$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e2030.roa File: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8= Subject key identifier: DB:F2:58:25:F5:F1:05:7A:DC:2D:C3:08:84:7C:87:37:7C:35:DE:A5 Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 17C4FC5AE8A74AF466FCD20267A439E567E18CD8 Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e2030.roa Signing time: Mon 10 Mar 2025 23:51:13 +0000 ROA not before: Mon 10 Mar 2025 23:46:13 +0000 ROA not after: Mon 09 Mar 2026 23:51:13 +0000 asID: 0 IP address blocks: 23.183.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c4:fc:5a:e8:a7:4a:f4:66:fc:d2:02:67:a4:39:e5:67:e1:8c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Mar 10 23:46:13 2025 GMT Not After : Mar 9 23:51:13 2026 GMT Subject: CN=DBF25825F5F1057ADC2DC308847C87377C35DEA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:74:bb:cc:6b:ad:6c:3f:7a:78:20:22:24: c6:51:c3:42:24:9d:16:dc:17:a9:c7:ac:01:3f:e4: 15:9b:d9:73:f0:41:56:fa:39:37:38:c9:29:68:df: 59:18:95:91:d1:cf:9c:71:f4:b1:e4:6e:e0:cf:5c: b9:0a:92:fb:5f:09:20:ec:0e:7a:00:01:02:52:1d: 41:41:ed:08:1d:80:b0:4d:72:53:e5:2d:c1:a9:5d: 46:b6:00:3e:87:2c:4f:89:a6:b6:b8:78:4d:6e:c6: db:6d:a4:07:d6:18:71:d2:b5:79:7e:13:2b:62:f7: c3:81:8c:d7:44:62:f6:e9:12:f7:fe:9d:4b:6f:d2: b1:6b:c7:27:51:d3:78:dc:82:e3:c0:f9:a4:f8:06: a4:ea:06:88:db:8e:fb:1c:60:4c:54:3f:2f:ee:71: a3:da:22:d7:f4:f5:22:4f:fa:1f:35:92:69:aa:8e: f6:91:cb:5e:74:1a:b8:31:d3:0a:7f:f8:ec:3f:48: dd:5f:47:3c:09:37:75:7c:ab:52:2a:df:b3:b9:30: ff:25:b2:89:f4:52:b1:32:2c:45:66:da:fb:57:f8: 63:a6:12:5c:48:74:d7:d7:93:20:3f:6a:4b:1e:2f: 08:cd:c7:ac:9d:9c:1a:2e:ca:63:b5:ca:9b:12:d8: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F2:58:25:F5:F1:05:7A:DC:2D:C3:08:84:7C:87:37:7C:35:DE:A5 X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.183.136.0/24 Signature Algorithm: sha256WithRSAEncryption 97:30:e2:53:8c:3e:d5:4a:8c:3f:1b:0d:e5:f6:87:2b:cb:cb: 54:58:58:14:bd:d5:60:a5:13:1c:16:e1:02:29:38:6c:9d:80: de:c8:8a:5f:01:ce:8f:5e:d8:fb:af:14:c8:ce:bb:78:ae:c5: c4:a6:52:93:fb:e2:91:c5:7c:27:15:b5:72:03:1a:6e:42:80: b8:dc:9e:d2:57:4d:20:27:26:38:30:70:10:7a:c6:ec:ad:25: 98:5b:5f:87:c1:53:25:44:67:88:47:21:3a:42:4b:90:93:75: af:8b:ad:45:30:cb:05:eb:a1:9f:65:dc:7d:70:f5:cf:36:e9: b9:c1:2b:98:d6:24:93:e8:2e:c2:88:22:36:9f:32:94:60:f3: 30:45:43:3d:1d:f9:44:19:62:bf:6c:ae:a2:48:d5:24:34:06: 38:cd:e6:7c:7f:76:9b:c9:28:ab:3a:ed:5c:b0:30:f9:e5:1f: 15:2c:bc:e0:cc:3e:17:d6:f0:59:0f:9c:5d:0d:bd:33:ab:ed: 69:b2:5a:ad:cf:42:1d:fb:4e:c0:a0:84:0a:da:76:89:91:a1: 9b:89:06:d8:a6:a7:6d:34:f5:2b:52:85:d7:ab:53:e8:e6:3c: d3:1f:0d:1f:6f:eb:71:db:2c:2b:6b:48:aa:34:43:a3:9e:ea: 50:22:98:d2 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUF8T8WuinSvRm/NICZ6Q55WfhjNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUwMzEwMjM0NjEzWhcNMjYwMzA5MjM1MTEz WjAzMTEwLwYDVQQDEyhEQkYyNTgyNUY1RjEwNTdBREMyREMzMDg4NDdDODczNzdD MzVERUE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiJ0u8xrrWw/ enggIiTGUcNCJJ0W3Bepx6wBP+QVm9lz8EFW+jk3OMkpaN9ZGJWR0c+ccfSx5G7g z1y5CpL7Xwkg7A56AAECUh1BQe0IHYCwTXJT5S3BqV1GtgA+hyxPiaa2uHhNbsbb baQH1hhx0rV5fhMrYvfDgYzXRGL26RL3/p1Lb9Kxa8cnUdN43ILjwPmk+Aak6gaI 2477HGBMVD8v7nGj2iLX9PUiT/ofNZJpqo72kctedBq4MdMKf/jsP0jdX0c8CTd1 fKtSKt+zuTD/JbKJ9FKxMixFZtr7V/hjphJcSHTX15MgP2pLHi8IzcesnZwaLspj tcqbEthG3QIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFNvyWCX18QV63C3DCIR8hzd8 Nd6lMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEF BQcwC4aBhnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwLzMyMzMy ZTMxMzgzMzJlMzEzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXt4gwDQYJKoZIhvcNAQELBQADggEBAJcw4lOMPtVKjD8bDeX2hyvLy1RY WBS91WClExwW4QIpOGydgN7Iil8Bzo9e2PuvFMjOu3iuxcSmUpP74pHFfCcVtXID Gm5CgLjcntJXTSAnJjgwcBB6xuytJZhbX4fBUyVEZ4hHITpCS5CTda+LrUUwywXr oZ9l3H1w9c826bnBK5jWJJPoLsKIIjafMpRg8zBFQz0d+UQZYr9srqJI1SQ0BjjN 5nx/dpvJKKs67VywMPnlHxUsvODMPhfW8FkPnF0NvTOr7WmyWq3PQh37TsCghAra domRoZuJBtimp2009StShderU+jmPNMfDR9v63HbLCtrSKo0Q6Oe6lAimNI= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:03 2025 by rpki-client