$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232372e302f32342d3234203d3e20323138393034.roa File: 38352e3135352e3232372e302f32342d3234203d3e20323138393034.roa (raw, json) Hash identifier: qfTzGyn1Nl6egVGluNuViZeCMzqs0wSyO6mE/CC+VUI= Subject key identifier: EA:8A:16:8D:42:33:71:12:C9:8B:96:67:04:13:C8:04:F7:0F:AB:E7 Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 17C9EE016AFAB09A8F1F06480F93D36C93E60C4D Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232372e302f32342d3234203d3e20323138393034.roa Signing time: Fri 11 Sep 2026 02:05:43 +0000 ROA not before: Fri 11 Sep 2026 02:00:43 +0000 ROA not after: Fri 10 Sep 2027 02:05:43 +0000 asID: 218904 IP address blocks: 85.155.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c9:ee:01:6a:fa:b0:9a:8f:1f:06:48:0f:93:d3:6c:93:e6:0c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 11 02:00:43 2026 GMT Not After : Sep 10 02:05:43 2027 GMT Subject: CN=EA8A168D42337112C98B96670413C804F70FABE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:39:88:f2:b8:f2:c4:1b:97:4d:b0:58:5c: 5f:f9:24:18:00:6e:8b:e8:d0:00:e8:0f:0a:d0:e1: 34:27:66:7b:a0:11:16:06:6d:1a:bc:5a:e7:7e:22: 1e:39:39:ff:6e:b3:04:6b:9b:64:b4:fd:f4:78:52: 4a:ad:52:d1:36:41:8d:17:5d:c8:20:7d:91:c4:fe: 0b:e2:28:0a:c5:34:5d:61:43:90:cc:1c:da:6f:89: 3a:cd:47:52:ad:91:e2:5a:b3:d4:85:33:97:7b:ab: 74:9f:e8:36:fe:b0:77:89:81:9a:71:a6:7a:c1:76: 9a:6d:50:94:e5:e3:16:21:75:16:84:25:28:a2:17: 5a:2c:e1:eb:6c:32:4d:d3:43:3d:4e:28:ad:e3:4d: 29:c5:d6:2f:a3:e8:2e:79:ff:70:7c:a6:64:2e:35: d2:63:aa:18:e4:3a:a8:eb:28:51:3a:79:19:ce:bf: 64:e8:35:73:1f:97:24:8f:73:e0:fe:f1:2c:8d:f7: d2:de:9f:aa:31:51:d1:da:6b:c7:c8:12:87:04:e2: b3:dc:c6:ea:38:6b:40:57:91:f6:fc:27:3c:3d:48: a5:1e:43:b7:52:b0:e5:6c:84:40:65:fb:f3:b7:59: 30:f9:77:5d:85:91:79:8d:3d:93:34:0d:2c:2a:72: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:16:8D:42:33:71:12:C9:8B:96:67:04:13:C8:04:F7:0F:AB:E7 X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232372e302f32342d3234203d3e20323138393034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.227.0/24 Signature Algorithm: sha256WithRSAEncryption 74:9d:2e:9e:42:7a:c7:67:a2:9b:68:01:45:18:10:15:a3:d6: 07:c2:d8:5a:d7:40:81:2b:95:a5:fa:e8:75:5d:05:15:6d:5d: 51:0e:1e:cd:18:22:9e:d9:ca:4d:c2:98:fe:a3:ec:3b:6b:bf: 19:44:9b:50:f0:f2:62:22:3c:c3:c8:8d:a3:43:31:0e:b1:3c: 69:38:60:e3:51:68:fc:a6:01:4d:91:79:2a:9b:14:ba:b4:ca: b7:e1:46:b4:77:dd:d5:8f:16:b4:3c:3a:7a:26:b9:8f:7b:cf: 08:45:45:87:28:b6:de:40:da:bb:d0:35:9b:e7:a4:5f:f5:ee: 79:27:92:d8:3c:e1:53:8e:29:23:3a:81:d6:a2:36:ad:60:22: b7:f0:01:e6:ff:71:8a:38:dd:cf:9e:12:b8:1f:a6:05:b0:f6: ef:ba:1e:35:c7:0f:78:a3:df:60:7a:31:ac:d5:b3:f5:ca:b0: 0b:bf:2a:d3:65:05:e5:2f:c9:fc:ca:0b:df:a2:2f:0c:44:81: c4:03:0f:bd:6b:50:d1:b2:ee:17:43:12:a7:4a:0c:4c:d7:2f: a9:c1:49:fd:0c:22:e7:77:90:bd:42:2a:49:4e:40:8a:c6:fc: ee:92:57:55:13:de:5a:e9:e7:cf:25:ec:9b:57:22:98:1c:67: c3:1e:ff:73 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUF8nuAWr6sJqPHwZID5PTbJPmDE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MTEwMjAwNDNaFw0yNzA5MTAwMjA1NDNaMDMxMTAvBgNV BAMTKEVBOEExNjhENDIzMzcxMTJDOThCOTY2NzA0MTNDODA0RjcwRkFCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltjmI8rjyxBuXTbBYXF/5JBgA bovo0ADoDwrQ4TQnZnugERYGbRq8Wud+Ih45Of9uswRrm2S0/fR4UkqtUtE2QY0X XcggfZHE/gviKArFNF1hQ5DMHNpviTrNR1KtkeJas9SFM5d7q3Sf6Db+sHeJgZpx pnrBdpptUJTl4xYhdRaEJSiiF1os4etsMk3TQz1OKK3jTSnF1i+j6C55/3B8pmQu NdJjqhjkOqjrKFE6eRnOv2ToNXMflySPc+D+8SyN99Len6oxUdHaa8fIEocE4rPc xuo4a0BXkfb8Jzw9SKUeQ7dSsOVshEBl+/O3WTD5d12FkXmNPZM0DSwqcvJ3AgMB AAGjggJvMIICazAdBgNVHQ4EFgQU6ooWjUIzcRLJi5ZnBBPIBPcPq+cwHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYt Nzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzQvMzgzNTJlMzEzNTM1MmUzMjMy MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzOTMwMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABVm+MwDQYJKoZIhvcNAQELBQADggEBAHSdLp5CesdnoptoAUUYEBWj1gfC2FrX QIErlaX66HVdBRVtXVEOHs0YIp7Zyk3CmP6j7DtrvxlEm1Dw8mIiPMPIjaNDMQ6x PGk4YONRaPymAU2ReSqbFLq0yrfhRrR33dWPFrQ8OnomuY97zwhFRYcott5A2rvQ NZvnpF/17nknktg84VOOKSM6gdaiNq1gIrfwAeb/cYo43c+eErgfpgWw9u+6HjXH D3ij32B6MazVs/XKsAu/KtNlBeUvyfzKC9+iLwxEgcQDD71rUNGy7hdDEqdKDEzX L6nBSf0MIud3kL1CKklOQIrG/O6SV1UT3lrp588l7JtXIpgcZ8Me/3M= -----END CERTIFICATE-----Generated at Tue Sep 22 12:26:21 2026 by rpki-client