$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e20313938313030.roa File: 32332e3137352e32342e302f32342d3234203d3e20313938313030.roa (raw, json) Hash identifier: kr4SYs4DOlxedtPmP6j4qtMqp2fKBamyULuQdJpIcEI= Subject key identifier: B3:1D:A7:8B:98:3D:2A:57:38:9A:B6:61:1C:00:45:FF:80:AA:5F:23 Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Certificate serial: 65F97F27213FD5A17C4CFE5B08F0DD38182AECA8 Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e20313938313030.roa Signing time: Fri 24 Oct 2025 17:10:19 +0000 ROA not before: Fri 24 Oct 2025 17:05:19 +0000 ROA not after: Fri 23 Oct 2026 17:10:19 +0000 asID: 198100 IP address blocks: 23.175.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f9:7f:27:21:3f:d5:a1:7c:4c:fe:5b:08:f0:dd:38:18:2a:ec:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Validity Not Before: Oct 24 17:05:19 2025 GMT Not After : Oct 23 17:10:19 2026 GMT Subject: CN=B31DA78B983D2A57389AB6611C0045FF80AA5F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:1e:ee:f5:05:90:c8:01:16:c2:5b:1b:3f: 4b:ce:7d:47:9f:40:01:04:c0:53:c0:ee:2f:20:4f: 32:02:ba:48:9d:7c:fb:b1:e0:fa:be:34:17:c1:f2: ab:2c:c6:51:d2:2c:04:d0:6b:7c:65:34:48:00:7c: 37:6c:22:85:6c:8c:85:94:f5:f0:bd:ab:0f:65:b7: 1f:15:e9:9f:86:35:50:6c:12:97:9f:ac:98:1d:8c: 8d:f5:d1:72:8e:73:08:44:ab:82:93:7d:a5:89:b2: 88:19:62:77:83:f5:2e:9f:65:ed:fe:bd:5e:1d:34: a4:61:61:c6:d4:4d:05:dc:06:c8:c7:48:64:e7:13: 8b:80:54:3b:63:3f:2d:e7:8a:5d:b5:5e:fb:77:60: 3a:57:ae:fc:1f:b4:62:06:4d:e1:66:c2:76:24:80: 25:f0:6b:cc:1e:f9:2a:5b:97:22:d8:47:17:52:2e: d6:7a:8d:97:23:32:ee:fd:c5:8a:b7:f3:5d:6f:54: ea:bc:d8:ef:44:a6:7d:fc:83:83:93:2b:47:83:4f: 3c:2e:a5:04:38:ee:27:d7:1d:18:76:05:8a:68:a4: 02:13:7f:32:d8:75:72:ef:f8:8c:81:a9:1a:1b:dd: 52:5e:f4:7c:62:95:a5:d6:fa:9c:6d:ca:74:05:60: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1D:A7:8B:98:3D:2A:57:38:9A:B6:61:1C:00:45:FF:80:AA:5F:23 X509v3 Authority Key Identifier: keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e20313938313030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.175.24.0/24 Signature Algorithm: sha256WithRSAEncryption 58:23:92:41:7e:60:6b:50:c6:cc:d0:22:e6:3c:14:f6:c8:14: 7e:77:40:e8:9f:68:ee:ce:61:59:42:93:09:8d:f3:b4:05:89: 85:6d:b4:58:90:eb:02:39:37:db:52:93:fe:29:45:98:f7:da: 62:58:8d:cb:c7:5d:3c:c6:0d:4a:b0:f6:df:1c:ce:a8:43:c6: 9f:c0:bc:86:46:56:ca:6a:aa:45:3c:f0:e8:1e:cb:08:19:f7: cb:0e:33:2d:86:4d:de:05:5f:b1:7a:68:2f:52:f3:b4:6d:23: a4:42:59:6d:c9:5a:fc:28:3e:09:60:bd:c7:f6:46:cb:59:ff: 1c:b5:89:94:32:98:22:fc:61:11:fa:0d:3d:fb:80:a0:a1:68: 43:8d:e7:11:c2:21:24:b0:45:87:41:0d:14:01:f5:0a:d6:06: 9e:52:a5:ff:52:0e:67:77:56:68:8c:8e:8d:9a:98:80:59:42: ff:a0:c1:4d:4b:11:a9:24:ba:19:f7:f6:0c:bb:42:3d:6e:1b: 07:88:8c:1c:0b:b1:2c:0c:fb:dd:a4:3e:f9:a5:d2:80:dd:b2: 65:e9:8e:58:63:dd:dd:e5:c2:8e:d7:5b:32:c3:77:aa:98:89: e5:a0:71:22:64:6b:39:6d:dd:4e:41:15:19:c2:a4:4e:bd:49: ca:e0:a1:69 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUZfl/JyE/1aF8TP5bCPDdOBgq7KgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2 MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwNTE5WhcNMjYxMDIzMTcxMDE5 WjAzMTEwLwYDVQQDEyhCMzFEQTc4Qjk4M0QyQTU3Mzg5QUI2NjExQzAwNDVGRjgw QUE1RjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhoe7vUFkMgB FsJbGz9Lzn1Hn0ABBMBTwO4vIE8yArpInXz7seD6vjQXwfKrLMZR0iwE0Gt8ZTRI AHw3bCKFbIyFlPXwvasPZbcfFemfhjVQbBKXn6yYHYyN9dFyjnMIRKuCk32libKI GWJ3g/Uun2Xt/r1eHTSkYWHG1E0F3AbIx0hk5xOLgFQ7Yz8t54pdtV77d2A6V678 H7RiBk3hZsJ2JIAl8GvMHvkqW5ci2EcXUi7Weo2XIzLu/cWKt/Ndb1TqvNjvRKZ9 /IODkytHg088LqUEOO4n1x0YdgWKaKQCE38y2HVy7/iMgakaG91SXvR8YpWl1vqc bcp0BWBpUQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFLMdp4uYPSpXOJq2YRwARf+A ql8jMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4 LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx NzZmMTBlMjAxMGQyMmQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzMyZTMx MzczNTJlMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODMxMzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEABevGDANBgkqhkiG9w0BAQsFAAOCAQEAWCOSQX5ga1DGzNAi5jwU 9sgUfndA6J9o7s5hWUKTCY3ztAWJhW20WJDrAjk321KT/ilFmPfaYliNy8ddPMYN SrD23xzOqEPGn8C8hkZWymqqRTzw6B7LCBn3yw4zLYZN3gVfsXpoL1LztG0jpEJZ bcla/Cg+CWC9x/ZGy1n/HLWJlDKYIvxhEfoNPfuAoKFoQ43nEcIhJLBFh0ENFAH1 CtYGnlKl/1IOZ3dWaIyOjZqYgFlC/6DBTUsRqSS6Gff2DLtCPW4bB4iMHAuxLAz7 3aQ++aXSgN2yZemOWGPd3eXCjtdbMsN3qpiJ5aBxImRrOW3dTkEVGcKkTr1JyuCh aQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:22 2025 by rpki-client