$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa File: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (raw, json) Hash identifier: zchlpVKrOOAvJ8/uKbFJuSdAw889RxyE54T4zbvm4lY= Subject key identifier: B9:18:B6:81:7C:9B:8B:19:43:51:C9:1A:1F:76:65:08:81:A8:A4:11 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 5EB0CC8A462CAB5AB523E881CC92706780BABE84 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa Signing time: Thu 06 Aug 2026 06:00:41 +0000 ROA not before: Thu 06 Aug 2026 05:55:41 +0000 ROA not after: Thu 05 Aug 2027 06:00:41 +0000 asID: 209874 IP address blocks: 2a09:54c3:a200::/40 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 05:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b0:cc:8a:46:2c:ab:5a:b5:23:e8:81:cc:92:70:67:80:ba:be:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Aug 6 05:55:41 2026 GMT Not After : Aug 5 06:00:41 2027 GMT Subject: CN=B918B6817C9B8B194351C91A1F76650881A8A411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:94:98:0c:7a:6e:83:d1:54:2c:38:94:03: 34:7b:06:05:29:1d:8f:1b:69:a9:7b:fe:f8:0d:91: 1c:bf:73:a9:f6:ae:57:63:8e:c4:d1:7f:7f:78:c3: 66:37:74:dd:9a:72:e0:83:94:e4:cf:e3:37:74:59: bd:35:fa:3a:07:36:de:98:a0:8c:6f:16:7b:05:73: 48:c0:e6:4b:8d:83:0c:59:0c:01:67:7d:74:bd:46: c5:48:e9:4b:56:11:a1:fb:5e:4a:97:31:87:c9:ba: 68:8f:bf:8a:f8:3a:33:93:fb:6b:ad:27:1d:49:d6: 1c:99:1c:5b:d3:06:11:f9:7b:f3:6f:34:d1:1e:34: 6c:5e:e4:e5:4d:fd:c7:9b:de:ea:f9:4c:bb:c9:1a: 15:4c:63:0e:61:0e:ee:da:f7:d2:52:fd:3b:55:9a: 96:f3:a4:76:ed:09:38:91:3f:e8:e7:13:1a:e3:e6: cf:98:1b:15:68:ab:bc:d7:02:9f:39:29:e3:dd:3b: 7d:0d:6f:5e:dc:f9:e9:6d:2e:98:4d:ac:dc:dc:32: 7c:5a:00:2c:d3:e5:31:bf:b5:ff:12:5b:66:92:08: c8:03:6b:14:36:33:ea:8f:0a:a1:94:09:dd:a1:0f: 5a:b2:7a:69:8f:8e:de:02:09:58:fb:b9:2a:05:09: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:B6:81:7C:9B:8B:19:43:51:C9:1A:1F:76:65:08:81:A8:A4:11 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a200::/40 Signature Algorithm: sha256WithRSAEncryption 04:85:ea:7b:3b:67:ec:02:1a:a5:f6:c1:51:3c:eb:bc:2c:0b: 92:10:63:12:03:5d:8e:cc:0e:14:91:f2:a2:8d:5d:41:71:ae: 42:e3:8a:df:0c:61:7a:e7:d7:50:79:63:92:f9:69:3c:88:92: 8a:8a:67:d2:06:22:48:5d:b5:a6:8d:c0:ec:a6:26:2c:09:f1: 99:81:db:a7:24:06:70:19:e3:50:6b:47:bf:7b:ff:49:67:65: 82:ef:c7:5e:68:7d:86:ae:db:3b:af:d6:2c:0e:89:a6:10:37: 46:6e:b4:45:6f:89:e4:67:a0:c3:ad:0c:46:78:a0:00:46:83: 6c:39:60:d9:c1:65:a9:24:69:28:07:e5:cd:42:65:8c:91:e5: 34:8e:80:bf:22:84:b3:1f:fe:0c:30:fd:4c:a7:e0:e1:0a:67: 9b:7e:0c:23:28:af:04:2b:88:af:a4:4c:01:fe:10:36:7e:e5: 93:a2:07:35:e2:7c:79:f9:06:f2:76:9d:c5:e9:9b:ba:b1:4b: 86:fd:27:af:81:1b:66:ad:35:4f:17:cb:bf:77:33:81:f9:59: 7e:ec:3d:fa:9b:96:01:31:42:a8:a4:99:bc:f9:49:54:96:a4: 0a:92:9b:64:e7:57:c2:00:cf:a2:c4:7e:66:49:1d:dd:c0:14: 8c:f7:1d:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUXrDMikYsq1q1I+iBzJJwZ4C6voQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA4MDYwNTU1NDFaFw0yNzA4MDUwNjAwNDFaMDMxMTAvBgNV BAMTKEI5MThCNjgxN0M5QjhCMTk0MzUxQzkxQTFGNzY2NTA4ODFBOEE0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJJSYDHpug9FULDiUAzR7BgUp HY8baal7/vgNkRy/c6n2rldjjsTRf394w2Y3dN2acuCDlOTP4zd0Wb01+joHNt6Y oIxvFnsFc0jA5kuNgwxZDAFnfXS9RsVI6UtWEaH7XkqXMYfJumiPv4r4OjOT+2ut Jx1J1hyZHFvTBhH5e/NvNNEeNGxe5OVN/ceb3ur5TLvJGhVMYw5hDu7a99JS/TtV mpbzpHbtCTiRP+jnExrj5s+YGxVoq7zXAp85KePdO30Nb17c+eltLphNrNzcMnxa ACzT5TG/tf8SW2aSCMgDaxQ2M+qPCqGUCd2hD1qyemmPjt4CCVj7uSoFCXMzAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUuRi2gXybixlDUckaH3ZlCIGopBEwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMyMzAzMDNhM2EyZjM0MzAyZDMxMzIzODIwM2QzZTIwMzIzMDM5MzgzNzM0 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAOBAIAAjAIAwYAKglUw6IwDQYJKoZIhvcNAQELBQADggEBAASF6ns7Z+wCGqX2 wVE867wsC5IQYxIDXY7MDhSR8qKNXUFxrkLjit8MYXrn11B5Y5L5aTyIkoqKZ9IG IkhdtaaNwOymJiwJ8ZmB26ckBnAZ41BrR797/0lnZYLvx15ofYau2zuv1iwOiaYQ N0ZutEVvieRnoMOtDEZ4oABGg2w5YNnBZakkaSgH5c1CZYyR5TSOgL8ihLMf/gww /Uyn4OEKZ5t+DCMorwQriK+kTAH+EDZ+5ZOiBzXifHn5BvJ2ncXpm7qxS4b9J6+B G2atNU8Xy793M4H5WX7sPfqblgExQqikmbz5SVSWpAqSm2TnV8IAz6LEfmZJHd3A FIz3HRg= -----END CERTIFICATE-----Generated at Thu Sep 10 18:46:24 2026 by rpki-client