$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS41666.roa File: AS41666.roa (raw, json) Hash identifier: KvHgnBWGAVEVMOEQz/Zpn7SwCwNCGoZaAA+ePlP/B98= Subject key identifier: 2A:36:FC:63:5A:78:99:D1:76:15:59:3F:E8:3D:EB:C8:A0:4B:80:D4 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3550F2EF5CF7D175294C5A400425551760AD638F Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS41666.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 41666 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:50:f2:ef:5c:f7:d1:75:29:4c:5a:40:04:25:55:17:60:ad:63:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=2A36FC635A7899D17615593FE83DEBC8A04B80D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:fa:3f:8c:05:65:8b:cf:d4:fc:a5:24:cc: a4:1b:14:88:67:cb:69:ec:ce:2f:e1:d1:b2:d0:2a: f8:66:f0:df:a1:1d:4b:71:e5:37:60:05:b2:b3:97: 34:e5:3b:00:c0:58:3c:e3:f1:b6:fa:9c:fd:71:ac: 16:67:fe:80:c5:53:b3:47:96:8d:7f:19:fe:ce:c1: fe:fa:f5:5a:c8:cf:54:14:4d:27:f9:89:a8:10:94: 01:1c:90:ef:24:75:7c:a4:c0:eb:0f:3a:21:42:9e: 53:50:05:0e:33:97:42:53:8b:b3:09:e2:b5:10:7a: 71:c5:fc:cd:b5:d6:4f:52:2a:d7:94:a2:e0:3d:36: 09:07:48:ed:43:aa:74:7e:1f:b0:8d:83:eb:08:fc: a0:a8:be:c9:04:8e:ce:25:75:ac:b4:18:53:be:43: c6:63:93:b5:71:4e:8b:fe:30:15:7c:29:f0:3a:56: 28:4e:3c:64:fa:85:85:a6:1d:9a:b3:d7:dd:ee:7e: cb:ed:13:ef:52:0b:b1:74:39:04:74:2b:f1:48:4e: d6:38:e0:6d:63:49:12:2b:4e:0a:4a:95:60:9a:18: f9:73:5b:60:b9:e1:82:1e:ba:71:1f:15:92:3e:ce: 40:5d:0e:1f:51:3d:39:9e:d5:9f:ea:0d:29:3e:90: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:FC:63:5A:78:99:D1:76:15:59:3F:E8:3D:EB:C8:A0:4B:80:D4 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS41666.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a4:04:f6:c7:25:93:a4:24:54:40:db:e9:51:38:61:08:51:2d: 6a:2c:5b:b7:e1:33:a4:85:4c:39:d8:58:59:60:ec:b2:c6:a6: 5f:d1:e0:8e:e1:93:52:ea:72:79:0f:6f:dc:53:d0:4b:aa:30: 76:a3:e3:c2:ff:18:f1:3d:61:09:c5:7d:5e:e7:09:35:55:13: c0:da:da:45:df:a2:6b:a5:63:bb:a1:26:6b:e8:c1:e5:54:eb: 57:e2:41:5c:1d:1e:b3:38:48:05:89:8d:d1:d8:48:7b:1b:13: 3a:6f:16:71:20:6b:e6:81:91:72:1e:99:53:e9:59:fc:1f:63: fe:a6:7a:ca:87:78:03:f4:a7:b7:ec:dd:1d:84:c4:87:ff:91: c7:b2:ae:e8:4d:7c:5e:6f:29:41:f0:c4:3a:94:b2:42:23:9a: b6:dd:6f:9e:eb:b9:f5:f2:29:af:5f:e8:f7:35:2f:6e:03:1a: b0:23:ac:22:6f:c7:76:22:c4:ba:08:8d:ba:11:f4:42:fe:db: fc:f0:78:8a:81:26:f6:91:fc:12:3f:5f:44:21:db:98:db:16: f3:64:d0:8e:88:b1:40:98:8c:03:66:db:be:00:6b:2f:64:6a: f4:61:4f:0a:cc:e7:9e:3a:9e:3a:5d:9a:d3:e5:70:cd:27:db: f3:6f:b4:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVDy71z30XUpTFpABCVVF2CtY48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDJBMzZGQzYzNUE3ODk5RDE3NjE1NTkzRkU4M0RFQkM4QTA0QjgwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmdfo/jAVli8/U/KUkzKQbFIhn y2nszi/h0bLQKvhm8N+hHUtx5TdgBbKzlzTlOwDAWDzj8bb6nP1xrBZn/oDFU7NH lo1/Gf7Owf769VrIz1QUTSf5iagQlAEckO8kdXykwOsPOiFCnlNQBQ4zl0JTi7MJ 4rUQenHF/M211k9SKteUouA9NgkHSO1DqnR+H7CNg+sI/KCovskEjs4lday0GFO+ Q8Zjk7VxTov+MBV8KfA6VihOPGT6hYWmHZqz193ufsvtE+9SC7F0OQR0K/FITtY4 4G1jSRIrTgpKlWCaGPlzW2C54YIeunEfFZI+zkBdDh9RPTme1Z/qDSk+kA1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjb8Y1p4mdF2FVk/6D3ryKBLgNQwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDE2NjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC sAswDQYJKoZIhvcNAQELBQADggEBAKQE9sclk6QkVEDb6VE4YQhRLWosW7fhM6SF TDnYWFlg7LLGpl/R4I7hk1LqcnkPb9xT0EuqMHaj48L/GPE9YQnFfV7nCTVVE8Da 2kXfomulY7uhJmvoweVU61fiQVwdHrM4SAWJjdHYSHsbEzpvFnEga+aBkXIemVPp WfwfY/6mesqHeAP0p7fs3R2ExIf/kceyruhNfF5vKUHwxDqUskIjmrbdb57rufXy Ka9f6Pc1L24DGrAjrCJvx3YixLoIjboR9EL+2/zweIqBJvaR/BI/X0Qh25jbFvNk 0I6IsUCYjANm274Aay9kavRhTwrM5546njpdmtPlcM0n2/NvtHs= -----END CERTIFICATE-----Generated at Tue Nov 4 22:56:25 2025 by rpki-client