$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/32332e3133362e32302e302f32342d3234203d3e20333936303634.roa File: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (raw, json) Hash identifier: uT+NwPbVKc5sZXDTfAnZ7NBSduHWPZF9xzdlVQV9EOs= Subject key identifier: 07:6E:AE:E6:39:7C:F1:8C:BE:7A:1F:80:5B:5A:CD:96:71:A0:80:75 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 76F0137D003FED101D91EBE325E4E720F7794C0B Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/32332e3133362e32302e302f32342d3234203d3e20333936303634.roa Signing time: Sat 21 Feb 2026 16:50:30 +0000 ROA not before: Sat 21 Feb 2026 16:45:30 +0000 ROA not after: Sat 20 Feb 2027 16:50:30 +0000 asID: 396064 IP address blocks: 23.136.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 04:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f0:13:7d:00:3f:ed:10:1d:91:eb:e3:25:e4:e7:20:f7:79:4c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: Feb 21 16:45:30 2026 GMT Not After : Feb 20 16:50:30 2027 GMT Subject: CN=076EAEE6397CF18CBE7A1F805B5ACD9671A08075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:01:11:0a:08:93:46:8f:3a:b5:2b:75:32:2b: 62:a2:9a:06:ed:73:af:55:65:1d:2c:d0:0f:3f:12: da:0c:49:9b:7a:bd:9c:74:eb:d6:8e:06:06:4b:6d: da:b2:75:19:08:49:9c:aa:36:33:ab:05:c6:08:ae: dd:1e:2a:c5:b8:70:3d:8b:1a:12:57:4b:39:dc:f7: 2b:99:8a:fb:1c:e9:a5:b2:68:47:d8:0d:a2:5c:bf: ef:ba:c7:cf:2e:2b:98:bb:5f:13:2c:b6:1f:96:99: a2:cd:8f:d1:4f:85:7e:d3:f0:2b:a4:45:14:e6:48: 41:8b:d9:39:9c:b1:6b:4f:30:41:4e:c2:85:0c:66: d1:11:8b:5a:cc:4f:da:b3:8c:83:bb:dd:72:61:83: d7:f8:49:29:43:24:2b:ab:73:1d:9e:c8:8b:c9:73: 0b:e1:f6:c2:25:78:96:71:6c:8c:14:60:3f:c3:f4: 87:38:d9:b4:3a:c7:b8:c1:b9:fc:d3:19:55:5e:6f: 8e:6e:b1:7a:c0:14:95:9b:38:15:0f:a0:7a:7d:de: ae:0b:fe:aa:88:20:63:8e:a0:24:a4:7a:99:4d:e7: 1f:09:dc:80:bf:b6:85:37:40:97:4f:8a:a6:bc:e8: b2:4e:88:46:86:9f:6c:18:48:7e:f1:f1:b5:a9:48: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6E:AE:E6:39:7C:F1:8C:BE:7A:1F:80:5B:5A:CD:96:71:A0:80:75 X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/32332e3133362e32302e302f32342d3234203d3e20333936303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.136.20.0/24 Signature Algorithm: sha256WithRSAEncryption 79:64:e0:63:85:78:75:bc:13:94:ac:12:19:46:57:7d:11:12: 11:f8:41:08:67:98:e6:bf:bb:47:96:fb:1c:03:e5:22:12:63: 16:60:b2:fd:01:1a:19:f5:b5:e0:9d:17:78:d2:90:90:57:01: 1b:05:a7:4d:9a:38:4e:67:76:af:5e:ce:5e:58:fa:f5:53:a3: e8:52:e0:ba:55:31:cd:67:34:0f:8c:d4:c1:02:8e:fe:29:ff: 38:75:f4:44:87:12:b1:26:7e:f4:cf:64:df:df:60:4a:4b:9d: dc:5a:e6:30:90:65:95:4c:77:64:5b:b5:db:91:5f:a5:08:d2: 70:60:0a:57:65:1f:88:1f:ab:b7:de:43:e8:10:2d:34:5e:60: 5c:75:88:3a:79:ee:05:e1:3c:2e:7d:3d:4b:4c:ca:80:d6:49: 52:03:c4:f0:ce:d8:63:2e:ca:74:84:b6:d8:55:4f:3c:eb:64: 25:7c:0f:d7:dd:6b:43:e5:a8:6e:c9:bf:b9:1a:8a:cd:7e:f7: 75:dc:e3:92:af:e1:b5:5a:f8:c4:58:ce:05:12:5e:3a:2f:f5: 09:94:25:41:14:f0:b8:6d:28:26:d9:8b:a0:99:66:ba:1f:cb: 7d:2e:f2:55:b1:1e:18:79:15:77:ca:40:09:ee:cd:13:f3:89: cc:dc:e0:c7 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUdvATfQA/7RAdkevjJeTnIPd5TAswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjYwMjIxMTY0NTMwWhcNMjcwMjIwMTY1MDMw WjAzMTEwLwYDVQQDEygwNzZFQUVFNjM5N0NGMThDQkU3QTFGODA1QjVBQ0Q5Njcx QTA4MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AERCgiTRo86 tSt1MitiopoG7XOvVWUdLNAPPxLaDEmber2cdOvWjgYGS23asnUZCEmcqjYzqwXG CK7dHirFuHA9ixoSV0s53PcrmYr7HOmlsmhH2A2iXL/vusfPLiuYu18TLLYflpmi zY/RT4V+0/ArpEUU5khBi9k5nLFrTzBBTsKFDGbREYtazE/as4yDu91yYYPX+Ekp QyQrq3MdnsiLyXML4fbCJXiWcWyMFGA/w/SHONm0Ose4wbn80xlVXm+ObrF6wBSV mzgVD6B6fd6uC/6qiCBjjqAkpHqZTecfCdyAv7aFN0CXT4qmvOiyTohGhp9sGEh+ 8fG1qUhTTQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFAduruY5fPGMvnofgFtazZZx oIB1MB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0LTU4MGQxMzY5YjdjNC8xLzMyMzMyZTMx MzMzNjJlMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNjMwMzYzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEABeIFDANBgkqhkiG9w0BAQsFAAOCAQEAeWTgY4V4dbwTlKwSGUZX fRESEfhBCGeY5r+7R5b7HAPlIhJjFmCy/QEaGfW14J0XeNKQkFcBGwWnTZo4Tmd2 r17OXlj69VOj6FLgulUxzWc0D4zUwQKO/in/OHX0RIcSsSZ+9M9k399gSkud3Frm MJBllUx3ZFu125FfpQjScGAKV2UfiB+rt95D6BAtNF5gXHWIOnnuBeE8Ln09S0zK gNZJUgPE8M7YYy7KdIS22FVPPOtkJXwP191rQ+Wobsm/uRqKzX73ddzjkq/htVr4 xFjOBRJeOi/1CZQlQRTwuG0oJtmLoJlmuh/LfS7yVbEeGHkVd8pACe7NE/OJzNzg xw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:37 2026 by rpki-client