$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e20343031343433.roa File: 32332e3137352e32342e302f32342d3234203d3e20343031343433.roa (raw, json) Hash identifier: 77/SVUxdFmtfk76nEs5lTe/zhQD1RKdzwP9cjrwjB1Q= Subject key identifier: 5C:F8:7E:99:61:F5:EA:4F:50:BC:D6:6B:D9:32:F1:7F:C5:B2:47:EF Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Certificate serial: 35661C4809970C9763F9CF04FE2C57D4CB596B89 Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e20343031343433.roa Signing time: Fri 24 Oct 2025 17:14:41 +0000 ROA not before: Fri 24 Oct 2025 17:09:41 +0000 ROA not after: Fri 23 Oct 2026 17:14:41 +0000 asID: 401443 IP address blocks: 23.175.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:66:1c:48:09:97:0c:97:63:f9:cf:04:fe:2c:57:d4:cb:59:6b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Validity Not Before: Oct 24 17:09:41 2025 GMT Not After : Oct 23 17:14:41 2026 GMT Subject: CN=5CF87E9961F5EA4F50BCD66BD932F17FC5B247EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:6f:9f:31:56:6d:cf:50:79:5d:59:4a:e2: 12:e4:0e:4f:53:48:22:ce:66:b4:cd:3f:88:64:ff: 71:78:89:e6:ed:83:59:f0:ad:63:fd:da:20:56:d1: 4d:c5:c0:30:20:14:55:73:a6:96:14:58:de:3f:ba: 2f:76:d4:29:c7:fb:6c:93:8e:4f:a6:73:36:64:a2: 65:a1:3d:43:17:3c:a5:d5:5a:95:2d:90:e0:ea:9c: a4:b7:0f:eb:93:0c:e4:54:2d:2b:78:98:64:9c:84: ee:d5:ef:82:06:3b:38:68:91:33:57:c1:dd:9c:bf: f4:0e:81:19:e7:22:8e:a4:34:f3:c5:ce:13:30:55: 8d:c2:2e:b9:95:97:ba:ec:d2:fb:11:fe:93:da:2e: 2b:02:1d:35:91:85:e9:19:fc:28:4b:25:38:3a:36: 8b:e9:1d:a6:ef:de:50:45:18:ee:7e:fd:f8:6b:de: cd:97:47:84:cb:b7:0f:9d:7c:ea:76:a4:df:40:a5: 0b:e8:77:84:80:e5:76:45:e6:75:c4:d6:43:62:89: 42:d3:f3:c3:9c:e4:e0:f5:f0:a5:36:1a:54:80:a5: 19:70:44:34:9c:b7:a8:85:03:7b:d1:37:75:51:11: 6c:1b:a4:9d:d7:09:88:7e:ff:fe:1d:69:ee:fd:e5: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F8:7E:99:61:F5:EA:4F:50:BC:D6:6B:D9:32:F1:7F:C5:B2:47:EF X509v3 Authority Key Identifier: keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e20343031343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.175.24.0/24 Signature Algorithm: sha256WithRSAEncryption 82:60:a8:b2:6b:61:06:77:10:e9:cb:d8:fb:c4:14:81:af:c1: ff:c1:a3:8f:8d:cb:21:3c:14:df:04:8e:54:71:9c:0b:9b:bc: d6:ec:60:ba:ae:ad:02:32:2e:9f:f1:dd:c1:11:78:3e:e8:8b: 44:9c:58:d0:07:09:8b:75:93:9c:c7:23:50:e2:dc:b4:1c:cc: 62:f2:6d:30:47:0c:65:8d:be:78:a0:f9:48:84:c7:d0:3c:16: 0a:19:22:91:03:e8:e6:88:20:81:d4:59:3d:a8:90:e2:fe:85: 1e:68:cd:3f:34:48:db:3f:1b:16:01:09:84:e1:18:32:0c:db: 76:b4:26:17:e6:d6:20:5c:e2:ec:ce:08:4b:43:d3:0d:f4:a8: 0e:cc:e5:75:78:8c:df:e2:f6:1a:99:c9:28:49:ea:7f:76:e1: 0a:90:d4:02:aa:44:8b:88:cd:6d:06:5f:bf:66:9b:e3:f3:7f: e0:8d:a4:67:9d:7a:0f:f0:dd:f9:9c:45:20:56:0e:ea:d4:04: c4:8d:6c:df:6f:33:84:4b:5d:e4:b3:fa:67:ad:6c:dd:64:ac: fe:9a:01:74:f6:0a:2c:df:5e:1e:a1:6a:d2:19:aa:ae:c9:e5: e6:22:b4:c5:00:7d:1d:9b:9d:f2:a2:4c:9f:46:dc:63:a5:78: a0:71:47:93 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUNWYcSAmXDJdj+c8E/ixX1MtZa4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2 MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwOTQxWhcNMjYxMDIzMTcxNDQx WjAzMTEwLwYDVQQDEyg1Q0Y4N0U5OTYxRjVFQTRGNTBCQ0Q2NkJEOTMyRjE3RkM1 QjI0N0VGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD5vnzFWbc9Q eV1ZSuIS5A5PU0gizma0zT+IZP9xeInm7YNZ8K1j/dogVtFNxcAwIBRVc6aWFFje P7ovdtQpx/tsk45PpnM2ZKJloT1DFzyl1VqVLZDg6pyktw/rkwzkVC0reJhknITu 1e+CBjs4aJEzV8HdnL/0DoEZ5yKOpDTzxc4TMFWNwi65lZe67NL7Ef6T2i4rAh01 kYXpGfwoSyU4OjaL6R2m795QRRjufv34a97Nl0eEy7cPnXzqdqTfQKUL6HeEgOV2 ReZ1xNZDYolC0/PDnOTg9fClNhpUgKUZcEQ0nLeohQN70Td1URFsG6Sd1wmIfv/+ HWnu/eW+KwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFFz4fplh9epPULzWa9ky8X/F skfvMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4 LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx NzZmMTBlMjAxMGQyMmQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzMyZTMx MzczNTJlMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTM0MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEABevGDANBgkqhkiG9w0BAQsFAAOCAQEAgmCosmthBncQ6cvY+8QU ga/B/8Gjj43LITwU3wSOVHGcC5u81uxguq6tAjIun/HdwRF4PuiLRJxY0AcJi3WT nMcjUOLctBzMYvJtMEcMZY2+eKD5SITH0DwWChkikQPo5ogggdRZPaiQ4v6FHmjN PzRI2z8bFgEJhOEYMgzbdrQmF+bWIFzi7M4IS0PTDfSoDszldXiM3+L2GpnJKEnq f3bhCpDUAqpEi4jNbQZfv2ab4/N/4I2kZ516D/Dd+ZxFIFYO6tQExI1s328zhEtd 5LP6Z61s3WSs/poBdPYKLN9eHqFq0hmqrsnl5iK0xQB9HZud8qJMn0bcY6V4oHFH kw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:05 2025 by rpki-client