$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a663030303a3a2f33362d3438203d3e20323135323134.roa File: 326130393a353463363a663030303a3a2f33362d3438203d3e20323135323134.roa (raw, json) Hash identifier: Fc4rpaf7EVEPngxw7Vx8jl4nPRU/AfFfr+WvjjEditY= Subject key identifier: 46:63:5E:48:2E:26:2F:A1:9C:DA:DD:95:D5:08:22:E3:83:62:29:23 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 74CE163E7878495F12EE5DEEB494B6BFDD6FDD3B Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a663030303a3a2f33362d3438203d3e20323135323134.roa Signing time: Sat 14 Jun 2025 12:06:09 +0000 ROA not before: Sat 14 Jun 2025 12:01:09 +0000 ROA not after: Sat 13 Jun 2026 12:06:09 +0000 asID: 215214 IP address blocks: 2a09:54c6:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ce:16:3e:78:78:49:5f:12:ee:5d:ee:b4:94:b6:bf:dd:6f:dd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 14 12:01:09 2025 GMT Not After : Jun 13 12:06:09 2026 GMT Subject: CN=46635E482E262FA19CDADD95D50822E383622923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:01:d3:3b:fc:a9:bd:86:b9:b9:0b:4a:9a: 6c:2a:d1:e3:7e:5e:f3:80:d0:b6:1d:94:9e:5d:f5: 37:27:0f:3a:4d:19:31:21:45:9a:87:9d:59:ba:8e: 3c:5b:f3:f1:29:c3:6f:d4:79:02:6a:2a:fa:ee:11: 53:2b:43:3c:53:0b:5a:3c:6d:e4:69:e1:3c:6b:75: f5:6a:f2:97:f2:54:e1:1e:c9:33:ae:38:1f:64:6d: 1e:20:d0:47:f2:1e:23:88:42:d1:16:d8:e9:0b:d4: a4:b3:26:ee:4e:bb:2f:0c:15:1f:4c:7d:c6:bd:5f: dc:5c:c0:d9:dc:43:f2:94:a2:f7:55:86:c1:e4:46: 36:d4:d6:48:e8:87:60:06:4d:6f:52:08:ba:f4:98: f3:0f:bb:18:7f:b8:29:e2:3b:f7:bd:5d:51:aa:ff: ac:ee:31:ac:69:91:ec:e4:6c:f6:b1:38:23:70:99: ba:8b:44:5b:fb:f6:90:40:81:60:a9:77:1f:9b:70: 07:9c:c6:1f:d4:7f:b2:d1:99:8f:70:c7:a1:40:95: 66:86:d9:20:b6:21:bb:fb:26:8d:1d:c8:54:77:2c: 46:72:59:25:f1:a6:80:55:a5:91:c3:6a:59:0d:9f: b8:fd:ef:40:58:37:30:09:4d:f7:cf:f5:63:03:42: 27:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:63:5E:48:2E:26:2F:A1:9C:DA:DD:95:D5:08:22:E3:83:62:29:23 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a663030303a3a2f33362d3438203d3e20323135323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:f000::/36 Signature Algorithm: sha256WithRSAEncryption 6e:03:fb:9e:87:da:c1:5c:94:85:4b:62:c4:6e:d8:c3:0e:c1: 59:5a:82:7d:89:4f:d0:3c:fd:9c:d3:b1:dc:4a:c5:75:75:0c: 78:08:da:24:7b:db:ba:54:e0:14:03:2f:6c:48:73:14:9b:1c: b6:a1:26:53:05:56:1a:8b:2f:b4:9e:6b:cb:ba:e0:9f:a5:67: 7c:aa:37:cc:8e:8c:e2:d2:21:66:99:fe:1d:65:7b:eb:f4:37: 4a:f1:3f:1b:80:21:be:1f:34:00:18:04:b4:5b:4a:29:03:77: bd:09:c6:b0:c2:6c:bc:7d:87:a7:cc:5a:71:a7:54:9e:ca:e7: 94:ab:9f:23:47:ac:9c:7f:6e:b9:a1:5d:af:3e:24:a0:d5:79: 83:64:60:a1:a7:5d:4a:18:6c:11:ca:f4:2a:b2:a0:1d:4e:10: 4e:f1:1b:bd:ed:56:87:3f:fd:2b:6e:f0:40:c6:75:56:40:e5: 1d:ed:ae:2e:e8:95:02:90:ce:fa:30:1c:f7:23:82:b0:8e:3b: fb:46:60:5a:ea:1e:d3:c6:1e:99:f0:60:0b:ea:95:cd:27:9f: 1c:4a:39:80:20:d4:6d:6b:67:14:dd:00:37:57:d9:1f:20:27: 06:a3:ff:3a:00:b8:e5:16:4e:30:a3:30:0a:d2:c6:83:ad:3b: 06:5a:69:7a -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUdM4WPnh4SV8S7l3utJS2v91v3TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MTQxMjAxMDlaFw0yNjA2MTMxMjA2MDlaMDMxMTAvBgNV BAMTKDQ2NjM1RTQ4MkUyNjJGQTE5Q0RBREQ5NUQ1MDgyMkUzODM2MjI5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMAHTO/ypvYa5uQtKmmwq0eN+ XvOA0LYdlJ5d9TcnDzpNGTEhRZqHnVm6jjxb8/Epw2/UeQJqKvruEVMrQzxTC1o8 beRp4TxrdfVq8pfyVOEeyTOuOB9kbR4g0EfyHiOIQtEW2OkL1KSzJu5Ouy8MFR9M fca9X9xcwNncQ/KUovdVhsHkRjbU1kjoh2AGTW9SCLr0mPMPuxh/uCniO/e9XVGq /6zuMaxpkezkbPaxOCNwmbqLRFv79pBAgWCpdx+bcAecxh/Uf7LRmY9wx6FAlWaG 2SC2Ibv7Jo0dyFR3LEZyWSXxpoBVpZHDalkNn7j970BYNzAJTffP9WMDQifpAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQURmNeSC4mL6Gc2t2V1Qgi44NiKSMwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2 M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzEzNTMyMzEzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMbwMA0GCSqGSIb3DQEBCwUAA4IBAQBuA/ueh9rBXJSFS2LE btjDDsFZWoJ9iU/QPP2c07HcSsV1dQx4CNoke9u6VOAUAy9sSHMUmxy2oSZTBVYa iy+0nmvLuuCfpWd8qjfMjozi0iFmmf4dZXvr9DdK8T8bgCG+HzQAGAS0W0opA3e9 Ccawwmy8fYenzFpxp1SeyueUq58jR6ycf265oV2vPiSg1XmDZGChp11KGGwRyvQq sqAdThBO8Ru97VaHP/0rbvBAxnVWQOUd7a4u6JUCkM76MBz3I4Kwjjv7RmBa6h7T xh6Z8GAL6pXNJ58cSjmAINRta2cU3QA3V9kfICcGo/86ALjlFk4wozAK0saDrTsG Wml6 -----END CERTIFICATE-----Generated at Sun Jun 15 23:25:24 2025 by rpki-client