$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa File: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (raw, json) Hash identifier: 9v2QjpDsJPZbBDDpUZr7ydvpM8Cp3G+4wDPcpeGfs24= Subject key identifier: B8:EF:B4:D5:4A:DF:67:60:B1:06:7E:1D:95:AB:87:4D:BF:F2:AA:AE Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Certificate serial: 022D3CEAABB9D3B65B759953C6457228CEFDF0B7 Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa Signing time: Fri 24 Oct 2025 17:06:32 +0000 ROA not before: Fri 24 Oct 2025 17:01:32 +0000 ROA not after: Fri 23 Oct 2026 17:06:32 +0000 asID: 49304 IP address blocks: 206.251.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2d:3c:ea:ab:b9:d3:b6:5b:75:99:53:c6:45:72:28:ce:fd:f0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Validity Not Before: Oct 24 17:01:32 2025 GMT Not After : Oct 23 17:06:32 2026 GMT Subject: CN=B8EFB4D54ADF6760B1067E1D95AB874DBFF2AAAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:04:52:dd:a2:98:95:52:bb:43:c9:9c:1e: f9:11:b3:c6:7f:73:45:cd:32:2c:4a:42:a3:7a:10: 20:3e:40:7f:81:4b:dd:6f:47:72:d7:cb:81:9f:c4: f9:ef:57:f0:65:c2:ee:f4:70:1e:5d:e7:e9:89:3a: fe:80:95:de:52:62:1d:fb:ac:15:89:98:5f:e3:13: 5e:a8:3c:2b:00:17:fc:89:e3:ad:1c:29:20:a5:d3: 2f:38:00:78:ff:44:d0:39:77:24:12:a8:69:58:5c: de:ab:97:bd:7f:96:4d:78:66:b5:7d:df:55:f0:f9: fb:49:57:50:73:02:23:27:c0:ac:42:2f:0c:2c:6d: 4c:fa:91:b5:dc:d3:82:4c:33:5c:37:70:5e:f3:8a: ce:42:50:54:c0:19:08:ed:cf:3e:6f:98:40:3d:9f: 0a:00:72:73:ec:bc:74:4a:e6:eb:35:16:dd:0b:6a: ce:d2:06:ad:b4:c6:da:a9:7f:a6:6f:3c:97:8d:df: 47:f0:c6:0f:1e:c9:c7:fd:7e:c3:51:3a:06:7a:5c: c4:82:97:11:66:c4:01:e4:9a:64:9b:b7:98:47:8a: 88:3b:4f:4b:7e:fa:17:67:a7:ad:12:09:58:80:19: df:a8:11:d3:7a:1d:97:42:f2:d8:bb:0e:d9:f1:fa: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EF:B4:D5:4A:DF:67:60:B1:06:7E:1D:95:AB:87:4D:BF:F2:AA:AE X509v3 Authority Key Identifier: keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.251.52.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:5e:16:52:e7:de:21:46:0b:c6:95:13:d1:6c:66:b7:a3:78: 64:8e:d6:43:24:99:d4:fc:53:56:db:f9:0e:34:27:b8:79:c2: 8c:01:b9:fe:bc:68:38:21:72:72:8a:e1:50:78:5a:18:19:72: e7:08:fe:ad:84:01:22:1b:09:9f:a9:30:79:a5:93:79:c4:53: f0:42:67:86:fe:42:02:8c:22:72:15:2a:88:c1:ec:b0:57:a3: 57:17:0e:0b:f4:30:f2:41:58:79:f3:35:96:9d:0b:38:4c:a7: 78:89:77:89:e9:17:30:cb:05:45:5e:5b:69:1b:43:ba:d4:3c: 25:db:ee:ce:21:e4:39:c3:e7:58:8e:3d:53:f8:9e:8d:6a:4c: 14:bf:67:31:42:82:0f:db:7e:71:7b:bc:1f:48:23:62:a7:d7: 2a:52:af:cc:df:22:a9:39:f2:39:66:19:eb:21:7b:8d:9e:78: 72:52:de:58:88:dd:03:8b:44:af:5e:5a:df:9c:51:16:39:56: 90:ba:29:13:16:17:43:5e:c0:36:91:e9:2b:5a:99:fd:fd:29: 2c:95:87:60:1d:86:24:d8:91:57:84:46:11:5e:ae:f0:a8:5c: 7a:d9:c9:08:1f:a2:9c:37:5e:41:51:04:7a:f7:83:97:28:7d: 41:7a:0b:71 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUAi086qu507ZbdZlTxkVyKM798LcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2 MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwMTMyWhcNMjYxMDIzMTcwNjMy WjAzMTEwLwYDVQQDEyhCOEVGQjRENTRBREY2NzYwQjEwNjdFMUQ5NUFCODc0REJG RjJBQUFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2MEUt2imJVS u0PJnB75EbPGf3NFzTIsSkKjehAgPkB/gUvdb0dy18uBn8T571fwZcLu9HAeXefp iTr+gJXeUmId+6wViZhf4xNeqDwrABf8ieOtHCkgpdMvOAB4/0TQOXckEqhpWFze q5e9f5ZNeGa1fd9V8Pn7SVdQcwIjJ8CsQi8MLG1M+pG13NOCTDNcN3Be84rOQlBU wBkI7c8+b5hAPZ8KAHJz7Lx0SubrNRbdC2rO0gattMbaqX+mbzyXjd9H8MYPHsnH /X7DUToGelzEgpcRZsQB5Jpkm7eYR4qIO09LfvoXZ6etEglYgBnfqBHTeh2XQvLY uw7Z8fp4CwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFLjvtNVK32dgsQZ+HZWrh02/ 8qquMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4 LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx NzZmMTBlMjAxMGQyMmQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzAzNjJl MzIzNTMxMmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzOTMzMzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAs77NDANBgkqhkiG9w0BAQsFAAOCAQEAX14WUufeIUYLxpUT0Wxm t6N4ZI7WQySZ1PxTVtv5DjQnuHnCjAG5/rxoOCFycorhUHhaGBly5wj+rYQBIhsJ n6kweaWTecRT8EJnhv5CAowichUqiMHssFejVxcOC/Qw8kFYefM1lp0LOEyneIl3 iekXMMsFRV5baRtDutQ8JdvuziHkOcPnWI49U/iejWpMFL9nMUKCD9t+cXu8H0gj YqfXKlKvzN8iqTnyOWYZ6yF7jZ54clLeWIjdA4tEr15a35xRFjlWkLopExYXQ17A NpHpK1qZ/f0pLJWHYB2GJNiRV4RGEV6u8KhcetnJCB+inDdeQVEEeveDlyh9QXoL cQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:22 2025 by rpki-client