$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e203630393030.roa File: 3137302e33392e34392e302f32342d3234203d3e203630393030.roa (raw, json) Hash identifier: M4hHvLl+kHSCNPu4MPaW0Wj96xV3dFeqlWWiG/yVWWE= Subject key identifier: CE:46:10:85:88:5D:DF:43:1C:AD:B0:C4:02:35:88:68:B4:6E:E9:14 Certificate issuer: /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Certificate serial: 28BFF78658BCFFC27745E483D95162D46E80DA01 Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e203630393030.roa Signing time: Thu 04 Jun 2026 20:39:06 +0000 ROA not before: Thu 04 Jun 2026 20:34:06 +0000 ROA not after: Thu 03 Jun 2027 20:39:06 +0000 asID: 60900 IP address blocks: 170.39.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 04:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:bf:f7:86:58:bc:ff:c2:77:45:e4:83:d9:51:62:d4:6e:80:da:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Validity Not Before: Jun 4 20:34:06 2026 GMT Not After : Jun 3 20:39:06 2027 GMT Subject: CN=CE461085885DDF431CADB0C402358868B46EE914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:03:66:af:05:2d:dd:22:58:7b:19:5f:e3: 2b:a6:42:27:0b:26:17:d9:d9:e0:b2:17:e0:a7:53: bd:8a:5f:84:f3:59:de:75:13:44:ce:96:ec:0d:cb: 3f:fe:55:ab:c9:b3:0e:a7:24:64:d2:bd:ae:6f:9b: 97:a9:23:e8:83:c9:38:a1:d2:d2:38:74:21:01:24: 1f:a3:8d:fa:d0:56:a4:13:a9:36:4a:d5:44:ea:a0: 26:a6:84:3d:b6:63:46:52:76:f0:eb:94:6c:22:35: 0b:ce:1e:50:93:b2:ae:6c:de:ae:e4:dd:ff:8e:b4: 38:fc:bd:68:61:f9:29:23:68:51:b9:9b:40:a4:eb: 07:1a:36:9b:05:84:c3:70:18:3a:c9:f5:73:8a:3a: 49:83:17:88:2b:b1:f4:e5:ea:c5:30:26:64:3d:84: d3:17:13:ab:21:91:14:12:93:a7:f5:23:73:7e:1a: a9:95:4a:70:fb:b3:b1:08:cc:97:19:38:1f:2d:ff: 83:97:0e:e8:45:1d:09:68:00:44:05:aa:0d:86:24: 90:15:95:f2:1f:70:72:5e:cc:43:e4:62:d4:fb:bf: 75:74:de:8a:64:31:63:00:b5:58:85:f9:61:9e:0b: 5b:50:c9:35:00:bd:9c:05:d6:ea:4b:bc:f7:df:23: 15:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:46:10:85:88:5D:DF:43:1C:AD:B0:C4:02:35:88:68:B4:6E:E9:14 X509v3 Authority Key Identifier: keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e203630393030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.39.49.0/24 Signature Algorithm: sha256WithRSAEncryption 27:7f:ab:7b:d3:86:eb:bf:e0:05:9e:de:e5:f8:fb:a3:70:99: fc:7c:ac:29:c1:82:96:9e:8f:23:84:77:db:d8:1c:75:1c:50: cd:80:ac:46:9a:bb:e8:fd:ed:12:da:dd:28:2a:3e:ba:c4:98: cd:6d:0c:83:fc:0e:fd:17:93:6e:44:e3:16:a5:68:d3:16:4e: 4a:3e:68:a0:db:25:fa:47:a6:44:51:d1:34:0b:74:73:43:2a: 86:2f:34:fa:c1:f3:ca:12:8e:28:40:95:0d:7e:c8:b2:09:35: a8:73:3b:21:3e:54:71:a9:34:a6:0f:d3:3f:b5:fe:f4:31:41: 0e:9c:f7:2e:a5:f7:30:60:f2:71:bc:b1:6a:db:7c:25:03:a5: 33:8d:fb:b1:fd:74:b3:a7:30:d2:7d:8f:9a:99:5a:3a:df:05: 8e:61:07:ca:2d:67:c8:7c:4f:c9:d3:e8:29:aa:99:e2:1a:45: 44:74:00:63:6f:03:92:6e:df:40:b2:27:ff:f1:91:a1:f3:8b: 6b:ac:46:16:9a:f9:39:e2:08:cb:24:63:7f:8a:d7:8c:fd:51: 7e:52:12:5f:34:47:4d:a3:fe:d4:29:16:85:31:1c:64:48:a2: 14:3c:2e:a6:82:4a:6b:d5:f7:c5:48:cf:1a:9f:c4:5f:06:5f: a8:2f:13:91 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUKL/3hli8/8J3ReSD2VFi1G6A2gEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4 Zjc5NGRmMzJiZmU5ZWQwNzEwHhcNMjYwNjA0MjAzNDA2WhcNMjcwNjAzMjAzOTA2 WjAzMTEwLwYDVQQDEyhDRTQ2MTA4NTg4NURERjQzMUNBREIwQzQwMjM1ODg2OEI0 NkVFOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2okDZq8FLd0i WHsZX+MrpkInCyYX2dngshfgp1O9il+E81nedRNEzpbsDcs//lWrybMOpyRk0r2u b5uXqSPog8k4odLSOHQhASQfo4360FakE6k2StVE6qAmpoQ9tmNGUnbw65RsIjUL zh5Qk7KubN6u5N3/jrQ4/L1oYfkpI2hRuZtApOsHGjabBYTDcBg6yfVzijpJgxeI K7H05erFMCZkPYTTFxOrIZEUEpOn9SNzfhqplUpw+7OxCMyXGTgfLf+Dlw7oRR0J aABEBaoNhiSQFZXyH3ByXsxD5GLU+791dN6KZDFjALVYhflhngtbUMk1AL2cBdbq S7z33yMVhwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFM5GEIWIXd9DHK2wxAI1iGi0 bukUMB8GA1UdIwQYMBaAFJOwKWwxeHeA/oQTMY/Q0nCDg0zFMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC84LzkzQjAyOTZDMzE3ODc3ODBGRTg0MTMzMThGRDBEMjcw ODM4MzRDQzUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1j ZTcwNDVmZmQyM2EvMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4Zjc5 NGRmMzJiZmU5ZWQwNzEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC84LzMxMzczMDJl MzMzOTJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzOTMwMzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACqJzEwDQYJKoZIhvcNAQELBQADggEBACd/q3vThuu/4AWe3uX4+6Nw mfx8rCnBgpaejyOEd9vYHHUcUM2ArEaau+j97RLa3SgqPrrEmM1tDIP8Dv0Xk25E 4xalaNMWTko+aKDbJfpHpkRR0TQLdHNDKoYvNPrB88oSjihAlQ1+yLIJNahzOyE+ VHGpNKYP0z+1/vQxQQ6c9y6l9zBg8nG8sWrbfCUDpTON+7H9dLOnMNJ9j5qZWjrf BY5hB8otZ8h8T8nT6CmqmeIaRUR0AGNvA5Ju30CyJ//xkaHzi2usRhaa+TniCMsk Y3+K14z9UX5SEl80R02j/tQpFoUxHGRIohQ8LqaCSmvV98VIzxqfxF8GX6gvE5E= -----END CERTIFICATE-----Generated at Sat Jun 13 08:47:25 2026 by rpki-client