmpb5ptl7/xgjZ1bPZ8CC806D9BFfnvxq68j9gGsG dATgHRf4xARq9PojEhIOt//ynpnAR3PsGD3rb8qhMTU05/fwmLKTeUZ2OUPacixG lSTWToSP4H2XJhEIoZr1xLXVe27ZFMFXwpHJSOYs91VpJXmTU1az3UhIdITr/YoU NMlppzWn9WO8hiXgdWThC5g3148h6VdbW+/FXE3/FN1BhHr0h42QXjzpjLxxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUN3d8sbM6qJ3iVY1hAqmTRLG24K0wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwMzYwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQC8sp+NAX2uq/MADAqrfsSoylO0Cqpk/TX9 /Q50RQ+PaOTHWvRLGepLPlKXHGLW5CMaPovuJQA4Bu/San1zZaEVf7tC5qYaLhkt duLKsyNrHB+evRhtwZNNpyW91Q6BItcSSKJtdU0NfZHnIu4gZbBF9fQWx1zPchS8 e11F5PeCkjEcja9ux3OG7BJRNU+NsO/zo4fcM3KeBDRwAkryIiS2gp5iIyh1AgLn aXLQOBedD7Rm9Wl+qDsrGWDDmErfQgZTXImpXq0rzF0Apl/fnHECR7f3Dg3com0r dqBlMvuxl+HgHQItZlN4IJHP3IOVBJPEFc9e5DGXYFg7C+0ylx2G -----END CERTIFICATE-----Generated at Sat Jun 13 11:33:39 2026 by rpki-client