$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa File: 323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa (raw, json) Hash identifier: ZWuFRtGD+zXxvISsfpQpZ5DPH36K8mlved5taA1ZgyI= Subject key identifier: B6:A9:11:9F:FD:9E:61:40:26:79:74:6B:E5:F9:8A:30:9C:5C:B0:C1 Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Certificate serial: 490FEAFCFEEC0F9578AD36680C78E951473F8F20 Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa Signing time: Fri 07 Feb 2025 11:41:49 +0000 ROA not before: Fri 07 Feb 2025 11:36:49 +0000 ROA not after: Fri 06 Feb 2026 11:41:49 +0000 asID: 47272 IP address blocks: 2602:f96d:980::/42 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0f:ea:fc:fe:ec:0f:95:78:ad:36:68:0c:78:e9:51:47:3f:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Validity Not Before: Feb 7 11:36:49 2025 GMT Not After : Feb 6 11:41:49 2026 GMT Subject: CN=B6A9119FFD9E61402679746BE5F98A309C5CB0C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:5e:00:b9:0c:81:a9:77:cd:b4:a4:52:06: 08:2e:45:c4:c3:e1:78:0b:8e:53:e8:ca:d0:60:f8: 9a:d5:db:b5:29:28:5f:f2:6d:d1:7e:89:e8:f8:7f: cf:88:5c:35:79:ba:38:60:62:3f:b1:33:d9:68:3b: 5f:d4:07:ca:1f:02:dc:c5:a6:5f:40:8a:a9:cf:3e: 7f:61:90:bd:dd:90:a9:d5:ad:97:4f:74:91:e9:44: 9f:db:3d:5b:2e:a9:15:ef:4d:3d:b6:f8:31:65:b8: 34:06:21:30:2f:02:9d:e4:54:ad:c3:9d:67:fb:fd: 02:33:c0:d9:22:2b:9f:b7:e6:47:ee:1a:93:38:f6: 94:5b:f5:9c:6f:d0:ae:95:66:52:3d:a3:d3:39:76: 34:1c:e2:de:08:07:c5:b3:e1:15:17:68:67:de:13: 83:48:4a:f0:18:a3:bd:45:f0:cc:ca:73:7f:9a:e8: e7:66:e8:72:02:3f:b4:34:0d:57:92:9a:6c:c8:04: fd:77:25:a0:16:b3:38:ac:e0:49:8d:82:e9:05:66: a6:28:2b:6e:06:b5:e1:3e:29:b1:2a:f4:c6:e6:6a: 9f:2c:29:40:dc:12:85:e3:de:29:d1:31:b9:8b:38: ba:e4:9d:a7:78:60:45:d1:ee:e3:69:a9:44:4b:f2: 3f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A9:11:9F:FD:9E:61:40:26:79:74:6B:E5:F9:8A:30:9C:5C:B0:C1 X509v3 Authority Key Identifier: keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f96d:980::/42 Signature Algorithm: sha256WithRSAEncryption 89:f5:6d:78:2f:95:d2:a7:ed:a9:05:d6:a7:3c:d9:9f:0b:77: 59:af:24:a9:69:ca:ca:a2:de:30:74:16:c9:cf:3c:70:24:fe: 46:21:73:f3:02:11:32:7b:15:6f:a8:cc:db:f6:c4:7d:ab:b5: 33:3f:17:20:b4:34:ba:7f:27:b1:a1:fd:f9:f4:45:db:fc:fb: d5:ee:c6:c4:d6:6d:56:8c:e8:ac:b6:c1:2e:1d:ee:33:fb:e5: 62:94:17:c2:e6:81:0a:78:18:88:74:29:5d:84:63:69:d2:86: 74:39:1b:9d:5d:cc:0e:01:cc:a1:22:a8:56:66:9b:59:13:e8: fe:ea:f3:09:51:82:90:31:0b:13:36:80:36:cb:e8:77:34:3c: 67:16:02:d5:84:6a:17:42:09:b8:d8:fe:7d:c5:04:f3:15:a2: 31:77:b1:6d:41:d1:d3:c9:f6:99:14:f8:f1:6a:ff:53:57:99: b4:97:5f:2a:11:ae:9b:e2:79:35:3f:0a:08:7e:91:d8:e7:d9: 83:66:57:f9:7c:02:10:55:b5:82:7d:3e:24:69:04:a1:d3:54: 96:3b:6b:69:fb:e0:fb:69:bd:99:34:c8:e1:e4:fa:15:b2:17: 70:34:da:99:75:e6:3c:f5:63:bf:40:ae:ba:20:49:a5:61:29: c1:36:0f:12 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUSQ/q/P7sD5V4rTZoDHjpUUc/jyAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1 NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwMjA3MTEzNjQ5WhcNMjYwMjA2MTE0MTQ5 WjAzMTEwLwYDVQQDEyhCNkE5MTE5RkZEOUU2MTQwMjY3OTc0NkJFNUY5OEEzMDlD NUNCMEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs1eALkMgal3 zbSkUgYILkXEw+F4C45T6MrQYPia1du1KShf8m3Rfono+H/PiFw1ebo4YGI/sTPZ aDtf1AfKHwLcxaZfQIqpzz5/YZC93ZCp1a2XT3SR6USf2z1bLqkV7009tvgxZbg0 BiEwLwKd5FStw51n+/0CM8DZIiuft+ZH7hqTOPaUW/Wcb9CulWZSPaPTOXY0HOLe CAfFs+EVF2hn3hODSErwGKO9RfDMynN/mujnZuhyAj+0NA1XkppsyAT9dyWgFrM4 rOBJjYLpBWamKCtuBrXhPimxKvTG5mqfLClA3BKF494p0TG5izi65J2neGBF0e7j aalES/I/pQIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFLapEZ/9nmFAJnl0a+X5ijCc XLDBMB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3 NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03 ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl NjEyNTY2MWI5MmJkYTcuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4OTk1ZC8xLzMyMzYzMDMy M2E2NjM5MzY2NDNhMzkzODMwM2EzYTJmMzQzMjJkMzEzMjM4MjAzZDNlMjAzNDM3 MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH AQH/BBMwETAPBAIAAjAJAwcGJgL5bQmAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ9W14 L5XSp+2pBdanPNmfC3dZrySpacrKot4wdBbJzzxwJP5GIXPzAhEyexVvqMzb9sR9 q7UzPxcgtDS6fyexof359EXb/PvV7sbE1m1WjOistsEuHe4z++VilBfC5oEKeBiI dCldhGNp0oZ0ORudXcwOAcyhIqhWZptZE+j+6vMJUYKQMQsTNoA2y+h3NDxnFgLV hGoXQgm42P59xQTzFaIxd7FtQdHTyfaZFPjxav9TV5m0l18qEa6b4nk1PwoIfpHY 59mDZlf5fAIQVbWCfT4kaQSh01SWO2tp++D7ab2ZNMjh5PoVshdwNNqZdeY89WO/ QK66IEmlYSnBNg8S -----END CERTIFICATE-----Generated at Tue Apr 29 09:25:37 2025 by rpki-client