$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534323a3a2f34382d3438203d3e20323134343531.roa File: 326130623a396534323a3a2f34382d3438203d3e20323134343531.roa (raw, json) Hash identifier: ZRjJLmDeRNCwRY7Ib+tMKnrANdRcJxaIkzreli7J/Wg= Subject key identifier: 75:D9:C2:03:A9:F6:F1:D6:E1:AB:59:27:BF:9E:E9:93:A5:D2:B8:DC Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Certificate serial: 303A8144B96D456A1C806A0ACB513298A0368373 Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534323a3a2f34382d3438203d3e20323134343531.roa Signing time: Thu 19 Mar 2026 00:35:48 +0000 ROA not before: Thu 19 Mar 2026 00:30:48 +0000 ROA not after: Thu 18 Mar 2027 00:35:48 +0000 asID: 214451 IP address blocks: 2a0b:9e42::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3a:81:44:b9:6d:45:6a:1c:80:6a:0a:cb:51:32:98:a0:36:83:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Validity Not Before: Mar 19 00:30:48 2026 GMT Not After : Mar 18 00:35:48 2027 GMT Subject: CN=75D9C203A9F6F1D6E1AB5927BF9EE993A5D2B8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f6:16:22:af:b8:89:d5:bd:90:66:04:be:dd: 45:8a:79:e9:da:7d:52:c8:a1:93:f4:7f:53:d8:fd: ae:bb:2b:00:39:a2:98:69:7b:2a:a5:43:55:cb:11: 79:ab:9c:e3:57:70:f3:3c:a8:c5:c7:3f:5d:50:22: 42:ba:dc:7c:1e:ae:25:1b:c0:1d:b1:47:70:f8:29: cb:be:11:13:94:7e:f0:b8:0c:ec:d2:b1:30:25:47: 87:ed:8b:81:66:0f:7a:db:7f:53:91:32:b1:3b:a2: e6:e8:0c:4f:d5:a4:fc:26:c6:5c:2c:27:ee:b1:99: 34:c0:9d:da:6b:f6:b2:44:31:ad:27:59:8d:af:01: 42:1a:bc:8a:a0:33:13:c7:91:e3:b4:f0:39:ff:df: 17:12:8b:96:8b:59:2c:6b:e9:5a:7b:57:b0:9a:29: c4:fc:d8:24:bb:f9:80:9a:a1:c5:fe:e7:0f:1b:f4: 14:11:8d:3e:6c:5c:77:96:a6:82:6d:b1:b4:38:cf: ee:5e:02:c7:ee:5a:72:4b:7b:37:64:2e:fc:3d:1a: c4:24:d3:4f:a7:54:e0:f3:73:d7:0e:c8:60:41:ef: 97:e6:de:8b:a9:24:9f:30:3c:4e:81:11:ca:0c:e4: 05:0d:78:b7:09:c3:e1:b4:83:95:cb:da:ee:60:0b: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D9:C2:03:A9:F6:F1:D6:E1:AB:59:27:BF:9E:E9:93:A5:D2:B8:DC X509v3 Authority Key Identifier: keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534323a3a2f34382d3438203d3e20323134343531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:9e42::/48 Signature Algorithm: sha256WithRSAEncryption 49:ae:0c:77:a2:b8:77:ec:f2:24:f5:26:df:2d:e0:cd:92:8c: 8a:a6:e5:49:99:7e:53:54:d7:26:c4:4e:4f:80:07:3e:bb:ff: 88:e8:dc:3a:84:47:1c:e2:4c:d8:f8:2c:6f:20:3c:31:63:18: e7:79:3a:f0:63:e3:95:ad:48:d2:31:97:f3:f2:df:0f:64:6d: 17:31:3c:05:48:ab:98:ab:e5:9f:ea:61:57:a5:3b:55:c8:8d: 5f:c5:c5:3d:ae:15:3e:34:85:73:7f:28:c1:66:25:77:64:ef: f7:8e:1f:57:8b:9f:25:56:e1:91:e8:97:d8:cc:48:10:5f:33: 56:c9:cc:99:1a:74:e5:0d:e3:2c:4d:75:d6:4c:af:88:5f:db: d4:ce:7b:88:fc:91:94:58:fe:a4:e4:e9:c8:98:41:05:e5:fd: d5:56:bf:9f:0a:ed:5f:46:01:4b:17:cb:5c:1e:e2:48:af:fc: 3d:36:f6:16:3f:dc:22:69:47:1e:36:a7:bd:e3:f3:77:bb:be: e9:7d:f5:9e:ac:d9:4d:dd:37:c6:53:e6:7b:c3:52:e3:7c:f9: 9d:fb:4b:08:ff:8c:57:b6:9e:3e:28:fb:78:be:34:a3:f3:76: dc:cb:3f:d0:01:5c:29:85:d4:82:9f:97:82:97:ab:95:0e:b5: 7c:fd:24:af -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIUMDqBRLltRWocgGoKy1EymKA2g3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD Q0RFRTM1QzAeFw0yNjAzMTkwMDMwNDhaFw0yNzAzMTgwMDM1NDhaMDMxMTAvBgNV BAMTKDc1RDlDMjAzQTlGNkYxRDZFMUFCNTkyN0JGOUVFOTkzQTVEMkI4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN9hYir7iJ1b2QZgS+3UWKeena fVLIoZP0f1PY/a67KwA5ophpeyqlQ1XLEXmrnONXcPM8qMXHP11QIkK63HweriUb wB2xR3D4Kcu+EROUfvC4DOzSsTAlR4fti4FmD3rbf1ORMrE7ouboDE/VpPwmxlws J+6xmTTAndpr9rJEMa0nWY2vAUIavIqgMxPHkeO08Dn/3xcSi5aLWSxr6Vp7V7Ca KcT82CS7+YCaocX+5w8b9BQRjT5sXHeWpoJtsbQ4z+5eAsfuWnJLezdkLvw9GsQk 00+nVODzc9cOyGBB75fm3oupJJ8wPE6BEcoM5AUNeLcJw+G0g5XL2u5gC+SzAgMB AAGjggJwMIICbDAdBgNVHQ4EFgQUddnCA6n28dbhq1knv57pk6XSuNwwHwYDVR0j BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF RTM1Qy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJjZjhiYTct Y2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdlOTUwLzUvMzI2MTMwNjIzYTM5NjUzNDMy M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM0MzQzNTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KgueQgAAMA0GCSqGSIb3DQEBCwUAA4IBAQBJrgx3orh37PIk9SbfLeDNkoyKpuVJ mX5TVNcmxE5PgAc+u/+I6Nw6hEcc4kzY+CxvIDwxYxjneTrwY+OVrUjSMZfz8t8P ZG0XMTwFSKuYq+Wf6mFXpTtVyI1fxcU9rhU+NIVzfyjBZiV3ZO/3jh9Xi58lVuGR 6JfYzEgQXzNWycyZGnTlDeMsTXXWTK+IX9vUznuI/JGUWP6k5OnImEEF5f3VVr+f Cu1fRgFLF8tcHuJIr/w9NvYWP9wiaUceNqe94/N3u77pffWerNlN3TfGU+Z7w1Lj fPmd+0sI/4xXtp4+KPt4vjSj83bcyz/QAVwphdSCn5eCl6uVDrV8/SSv -----END CERTIFICATE-----Generated at Thu Mar 26 08:17:39 2026 by rpki-client