$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200360.roa File: AS200360.roa (raw, json) Hash identifier: uDEAn/L6lu26qgnzjKbO6RYaJCHAJ51D/gSQLQkSUp8= Subject key identifier: 8D:F3:D7:F2:E8:F5:29:E5:CB:E2:D8:E8:3D:8F:40:F3:0A:8C:7B:32 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3EDC2333FF853008F99C3A73BE8198F683230DFE Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200360.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 200360 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:dc:23:33:ff:85:30:08:f9:9c:3a:73:be:81:98:f6:83:23:0d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=8DF3D7F2E8F529E5CBE2D8E83D8F40F30A8C7B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:d2:4c:35:13:b1:83:f7:69:6b:ef:5e:a0: a3:97:6d:ed:6c:14:36:96:ff:f6:cb:cc:a1:a5:a0: ea:3e:d8:b9:d0:43:b4:04:db:a5:c8:77:05:d0:59: 06:2c:00:2f:e6:d1:84:33:dc:5d:ec:5e:be:2c:4e: eb:d8:72:9e:c3:2b:66:f7:55:b0:40:72:53:03:03: 8b:81:be:28:90:10:35:d5:ab:42:1e:ba:54:fb:6d: c4:97:ec:72:64:63:9b:1c:2f:e0:0b:78:c0:25:50: 5d:3a:3c:bd:49:d8:46:88:3e:a6:7a:e2:af:f7:fe: d9:46:c6:53:09:9d:25:7e:eb:3f:62:38:97:c8:ad: f9:1f:45:90:89:fc:1b:7a:44:46:d2:20:d3:0a:c6: cf:86:2f:db:5e:70:e9:ed:1e:a0:18:d3:6d:51:ee: 78:e5:24:b9:59:ce:5a:11:78:d0:27:a9:b5:48:27: df:99:2f:66:89:ab:e1:e4:2d:6d:55:17:e4:70:c5: 64:a3:2a:8b:1f:cf:42:02:10:86:f3:a4:69:e8:0a: d0:c0:69:75:27:63:d7:0b:b6:80:a4:f9:48:60:c4: a7:d2:b0:d3:5b:f0:ac:89:3d:89:28:26:54:90:12: c5:01:8c:aa:ec:27:0f:4d:53:67:c1:c2:95:0d:18: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:D7:F2:E8:F5:29:E5:CB:E2:D8:E8:3D:8F:40:F3:0A:8C:7B:32 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200360.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 36:48:7f:5a:2c:27:1e:74:89:d6:8c:8f:37:df:e2:25:e9:0b: 84:eb:63:7c:51:aa:2f:4b:f3:8a:9e:53:f0:cc:cf:1c:f5:b2: 33:b9:97:8d:af:7a:ae:96:24:02:59:51:b4:cd:2a:18:9c:59: 1a:a1:f6:ba:9e:a9:67:ef:fd:53:2f:1c:c1:c6:2d:a5:d9:09: 4b:df:fc:ea:92:19:15:a8:d1:23:72:c5:4d:50:69:6d:0e:08: bd:ba:07:ca:c2:77:d2:78:83:8f:01:5f:28:74:fe:8f:7c:af: 2e:db:df:f4:b3:9e:8c:3b:e8:44:2b:2f:73:3c:e6:47:17:13: 7b:6e:16:df:56:3f:83:15:04:f6:ef:88:36:75:22:87:c6:bc: 1c:8f:47:8a:57:9b:d1:52:c5:f5:2f:5a:8d:0d:e6:aa:b1:09: 76:07:b6:a4:13:b8:4f:66:f1:a6:a5:4b:88:bd:a1:e5:44:70: 52:c6:0b:9a:7d:fa:d6:32:9f:8d:f9:ac:5b:be:a0:44:39:c0: 02:6c:96:20:5a:4a:57:4d:00:cf:62:70:b8:b4:ed:8d:09:ce: 0b:d3:30:1f:6f:e2:b3:a0:1b:7a:95:a1:90:bc:6c:c7:b6:5d: 01:5f:eb:f8:aa:f6:01:1c:aa:d7:7a:ab:45:1b:ed:be:ff:06: 75:f4:97:c9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPtwjM/+FMAj5nDpzvoGY9oMjDf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDhERjNEN0YyRThGNTI5RTVDQkUyRDhFODNEOEY0MEYzMEE4QzdCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bNJMNROxg/dpa+9eoKOXbe1s FDaW//bLzKGloOo+2LnQQ7QE26XIdwXQWQYsAC/m0YQz3F3sXr4sTuvYcp7DK2b3 VbBAclMDA4uBviiQEDXVq0IeulT7bcSX7HJkY5scL+ALeMAlUF06PL1J2EaIPqZ6 4q/3/tlGxlMJnSV+6z9iOJfIrfkfRZCJ/Bt6REbSINMKxs+GL9tecOntHqAY021R 7njlJLlZzloReNAnqbVIJ9+ZL2aJq+HkLW1VF+RwxWSjKosfz0ICEIbzpGnoCtDA aXUnY9cLtoCk+UhgxKfSsNNb8KyJPYkoJlSQEsUBjKrsJw9NU2fBwpUNGHAFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUjfPX8uj1KeXL4tjoPY9A8wqMezIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwMzYwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQA2SH9aLCcedInWjI833+Il6QuE62N8Uaov S/OKnlPwzM8c9bIzuZeNr3quliQCWVG0zSoYnFkaofa6nqln7/1TLxzBxi2l2QlL 3/zqkhkVqNEjcsVNUGltDgi9ugfKwnfSeIOPAV8odP6PfK8u29/0s56MO+hEKy9z POZHFxN7bhbfVj+DFQT274g2dSKHxrwcj0eKV5vRUsX1L1qNDeaqsQl2B7akE7hP ZvGmpUuIvaHlRHBSxguaffrWMp+N+axbvqBEOcACbJYgWkpXTQDPYnC4tO2NCc4L 0zAfb+KzoBt6laGQvGzHtl0BX+v4qvYBHKrXeqtFG+2+/wZ19JfJ -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:15 2025 by rpki-client