$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20323134373638.roa File: 32332e3133322e39322e302f32342d3234203d3e20323134373638.roa (raw, json) Hash identifier: NdlK1zYqdrKSuU5F6Cse146TEQ/3Wx9fQDxzRBJIZZw= Subject key identifier: 61:37:8A:BB:3C:E1:59:87:D7:50:9F:AC:E8:86:8B:AF:31:78:E7:F5 Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 50D845F39E7F72BEADA515CFE58B879A1271D684 Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20323134373638.roa Signing time: Tue 21 Jan 2025 15:01:20 +0000 ROA not before: Tue 21 Jan 2025 14:56:20 +0000 ROA not after: Tue 20 Jan 2026 15:01:20 +0000 asID: 214768 IP address blocks: 23.132.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 18:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d8:45:f3:9e:7f:72:be:ad:a5:15:cf:e5:8b:87:9a:12:71:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: Jan 21 14:56:20 2025 GMT Not After : Jan 20 15:01:20 2026 GMT Subject: CN=61378ABB3CE15987D7509FACE8868BAF3178E7F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:0e:9c:ee:29:0f:10:df:15:46:35:31:7a: b4:cc:c4:94:d5:13:4a:8b:2e:c4:4b:0f:bc:86:1d: f0:31:ca:ef:71:f0:97:02:0d:50:09:84:e1:d5:7c: 35:4a:bc:1f:d5:c7:ed:e6:c3:bc:9f:47:56:13:f2: e2:23:8d:1f:ab:0a:c5:a8:93:78:77:68:bd:71:f7: 28:3f:ce:82:06:12:96:40:eb:c5:e3:fb:f5:d9:d9: 41:92:51:db:a8:a2:2f:6e:b5:6f:8e:24:bc:aa:35: 0a:bf:11:15:4f:8b:97:99:db:f3:9c:7e:97:b6:b7: 64:11:72:67:24:ea:2b:0d:ca:fa:b0:5a:9c:d0:29: 1c:73:a5:0b:ae:dd:ca:2a:8e:08:db:af:b7:fa:22: 74:5c:97:ce:e9:96:0c:ac:25:81:49:33:ef:be:05: 64:a5:6a:0c:a7:2f:5e:47:71:ac:37:0f:cb:55:ad: 15:29:c2:cf:16:80:c6:7d:c1:5b:d5:0d:ee:bf:6f: f9:5c:49:7d:50:9e:d8:c0:eb:bb:6a:4f:1a:cf:e0: b7:15:d0:39:01:23:4e:4b:a6:c5:32:81:94:e3:2d: d1:2b:42:25:cc:9a:bc:67:3e:ac:09:a7:dc:3c:e9: d3:42:88:1e:98:ed:1b:80:09:d7:9f:b5:cc:78:a3: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:37:8A:BB:3C:E1:59:87:D7:50:9F:AC:E8:86:8B:AF:31:78:E7:F5 X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20323134373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.132.92.0/24 Signature Algorithm: sha256WithRSAEncryption 72:3e:6e:79:85:c1:c4:52:91:dc:09:dd:ab:f7:fa:c0:eb:96: b8:cd:23:29:6c:70:ea:23:b1:4c:9f:2c:45:0d:9e:1d:57:f7: 9f:31:21:94:07:2d:56:1d:4e:59:fa:7b:a4:2b:76:d1:0a:4d: 85:10:25:e5:57:a6:74:a8:f2:74:8f:e4:8d:3b:a7:ea:14:2d: 8f:f3:4e:56:4c:49:b4:59:f4:77:35:3c:c4:62:e9:72:6c:98: b6:45:f1:47:d8:82:ee:08:cb:1a:34:95:e8:ff:75:d1:9c:e3: 3e:73:0a:90:eb:20:67:04:54:6a:3c:ab:76:e0:1b:39:29:95: 33:42:f5:5f:21:93:88:70:de:06:f7:6f:45:e5:2e:19:80:2c: 17:93:ae:55:97:b7:35:1f:f8:e3:f8:ae:3b:10:f9:cc:d5:b0: d8:43:43:94:c1:0c:54:7b:9b:5c:81:17:21:5b:df:c1:41:b0: 6e:01:1b:63:e0:c5:27:97:74:f0:aa:47:8b:2f:0b:b2:88:65: 8a:d1:3b:c3:66:d6:c2:f6:e0:22:f7:9c:c0:14:aa:3c:ef:85: c1:26:93:6d:39:ca:48:db:b0:54:f2:0a:78:c5:5d:7e:b7:f4: fc:77:a3:a5:03:41:42:fa:a8:0d:35:2d:eb:15:4e:1c:f4:4b: ac:7d:45:0b -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUUNhF855/cr6tpRXP5YuHmhJx1oQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwMTIxMTQ1NjIwWhcNMjYwMTIwMTUwMTIw WjAzMTEwLwYDVQQDEyg2MTM3OEFCQjNDRTE1OTg3RDc1MDlGQUNFODg2OEJBRjMx NzhFN0Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztsOnO4pDxDf FUY1MXq0zMSU1RNKiy7ESw+8hh3wMcrvcfCXAg1QCYTh1Xw1Srwf1cft5sO8n0dW E/LiI40fqwrFqJN4d2i9cfcoP86CBhKWQOvF4/v12dlBklHbqKIvbrVvjiS8qjUK vxEVT4uXmdvznH6XtrdkEXJnJOorDcr6sFqc0Ckcc6ULrt3KKo4I26+3+iJ0XJfO 6ZYMrCWBSTPvvgVkpWoMpy9eR3GsNw/LVa0VKcLPFoDGfcFb1Q3uv2/5XEl9UJ7Y wOu7ak8az+C3FdA5ASNOS6bFMoGU4y3RK0IlzJq8Zz6sCafcPOnTQogemO0bgAnX n7XMeKMa3QIDAQABo4ICzTCCAskwHQYDVR0OBBYEFGE3irs84VmH11CfrOiGi68x eOf1MB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYzLTBmMzJiOGU3ZmU3OS8zLzMyMzMyZTMx MzMzMjJlMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEABeEXDANBgkqhkiG9w0BAQsFAAOCAQEAcj5ueYXBxFKR3Andq/f6 wOuWuM0jKWxw6iOxTJ8sRQ2eHVf3nzEhlActVh1OWfp7pCt20QpNhRAl5VemdKjy dI/kjTun6hQtj/NOVkxJtFn0dzU8xGLpcmyYtkXxR9iC7gjLGjSV6P910ZzjPnMK kOsgZwRUajyrduAbOSmVM0L1XyGTiHDeBvdvReUuGYAsF5OuVZe3NR/44/iuOxD5 zNWw2ENDlMEMVHubXIEXIVvfwUGwbgEbY+DFJ5d08KpHiy8LsohlitE7w2bWwvbg IvecwBSqPO+FwSaTbTnKSNuwVPIKeMVdfrf0/HejpQNBQvqoDTUt6xVOHPRLrH1F Cw== -----END CERTIFICATE-----Generated at Sat May 10 04:55:43 2025 by rpki-client