$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20313939373436.roa File: 326130353a646663363a3a2f33322d3438203d3e20313939373436.roa (raw, json) Hash identifier: OtbysRIpUSZzrNDU2rC91LQkafnSJ3qxzRUMD/qfhMg= Subject key identifier: 60:43:3F:EC:D1:49:03:4B:80:47:A4:9A:3F:40:2D:E3:CA:F6:50:46 Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 7D75C8798703170FFF19F9E02D137B1706001544 Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20313939373436.roa Signing time: Fri 11 Sep 2026 02:45:11 +0000 ROA not before: Fri 11 Sep 2026 02:40:11 +0000 ROA not after: Fri 10 Sep 2027 02:45:11 +0000 asID: 199746 IP address blocks: 2a05:dfc6::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:75:c8:79:87:03:17:0f:ff:19:f9:e0:2d:13:7b:17:06:00:15:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 11 02:40:11 2026 GMT Not After : Sep 10 02:45:11 2027 GMT Subject: CN=60433FECD149034B8047A49A3F402DE3CAF65046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:09:e6:9f:41:21:4e:b6:43:96:d1:62:4e: 7b:86:a5:7f:f5:bf:d4:f9:cf:24:6d:af:f0:07:ef: 60:dd:6b:2b:07:f2:fd:87:f2:30:a7:f3:8e:7e:a5: dc:5e:7e:bb:87:c7:58:17:3b:18:93:52:d7:d1:9a: 52:87:02:96:6b:e2:06:9d:8a:41:b1:af:c2:c1:8f: d6:b4:be:16:c3:3c:82:7e:ad:f4:0f:84:69:7e:0c: 03:34:72:49:98:22:22:d4:21:30:43:31:84:b2:8d: 10:9d:57:b7:6e:ac:3b:c4:5e:72:c2:0f:37:33:37: 16:3e:d7:3f:d9:98:5e:ff:e4:cf:ad:19:f0:f7:ae: 87:6a:f8:00:f2:bf:be:a4:fe:57:53:62:2b:03:39: 84:30:fd:32:59:a5:cc:f7:f6:87:cb:22:65:18:24: 0a:61:b8:a8:e4:72:e9:80:e2:74:e5:15:ce:f9:28: af:58:01:99:bf:d6:cf:50:c9:d3:ba:a0:fd:c2:42: 1f:cf:cf:10:d8:76:53:95:b7:d2:23:f0:38:98:ec: 73:de:8c:3b:63:d7:7f:81:54:a8:18:4c:9a:5a:49: 69:69:a3:53:68:fe:04:d1:dd:a7:13:04:ad:43:56: a5:d6:63:0c:dd:1a:44:e9:ba:9c:b3:b1:cf:4b:09: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:43:3F:EC:D1:49:03:4B:80:47:A4:9A:3F:40:2D:E3:CA:F6:50:46 X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20313939373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc6::/32 Signature Algorithm: sha256WithRSAEncryption 9c:21:9b:f3:1b:18:fe:de:2a:34:5d:34:97:12:a9:3a:89:18: e3:ca:14:8c:91:f3:c6:ea:67:ff:28:a0:e4:05:e1:1b:ae:5a: 5f:e0:df:7f:dd:32:e6:c1:63:7f:3f:c4:02:13:95:57:24:5d: c9:58:90:2f:0b:df:f6:24:c1:9f:b2:78:ed:e8:81:c4:fd:d3: 3e:d1:0e:f4:49:97:3c:01:a6:c7:3e:50:bc:b0:23:02:95:c8: 39:12:ae:3e:08:70:75:5b:22:f1:3e:13:ed:89:5e:12:aa:c0: 6f:32:89:3c:fb:62:5e:10:ed:29:f3:8b:d3:3a:a1:6c:4f:24: 29:89:e0:07:54:5f:ff:42:54:6b:82:3b:eb:34:7b:0f:99:64: a7:b0:48:94:cc:5b:28:8d:b1:6c:ca:18:16:ab:43:d7:33:8f: ac:82:bb:c8:07:e8:68:10:47:0a:e0:f6:9d:e7:27:c0:23:70: 65:95:cb:89:3e:6b:8a:fd:d0:4b:2e:96:6b:22:3d:82:9f:f9: 23:15:4c:d4:b6:c8:9a:5a:22:5b:6d:15:4e:d7:ce:cf:d9:33: 93:99:0d:98:1d:06:e9:23:24:65:3b:17:f7:23:a1:b6:18:38: c6:0d:66:d4:1e:e8:2d:4f:87:df:57:63:14:f2:f8:4a:ba:4b: 8b:9b:01:e2 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUfXXIeYcDFw//GfngLRN7FwYAFUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MTEwMjQwMTFaFw0yNzA5MTAwMjQ1MTFaMDMxMTAvBgNV BAMTKDYwNDMzRkVDRDE0OTAzNEI4MDQ3QTQ5QTNGNDAyREUzQ0FGNjUwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2Anmn0EhTrZDltFiTnuGpX/1 v9T5zyRtr/AH72DdaysH8v2H8jCn845+pdxefruHx1gXOxiTUtfRmlKHApZr4gad ikGxr8LBj9a0vhbDPIJ+rfQPhGl+DAM0ckmYIiLUITBDMYSyjRCdV7durDvEXnLC DzczNxY+1z/ZmF7/5M+tGfD3rodq+ADyv76k/ldTYisDOYQw/TJZpcz39ofLImUY JAphuKjkcumA4nTlFc75KK9YAZm/1s9QydO6oP3CQh/PzxDYdlOVt9Ij8DiY7HPe jDtj13+BVKgYTJpaSWlpo1No/gTR3acTBK1DVqXWYwzdGkTpupyzsc9LCe1fAgMB AAGjggJuMIICajAdBgNVHQ4EFgQUYEM/7NFJA0uAR6SaP0At48r2UEYwHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYt Nzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzQvMzI2MTMwMzUzYTY0NjY2MzM2 M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzOTM5MzczNDM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA KgXfxjANBgkqhkiG9w0BAQsFAAOCAQEAnCGb8xsY/t4qNF00lxKpOokY48oUjJHz xupn/yig5AXhG65aX+Dff90y5sFjfz/EAhOVVyRdyViQLwvf9iTBn7J47eiBxP3T PtEO9EmXPAGmxz5QvLAjApXIORKuPghwdVsi8T4T7YleEqrAbzKJPPtiXhDtKfOL 0zqhbE8kKYngB1Rf/0JUa4I76zR7D5lkp7BIlMxbKI2xbMoYFqtD1zOPrIK7yAfo aBBHCuD2necnwCNwZZXLiT5riv3QSy6WayI9gp/5IxVM1LbImloiW20VTtfOz9kz k5kNmB0G6SMkZTsX9yOhthg4xg1m1B7oLU+H31djFPL4SrpLi5sB4g== -----END CERTIFICATE-----Generated at Mon Sep 21 17:09:23 2026 by rpki-client