$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/32332e3137352e32342e302f32332d3234203d3e203434333234.roa File: 32332e3137352e32342e302f32332d3234203d3e203434333234.roa (raw, json) Hash identifier: +fjzf92WiYlS2XGJTuCBjhPjc1AtkNWxz/dvKD7xOuk= Subject key identifier: 04:AF:A2:A4:69:C8:22:E8:5A:40:6C:4C:B2:4A:8E:3B:37:FD:5B:5C Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 022F4EAFC776DAE3430C15768915ACB448699D1F Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/32332e3137352e32342e302f32332d3234203d3e203434333234.roa Signing time: Tue 02 Jun 2026 12:17:41 +0000 ROA not before: Tue 02 Jun 2026 12:12:41 +0000 ROA not after: Tue 01 Jun 2027 12:17:41 +0000 asID: 44324 IP address blocks: 23.175.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 01:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2f:4e:af:c7:76:da:e3:43:0c:15:76:89:15:ac:b4:48:69:9d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Jun 2 12:12:41 2026 GMT Not After : Jun 1 12:17:41 2027 GMT Subject: CN=04AFA2A469C822E85A406C4CB24A8E3B37FD5B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:74:86:4b:59:d0:1d:2d:50:73:54:a1:63:a7: ae:f1:87:90:49:df:a3:99:49:84:53:25:a1:7a:06: 0d:87:7c:3f:6c:6c:2c:d2:d2:93:39:33:39:f1:bc: 1a:ab:df:09:24:8f:d8:f4:e5:04:06:c4:94:c6:3b: b3:4c:f1:45:33:d5:06:77:a4:98:0a:06:e2:81:f8: 18:02:21:15:fa:6c:f6:9b:ca:24:19:18:77:e6:88: 19:7e:30:3a:dd:b8:6e:3c:29:4f:ed:af:fe:27:2f: bf:0f:25:5a:6a:c6:c5:88:11:5c:94:6f:1d:6f:15: 98:24:3b:5e:d0:91:4a:12:b6:2e:ee:40:ae:9b:92: 18:41:f9:a7:17:e7:c2:af:6a:07:f2:8e:55:d1:4d: 7b:23:53:b8:28:e6:fe:7e:32:c6:83:c7:61:92:39: f0:0a:45:eb:20:01:07:b3:52:2d:b6:f7:ac:f1:ed: bf:11:8e:4d:32:45:44:d1:71:84:b1:da:c8:4f:03: 57:e2:e2:99:c6:c0:62:ee:ab:d1:48:ce:86:ad:af: f0:b1:00:57:af:ec:b1:b3:34:7c:3a:32:67:78:82: b2:c1:c1:fb:b8:08:8d:cb:88:46:f7:83:bf:72:b4: 52:c3:c3:b9:1b:b3:cb:63:0b:1c:99:29:f1:a4:ec: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AF:A2:A4:69:C8:22:E8:5A:40:6C:4C:B2:4A:8E:3B:37:FD:5B:5C X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/32332e3137352e32342e302f32332d3234203d3e203434333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.175.24.0/23 Signature Algorithm: sha256WithRSAEncryption a5:27:63:80:6a:44:24:75:73:11:e6:19:97:8c:a9:0d:1c:1e: 84:19:b6:fa:85:02:2f:c4:a9:24:a6:02:d0:a5:94:f9:d9:f2: 42:ff:92:f4:c0:de:8f:c8:8c:5a:38:90:8b:b6:64:6a:0c:2c: 0c:e3:35:64:2f:52:23:9a:9b:16:a4:e1:e5:55:b6:22:1f:d8: 2b:63:d5:a7:04:55:2b:fa:30:66:29:78:ce:b8:0c:d9:bc:81: af:0b:1a:23:56:e0:95:b2:8d:71:c3:27:68:9f:31:9d:8e:fd: 44:7a:51:2e:e3:5a:6f:60:36:cd:c7:55:04:f0:8c:8d:9c:2b: 2b:06:f4:d1:e5:50:fd:30:cb:55:13:e4:54:92:80:dd:c8:4c: f2:1f:82:34:53:c3:f2:9f:47:43:bc:e7:f3:52:7d:fb:05:d2: 94:d4:74:b1:4c:24:61:71:dd:1a:21:6a:95:62:a2:c4:bd:5f: 14:8f:f2:81:ae:cd:20:82:3f:72:c1:74:95:8b:6d:ac:e4:c9: 84:ce:79:9a:17:96:52:e1:5e:b3:be:ee:ea:6a:b2:b5:c0:05: ff:34:34:d7:26:e7:c9:58:67:f8:4b:94:f1:14:2b:bc:22:44: 62:96:9b:85:80:f7:f0:41:11:15:91:04:ea:67:5c:b7:5c:49: 37:b9:c2:8d -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUAi9Or8d22uNDDBV2iRWstEhpnR8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQxWhcNMjcwNjAxMTIxNzQx WjAzMTEwLwYDVQQDEygwNEFGQTJBNDY5QzgyMkU4NUE0MDZDNENCMjRBOEUzQjM3 RkQ1QjVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13SGS1nQHS1Q c1ShY6eu8YeQSd+jmUmEUyWhegYNh3w/bGws0tKTOTM58bwaq98JJI/Y9OUEBsSU xjuzTPFFM9UGd6SYCgbigfgYAiEV+mz2m8okGRh35ogZfjA63bhuPClP7a/+Jy+/ DyVaasbFiBFclG8dbxWYJDte0JFKErYu7kCum5IYQfmnF+fCr2oH8o5V0U17I1O4 KOb+fjLGg8dhkjnwCkXrIAEHs1Ittves8e2/EY5NMkVE0XGEsdrITwNX4uKZxsBi 7qvRSM6Gra/wsQBXr+yxszR8OjJneIKywcH7uAiNy4hG94O/crRSw8O5G7PLYwsc mSnxpOwvEQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFASvoqRpyCLoWkBsTLJKjjs3 /VtcMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzMyZTMx MzczNTJlMzIzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzQzMzMyMzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAEXrxgwDQYJKoZIhvcNAQELBQADggEBAKUnY4BqRCR1cxHmGZeMqQ0c HoQZtvqFAi/EqSSmAtCllPnZ8kL/kvTA3o/IjFo4kIu2ZGoMLAzjNWQvUiOamxak 4eVVtiIf2Ctj1acEVSv6MGYpeM64DNm8ga8LGiNW4JWyjXHDJ2ifMZ2O/UR6US7j Wm9gNs3HVQTwjI2cKysG9NHlUP0wy1UT5FSSgN3ITPIfgjRTw/KfR0O85/NSffsF 0pTUdLFMJGFx3RohapViosS9XxSP8oGuzSCCP3LBdJWLbazkyYTOeZoXllLhXrO+ 7upqsrXABf80NNcm58lYZ/hLlPEUK7wiRGKWm4WA9/BBERWRBOpnXLdcSTe5wo0= -----END CERTIFICATE-----Generated at Thu Jun 4 01:20:04 2026 by rpki-client