$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20343032333338.roa File: 32332e3135352e3133322e302f32342d3234203d3e20343032333338.roa (raw, json) Hash identifier: fzU4rchNeg+A4G9P3a1X+ynK3vpCJlAGbjn8hVUYXUY= Subject key identifier: 2F:F6:47:79:38:79:9D:54:C0:C9:7A:FE:CC:C7:19:9E:4A:06:9C:1A Certificate issuer: /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Certificate serial: 33E13042AE18D73276B82691B4D7F7FBDE7CAF2E Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20343032333338.roa Signing time: Thu 02 Apr 2026 12:59:31 +0000 ROA not before: Thu 02 Apr 2026 12:54:31 +0000 ROA not after: Thu 01 Apr 2027 12:59:31 +0000 asID: 402338 IP address blocks: 23.155.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e1:30:42:ae:18:d7:32:76:b8:26:91:b4:d7:f7:fb:de:7c:af:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Validity Not Before: Apr 2 12:54:31 2026 GMT Not After : Apr 1 12:59:31 2027 GMT Subject: CN=2FF6477938799D54C0C97AFECCC7199E4A069C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:71:6b:34:bd:aa:2f:e7:af:16:d3:f2:7c: 85:d6:dd:2d:67:ca:1e:aa:f1:2c:30:1b:0c:eb:a2: 4b:14:0e:76:24:c3:a4:76:4b:a0:1f:f1:22:5c:74: 37:a7:03:c4:1f:35:ed:af:d6:21:a7:80:41:97:b9: 74:7b:c4:80:60:22:87:b8:3d:ba:dd:ef:37:52:d2: fa:9e:46:5e:ed:35:b7:50:5f:69:a0:62:66:5b:6d: 8c:8d:38:0c:07:60:7e:96:80:f6:fa:8c:55:93:aa: 1c:b5:c7:9d:4a:b4:c9:92:3c:3a:14:9c:63:3d:09: 41:db:5c:cf:b8:d3:f0:cc:3d:ad:fe:29:85:71:58: 19:a3:6f:e2:bd:bd:46:4f:13:fe:f1:87:23:2d:7e: c2:ce:94:7f:a0:43:67:37:43:5c:b6:e7:b1:58:4b: b4:38:9a:d4:22:a0:98:23:bd:d2:58:39:26:2c:b7: 1e:de:77:a0:1a:5d:2f:0a:55:7a:c9:ac:04:02:17: 46:90:bc:02:45:2e:88:dc:51:e0:31:9b:a1:40:9e: d2:12:6a:89:06:31:fa:c3:34:f3:53:58:86:37:b9: d8:35:e6:18:c6:5b:1c:db:b0:65:a7:69:dc:9c:8d: 43:bd:bc:f4:8a:d7:f1:c6:98:48:c3:e2:66:38:4e: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:47:79:38:79:9D:54:C0:C9:7A:FE:CC:C7:19:9E:4A:06:9C:1A X509v3 Authority Key Identifier: keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20343032333338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.155.132.0/24 Signature Algorithm: sha256WithRSAEncryption 87:97:6f:81:4a:35:95:5c:b0:4a:03:e8:c6:4f:72:d0:be:b9: 82:b1:d7:5d:7c:21:84:d0:a5:ef:fa:87:b2:02:97:6d:e4:11: 2b:a5:11:21:a9:b1:34:2e:e3:ee:17:59:8a:b3:3f:b8:ee:12: 2a:73:0d:1a:35:7a:59:a2:47:44:6f:c6:8f:65:d3:30:7e:58: df:b3:fc:3c:52:20:79:c0:e1:5f:be:d5:e7:04:09:80:8b:87: 97:87:2c:95:34:42:fd:bf:3d:0e:3a:27:91:63:c1:eb:0e:6b: 72:b2:b0:49:4a:22:1d:29:51:7f:49:65:0e:e2:6d:27:3d:22: d4:a5:2e:4f:e2:c5:77:1f:ff:24:a3:9d:55:d5:b7:6d:22:12: d2:85:50:d6:68:40:81:9c:2b:60:32:aa:d9:e5:71:84:32:d9: 7e:63:09:1e:c9:69:33:71:2d:5e:29:12:df:2e:c4:31:46:6a: 2a:d5:b5:28:b4:18:f8:c0:9f:10:30:a7:40:13:cf:06:8f:e1: 62:41:3c:77:af:44:7f:7c:99:49:7b:ef:8d:64:b0:cc:91:b3: af:d0:dd:af:e5:6b:57:e3:ba:86:58:78:e3:4b:1f:a6:15:64: b6:b8:8d:37:94:4f:a1:07:25:83:da:5e:2a:4f:a4:a0:74:c6: 8e:0c:fa:1a -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIUM+EwQq4Y1zJ2uCaRtNf3+958ry4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFk N2JkOTU1MmMzMGNlZTBiOWMwHhcNMjYwNDAyMTI1NDMxWhcNMjcwNDAxMTI1OTMx WjAzMTEwLwYDVQQDEygyRkY2NDc3OTM4Nzk5RDU0QzBDOTdBRkVDQ0M3MTk5RTRB MDY5QzFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NFxazS9qi/n rxbT8nyF1t0tZ8oeqvEsMBsM66JLFA52JMOkdkugH/EiXHQ3pwPEHzXtr9Yhp4BB l7l0e8SAYCKHuD263e83UtL6nkZe7TW3UF9poGJmW22MjTgMB2B+loD2+oxVk6oc tcedSrTJkjw6FJxjPQlB21zPuNPwzD2t/imFcVgZo2/ivb1GTxP+8YcjLX7CzpR/ oENnN0NctuexWEu0OJrUIqCYI73SWDkmLLce3negGl0vClV6yawEAhdGkLwCRS6I 3FHgMZuhQJ7SEmqJBjH6wzTzU1iGN7nYNeYYxlsc27Blp2ncnI1Dvbz0itfxxphI w+JmOE4+cQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFC/2R3k4eZ1UwMl6/szHGZ5K BpwaMB8GA1UdIwQYMBaAFHr6IjtiOLDMY3T3/omUNk+/j1TeMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8yLzdBRkEyMjNCNjIzOEIwQ0M2Mzc0RjdGRTg5OTQzNjRG QkY4RjU0REUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUt NGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80NjU1M2FkMC1mYzE5LTRmMjgtOGVlMi1i NWNmZmQ0MzAzMDAvNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFkN2Jk OTU1MmMzMGNlZTBiOWMuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0LTU4MGQxMzY5YjdjNC8yLzMyMzMyZTMx MzUzNTJlMzEzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzMzMzM4 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQAF5uEMA0GCSqGSIb3DQEBCwUAA4IBAQCHl2+BSjWVXLBKA+jG T3LQvrmCsdddfCGE0KXv+oeyApdt5BErpREhqbE0LuPuF1mKsz+47hIqcw0aNXpZ okdEb8aPZdMwfljfs/w8UiB5wOFfvtXnBAmAi4eXhyyVNEL9vz0OOieRY8HrDmty srBJSiIdKVF/SWUO4m0nPSLUpS5P4sV3H/8ko51V1bdtIhLShVDWaECBnCtgMqrZ 5XGEMtl+YwkeyWkzcS1eKRLfLsQxRmoq1bUotBj4wJ8QMKdAE88Gj+FiQTx3r0R/ fJlJe++NZLDMkbOv0N2v5WtX47qGWHjjSx+mFWS2uI03lE+hByWD2l4qT6SgdMaO DPoa -----END CERTIFICATE-----Generated at Sat Apr 18 01:19:04 2026 by rpki-client