$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232362e302f32332d3233203d3e20323034343634.roa File: 38352e3135352e3232362e302f32332d3233203d3e20323034343634.roa (raw, json) Hash identifier: +acmDmMWHtQlMdklcaxLw6taQI5sUlK4TK6h9skpvvE= Subject key identifier: 7C:87:0C:A5:69:F8:77:62:F0:8E:DF:2F:77:FF:9F:2E:49:C3:8E:FE Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 3A5F132CAB8EC8546F550DFAEB50BD7A58BA3D93 Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232362e302f32332d3233203d3e20323034343634.roa Signing time: Fri 11 Sep 2026 02:05:43 +0000 ROA not before: Fri 11 Sep 2026 02:00:43 +0000 ROA not after: Fri 10 Sep 2027 02:05:43 +0000 asID: 204464 IP address blocks: 85.155.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5f:13:2c:ab:8e:c8:54:6f:55:0d:fa:eb:50:bd:7a:58:ba:3d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 11 02:00:43 2026 GMT Not After : Sep 10 02:05:43 2027 GMT Subject: CN=7C870CA569F87762F08EDF2F77FF9F2E49C38EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ad:4c:3e:f8:d0:d9:c3:8b:ea:5e:ef:a3:19: e7:95:b7:10:9d:9c:a0:a8:5a:48:84:4c:c2:57:c8: 68:82:c9:c3:6c:59:d4:cc:97:0d:79:6d:3b:a9:34: 26:bf:59:cf:ec:dc:c4:97:0b:97:0a:e4:9c:9f:f9: 7b:43:61:c1:0d:7e:eb:3d:b1:55:3c:2e:86:fd:1f: 56:35:07:00:5e:68:22:b0:0b:5c:c2:41:62:81:de: 1e:ff:16:62:d0:b2:58:98:74:cb:5d:9e:2c:4b:7e: 54:d8:6f:2c:b6:5b:6a:f1:4f:68:08:3f:96:f0:7e: a3:06:26:ef:99:15:a4:72:84:4e:6c:fa:99:e1:2d: 5e:87:4e:d1:ea:79:1a:31:97:83:32:69:a7:a8:7b: 9a:59:9f:9b:2f:69:09:b7:9d:d4:55:fb:e9:fc:2e: 57:e9:1d:b6:15:46:4e:96:de:91:fe:a7:1e:b1:bc: 73:c5:76:d5:e3:22:1a:0c:5e:d2:67:c3:3a:05:ce: 07:cd:41:ca:ea:ef:1b:ac:9e:bf:02:93:55:43:36: 6f:bf:f0:96:19:6f:c6:8a:51:eb:79:15:9d:12:1f: 78:7e:00:8b:e8:82:d0:ae:fd:fe:56:53:d0:08:28: 2d:f1:c1:96:e8:9b:01:1e:84:3a:b3:f0:75:9a:e4: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:87:0C:A5:69:F8:77:62:F0:8E:DF:2F:77:FF:9F:2E:49:C3:8E:FE X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232362e302f32332d3233203d3e20323034343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.226.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:c9:a3:e5:b4:97:bb:6a:23:ce:cb:08:14:f8:e1:f1:45:dd: 6a:eb:bb:47:4c:8a:24:80:57:89:4d:be:9e:18:19:ef:2c:41: 52:fd:0f:e4:e5:f7:fe:fa:56:cf:15:27:fa:55:5d:c7:c6:0a: 5e:2e:fe:d7:14:95:97:10:1d:16:1d:5d:d1:2d:06:57:df:7a: ae:ca:54:83:8a:55:7e:d8:8e:34:cf:60:d0:9b:f2:bc:01:2f: bd:3c:5b:8f:ef:fd:38:b3:3e:41:6a:6a:4f:9b:10:ae:23:db: d3:18:e8:5a:76:38:12:ab:4e:11:c7:03:b9:b9:1f:2f:7f:4a: 06:3c:ce:7e:94:57:52:74:68:71:d1:e5:fa:57:ee:14:b4:db: f4:88:2b:bf:74:6d:cd:cb:ce:f3:39:00:b5:ec:90:41:ab:84: 7c:e2:89:d7:ee:cb:02:b6:84:fc:b9:c3:4f:f4:5d:85:32:62: 93:c8:53:fd:d1:00:50:a1:ae:bf:0e:7c:87:1c:dd:c1:7e:1e: 94:4e:b9:b5:36:f6:a3:37:f7:01:8a:5a:cc:26:93:ab:88:f9: f0:87:7c:60:d0:94:f3:a7:96:bb:eb:79:70:a0:82:61:05:0b: 9d:e3:c5:c5:0e:e9:d5:92:7b:c1:46:80:9a:78:0f:a3:d5:9b: e2:c9:0a:03 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUOl8TLKuOyFRvVQ3661C9eli6PZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MTEwMjAwNDNaFw0yNzA5MTAwMjA1NDNaMDMxMTAvBgNV BAMTKDdDODcwQ0E1NjlGODc3NjJGMDhFREYyRjc3RkY5RjJFNDlDMzhFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprUw++NDZw4vqXu+jGeeVtxCd nKCoWkiETMJXyGiCycNsWdTMlw15bTupNCa/Wc/s3MSXC5cK5Jyf+XtDYcENfus9 sVU8Lob9H1Y1BwBeaCKwC1zCQWKB3h7/FmLQsliYdMtdnixLflTYbyy2W2rxT2gI P5bwfqMGJu+ZFaRyhE5s+pnhLV6HTtHqeRoxl4Myaaeoe5pZn5svaQm3ndRV++n8 LlfpHbYVRk6W3pH+px6xvHPFdtXjIhoMXtJnwzoFzgfNQcrq7xusnr8Ck1VDNm+/ 8JYZb8aKUet5FZ0SH3h+AIvogtCu/f5WU9AIKC3xwZbomwEehDqz8HWa5JuxAgMB AAGjggJvMIICazAdBgNVHQ4EFgQUfIcMpWn4d2Lwjt8vd/+fLknDjv4wHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYt Nzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzQvMzgzNTJlMzEzNTM1MmUzMjMy MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMwMzQzNDM2MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFVm+IwDQYJKoZIhvcNAQELBQADggEBADrJo+W0l7tqI87LCBT44fFF3Wrru0dM iiSAV4lNvp4YGe8sQVL9D+Tl9/76Vs8VJ/pVXcfGCl4u/tcUlZcQHRYdXdEtBlff eq7KVIOKVX7YjjTPYNCb8rwBL708W4/v/TizPkFqak+bEK4j29MY6Fp2OBKrThHH A7m5Hy9/SgY8zn6UV1J0aHHR5fpX7hS02/SIK790bc3LzvM5ALXskEGrhHziidfu ywK2hPy5w0/0XYUyYpPIU/3RAFChrr8OfIcc3cF+HpROubU29qM39wGKWswmk6uI +fCHfGDQlPOnlrvreXCggmEFC53jxcUO6dWSe8FGgJp4D6PVm+LJCgM= -----END CERTIFICATE-----Generated at Mon Sep 21 10:59:04 2026 by rpki-client