$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232362e302f32342d3234203d3e20323138383332.roa File: 38352e3135352e3232362e302f32342d3234203d3e20323138383332.roa (raw, json) Hash identifier: 1/jkEEeNOnP43ibyNPHAEJgCgm3Ka5HVhVqu++MU1P0= Subject key identifier: 25:1F:D4:87:F7:4E:6F:6F:F0:1F:7F:28:69:05:B7:33:B7:BE:ED:5F Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 419B4858A63DA76972C5D42B16339078A7F8CF24 Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232362e302f32342d3234203d3e20323138383332.roa Signing time: Fri 11 Sep 2026 02:05:43 +0000 ROA not before: Fri 11 Sep 2026 02:00:43 +0000 ROA not after: Fri 10 Sep 2027 02:05:43 +0000 asID: 218832 IP address blocks: 85.155.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 09:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9b:48:58:a6:3d:a7:69:72:c5:d4:2b:16:33:90:78:a7:f8:cf:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 11 02:00:43 2026 GMT Not After : Sep 10 02:05:43 2027 GMT Subject: CN=251FD487F74E6F6FF01F7F286905B733B7BEED5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:5f:df:2d:c5:1c:39:1b:52:28:0b:b1:57: 06:5f:78:51:65:6c:17:74:03:ce:b5:bc:3f:48:bf: a2:df:b5:17:c1:f4:aa:2c:5e:3c:db:1d:81:9f:88: cd:a6:0b:91:1e:47:29:a3:00:2c:60:a5:d8:16:34: 3f:a2:2f:df:f1:a3:77:0a:64:28:de:bd:bf:e6:07: c5:ea:9d:55:65:41:1a:92:b1:7a:0c:9e:9d:72:1b: 77:2c:dc:df:74:42:01:69:50:12:56:01:df:d1:c5: 8c:92:b3:18:4b:db:9e:02:3a:dc:23:d8:be:4f:41: 54:0c:18:d0:39:d4:99:8c:1d:3f:b4:55:0b:ab:f5: 32:21:12:4c:dc:e9:b5:0e:84:39:e3:35:b8:4e:2b: a1:86:d4:e8:bf:e2:a3:e7:c3:39:22:a1:a8:1a:b4: 61:1c:62:c5:c7:ad:10:86:f7:a8:22:8c:e6:55:64: 79:db:d7:ef:10:5d:35:46:a7:2c:c6:80:09:89:39: c8:cf:70:0c:75:c5:d8:ae:e8:f3:4d:b0:50:d7:fc: 65:f5:f8:5d:61:8d:ae:ac:d7:27:98:84:7c:7f:ff: 43:30:ce:c5:78:f4:63:fd:b7:b2:2f:3b:ef:59:43: 88:f8:eb:d4:99:7c:70:af:2d:e3:31:6f:c4:f4:1e: bf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1F:D4:87:F7:4E:6F:6F:F0:1F:7F:28:69:05:B7:33:B7:BE:ED:5F X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/38352e3135352e3232362e302f32342d3234203d3e20323138383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.226.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:b8:f0:77:1c:2b:8a:74:54:e9:06:f9:7a:3b:ec:e0:03:d1: 1e:71:84:b5:fb:81:21:80:16:52:97:5f:99:d4:da:6b:29:aa: ef:5d:3d:0e:58:18:da:d9:ed:5f:ad:fb:b5:09:85:2c:96:25: c6:76:a0:43:c7:e0:00:e1:3f:9c:fc:5f:56:3a:1e:f9:8c:f5: 56:c7:f7:27:4b:1e:0c:9c:0c:55:96:40:04:11:3d:ab:f0:e3: 72:c6:60:79:92:3f:af:f6:59:7b:89:7c:8b:ac:fc:eb:30:bc: 7c:86:2b:77:20:89:bc:a1:14:2b:0e:23:74:fa:68:e1:2d:57: cd:38:f1:79:d4:e2:0a:52:9a:b0:1e:1a:50:0d:4e:04:bb:54: b4:7b:74:35:b6:3b:2b:22:ca:2b:6a:5c:96:ce:50:3a:46:ca: ed:23:4c:eb:88:11:3c:7e:4f:a9:22:14:2e:8b:d5:39:97:2f: 02:bd:5d:39:97:86:94:93:96:06:68:bb:8a:f4:68:55:de:3a: 97:00:b7:24:d2:4d:94:fb:2b:10:7f:58:ca:30:09:78:53:c4: 1d:d1:c1:ef:4b:e0:c7:d5:cf:d0:34:27:13:80:01:7c:b0:f8: 37:77:e8:d8:82:0a:58:f3:2c:a4:48:45:a6:94:7b:6b:3d:f3: ba:87:cc:25 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUQZtIWKY9p2lyxdQrFjOQeKf4zyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MTEwMjAwNDNaFw0yNzA5MTAwMjA1NDNaMDMxMTAvBgNV BAMTKDI1MUZENDg3Rjc0RTZGNkZGMDFGN0YyODY5MDVCNzMzQjdCRUVENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RF/fLcUcORtSKAuxVwZfeFFl bBd0A861vD9Iv6LftRfB9KosXjzbHYGfiM2mC5EeRymjACxgpdgWND+iL9/xo3cK ZCjevb/mB8XqnVVlQRqSsXoMnp1yG3cs3N90QgFpUBJWAd/RxYySsxhL254COtwj 2L5PQVQMGNA51JmMHT+0VQur9TIhEkzc6bUOhDnjNbhOK6GG1Oi/4qPnwzkioaga tGEcYsXHrRCG96gijOZVZHnb1+8QXTVGpyzGgAmJOcjPcAx1xdiu6PNNsFDX/GX1 +F1hja6s1yeYhHx//0MwzsV49GP9t7IvO+9ZQ4j469SZfHCvLeMxb8T0Hr//AgMB AAGjggJvMIICazAdBgNVHQ4EFgQUJR/Uh/dOb2/wH38oaQW3M7e+7V8wHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYt Nzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzQvMzgzNTJlMzEzNTM1MmUzMjMy MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzODMzMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABVm+IwDQYJKoZIhvcNAQELBQADggEBAJq48HccK4p0VOkG+Xo77OAD0R5xhLX7 gSGAFlKXX5nU2mspqu9dPQ5YGNrZ7V+t+7UJhSyWJcZ2oEPH4ADhP5z8X1Y6HvmM 9VbH9ydLHgycDFWWQAQRPavw43LGYHmSP6/2WXuJfIus/OswvHyGK3cgibyhFCsO I3T6aOEtV8048XnU4gpSmrAeGlANTgS7VLR7dDW2OysiyitqXJbOUDpGyu0jTOuI ETx+T6kiFC6L1TmXLwK9XTmXhpSTlgZou4r0aFXeOpcAtyTSTZT7KxB/WMowCXhT xB3Rwe9L4MfVz9A0JxOAAXyw+Dd36NiCCljzLKRIRaaUe2s987qHzCU= -----END CERTIFICATE-----Generated at Fri Sep 25 23:18:27 2026 by rpki-client