$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a323030303a3a2f33362d3336203d3e20323135313437.roa File: 326130393a353463333a323030303a3a2f33362d3336203d3e20323135313437.roa (raw, json) Hash identifier: TDJjFApXKuIwgknAQ6qjFYppkq58JZ7rvUJ0yBhIoco= Subject key identifier: 90:78:B4:9A:69:AF:05:79:B4:A7:E5:3A:63:91:02:F4:86:EB:DF:33 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 4DE333C71801FBEF7B5D90A8FB88C3CC61D35937 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a323030303a3a2f33362d3336203d3e20323135313437.roa Signing time: Tue 14 Jul 2026 17:07:02 +0000 ROA not before: Tue 14 Jul 2026 17:02:02 +0000 ROA not after: Tue 13 Jul 2027 17:07:02 +0000 asID: 215147 IP address blocks: 2a09:54c3:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e3:33:c7:18:01:fb:ef:7b:5d:90:a8:fb:88:c3:cc:61:d3:59:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jul 14 17:02:02 2026 GMT Not After : Jul 13 17:07:02 2027 GMT Subject: CN=9078B49A69AF0579B4A7E53A639102F486EBDF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:61:24:d7:22:9d:e0:82:0e:e3:03:a2:fe: 0c:72:e6:2e:fa:23:59:c2:28:97:d5:5c:80:a4:75: 0c:d2:0b:b3:f9:07:f3:ac:76:65:81:92:57:3c:ba: 6f:75:72:4b:d9:e3:36:a8:ee:b0:10:83:f6:11:e6: c5:c4:9f:b2:de:fc:23:5f:07:cf:5b:01:8d:a5:af: 10:86:33:85:ef:d6:db:9e:d4:15:b2:31:09:0c:7b: 03:30:0a:db:c0:73:be:6b:8d:0f:5a:1f:66:46:3a: c8:d1:36:c9:84:12:f3:a0:e8:bd:60:f4:bb:e1:9c: 95:49:5c:a0:65:90:fa:42:e0:28:26:fe:6f:51:f5: 64:ba:bf:6d:f5:cc:d9:5b:68:49:20:95:aa:97:b1: 81:de:3e:5a:84:a0:60:41:76:7b:58:f3:16:55:92: ca:63:94:e2:88:59:a7:54:5e:2b:f3:01:53:cd:67: ea:0a:e1:ef:ad:9e:0a:b0:b6:2b:dc:b8:ea:df:75: d1:30:cd:d7:92:6e:38:e4:92:71:78:32:84:68:cf: 94:e1:4a:b5:a5:b7:2e:e6:6d:11:76:fa:d3:11:9a: 29:63:38:b5:ee:5a:37:a8:07:7e:70:de:c0:b4:d0: eb:5c:40:fa:2d:95:72:b6:21:b7:fb:be:c7:e0:83: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:78:B4:9A:69:AF:05:79:B4:A7:E5:3A:63:91:02:F4:86:EB:DF:33 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a323030303a3a2f33362d3336203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:2000::/36 Signature Algorithm: sha256WithRSAEncryption a4:02:fd:7b:c6:38:00:a5:d3:d5:3c:2c:73:4e:63:b6:fe:83: 4f:49:19:84:7c:26:a5:e2:4d:f8:36:dc:83:89:c9:1a:17:5a: aa:ad:09:97:1b:27:27:bb:8b:71:8e:3c:24:38:01:3f:4e:8f: 0e:7b:55:20:27:22:69:c7:4c:5a:bd:83:44:6d:71:f4:ad:43: 86:fe:04:41:93:9d:57:fb:2b:d2:9a:4a:57:5f:70:52:12:65: 06:ec:e8:52:d4:c4:cc:c5:ac:36:5e:af:4d:93:a1:5a:1d:a7: 6b:a1:87:ec:b4:88:bb:1b:0e:78:17:d0:3e:eb:26:a4:34:07: 43:d5:67:b9:b3:1a:f2:1e:bf:d6:b0:96:1f:3f:98:8b:f2:1c: ed:09:cc:57:a1:71:b7:03:c1:49:25:d3:08:d8:77:d8:3f:98: 71:81:2a:0c:d3:54:b3:35:a0:cd:af:6b:bc:a1:a0:e3:0f:72: 07:bf:1b:87:d9:de:cc:2b:94:03:42:df:1d:41:3e:40:9b:18: 67:56:08:c4:69:37:6a:91:84:1c:3e:78:ba:4c:70:78:3b:94: 89:bc:41:44:c5:c5:7a:ff:f1:20:ed:44:eb:01:04:1e:6f:3a: ef:47:5c:34:15:f3:c5:35:73:61:f6:89:05:27:0b:67:08:fb: 9c:63:5c:f3 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUTeMzxxgB++97XZCo+4jDzGHTWTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA3MTQxNzAyMDJaFw0yNzA3MTMxNzA3MDJaMDMxMTAvBgNV BAMTKDkwNzhCNDlBNjlBRjA1NzlCNEE3RTUzQTYzOTEwMkY0ODZFQkRGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8WEk1yKd4IIO4wOi/gxy5i76 I1nCKJfVXICkdQzSC7P5B/OsdmWBklc8um91ckvZ4zao7rAQg/YR5sXEn7Le/CNf B89bAY2lrxCGM4Xv1tue1BWyMQkMewMwCtvAc75rjQ9aH2ZGOsjRNsmEEvOg6L1g 9LvhnJVJXKBlkPpC4Cgm/m9R9WS6v231zNlbaEkglaqXsYHePlqEoGBBdntY8xZV kspjlOKIWadUXivzAVPNZ+oK4e+tngqwtivcuOrfddEwzdeSbjjkknF4MoRoz5Th SrWlty7mbRF2+tMRmiljOLXuWjeoB35w3sC00OtcQPotlXK2Ibf7vsfgg4HXAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUkHi0mmmvBXm0p+U6Y5EC9Ibr3zMwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzEzNTMxMzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMMgMA0GCSqGSIb3DQEBCwUAA4IBAQCkAv17xjgApdPVPCxz TmO2/oNPSRmEfCal4k34NtyDickaF1qqrQmXGycnu4txjjwkOAE/To8Oe1UgJyJp x0xavYNEbXH0rUOG/gRBk51X+yvSmkpXX3BSEmUG7OhS1MTMxaw2Xq9Nk6FaHadr oYfstIi7Gw54F9A+6yakNAdD1We5sxryHr/WsJYfP5iL8hztCcxXoXG3A8FJJdMI 2HfYP5hxgSoM01SzNaDNr2u8oaDjD3IHvxuH2d7MK5QDQt8dQT5AmxhnVgjEaTdq kYQcPni6THB4O5SJvEFExcV6//Eg7UTrAQQebzrvR1w0FfPFNXNh9okFJwtnCPuc Y1zz -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:05 2026 by rpki-client