
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32352e302f32342d3234203d3e20313533333731.roa
File: 32332e3137352e32352e302f32342d3234203d3e20313533333731.roa (raw, json)
Hash identifier: gkKU56sFQRHTJGFrC5nqutTByTpB7lh/CeQus3Lf6Zs=
Subject key identifier: 65:C6:AE:06:1F:F7:55:D3:03:A4:AA:D9:C7:B6:A5:82:F7:0E:DC:35
Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial: 3065EC579A4E5480A704F194FE6A2818A62B52F0
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32352e302f32342d3234203d3e20313533333731.roa
Signing time: Fri 24 Oct 2025 17:09:30 +0000
ROA not before: Fri 24 Oct 2025 17:04:30 +0000
ROA not after: Fri 23 Oct 2026 17:09:30 +0000
asID: 153371
IP address blocks: 23.175.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 16:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:65:ec:57:9a:4e:54:80:a7:04:f1:94:fe:6a:28:18:a6:2b:52:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Validity
Not Before: Oct 24 17:04:30 2025 GMT
Not After : Oct 23 17:09:30 2026 GMT
Subject: CN=65C6AE061FF755D303A4AAD9C7B6A582F70EDC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:cf:71:e1:ee:9e:44:b2:bf:6a:c4:b3:a6:
88:c6:3e:29:9a:28:d8:e3:e1:76:53:d8:3b:13:c7:
31:0b:0a:47:68:33:e5:1c:69:40:5d:a2:76:a7:38:
49:a5:57:68:d2:3b:7d:46:fa:c1:73:09:a5:7a:33:
e8:8c:e7:bb:d9:07:3b:5b:fc:da:51:c7:df:8b:e0:
2a:49:25:05:1c:21:4f:de:37:35:5b:fa:59:e0:fa:
8f:fc:7c:b9:aa:b5:31:c7:0c:4c:f5:9b:82:24:6d:
88:a2:4e:b6:5f:04:fe:7d:6a:22:76:f5:92:84:27:
02:2d:a5:5e:cc:1b:5e:4b:d5:f9:38:f3:0b:15:58:
05:c3:0c:06:cd:2b:c6:12:64:47:66:54:8a:31:b9:
f3:b3:22:ad:6f:09:ee:23:2b:55:3b:4a:07:76:3f:
5b:bb:b4:25:79:cd:b6:d0:4d:9c:70:9e:56:d4:20:
48:f8:54:8d:2d:06:0a:eb:a4:ef:32:36:fd:73:9d:
a7:73:d5:51:10:9c:33:84:c7:15:d0:5c:09:8e:60:
c3:e3:84:ca:6a:4c:9e:4e:1d:7d:5d:e4:c9:11:4b:
bd:ed:c5:6c:c6:84:16:c1:58:a7:dd:40:b0:1d:75:
4b:d6:98:91:b8:4e:fa:f2:6a:9a:1b:c4:84:62:1c:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:AE:06:1F:F7:55:D3:03:A4:AA:D9:C7:B6:A5:82:F7:0E:DC:35
X509v3 Authority Key Identifier:
keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32352e302f32342d3234203d3e20313533333731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.175.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e7:51:a7:17:d4:3b:b7:75:c8:71:4f:7d:d0:32:9a:40:ac:
9e:c2:9b:bc:3e:56:94:ff:70:2b:66:6c:d1:70:33:3a:a1:fd:
36:9d:6e:24:db:0c:20:a3:bc:37:97:f7:cf:d5:cb:8f:ed:a9:
6c:30:a7:c0:6a:e9:e3:f1:3f:80:47:2d:fc:fc:67:a9:b5:d2:
c7:b1:1d:42:ac:ae:10:6d:f8:79:ef:20:51:62:9c:f8:38:37:
a1:2b:17:e8:6f:47:f6:ca:c4:bb:e1:b5:35:be:52:05:13:f2:
3d:36:a6:22:10:49:70:06:10:29:2b:f4:f7:42:24:59:22:1f:
b6:8e:e2:51:9f:1a:47:47:a9:14:2d:09:30:e1:1e:8e:eb:12:
5f:96:4a:df:9b:8c:38:57:40:f2:33:3f:13:7b:f8:76:a7:b3:
4a:1d:f9:8f:1d:90:33:fa:b8:72:21:3c:c3:be:ee:a8:b6:61:
b8:4e:62:85:3b:60:16:08:ca:b2:e7:83:4c:21:2b:5b:7d:ef:
83:96:fa:99:ee:1b:ab:8a:0e:9c:d7:e6:5d:f2:96:aa:a0:af:
57:43:d7:e9:5f:5c:14:80:f5:08:e7:c7:c2:6a:bc:46:0c:99:
d0:53:2d:69:3e:c2:b2:4c:80:94:9c:4e:d8:55:5c:e8:7b:1c:
ab:a8:a7:c5
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUMGXsV5pOVICnBPGU/mooGKYrUvAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2
MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwNDMwWhcNMjYxMDIzMTcwOTMw
WjAzMTEwLwYDVQQDEyg2NUM2QUUwNjFGRjc1NUQzMDNBNEFBRDlDN0I2QTU4MkY3
MEVEQzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZLPceHunkSy
v2rEs6aIxj4pmijY4+F2U9g7E8cxCwpHaDPlHGlAXaJ2pzhJpVdo0jt9RvrBcwml
ejPojOe72Qc7W/zaUcffi+AqSSUFHCFP3jc1W/pZ4PqP/Hy5qrUxxwxM9ZuCJG2I
ok62XwT+fWoidvWShCcCLaVezBteS9X5OPMLFVgFwwwGzSvGEmRHZlSKMbnzsyKt
bwnuIytVO0oHdj9bu7Qlec220E2ccJ5W1CBI+FSNLQYK66TvMjb9c52nc9VREJwz
hMcV0FwJjmDD44TKakyeTh19XeTJEUu97cVsxoQWwVin3UCwHXVL1piRuE768mqa
G8SEYhwaLwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFGXGrgYf91XTA6Sq2ce2pYL3
Dtw1MB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4
LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND
NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx
NzZmMTBlMjAxMGQyMmQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzMyZTMx
MzczNTJlMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMzMzMzczMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEABevGTANBgkqhkiG9w0BAQsFAAOCAQEAbedRpxfUO7d1yHFPfdAy
mkCsnsKbvD5WlP9wK2Zs0XAzOqH9Np1uJNsMIKO8N5f3z9XLj+2pbDCnwGrp4/E/
gEct/PxnqbXSx7EdQqyuEG34ee8gUWKc+Dg3oSsX6G9H9srEu+G1Nb5SBRPyPTam
IhBJcAYQKSv090IkWSIfto7iUZ8aR0epFC0JMOEejusSX5ZK35uMOFdA8jM/E3v4
dqezSh35jx2QM/q4ciE8w77uqLZhuE5ihTtgFgjKsueDTCErW33vg5b6me4bq4oO
nNfmXfKWqqCvV0PX6V9cFID1COfHwmq8RgyZ0FMtaT7CskyAlJxO2FVc6Hscq6in
xQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:22 2025 by rpki-client