$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323034343634.roa File: 326130353a646663363a3a2f33322d3438203d3e20323034343634.roa (raw, json) Hash identifier: B8nf9oQedHxo7Uvn7kFEa7TPHRWtKI8dySGByyx8kYk= Subject key identifier: 81:5C:1A:A1:C0:B4:40:BE:AF:F5:03:B6:93:F4:A3:02:ED:69:01:26 Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 7357FBDE8DD289695E12A634D222E49CD049984E Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323034343634.roa Signing time: Fri 11 Sep 2026 02:43:56 +0000 ROA not before: Fri 11 Sep 2026 02:38:56 +0000 ROA not after: Fri 10 Sep 2027 02:43:56 +0000 asID: 204464 IP address blocks: 2a05:dfc6::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:57:fb:de:8d:d2:89:69:5e:12:a6:34:d2:22:e4:9c:d0:49:98:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 11 02:38:56 2026 GMT Not After : Sep 10 02:43:56 2027 GMT Subject: CN=815C1AA1C0B440BEAFF503B693F4A302ED690126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:4d:76:1c:07:66:09:37:7e:4a:60:f9:33: a5:d1:86:f6:13:13:7e:85:54:6c:b6:3b:53:09:fc: 0e:fa:4d:f5:67:c6:5d:21:7e:3b:df:8b:7f:d7:d4: eb:99:fa:ae:d4:b7:dd:6b:46:69:ad:5f:3b:cb:10: 2a:25:00:51:e1:ef:de:cf:44:a4:5f:05:3e:20:78: 64:a3:a1:23:25:73:eb:e9:17:3e:bd:de:64:0b:fe: bd:ef:e0:bb:f9:23:5d:52:c4:a2:86:50:82:3f:22: 41:e5:6d:de:b2:b1:a6:e6:c7:af:45:3f:78:d7:de: 15:c9:e2:f0:08:3b:a6:22:50:e5:bd:ad:f1:5f:ec: ef:70:1f:67:b0:0b:c6:79:fb:c0:76:34:3f:c1:dd: 4b:6e:43:63:43:5b:a3:b8:06:af:04:d2:d8:b5:c3: 5c:22:21:3b:b5:a4:ba:f5:62:b5:c4:3f:b9:cc:0a: 68:cd:ba:c6:bc:84:89:be:bc:a7:27:5d:a6:4e:ae: 00:8c:fb:c4:b7:38:65:bc:26:b5:cf:f4:f6:9a:8d: 9e:3f:58:a3:3f:2b:64:54:e2:c4:4c:2c:8d:19:a2: 7d:35:98:9b:3c:12:84:0a:06:51:a1:14:34:64:3f: af:28:fd:1b:c3:55:94:e6:08:8e:c7:7b:5c:6a:8f: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5C:1A:A1:C0:B4:40:BE:AF:F5:03:B6:93:F4:A3:02:ED:69:01:26 X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323034343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc6::/32 Signature Algorithm: sha256WithRSAEncryption 14:6c:c3:75:b9:5a:b7:8e:19:80:00:a5:65:77:96:92:f7:1d: e7:c0:b4:0c:46:a1:a8:a3:00:80:53:53:34:d6:16:c7:29:7b: 45:d2:5b:2f:95:25:53:f3:48:57:84:60:a0:e2:8e:bf:f7:f1: 14:90:89:98:74:e4:45:bd:96:a2:02:1a:a3:9e:27:95:da:10: 06:2c:3b:50:66:2d:55:4e:59:47:6a:f9:9d:60:c8:c1:36:c6: ed:0c:28:33:0a:23:fa:09:d1:b1:dd:88:66:ba:03:5e:b8:64: 42:a7:46:c1:f9:b5:4a:db:e0:62:a4:27:ef:34:a2:c5:a8:08: 8c:66:19:92:96:76:06:e6:70:33:43:91:1b:fb:fa:3a:c3:d3: 37:86:28:ba:7f:71:ef:a9:e2:81:9e:25:f9:51:76:c8:c4:4a: 17:b6:0c:45:98:bb:2a:02:86:55:cd:09:fe:b4:98:89:bb:b6: 1c:7d:12:b6:21:6a:b1:34:44:d1:d6:20:01:76:4e:39:39:4a: bc:70:b1:4b:be:76:7c:96:4e:57:05:7e:0a:01:5a:96:ce:2a: ea:bf:e1:40:fc:cc:85:56:ca:5f:a5:17:57:33:ad:9b:92:2b: 4e:41:f3:f8:ab:7c:2f:bc:21:ad:6f:b8:6c:c4:25:dd:b3:8d: 75:aa:1e:0d -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUc1f73o3SiWleEqY00iLknNBJmE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MTEwMjM4NTZaFw0yNzA5MTAwMjQzNTZaMDMxMTAvBgNV BAMTKDgxNUMxQUExQzBCNDQwQkVBRkY1MDNCNjkzRjRBMzAyRUQ2OTAxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8012HAdmCTd+SmD5M6XRhvYT E36FVGy2O1MJ/A76TfVnxl0hfjvfi3/X1OuZ+q7Ut91rRmmtXzvLEColAFHh797P RKRfBT4geGSjoSMlc+vpFz693mQL/r3v4Lv5I11SxKKGUII/IkHlbd6ysabmx69F P3jX3hXJ4vAIO6YiUOW9rfFf7O9wH2ewC8Z5+8B2ND/B3UtuQ2NDW6O4Bq8E0ti1 w1wiITu1pLr1YrXEP7nMCmjNusa8hIm+vKcnXaZOrgCM+8S3OGW8JrXP9PaajZ4/ WKM/K2RU4sRMLI0Zon01mJs8EoQKBlGhFDRkP68o/RvDVZTmCI7He1xqj8rVAgMB AAGjggJuMIICajAdBgNVHQ4EFgQUgVwaocC0QL6v9QO2k/SjAu1pASYwHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYt Nzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzQvMzI2MTMwMzUzYTY0NjY2MzM2 M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMDM0MzQzNjM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA KgXfxjANBgkqhkiG9w0BAQsFAAOCAQEAFGzDdblat44ZgAClZXeWkvcd58C0DEah qKMAgFNTNNYWxyl7RdJbL5UlU/NIV4RgoOKOv/fxFJCJmHTkRb2WogIao54nldoQ Biw7UGYtVU5ZR2r5nWDIwTbG7QwoMwoj+gnRsd2IZroDXrhkQqdGwfm1StvgYqQn 7zSixagIjGYZkpZ2BuZwM0ORG/v6OsPTN4Youn9x76nigZ4l+VF2yMRKF7YMRZi7 KgKGVc0J/rSYibu2HH0StiFqsTRE0dYgAXZOOTlKvHCxS752fJZOVwV+CgFals4q 6r/hQPzMhVbKX6UXVzOtm5IrTkHz+Kt8L7whrW+4bMQl3bONdaoeDQ== -----END CERTIFICATE-----Generated at Mon Sep 21 18:01:32 2026 by rpki-client