$ rpki-client -vvvf rsync.rp.ki/repo/aci/1/32332e3133382e35362e302f32342d3234203d3e2031303031.roa File: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (raw, json) Hash identifier: Zv5M1SBEHtjHmj26XBNl/RJsXP8FKS/ZPad1BH61wzk= Subject key identifier: 10:A5:F1:39:94:DD:D3:8F:4B:10:11:47:51:1B:18:95:1B:C1:1C:D4 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 5E114C7DF0D2307CD8805DF8974BDD63E6E03E36 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/32332e3133382e35362e302f32342d3234203d3e2031303031.roa Signing time: Sun 06 Sep 2026 22:47:48 +0000 ROA not before: Sun 06 Sep 2026 22:42:48 +0000 ROA not after: Sun 05 Sep 2027 22:47:48 +0000 asID: 1001 IP address blocks: 23.138.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 03:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:11:4c:7d:f0:d2:30:7c:d8:80:5d:f8:97:4b:dd:63:e6:e0:3e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Sep 6 22:42:48 2026 GMT Not After : Sep 5 22:47:48 2027 GMT Subject: CN=10A5F13994DDD38F4B101147511B18951BC11CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:ed:f1:32:a4:2b:3a:8e:36:6d:b2:5a:72: 7f:e7:fd:1d:67:df:4f:fd:fb:f8:98:22:27:ed:79: 5d:09:73:08:86:16:f5:7d:45:c1:9f:99:a2:e4:26: 3d:e1:60:13:1b:df:08:85:98:a3:99:f9:67:32:5b: d2:23:dd:0a:34:0b:9c:97:37:9e:10:d5:fb:b3:49: 35:80:01:e5:81:7c:c6:4c:b0:ca:f4:b4:c8:2d:e4: 1a:63:34:48:9f:48:51:ca:ab:e6:0d:11:51:08:8f: 3b:fa:36:10:22:0b:2b:32:ba:e4:e5:da:c3:7b:ef: d6:54:63:4c:95:3c:49:26:01:7a:cd:a8:e6:71:0c: 3b:08:6d:ef:26:5c:81:c0:6e:3f:4b:9f:db:0c:23: 48:e3:1b:12:70:a1:b0:41:25:59:ed:4b:49:93:16: e2:60:29:d9:62:95:99:96:cb:15:51:00:7b:94:28: 37:36:5c:03:64:1d:8e:ad:7d:fb:5c:44:01:65:97: 03:40:6c:14:44:e4:9c:bf:43:7a:45:59:b0:42:89: 93:d3:a9:41:f8:01:db:0b:1f:f5:16:1b:01:d5:8b: 55:bd:63:37:31:ed:e0:86:31:91:41:f1:dc:ba:b0: 66:88:1c:25:aa:a3:95:65:b4:ad:c4:7c:48:98:ca: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A5:F1:39:94:DD:D3:8F:4B:10:11:47:51:1B:18:95:1B:C1:1C:D4 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/32332e3133382e35362e302f32342d3234203d3e2031303031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.138.56.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ca:5e:6d:c2:14:12:c6:21:ce:97:45:2a:ca:0c:f7:a5:ac: 55:99:b2:84:24:5b:3f:9b:76:ac:4b:90:a4:71:3b:08:36:d3: 8f:89:be:7f:ae:b8:d2:c1:ae:ad:b1:7c:8c:04:6a:ad:d0:16: a2:d6:8a:87:cb:7f:87:48:87:3e:62:46:b2:d1:73:10:b1:8b: ea:5c:f2:05:9f:d0:6a:05:5b:96:81:89:25:59:ff:75:1e:11: 53:fb:dd:28:5b:35:8e:19:90:9d:72:d3:80:92:56:50:6d:29: f3:8f:d4:b3:a9:23:2c:22:5a:11:bd:69:a0:14:d3:4d:11:a7: b5:7a:05:26:7f:97:74:40:25:a5:a3:ca:43:a9:34:3d:7c:e8: 09:95:30:81:21:d0:21:62:6c:69:1c:d9:be:37:38:81:fd:c2: 9e:72:2b:d3:88:fa:a5:6f:b1:bb:81:b1:99:72:1a:97:7d:40: c3:ba:8d:2c:73:2e:1c:d1:e3:d0:5e:2f:3e:a3:39:f8:72:c9: 18:e9:42:e3:ff:ac:df:d6:22:cd:71:1a:45:c9:41:7c:7d:ee: 31:f2:16:e0:9f:67:ca:49:1d:97:c4:62:68:c7:b4:a8:fe:c4: 0d:84:8b:bb:a2:8a:44:5e:37:e0:2c:29:62:92:2b:e9:44:3d: 1f:0f:47:c1 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUXhFMffDSMHzYgF34l0vdY+bgPjYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwOTA2MjI0MjQ4WhcNMjcwOTA1MjI0NzQ4 WjAzMTEwLwYDVQQDEygxMEE1RjEzOTk0REREMzhGNEIxMDExNDc1MTFCMTg5NTFC QzExQ0Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxLt8TKkKzqO Nm2yWnJ/5/0dZ99P/fv4mCIn7XldCXMIhhb1fUXBn5mi5CY94WATG98IhZijmfln MlvSI90KNAuclzeeENX7s0k1gAHlgXzGTLDK9LTILeQaYzRIn0hRyqvmDRFRCI87 +jYQIgsrMrrk5drDe+/WVGNMlTxJJgF6zajmcQw7CG3vJlyBwG4/S5/bDCNI4xsS cKGwQSVZ7UtJkxbiYCnZYpWZlssVUQB7lCg3NlwDZB2OrX37XEQBZZcDQGwUROSc v0N6RVmwQomT06lB+AHbCx/1FhsB1YtVvWM3Me3ghjGRQfHcurBmiBwlqqOVZbSt xHxImMrHdQIDAQABo4ICVjCCAlIwHQYDVR0OBBYEFBCl8TmU3dOPSxARR1EbGJUb wRzUMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwcQYIKwYBBQUHAQsEZTBjMGEGCCsGAQUFBzALhlVyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMzIzMzJlMzEzMzM4MmUzNTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXijgwDQYJKoZIhvcN AQELBQADggEBAAnKXm3CFBLGIc6XRSrKDPelrFWZsoQkWz+bdqxLkKRxOwg204+J vn+uuNLBrq2xfIwEaq3QFqLWiofLf4dIhz5iRrLRcxCxi+pc8gWf0GoFW5aBiSVZ /3UeEVP73ShbNY4ZkJ1y04CSVlBtKfOP1LOpIywiWhG9aaAU000Rp7V6BSZ/l3RA JaWjykOpND186AmVMIEh0CFibGkc2b43OIH9wp5yK9OI+qVvsbuBsZlyGpd9QMO6 jSxzLhzR49BeLz6jOfhyyRjpQuP/rN/WIs1xGkXJQXx97jHyFuCfZ8pJHZfEYmjH tKj+xA2Ei7uiikReN+AsKWKSK+lEPR8PR8E= -----END CERTIFICATE-----Generated at Mon Oct 5 23:06:39 2026 by rpki-client