$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e2030.roa File: 3134392e3131322e3131372e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: LlNFxNEhWMvoyjr/5eL9u/bKKiz66qhh2ouXH0txetQ= Subject key identifier: 3F:EE:2C:76:22:57:B4:4A:F5:CA:B4:8B:80:6E:C0:08:AC:7F:83:C7 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 68225A5F015111BACB55A7B9F55236E9C1318D52 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e2030.roa Signing time: Tue 02 Jun 2026 12:17:49 +0000 ROA not before: Tue 02 Jun 2026 12:12:49 +0000 ROA not after: Tue 01 Jun 2027 12:17:49 +0000 asID: 0 IP address blocks: 149.112.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 01:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:22:5a:5f:01:51:11:ba:cb:55:a7:b9:f5:52:36:e9:c1:31:8d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Jun 2 12:12:49 2026 GMT Not After : Jun 1 12:17:49 2027 GMT Subject: CN=3FEE2C762257B44AF5CAB48B806EC008AC7F83C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:b2:9f:75:80:52:a0:c7:e6:ac:42:fe:52: a3:d9:38:11:63:b5:fe:6e:d0:94:d6:30:96:31:ca: 11:a6:81:d7:f2:1c:f2:75:9f:96:8e:8f:d6:25:9e: db:da:11:23:5b:77:cf:19:c0:b6:b9:56:d3:cb:f1: fb:f8:53:6b:91:99:a0:22:d4:43:d9:49:fb:e9:8f: 62:d9:79:ac:85:b0:e8:6a:8b:1e:6a:d1:ba:89:65: dc:b1:41:1e:b2:e2:4e:5e:8a:73:f9:be:c3:8d:ba: 2f:9d:f0:a3:60:a0:38:d2:ea:0a:25:c2:c5:a7:6b: 41:33:bc:2d:03:0b:f9:e3:9a:ff:b6:5b:7f:1d:d2: 4c:30:7b:7c:34:d5:b2:2a:d2:ae:0c:32:32:66:53: d4:6e:9c:a9:90:49:46:88:87:50:63:66:fb:03:7d: 88:9d:75:ff:9a:7d:a9:00:de:41:89:a3:fa:fb:0d: 75:20:b9:7a:c1:74:da:f8:66:01:8c:08:30:2c:29: ac:f8:fb:44:3a:07:6c:56:36:a4:36:d3:36:ce:21: 5a:bb:6e:1f:20:ad:5f:fa:c8:ae:e5:1f:65:53:52: d0:01:0a:f0:e9:6a:27:9b:cc:c5:79:b0:f6:d1:d5: f8:83:47:d9:35:73:10:36:45:60:52:4e:02:f9:ce: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EE:2C:76:22:57:B4:4A:F5:CA:B4:8B:80:6E:C0:08:AC:7F:83:C7 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.112.117.0/24 Signature Algorithm: sha256WithRSAEncryption 51:b8:b4:35:d5:78:29:31:b8:7f:0b:fe:8b:cf:a7:3b:4e:34: 03:a3:74:33:71:42:d4:78:3f:a8:cb:41:ae:d8:f7:60:e5:50: e6:7f:2c:cc:a5:fe:42:e4:72:7b:3f:8f:5c:1f:58:37:cf:ea: 8e:83:eb:0a:74:ed:17:95:da:7f:10:34:98:b6:61:d9:07:78: 14:fe:89:c9:3e:30:e6:2a:e9:5a:a8:a7:92:57:a0:4f:de:9f: 9e:54:65:8e:81:38:3a:b8:de:3b:4e:8c:46:ed:40:da:3c:bb: 4b:38:80:95:48:7f:ce:59:a9:43:19:af:85:45:58:08:4a:db: 55:28:6a:41:9d:cc:28:bd:f6:5e:24:e9:b4:da:29:d4:bd:7b: 41:56:bf:28:e0:5a:df:f4:62:a4:0d:e8:34:d5:b2:de:16:19: 6b:66:63:84:c2:4d:b3:67:52:10:e5:d9:53:23:a0:58:5f:c8: 1e:4d:b1:52:a6:05:6b:7e:95:3f:7e:27:a2:37:d3:a8:52:49: 8e:1a:9a:bc:ad:d9:23:eb:3d:ad:71:6f:53:ba:49:09:93:d6: 8a:28:90:da:03:07:29:53:63:a9:e8:9d:6c:25:7c:0b:2a:28: 18:7b:88:6a:4f:e0:0f:fd:db:60:04:85:09:99:38:38:23:8b: bb:01:2e:96 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIUaCJaXwFREbrLVae59VI26cExjVIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQ5WhcNMjcwNjAxMTIxNzQ5 WjAzMTEwLwYDVQQDEygzRkVFMkM3NjIyNTdCNDRBRjVDQUI0OEI4MDZFQzAwOEFD N0Y4M0M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGKyn3WAUqDH 5qxC/lKj2TgRY7X+btCU1jCWMcoRpoHX8hzydZ+Wjo/WJZ7b2hEjW3fPGcC2uVbT y/H7+FNrkZmgItRD2Un76Y9i2XmshbDoaoseatG6iWXcsUEesuJOXopz+b7Djbov nfCjYKA40uoKJcLFp2tBM7wtAwv545r/tlt/HdJMMHt8NNWyKtKuDDIyZlPUbpyp kElGiIdQY2b7A32InXX/mn2pAN5BiaP6+w11ILl6wXTa+GYBjAgwLCms+PtEOgds VjakNtM2ziFau24fIK1f+siu5R9lU1LQAQrw6Wonm8zFebD20dX4g0fZNXMQNkVg Uk4C+c6jgQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFD/uLHYiV7RK9cq0i4BuwAis f4PHMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIGnBggrBgEFBQcBCwSBmjCBlzCBlAYIKwYBBQUH MAuGgYdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMxMzQzOTJl MzEzMTMyMmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJVwdTANBgkqhkiG9w0BAQsFAAOCAQEAUbi0NdV4KTG4fwv+i8+nO040A6N0 M3FC1Hg/qMtBrtj3YOVQ5n8szKX+QuRyez+PXB9YN8/qjoPrCnTtF5XafxA0mLZh 2Qd4FP6JyT4w5irpWqinklegT96fnlRljoE4OrjeO06MRu1A2jy7SziAlUh/zlmp QxmvhUVYCErbVShqQZ3MKL32XiTptNop1L17QVa/KOBa3/RipA3oNNWy3hYZa2Zj hMJNs2dSEOXZUyOgWF/IHk2xUqYFa36VP34nojfTqFJJjhqavK3ZI+s9rXFvU7pJ CZPWiiiQ2gMHKVNjqeidbCV8CyooGHuIak/gD/3bYASFCZk4OCOLuwEulg== -----END CERTIFICATE-----Generated at Thu Jun 4 01:20:45 2026 by rpki-client