$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa File: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (raw, json) Hash identifier: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM= Subject key identifier: F5:1D:91:00:40:AE:12:6F:65:90:AF:EB:43:47:48:6A:A0:C7:26:89 Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 7A5F427E13A4A05C3E2F010636DD430CF5BCE22D Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa Signing time: Fri 17 Jan 2025 20:03:30 +0000 ROA not before: Fri 17 Jan 2025 19:58:30 +0000 ROA not after: Fri 16 Jan 2026 20:03:30 +0000 asID: 46766 IP address blocks: 2602:f9a2:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5f:42:7e:13:a4:a0:5c:3e:2f:01:06:36:dd:43:0c:f5:bc:e2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Jan 17 19:58:30 2025 GMT Not After : Jan 16 20:03:30 2026 GMT Subject: CN=F51D910040AE126F6590AFEB4347486AA0C72689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:51:58:09:7b:86:67:7a:d8:6d:d0:d5:0b: 75:e5:7e:4b:1a:66:fd:8a:1b:16:23:a3:2f:31:fa: 99:75:62:e6:f5:5b:8b:36:db:dc:77:0d:eb:ff:98: ea:4e:a3:33:68:45:7d:14:6d:32:eb:e5:2f:ee:b0: 6c:5b:ea:f5:c0:19:46:9c:61:24:20:4b:19:20:c0: 82:b0:b3:9a:ec:3b:b9:3c:ba:69:14:24:4c:85:cb: 82:f2:df:43:8d:f5:d3:45:3c:66:64:fd:1e:43:9b: 44:68:89:14:d5:63:d3:02:a3:83:13:e3:0e:c5:98: 46:e3:0e:f3:b7:e1:3d:e3:58:14:5f:4c:75:f3:f5: 88:67:23:dc:bd:59:9f:83:62:48:74:95:65:4d:eb: 11:64:5a:5a:7c:7a:6d:6f:61:8e:d8:70:ff:65:5e: 93:39:5d:9f:05:17:cb:55:2d:86:e4:02:9d:22:95: cc:b3:fe:93:51:ac:cd:f3:b1:6e:3d:16:3a:3e:dc: e3:50:66:e8:30:f6:e4:90:ef:63:9b:2a:0f:e6:a0: 46:9e:46:6a:b9:9b:d2:df:e7:09:b9:49:5b:fe:a2: cb:24:9b:3c:b0:06:71:20:47:05:79:e4:26:7a:19: 8d:ee:ad:2b:df:5a:f0:76:86:92:2e:ab:d2:be:31: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1D:91:00:40:AE:12:6F:65:90:AF:EB:43:47:48:6A:A0:C7:26:89 X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f9a2:10::/48 Signature Algorithm: sha256WithRSAEncryption 94:62:84:03:f2:b6:32:92:fd:04:c0:3d:8a:33:21:e0:d5:ac: 11:17:94:a6:49:1e:03:df:fb:56:16:5a:51:ce:06:59:47:f1: a4:e4:15:ba:14:be:04:40:c7:b8:29:80:08:bb:1c:ca:8c:3b: b3:c3:30:c2:cd:bb:dd:6b:bf:96:78:73:7f:c6:56:6f:4c:f5: 55:4b:e1:97:d4:c4:99:7f:f3:f4:fa:30:8b:09:85:c0:90:24: 7e:2b:19:74:25:52:4d:6d:83:c1:04:f3:ae:23:33:3a:8b:b2: ec:70:65:8f:12:86:0f:12:9b:09:6c:8c:d2:45:20:24:f8:6c: 98:1b:40:5c:f9:a5:01:eb:f3:9c:91:35:06:35:af:2c:19:de: 93:a9:f1:b7:29:13:91:8a:97:54:49:77:5c:1b:dd:ef:3a:20: 29:e0:7f:ae:b5:7a:51:19:1a:c7:78:c5:a1:ef:d4:02:08:66: ef:c2:d0:ac:47:7c:84:af:07:c7:1c:7f:ae:30:bd:3c:ca:99: f0:f5:2f:9f:b9:0b:8c:00:e3:61:21:76:5c:df:a5:26:33:4f: b9:10:fe:6a:98:a4:e7:e2:6a:8e:f6:d0:36:36:62:e9:04:de: 49:91:b5:59:d7:cb:89:60:54:e5:83:35:bc:5a:99:fe:b6:8e: 1a:99:7b:ee -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUel9CfhOkoFw+LwEGNt1DDPW84i0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUwMTE3MTk1ODMwWhcNMjYwMTE2MjAwMzMw WjAzMTEwLwYDVQQDEyhGNTFEOTEwMDQwQUUxMjZGNjU5MEFGRUI0MzQ3NDg2QUEw QzcyNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9hRWAl7hmd6 2G3Q1Qt15X5LGmb9ihsWI6MvMfqZdWLm9VuLNtvcdw3r/5jqTqMzaEV9FG0y6+Uv 7rBsW+r1wBlGnGEkIEsZIMCCsLOa7Du5PLppFCRMhcuC8t9DjfXTRTxmZP0eQ5tE aIkU1WPTAqODE+MOxZhG4w7zt+E941gUX0x18/WIZyPcvVmfg2JIdJVlTesRZFpa fHptb2GO2HD/ZV6TOV2fBRfLVS2G5AKdIpXMs/6TUazN87FuPRY6PtzjUGboMPbk kO9jmyoP5qBGnkZquZvS3+cJuUlb/qLLJJs8sAZxIEcFeeQmehmN7q0r31rwdoaS LqvSvjGWcwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFPUdkQBArhJvZZCv60NHSGqg xyaJMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC82LzMyMzYzMDMy M2E2NjM5NjEzMjNhMzEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzNzM2 MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAmAvmiABAwDQYJKoZIhvcNAQELBQADggEBAJRihAPytjKS /QTAPYozIeDVrBEXlKZJHgPf+1YWWlHOBllH8aTkFboUvgRAx7gpgAi7HMqMO7PD MMLNu91rv5Z4c3/GVm9M9VVL4ZfUxJl/8/T6MIsJhcCQJH4rGXQlUk1tg8EE864j MzqLsuxwZY8Shg8SmwlsjNJFICT4bJgbQFz5pQHr85yRNQY1rywZ3pOp8bcpE5GK l1RJd1wb3e86ICngf661elEZGsd4xaHv1AIIZu/C0KxHfISvB8ccf64wvTzKmfD1 L5+5C4wA42EhdlzfpSYzT7kQ/mqYpOfiao720DY2YukE3kmRtVnXy4lgVOWDNbxa mf62jhqZe+4= -----END CERTIFICATE-----Generated at Wed Apr 30 03:37:23 2025 by rpki-client