$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20323135323438.roa File: 32332e3135352e3133322e302f32342d3234203d3e20323135323438.roa (raw, json) Hash identifier: c3hWnS8DoW546xPA3c5dq6uKI5KCkqswjLoTTVqVVsI= Subject key identifier: E6:B8:AE:19:53:0B:71:F1:8A:62:3D:5F:D5:AB:6D:41:71:F1:8A:07 Certificate issuer: /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Certificate serial: 33582FB793E6462C5DD70621AB0A1AC5B8FC2A41 Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20323135323438.roa Signing time: Thu 02 Apr 2026 12:59:11 +0000 ROA not before: Thu 02 Apr 2026 12:54:11 +0000 ROA not after: Thu 01 Apr 2027 12:59:11 +0000 asID: 215248 IP address blocks: 23.155.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 03:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:58:2f:b7:93:e6:46:2c:5d:d7:06:21:ab:0a:1a:c5:b8:fc:2a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Validity Not Before: Apr 2 12:54:11 2026 GMT Not After : Apr 1 12:59:11 2027 GMT Subject: CN=E6B8AE19530B71F18A623D5FD5AB6D4171F18A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:aa:c2:37:20:e4:cc:6c:3b:35:d7:56:10:05: 7c:65:af:24:ab:60:40:50:b6:6c:97:87:35:91:11: 1d:d7:0b:6d:ce:fa:b8:7d:15:69:1b:6a:04:ab:ba: f9:32:d4:18:a4:ea:fc:fc:fe:56:6b:b3:07:8a:a1: 28:51:46:02:77:23:83:a3:7a:5b:39:df:d1:30:2f: 31:c0:94:92:0e:68:0b:da:70:dc:68:8a:69:5a:3e: bb:3c:dc:60:a8:fb:52:72:0d:46:1a:87:1e:bf:4c: 35:57:d5:f1:af:c6:dd:cd:e3:43:7c:d4:0c:da:bc: 43:cb:47:e5:8b:6d:d6:52:f0:f5:7c:e3:4e:c7:45: 3d:11:e8:f6:8a:62:02:08:5d:5b:7c:08:9d:6e:c2: 15:d6:d9:3f:eb:ad:54:ee:b3:3a:52:3a:3b:6a:88: a5:32:27:53:e8:03:37:ac:6b:a7:95:99:ac:e8:52: 32:34:0b:fa:47:67:87:5d:ae:46:28:65:32:0c:ab: 8d:8a:91:09:94:01:8a:05:37:32:cf:a1:1b:a9:73: 79:d1:9c:4b:3b:41:55:25:48:e5:7d:d2:cc:3b:c1: d6:c2:1a:0f:dc:dd:92:75:88:b1:3d:bb:ca:b6:de: a1:e8:2a:5a:56:17:3d:7c:25:6d:7c:e1:98:3a:fb: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B8:AE:19:53:0B:71:F1:8A:62:3D:5F:D5:AB:6D:41:71:F1:8A:07 X509v3 Authority Key Identifier: keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20323135323438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.155.132.0/24 Signature Algorithm: sha256WithRSAEncryption 47:d9:ca:0b:79:6b:b8:24:32:3e:b0:72:ce:51:87:c0:33:27: 87:c8:4d:47:68:1e:18:ed:d8:6a:d0:d7:43:67:80:39:2c:61: fb:f1:a5:88:b0:54:bc:96:7d:69:cf:77:47:63:e6:f1:3f:9b: 30:7f:f7:fa:09:90:fd:9e:ab:8e:30:03:1a:c3:19:b7:b4:fc: ce:34:ed:f1:23:91:0e:4b:f4:75:3f:7d:ea:6d:9f:da:2e:b3: ae:38:40:4b:69:1f:58:aa:13:46:41:7d:d6:7c:f6:b0:d7:08: 42:f9:53:06:af:bc:22:2f:a6:58:0c:50:46:a1:5a:97:5c:ec: b6:ff:42:0e:ee:c8:18:0f:6f:54:33:85:08:75:c3:3e:23:f1: 79:b3:0e:c4:00:21:41:39:0d:4e:45:60:e9:91:e6:e6:2d:12: d1:d8:67:52:f5:b0:ac:81:fe:1f:c2:9d:0e:4d:45:ed:05:30: 13:10:7e:1c:53:be:c9:83:b5:7b:20:1b:a2:85:c4:f5:77:08: d0:61:a9:50:ac:f1:c5:78:b6:f3:e1:05:b6:59:5d:85:1d:f5: e3:21:78:e6:f8:d5:65:c1:64:e1:ac:ec:5f:2b:04:54:d5:2e: b8:78:ea:9f:be:2b:8c:ad:1a:d0:fd:83:83:47:27:5e:14:4c: da:2a:5b:61 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIUM1gvt5PmRixd1wYhqwoaxbj8KkEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFk N2JkOTU1MmMzMGNlZTBiOWMwHhcNMjYwNDAyMTI1NDExWhcNMjcwNDAxMTI1OTEx WjAzMTEwLwYDVQQDEyhFNkI4QUUxOTUzMEI3MUYxOEE2MjNENUZENUFCNkQ0MTcx RjE4QTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qrCNyDkzGw7 NddWEAV8Za8kq2BAULZsl4c1kREd1wttzvq4fRVpG2oEq7r5MtQYpOr8/P5Wa7MH iqEoUUYCdyODo3pbOd/RMC8xwJSSDmgL2nDcaIppWj67PNxgqPtScg1GGocev0w1 V9Xxr8bdzeNDfNQM2rxDy0fli23WUvD1fONOx0U9Eej2imICCF1bfAidbsIV1tk/ 661U7rM6Ujo7aoilMidT6AM3rGunlZms6FIyNAv6R2eHXa5GKGUyDKuNipEJlAGK BTcyz6EbqXN50ZxLO0FVJUjlfdLMO8HWwhoP3N2SdYixPbvKtt6h6CpaVhc9fCVt fOGYOvuIOQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFOa4rhlTC3HximI9X9WrbUFx 8YoHMB8GA1UdIwQYMBaAFHr6IjtiOLDMY3T3/omUNk+/j1TeMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8yLzdBRkEyMjNCNjIzOEIwQ0M2Mzc0RjdGRTg5OTQzNjRG QkY4RjU0REUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUt NGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80NjU1M2FkMC1mYzE5LTRmMjgtOGVlMi1i NWNmZmQ0MzAzMDAvNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFkN2Jk OTU1MmMzMGNlZTBiOWMuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0LTU4MGQxMzY5YjdjNC8yLzMyMzMyZTMx MzUzNTJlMzEzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzIzNDM4 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQAF5uEMA0GCSqGSIb3DQEBCwUAA4IBAQBH2coLeWu4JDI+sHLO UYfAMyeHyE1HaB4Y7dhq0NdDZ4A5LGH78aWIsFS8ln1pz3dHY+bxP5swf/f6CZD9 nquOMAMawxm3tPzONO3xI5EOS/R1P33qbZ/aLrOuOEBLaR9YqhNGQX3WfPaw1whC +VMGr7wiL6ZYDFBGoVqXXOy2/0IO7sgYD29UM4UIdcM+I/F5sw7EACFBOQ1ORWDp kebmLRLR2GdS9bCsgf4fwp0OTUXtBTATEH4cU77Jg7V7IBuihcT1dwjQYalQrPHF eLbz4QW2WV2FHfXjIXjm+NVlwWThrOxfKwRU1S64eOqfviuMrRrQ/YODRydeFEza Klth -----END CERTIFICATE-----Generated at Fri Apr 17 16:11:19 2026 by rpki-client