$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/32332e3135332e3233322e302f32342d3234203d3e203539393933.roa File: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (raw, json) Hash identifier: JHEaGgWPvnLn0wm28zhThMpJYigsCtxXbXsCpQi2K7w= Subject key identifier: 5D:A7:01:30:DC:50:B6:95:FA:7D:66:82:37:CC:CC:87:71:D0:77:FA Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 035A6415AB332526ABE273753D0A0EB1256A059A Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/32332e3135332e3233322e302f32342d3234203d3e203539393933.roa Signing time: Thu 08 Oct 2026 00:29:21 +0000 ROA not before: Thu 08 Oct 2026 00:24:21 +0000 ROA not after: Thu 07 Oct 2027 00:29:21 +0000 asID: 59993 IP address blocks: 23.153.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 11:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5a:64:15:ab:33:25:26:ab:e2:73:75:3d:0a:0e:b1:25:6a:05:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Oct 8 00:24:21 2026 GMT Not After : Oct 7 00:29:21 2027 GMT Subject: CN=5DA70130DC50B695FA7D668237CCCC8771D077FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:a0:a8:e9:fc:f1:10:66:c9:f1:2f:07:29: 2e:da:ea:43:02:99:f3:62:f8:73:a7:6b:6e:4f:69: 71:0c:74:2e:dc:44:31:89:a6:44:d6:a9:83:9a:a3: 52:70:5f:32:cf:2a:9e:7a:f2:aa:6a:00:ab:65:fc: bf:de:a7:91:1e:ed:db:98:e9:19:5d:15:16:17:bc: 2f:92:ee:1c:0f:26:bf:d1:77:7d:40:6f:03:a0:ab: 87:71:10:43:63:1a:18:63:76:e5:7b:2c:72:85:50: ba:05:a8:6c:24:fc:85:50:c4:23:7e:f5:8d:c7:91: d1:db:eb:e4:ed:7e:6d:1e:49:81:dc:ff:71:4c:e6: 50:e7:0c:a2:6c:47:2a:92:8e:21:a1:d8:2a:13:51: ce:83:82:f6:e0:30:f6:37:1a:3d:d5:11:82:65:95: 9c:e5:f0:88:12:9d:9f:32:e6:43:84:18:ac:0d:56: 99:52:4c:1a:73:6c:6f:14:0b:d6:b4:70:b6:29:97: 71:36:b1:c7:a7:01:71:84:a7:08:e2:a9:92:d1:a7: 05:2c:4f:c5:c0:00:31:ff:47:e3:ca:f8:d7:cd:42: e1:ac:61:5f:2b:6b:f5:88:c4:dd:f9:2b:ad:e2:30: 95:14:44:6b:f2:70:c3:83:e3:b6:f3:78:20:2e:0f: 82:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:01:30:DC:50:B6:95:FA:7D:66:82:37:CC:CC:87:71:D0:77:FA X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/32332e3135332e3233322e302f32342d3234203d3e203539393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.153.232.0/24 Signature Algorithm: sha256WithRSAEncryption a5:ad:ab:4f:12:0c:ec:7c:7e:77:b8:b0:d9:01:12:02:09:35: 6b:ee:2d:17:38:bc:14:8f:fb:fc:1b:53:8a:85:99:2c:a9:c0: 91:94:00:c8:ea:2d:86:a7:ff:49:97:32:c3:a2:cc:76:66:b2: 04:05:83:14:94:0f:fe:ef:31:44:37:9e:cb:4b:8c:03:40:08: 48:37:7a:9b:45:8d:29:4f:80:5d:d0:37:63:ab:4b:f5:fe:ee: 17:83:d4:cb:05:ff:2e:d4:94:e1:2c:7c:91:dd:f7:76:94:0c: 67:be:bd:93:d1:a6:8c:74:e4:fd:40:5a:bf:a9:4a:6f:5a:01: 85:8e:5f:fb:e5:fe:ff:7a:a2:b8:27:a5:22:41:dd:20:1e:a6: c2:b2:0a:61:c6:da:c7:ba:a6:00:2f:6e:f1:09:a7:8f:22:33: 5a:d0:03:8f:aa:9d:d5:07:92:11:e4:26:c4:0f:9a:ee:11:10: 1e:38:00:96:ac:6f:4c:38:c1:78:9c:6e:84:73:88:ea:53:68: d1:43:ba:bc:e8:25:90:18:fb:0c:a7:26:b3:df:b0:c1:d4:3d: 4e:6a:ca:41:5e:5d:fa:5d:d3:f6:d5:90:11:be:d9:60:67:55: d2:ab:e6:89:e1:55:f1:0a:12:13:eb:00:25:ad:47:3d:4e:24: ff:a0:c1:6e -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUA1pkFaszJSar4nN1PQoOsSVqBZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjYxMDA4MDAyNDIxWhcNMjcxMDA3MDAyOTIx WjAzMTEwLwYDVQQDEyg1REE3MDEzMERDNTBCNjk1RkE3RDY2ODIzN0NDQ0M4Nzcx RDA3N0ZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhWgqOn88RBm yfEvByku2upDApnzYvhzp2tuT2lxDHQu3EQxiaZE1qmDmqNScF8yzyqeevKqagCr Zfy/3qeRHu3bmOkZXRUWF7wvku4cDya/0Xd9QG8DoKuHcRBDYxoYY3bleyxyhVC6 BahsJPyFUMQjfvWNx5HR2+vk7X5tHkmB3P9xTOZQ5wyibEcqko4hodgqE1HOg4L2 4DD2Nxo91RGCZZWc5fCIEp2fMuZDhBisDVaZUkwac2xvFAvWtHC2KZdxNrHHpwFx hKcI4qmS0acFLE/FwAAx/0fjyvjXzULhrGFfK2v1iMTd+Sut4jCVFERr8nDDg+O2 83ggLg+CWQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFF2nATDcULaV+n1mgjfMzIdx 0Hf6MB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi83LzMyMzMyZTMx MzUzMzJlMzIzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTM5MzkzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEABeZ6DANBgkqhkiG9w0BAQsFAAOCAQEApa2rTxIM7Hx+d7iw2QES Agk1a+4tFzi8FI/7/BtTioWZLKnAkZQAyOothqf/SZcyw6LMdmayBAWDFJQP/u8x RDeey0uMA0AISDd6m0WNKU+AXdA3Y6tL9f7uF4PUywX/LtSU4Sx8kd33dpQMZ769 k9GmjHTk/UBav6lKb1oBhY5f++X+/3qiuCelIkHdIB6mwrIKYcbax7qmAC9u8Qmn jyIzWtADj6qd1QeSEeQmxA+a7hEQHjgAlqxvTDjBeJxuhHOI6lNo0UO6vOglkBj7 DKcms9+wwdQ9TmrKQV5d+l3T9tWQEb7ZYGdV0qvmieFV8QoSE+sAJa1HPU4k/6DB bg== -----END CERTIFICATE-----Generated at Sat Oct 24 17:35:17 2026 by rpki-client