$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203236353536.roa File: 3139322e36372e33352e302f32342d3332203d3e203236353536.roa (raw, json) Hash identifier: 6b1VpbvMsE50o/1KffApiCFgdzfb7zhZLiCWQ7W3KvI= Subject key identifier: A1:CD:AF:EC:9D:18:67:17:C5:A5:22:B4:84:F1:84:8F:7B:BB:55:3F Certificate issuer: /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388 Certificate serial: 326BC9AD14CF15C51C5D888CA397805A5851A57C Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88 Authority info access: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203236353536.roa Signing time: Fri 11 Apr 2025 01:47:26 +0000 ROA not before: Fri 11 Apr 2025 01:42:26 +0000 ROA not after: Fri 10 Apr 2026 01:47:26 +0000 asID: 26556 IP address blocks: 192.67.35.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 18:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6b:c9:ad:14:cf:15:c5:1c:5d:88:8c:a3:97:80:5a:58:51:a5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388 Validity Not Before: Apr 11 01:42:26 2025 GMT Not After : Apr 10 01:47:26 2026 GMT Subject: CN=A1CDAFEC9D186717C5A522B484F1848F7BBB553F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:ef:e1:f6:92:26:e0:75:88:96:c2:bd:69: 1d:e3:b0:51:8c:8c:a8:e0:e3:98:8c:e7:a0:09:65: c6:0c:44:52:13:ef:50:2c:49:18:ac:d7:23:c6:1a: 98:02:ed:b8:f5:59:50:fe:94:f0:1e:8c:11:db:b3: ff:81:6d:c9:91:01:67:47:cc:b5:98:b0:8f:78:b1: 7f:7b:28:14:ab:d5:2b:31:bc:e8:15:89:bd:6f:11: d8:fa:02:e2:a2:97:3b:7a:46:17:3e:a4:ca:9a:f0: 75:72:f6:cd:43:2e:c4:09:47:32:31:ad:86:6c:d0: ff:ae:03:49:f7:ed:a9:3d:49:6e:5e:b2:80:7d:7f: 7d:f4:0d:33:ee:88:e1:6a:c2:4a:0b:f3:67:fa:ee: 50:f4:fd:de:c7:4b:25:b0:11:ed:c1:57:bf:f9:cf: 95:b6:8b:1d:5e:fe:05:8d:e0:bf:1a:90:e3:62:b8: 1d:0b:75:a6:bf:21:6b:13:72:50:ec:e0:63:6b:03: e0:82:3e:ce:94:ee:61:94:09:78:dc:85:ea:32:4c: 2a:3a:ac:ab:c7:c8:67:b2:59:8a:55:1e:9b:53:ea: 48:f2:85:61:5e:bb:25:81:97:f1:08:f3:20:71:bf: df:52:51:ac:b2:bf:70:b1:7f:02:91:8d:c2:bb:43: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CD:AF:EC:9D:18:67:17:C5:A5:22:B4:84:F1:84:8F:7B:BB:55:3F X509v3 Authority Key Identifier: keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl Authority Information Access: CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203236353536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.67.35.0/24 Signature Algorithm: sha256WithRSAEncryption 72:dc:e7:cc:dd:17:ad:7d:43:dc:cb:89:87:a3:bb:99:ad:a0: af:5e:bb:33:57:ee:d4:fd:95:24:ba:73:42:4f:55:20:87:e7: e1:c7:f0:68:09:d0:67:99:df:f9:97:18:e0:6b:99:96:8e:c0: 74:8f:0c:ed:ae:b5:84:96:8e:1b:d1:7e:81:73:5d:cd:26:45: 7c:df:24:6f:d0:f3:02:78:aa:9e:f5:ec:2d:c4:aa:9f:51:88: c2:80:34:44:ba:1c:75:bd:22:37:49:b8:c2:16:89:af:36:bd: 48:51:7f:d1:01:dc:97:3b:42:dd:1c:23:d8:8b:3f:7a:06:7d: 9c:99:16:ed:a0:73:e9:f3:79:60:59:2e:6a:ec:49:5c:c6:56: f8:12:4b:cc:d4:df:39:2e:09:18:12:9f:6c:c8:62:3a:af:d1: d4:3d:25:c2:3f:4d:50:4f:56:e3:d6:40:e6:5e:da:bb:66:49: 32:2c:56:50:f6:dd:ed:28:02:c7:9e:05:99:b8:7b:a3:cb:73: f8:ef:16:32:88:37:18:13:ed:87:67:40:2a:f0:2b:40:1f:20: 16:0d:9d:25:92:29:8e:ec:1a:09:b2:a2:df:7b:d4:2e:57:bd: 66:67:e1:7f:10:eb:f0:80:3a:aa:6c:bc:06:39:01:39:d7:15: 07:cf:d0:96 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUMmvJrRTPFcUcXYiMo5eAWlhRpXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDRkY3RTc0MTg5NTYzQjBFQzQ1RDBFOUJCN0M1NjI4 QjJFNDM4ODAeFw0yNTA0MTEwMTQyMjZaFw0yNjA0MTAwMTQ3MjZaMDMxMTAvBgNV BAMTKEExQ0RBRkVDOUQxODY3MTdDNUE1MjJCNDg0RjE4NDhGN0JCQjU1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqe/h9pIm4HWIlsK9aR3jsFGM jKjg45iM56AJZcYMRFIT71AsSRis1yPGGpgC7bj1WVD+lPAejBHbs/+BbcmRAWdH zLWYsI94sX97KBSr1SsxvOgVib1vEdj6AuKilzt6Rhc+pMqa8HVy9s1DLsQJRzIx rYZs0P+uA0n37ak9SW5esoB9f330DTPuiOFqwkoL82f67lD0/d7HSyWwEe3BV7/5 z5W2ix1e/gWN4L8akONiuB0Ldaa/IWsTclDs4GNrA+CCPs6U7mGUCXjcheoyTCo6 rKvHyGeyWYpVHptT6kjyhWFeuyWBl/EI8yBxv99SUayyv3CxfwKRjcK7Q0lrAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUoc2v7J0YZxfFpSK0hPGEj3u7VT8wHwYDVR0j BBgwFoAUAc/350GJVjsOxF0Om7fFYosuQ4gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzQvMDFDRkY3RTc0MTg5NTYzQjBFQzQ1RDBFOUJCN0M1NjI4QjJFNDM4OC5j cmwwgYkGCCsGAQUFBwEBBH0wezB5BggrBgEFBQcwAoZtcnN5bmM6Ly9rcmlsbC5h Y2N1cmlzdGVjaG5vbG9naWVzLmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMv MC8wMUNGRjdFNzQxODk1NjNCMEVDNDVEMEU5QkI3QzU2MjhCMkU0Mzg4LmNlcjCB qwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5Zjkt OWI2Yy05YzlmMzg5ODk5NWQvNC8zMTM5MzIyZTM2MzcyZTMzMzUyZTMwMmYzMjM0 MmQzMzMyMjAzZDNlMjAzMjM2MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEMjMA0GCSqGSIb3 DQEBCwUAA4IBAQBy3OfM3RetfUPcy4mHo7uZraCvXrszV+7U/ZUkunNCT1Ugh+fh x/BoCdBnmd/5lxjga5mWjsB0jwztrrWElo4b0X6Bc13NJkV83yRv0PMCeKqe9ewt xKqfUYjCgDREuhx1vSI3SbjCFomvNr1IUX/RAdyXO0LdHCPYiz96Bn2cmRbtoHPp 83lgWS5q7Elcxlb4EkvM1N85LgkYEp9syGI6r9HUPSXCP01QT1bj1kDmXtq7Zkky LFZQ9t3tKALHngWZuHujy3P47xYyiDcYE+2HZ0Aq8CtAHyAWDZ0lkimO7BoJsqLf e9QuV71mZ+F/EOvwgDqqbLwGOQE51xUHz9CW -----END CERTIFICATE-----Generated at Wed Apr 30 11:30:27 2025 by rpki-client