$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3134392e3131322e3131372e302f32342d3234203d3e20313533333731.roa File: 3134392e3131322e3131372e302f32342d3234203d3e20313533333731.roa (raw, json) Hash identifier: dDJtJKKq70B1Vvrt2gSO8360QywtnG62buElXygcB9U= Subject key identifier: 3F:2E:22:03:6F:3B:91:C3:51:5B:35:2D:29:C8:1F:49:A9:B4:60:D4 Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Certificate serial: 266EDE188EF4F17AA539B47E19520C3C1CB6C5CB Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3134392e3131322e3131372e302f32342d3234203d3e20313533333731.roa Signing time: Fri 24 Oct 2025 17:09:45 +0000 ROA not before: Fri 24 Oct 2025 17:04:45 +0000 ROA not after: Fri 23 Oct 2026 17:09:45 +0000 asID: 153371 IP address blocks: 149.112.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6e:de:18:8e:f4:f1:7a:a5:39:b4:7e:19:52:0c:3c:1c:b6:c5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Validity Not Before: Oct 24 17:04:45 2025 GMT Not After : Oct 23 17:09:45 2026 GMT Subject: CN=3F2E22036F3B91C3515B352D29C81F49A9B460D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e7:c1:ca:db:03:4c:bb:27:7e:f5:97:0c:93: 7a:8f:df:21:96:35:db:87:dd:61:b8:2e:93:cc:7c: e5:96:59:c0:1a:94:ce:88:2f:9d:84:89:2b:1c:68: e8:1b:f9:9b:d5:d2:c5:d9:ca:38:df:1a:46:b7:9b: 6a:a5:63:64:77:80:18:83:b2:7a:c8:ae:ee:32:2d: 5e:b8:1d:21:0d:4e:0b:b9:ac:8c:04:fe:71:60:eb: 27:99:99:1a:e4:13:41:78:71:f9:9c:c3:b4:9d:b2: 79:12:8f:5d:e5:be:01:56:5b:fc:a7:df:d9:3f:ad: 04:9d:5b:d5:6d:93:7b:70:ea:d9:e5:93:fd:f6:e2: 16:88:11:a6:87:d7:ae:99:7b:7c:a9:ab:1d:67:1b: 0d:99:69:d5:7e:cf:e0:8c:85:e7:76:17:2d:ce:af: c6:73:c8:f8:ba:3f:f6:a9:6f:96:8f:b6:ca:b3:20: d5:a5:72:c0:2c:e8:b2:2f:5f:04:71:53:a5:85:29: 6a:6d:fa:60:9f:f9:c9:a0:e1:c8:5f:a1:18:0f:fa: 4f:72:39:65:0c:69:9c:35:c1:2f:f7:f4:4d:4c:4f: a5:4e:27:96:e6:a6:24:42:a1:95:fb:9b:27:79:85: 2e:e6:c4:2f:cd:88:9a:0e:7d:8a:31:b5:41:2e:aa: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2E:22:03:6F:3B:91:C3:51:5B:35:2D:29:C8:1F:49:A9:B4:60:D4 X509v3 Authority Key Identifier: keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3134392e3131322e3131372e302f32342d3234203d3e20313533333731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.112.117.0/24 Signature Algorithm: sha256WithRSAEncryption 27:17:52:6f:0a:33:0f:ca:e3:fb:9f:da:d9:1c:40:48:03:ff: 28:d9:9f:8e:1f:58:35:0c:89:22:fd:75:29:8b:4a:1f:8e:cb: b5:9f:e7:67:3a:cf:ed:d4:e0:90:d6:49:e0:6b:a9:30:e2:59: cb:02:ca:c1:92:b9:9c:4a:9d:0e:f1:fd:60:d0:14:17:ac:29: ec:c3:72:ab:a8:35:60:65:fb:2c:89:fb:67:c1:d1:ca:1a:ae: 07:f8:f2:74:1e:4a:5c:c2:ad:84:41:7e:24:7c:97:6d:71:dc: 5a:0c:84:1b:ed:d4:d9:36:fd:db:01:7e:00:8d:83:45:6b:8d: 65:37:3b:3d:14:6c:9d:35:e7:69:61:17:3d:57:06:4b:b4:4e: 19:1a:11:48:d3:b1:e9:c6:3a:98:57:b2:58:b1:5b:5a:f6:bf: 4a:54:32:c4:17:7f:1c:7e:db:92:a5:5f:e4:a9:fc:1b:d8:25: 8b:c3:cd:fc:c1:e3:48:c8:f2:b2:a8:7a:1a:75:36:92:60:2f: 15:1d:76:a8:00:1c:a6:e6:d3:89:67:79:39:94:4e:9c:aa:bd: ec:c9:20:d7:db:f1:1c:8c:40:2a:51:a6:9b:fe:ff:96:23:a5: 14:71:af:fa:9c:59:d0:95:6b:14:3f:06:7b:4e:5a:f6:64:15: 55:a1:bc:51 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUJm7eGI708XqlObR+GVIMPBy2xcswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2 MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwNDQ1WhcNMjYxMDIzMTcwOTQ1 WjAzMTEwLwYDVQQDEygzRjJFMjIwMzZGM0I5MUMzNTE1QjM1MkQyOUM4MUY0OUE5 QjQ2MEQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+fBytsDTLsn fvWXDJN6j98hljXbh91huC6TzHzlllnAGpTOiC+dhIkrHGjoG/mb1dLF2co43xpG t5tqpWNkd4AYg7J6yK7uMi1euB0hDU4LuayMBP5xYOsnmZka5BNBeHH5nMO0nbJ5 Eo9d5b4BVlv8p9/ZP60EnVvVbZN7cOrZ5ZP99uIWiBGmh9eumXt8qasdZxsNmWnV fs/gjIXndhctzq/Gc8j4uj/2qW+Wj7bKsyDVpXLALOiyL18EcVOlhSlqbfpgn/nJ oOHIX6EYD/pPcjllDGmcNcEv9/RNTE+lTieW5qYkQqGV+5sneYUu5sQvzYiaDn2K MbVBLqqrdwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFD8uIgNvO5HDUVs1LSnIH0mp tGDUMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4 LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx NzZmMTBlMjAxMGQyMmQuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMxMzQzOTJl MzEzMTMyMmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMzM3 MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACVcHUwDQYJKoZIhvcNAQELBQADggEBACcXUm8KMw/K4/uf 2tkcQEgD/yjZn44fWDUMiSL9dSmLSh+Oy7Wf52c6z+3U4JDWSeBrqTDiWcsCysGS uZxKnQ7x/WDQFBesKezDcquoNWBl+yyJ+2fB0coargf48nQeSlzCrYRBfiR8l21x 3FoMhBvt1Nk2/dsBfgCNg0VrjWU3Oz0UbJ0152lhFz1XBku0ThkaEUjTsenGOphX slixW1r2v0pUMsQXfxx+25KlX+Sp/BvYJYvDzfzB40jI8rKoehp1NpJgLxUddqgA HKbm04lneTmUTpyqvezJINfb8RyMQCpRppv+/5YjpRRxr/qcWdCVaxQ/BntOWvZk FVWhvFE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:21 2025 by rpki-client