$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/36362e3133322e3233312e302f32342d3234203d3e20333936303634.roa File: 36362e3133322e3233312e302f32342d3234203d3e20333936303634.roa (raw, json) Hash identifier: 7Q+9lV48yJnpzlllXh0nFmeybwYrlzOZRdSVYiQ22xw= Subject key identifier: 46:0C:AE:85:F6:53:A6:F3:FF:5B:FB:BA:D1:6D:93:55:EB:DB:6C:FA Certificate issuer: /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Certificate serial: 3E7A9AD48B26B59D0F6BD0EB2A399966D4574F2E Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/36362e3133322e3233312e302f32342d3234203d3e20333936303634.roa Signing time: Sat 03 Oct 2026 10:35:41 +0000 ROA not before: Sat 03 Oct 2026 10:30:41 +0000 ROA not after: Sat 02 Oct 2027 10:35:41 +0000 asID: 396064 IP address blocks: 66.132.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 07:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7a:9a:d4:8b:26:b5:9d:0f:6b:d0:eb:2a:39:99:66:d4:57:4f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Validity Not Before: Oct 3 10:30:41 2026 GMT Not After : Oct 2 10:35:41 2027 GMT Subject: CN=460CAE85F653A6F3FF5BFBBAD16D9355EBDB6CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:d1:7d:61:09:88:7b:c5:88:5d:38:30:e7: 7f:24:f9:12:5d:82:a9:46:81:6f:fb:45:73:48:b6: d9:f8:15:2d:11:68:e0:09:9e:74:0f:5e:b0:84:63: c8:70:81:b0:67:91:7c:51:61:8a:f2:4b:c1:fd:5a: a8:f9:d2:f8:86:70:a9:18:99:cb:c9:ca:02:e7:f5: ad:8c:e1:6e:2e:91:ed:19:e7:11:1a:2d:92:d4:4c: ac:81:97:dd:d1:fd:3b:62:71:44:90:e4:6f:95:00: 65:a5:7d:b7:43:35:0c:21:86:34:e8:9e:7a:76:2b: 33:ef:3c:aa:96:7f:96:99:9e:4b:72:73:83:1f:16: a8:00:8c:33:57:e1:b0:4d:f4:8b:b0:3f:6d:ac:0e: 7a:30:9d:b6:cb:a8:ff:bc:c7:88:3c:f2:97:20:d1: db:59:f9:d4:99:10:9c:07:a6:53:69:41:08:f8:e5: c3:9c:d1:a9:3b:65:fa:89:07:24:4a:73:38:ee:cc: a6:9d:2c:f9:46:20:e3:c9:47:18:70:39:20:ff:af: 89:f9:ec:b8:dd:98:2d:f6:da:69:f2:70:e1:43:1c: 33:41:a8:af:23:4a:94:27:a2:62:50:6b:9c:d4:7c: bf:72:20:8c:98:b8:69:0d:c9:12:bc:c9:aa:88:b4: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0C:AE:85:F6:53:A6:F3:FF:5B:FB:BA:D1:6D:93:55:EB:DB:6C:FA X509v3 Authority Key Identifier: keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/36362e3133322e3233312e302f32342d3234203d3e20333936303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.132.231.0/24 Signature Algorithm: sha256WithRSAEncryption 36:08:e4:e2:c3:e5:d5:26:a6:ab:4a:99:39:17:14:39:df:d1: e3:4a:ed:43:35:84:57:7c:9c:0a:b0:e1:94:da:68:4c:6c:16: c9:a7:64:81:b1:b4:6d:98:6e:09:a8:90:5a:7a:cc:8d:3d:a5: 20:0a:d8:ad:1d:fe:46:6c:5b:bf:49:9c:79:d7:db:7f:22:a4: 76:bf:0c:59:1e:aa:8e:70:ce:53:ed:e2:f8:c2:37:14:66:8d: 77:fd:1c:f8:10:0d:24:6f:0c:67:67:c2:f3:3c:91:8a:8c:45: b9:b1:7b:12:cc:b5:55:e0:38:f5:99:a4:30:66:93:80:c9:f8: 8c:ce:93:85:d3:46:3d:03:b3:24:62:ce:b9:7c:5e:7c:16:1d: cb:ef:91:38:29:e0:46:5f:82:28:9a:58:f0:04:c5:77:51:49: 8f:4b:33:49:c4:43:b9:8f:55:ca:63:db:ef:87:91:21:31:aa: 8d:1b:1b:4e:61:4a:9c:38:65:c5:a1:c1:d8:f0:d4:34:a2:d9: 01:96:21:d2:0f:76:4c:19:28:fb:59:5a:b4:78:a6:39:41:a4: c7:bc:af:3d:4e:aa:b1:fd:66:f7:57:7e:5c:bf:22:ca:ec:42: 6a:b6:21:ea:de:b7:19:04:49:02:f6:9f:88:16:7a:72:7d:f0: fa:46:2a:a7 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIUPnqa1IsmtZ0Pa9DrKjmZZtRXTy4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFk N2JkOTU1MmMzMGNlZTBiOWMwHhcNMjYxMDAzMTAzMDQxWhcNMjcxMDAyMTAzNTQx WjAzMTEwLwYDVQQDEyg0NjBDQUU4NUY2NTNBNkYzRkY1QkZCQkFEMTZEOTM1NUVC REI2Q0ZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4nRfWEJiHvF iF04MOd/JPkSXYKpRoFv+0VzSLbZ+BUtEWjgCZ50D16whGPIcIGwZ5F8UWGK8kvB /Vqo+dL4hnCpGJnLycoC5/WtjOFuLpHtGecRGi2S1EysgZfd0f07YnFEkORvlQBl pX23QzUMIYY06J56disz7zyqln+WmZ5LcnODHxaoAIwzV+GwTfSLsD9trA56MJ22 y6j/vMeIPPKXINHbWfnUmRCcB6ZTaUEI+OXDnNGpO2X6iQckSnM47symnSz5RiDj yUcYcDkg/6+J+ey43Zgt9tpp8nDhQxwzQaivI0qUJ6JiUGuc1Hy/ciCMmLhpDckS vMmqiLRHdQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFEYMroX2U6bz/1v7utFtk1Xr 22z6MB8GA1UdIwQYMBaAFHr6IjtiOLDMY3T3/omUNk+/j1TeMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8yLzdBRkEyMjNCNjIzOEIwQ0M2Mzc0RjdGRTg5OTQzNjRG QkY4RjU0REUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUt NGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80NjU1M2FkMC1mYzE5LTRmMjgtOGVlMi1i NWNmZmQ0MzAzMDAvNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFkN2Jk OTU1MmMzMGNlZTBiOWMuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0LTU4MGQxMzY5YjdjNC8yLzM2MzYyZTMx MzMzMjJlMzIzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM2MzAzNjM0 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQAQoTnMA0GCSqGSIb3DQEBCwUAA4IBAQA2COTiw+XVJqarSpk5 FxQ539HjSu1DNYRXfJwKsOGU2mhMbBbJp2SBsbRtmG4JqJBaesyNPaUgCtitHf5G bFu/SZx519t/IqR2vwxZHqqOcM5T7eL4wjcUZo13/Rz4EA0kbwxnZ8LzPJGKjEW5 sXsSzLVV4Dj1maQwZpOAyfiMzpOF00Y9A7MkYs65fF58Fh3L75E4KeBGX4Iomljw BMV3UUmPSzNJxEO5j1XKY9vvh5EhMaqNGxtOYUqcOGXFocHY8NQ0otkBliHSD3ZM GSj7WVq0eKY5QaTHvK89Tqqx/Wb3V35cvyLK7EJqtiHq3rcZBEkC9p+IFnpyffD6 Riqn -----END CERTIFICATE-----Generated at Mon Oct 19 19:34:59 2026 by rpki-client