$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa File: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (raw, json) Hash identifier: iwhRFIGK0R94tzaKbKGGnbo2tlclHvR4mDw3QvRqs3M= Subject key identifier: AE:10:0F:34:74:1E:C9:56:F7:27:FB:73:63:A0:EB:2F:57:F3:41:B8 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 35F4291BCA70285868AF6AC63C3504425A4A209B Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa Signing time: Thu 20 Jun 2024 10:14:47 +0000 ROA not before: Thu 20 Jun 2024 10:09:47 +0000 ROA not after: Thu 19 Jun 2025 10:14:47 +0000 asID: 214723 IP address blocks: 2a0a:6044:ba00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Jun 2024 07:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f4:29:1b:ca:70:28:58:68:af:6a:c6:3c:35:04:42:5a:4a:20:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jun 20 10:09:47 2024 GMT Not After : Jun 19 10:14:47 2025 GMT Subject: CN=AE100F34741EC956F727FB7363A0EB2F57F341B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:d1:da:cc:10:c3:e1:dc:f5:27:20:51:ef: 15:17:64:d1:ec:13:51:cc:ad:a1:2b:68:ce:7a:b4: 20:5e:ba:e8:93:51:a0:a1:5e:90:47:9a:41:c2:54: 08:70:51:0c:c4:e4:e5:c5:5d:93:b6:8a:ce:7f:0b: 59:92:de:4f:9f:d7:7d:3b:14:cb:a7:be:0b:15:4f: 17:18:ae:41:d0:49:8d:d6:ff:af:57:ef:f1:c5:64: 01:0b:48:a1:3f:f5:7c:e3:d1:0f:ff:26:79:26:16: 25:43:22:af:ad:64:fe:2b:db:45:26:0b:71:60:2f: 6b:3c:b6:f9:c4:c5:44:03:cf:c8:ce:53:4e:09:c0: f7:d2:f3:0b:c3:65:54:e9:b2:ad:3d:3a:4e:ef:6e: 0d:6c:e4:b0:0d:7b:10:6f:c5:37:6d:c2:63:6e:4e: 7f:bd:81:cb:69:82:89:5b:97:2a:61:a5:59:1c:e0: 9b:33:09:89:67:45:28:95:c1:aa:36:36:b6:fe:38: 20:b6:1e:54:b9:a5:42:60:8a:f0:d3:7b:93:74:be: 10:9c:b0:c3:85:4a:cd:7f:f5:08:7c:8f:98:c9:ea: 9e:2a:cc:80:8b:d0:74:c4:a8:89:b4:69:92:0d:47: b4:15:5b:c2:16:bf:73:c7:2d:c8:82:ee:75:96:be: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:10:0F:34:74:1E:C9:56:F7:27:FB:73:63:A0:EB:2F:57:F3:41:B8 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/40 Signature Algorithm: sha256WithRSAEncryption bc:ee:b8:b4:90:92:b4:42:cf:c3:26:a5:a4:5b:54:1c:3e:43: 94:02:47:b4:e1:c4:c3:b8:e0:67:bd:94:2d:05:d9:8a:d1:25: 82:f1:e5:5f:87:a5:7d:7b:32:45:c7:18:cd:a4:e2:7b:85:23: d6:aa:79:50:2f:a6:ad:10:0e:ac:e2:de:81:2a:67:f9:8b:eb: c0:90:62:b2:eb:91:fd:cb:16:69:e2:ab:2f:9e:1e:6d:fe:41: 52:da:70:f5:6f:7c:84:5b:ff:79:22:a8:61:53:78:93:da:c7: 07:ba:cd:5d:4d:13:71:24:2b:d1:23:2d:5d:af:28:17:6f:1d: c3:bc:fe:54:ef:b5:84:09:2b:aa:a7:9f:42:ee:c8:45:cf:f4: 0a:b1:1e:77:9c:f6:e3:4f:08:90:95:5f:7c:be:0d:af:95:aa: b9:a5:d7:cf:ee:29:2b:f9:86:75:66:84:30:40:fe:ea:ea:68: 78:35:a2:93:2e:c7:c4:9d:35:00:ab:01:f5:a7:95:7d:55:fb: 35:92:43:9d:59:86:fd:be:0d:81:d3:f0:90:a0:0e:4c:cc:ad: 57:d1:6e:2b:70:0d:1c:46:49:a5:6d:75:fa:c2:a8:b3:d9:39: 37:8f:e3:6e:c9:1e:6b:ca:b9:6c:74:be:c5:05:6b:f0:ea:73: bb:31:b6:ce -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUNfQpG8pwKFhor2rGPDUEQlpKIJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA2MjAxMDA5NDdaFw0yNTA2MTkxMDE0NDdaMDMxMTAvBgNV BAMTKEFFMTAwRjM0NzQxRUM5NTZGNzI3RkI3MzYzQTBFQjJGNTdGMzQxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmYNHazBDD4dz1JyBR7xUXZNHs E1HMraEraM56tCBeuuiTUaChXpBHmkHCVAhwUQzE5OXFXZO2is5/C1mS3k+f1307 FMunvgsVTxcYrkHQSY3W/69X7/HFZAELSKE/9Xzj0Q//JnkmFiVDIq+tZP4r20Um C3FgL2s8tvnExUQDz8jOU04JwPfS8wvDZVTpsq09Ok7vbg1s5LANexBvxTdtwmNu Tn+9gctpgolblyphpVkc4JszCYlnRSiVwao2Nrb+OCC2HlS5pUJgivDTe5N0vhCc sMOFSs1/9Qh8j5jJ6p4qzICL0HTEqIm0aZINR7QVW8IWv3PHLciC7nWWviyTAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUrhAPNHQeyVb3J/tzY6DrL1fzQbgwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MjYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNDM3MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYES6MA0GCSqGSIb3DQEBCwUAA4IBAQC87ri0kJK0Qs/DJqWk W1QcPkOUAke04cTDuOBnvZQtBdmK0SWC8eVfh6V9ezJFxxjNpOJ7hSPWqnlQL6at EA6s4t6BKmf5i+vAkGKy65H9yxZp4qsvnh5t/kFS2nD1b3yEW/95IqhhU3iT2scH us1dTRNxJCvRIy1drygXbx3DvP5U77WECSuqp59C7shFz/QKsR53nPbjTwiQlV98 vg2vlaq5pdfP7ikr+YZ1ZoQwQP7q6mh4NaKTLsfEnTUAqwH1p5V9Vfs1kkOdWYb9 vg2B0/CQoA5MzK1X0W4rcA0cRkmlbXX6wqiz2Tk3j+NuyR5ryrlsdL7FBWvw6nO7 MbbO -----END CERTIFICATE-----Generated at Fri Jun 21 19:50:35 2024 by rpki-client on console.sobornost.net