$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa File: 326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa (raw, json) Hash identifier: +TqSNXTXhAzEzLKkAV9n4F5TjirIuU+0tY00/gE1YZA= Subject key identifier: A0:A3:DA:53:A4:B8:C9:F7:19:9D:22:90:F8:B9:29:EC:45:16:D7:F5 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 65DDB1A40FDA17755D78EAC71F81E1A420C0CF49 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa Signing time: Fri 21 Jun 2024 12:31:57 +0000 ROA not before: Fri 21 Jun 2024 12:26:57 +0000 ROA not after: Fri 20 Jun 2025 12:31:57 +0000 asID: 215956 IP address blocks: 2a0a:6044:bb00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Jun 2024 07:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:dd:b1:a4:0f:da:17:75:5d:78:ea:c7:1f:81:e1:a4:20:c0:cf:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jun 21 12:26:57 2024 GMT Not After : Jun 20 12:31:57 2025 GMT Subject: CN=A0A3DA53A4B8C9F7199D2290F8B929EC4516D7F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:99:95:f2:aa:97:54:64:23:c3:3b:d9:b5: 73:d3:ac:6f:24:02:65:d9:74:fb:f5:25:b9:65:ff: 89:c4:dc:0b:83:1f:a0:03:e2:1d:bb:9d:39:c5:87: 63:09:ab:ed:10:9c:e8:2b:02:51:3a:3b:8f:5d:72: c8:17:20:7a:68:50:ab:56:cb:63:f1:36:d6:6c:9e: 0e:5c:46:b9:0e:94:02:e3:13:66:98:06:cf:aa:4a: ec:04:c5:7d:50:d0:9f:43:5f:44:af:86:42:1c:c2: f1:bc:bc:86:ea:a8:6c:6e:81:d5:20:65:a1:69:8b: ee:a4:a4:18:e2:74:57:b6:ab:ed:da:57:34:d1:a0: 8f:8a:04:f2:f4:44:8d:e8:8e:cb:b2:df:40:d9:e4: 36:4b:8b:1c:d5:8e:e6:2c:08:f8:c6:bd:75:8e:95: ec:c6:27:4d:a3:70:76:df:1a:0e:30:06:c4:65:e0: 18:77:84:26:f5:fc:de:8a:28:cc:fe:46:87:68:6f: 11:42:00:58:88:80:b1:b3:32:1a:a5:eb:69:2d:ca: 91:40:aa:d6:2b:95:7c:81:21:2d:ed:22:c0:fb:53: d0:2f:e9:77:a3:c1:3c:27:0f:62:24:6d:38:31:11: b6:a5:54:8f:5f:bd:ac:e0:7a:b5:45:af:53:a3:27: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A3:DA:53:A4:B8:C9:F7:19:9D:22:90:F8:B9:29:EC:45:16:D7:F5 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:bb00::/40 Signature Algorithm: sha256WithRSAEncryption 26:5d:9a:06:a0:8a:fc:8c:e6:27:14:0d:3f:66:ef:dc:35:87: f5:e6:de:91:41:f3:e5:fe:de:53:12:ce:de:27:2c:fc:05:f8: 44:e1:6f:4b:a3:8c:9a:b5:e7:aa:8f:48:80:48:bb:ad:6c:5e: f7:dc:1c:5e:6c:f9:f6:fe:36:ed:f4:55:ea:ed:95:44:21:1d: 92:f4:85:6e:a7:93:18:d8:1d:6f:57:42:4c:2b:ca:1e:73:07: 40:18:27:31:6f:54:5b:0d:9e:40:5a:03:7f:3c:fc:5c:23:65: 01:25:4c:24:bd:f0:81:f8:16:b5:6d:68:e3:6d:a0:cd:81:4f: e0:cb:9f:15:48:3a:13:74:6b:91:0c:4c:94:2b:81:53:42:d4: 12:24:33:93:99:03:08:da:f5:ab:da:19:56:39:2a:08:ad:59: 81:36:50:88:0a:dd:a8:f1:b1:84:03:31:d8:5d:82:78:ba:fe: cb:c4:13:ab:37:75:19:fe:f7:f7:4e:35:92:2f:ab:99:68:1e: a9:a2:66:b5:dd:56:42:92:ba:4e:6f:04:30:46:fd:3d:02:97: e1:b0:95:77:09:05:30:28:a6:5d:48:85:bf:7e:2e:79:28:0f: 27:02:e2:6f:cd:20:67:11:d3:cb:e7:c7:7c:39:f3:f0:a6:29: 02:33:c0:bc -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUZd2xpA/aF3VdeOrHH4HhpCDAz0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA2MjExMjI2NTdaFw0yNTA2MjAxMjMxNTdaMDMxMTAvBgNV BAMTKEEwQTNEQTUzQTRCOEM5RjcxOTlEMjI5MEY4QjkyOUVDNDUxNkQ3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbIZmV8qqXVGQjwzvZtXPTrG8k AmXZdPv1Jbll/4nE3AuDH6AD4h27nTnFh2MJq+0QnOgrAlE6O49dcsgXIHpoUKtW y2PxNtZsng5cRrkOlALjE2aYBs+qSuwExX1Q0J9DX0SvhkIcwvG8vIbqqGxugdUg ZaFpi+6kpBjidFe2q+3aVzTRoI+KBPL0RI3ojsuy30DZ5DZLixzVjuYsCPjGvXWO lezGJ02jcHbfGg4wBsRl4Bh3hCb1/N6KKMz+RodobxFCAFiIgLGzMhql62ktypFA qtYrlXyBIS3tIsD7U9Av6XejwTwnD2IkbTgxEbalVI9fvazgerVFr1OjJ95LAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUoKPaU6S4yfcZnSKQ+Lkp7EUW1/UwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MjYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNTM5MzUzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYES7MA0GCSqGSIb3DQEBCwUAA4IBAQAmXZoGoIr8jOYnFA0/ Zu/cNYf15t6RQfPl/t5TEs7eJyz8BfhE4W9Lo4yateeqj0iASLutbF733BxebPn2 /jbt9FXq7ZVEIR2S9IVup5MY2B1vV0JMK8oecwdAGCcxb1RbDZ5AWgN/PPxcI2UB JUwkvfCB+Ba1bWjjbaDNgU/gy58VSDoTdGuRDEyUK4FTQtQSJDOTmQMI2vWr2hlW OSoIrVmBNlCICt2o8bGEAzHYXYJ4uv7LxBOrN3UZ/vf3TjWSL6uZaB6poma13VZC krpObwQwRv09ApfhsJV3CQUwKKZdSIW/fi55KA8nAuJvzSBnEdPL58d8OfPwpikC M8C8 -----END CERTIFICATE-----Generated at Fri Jun 21 16:34:23 2024 by rpki-client on console.sobornost.net