$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134362e302f32342d3234203d3e20333936393933.roa File: 3139392e34372e3134362e302f32342d3234203d3e20333936393933.roa (raw, json) Hash identifier: ehVs1bE//I/kWoO8kZQbpRJu48ELtcpzZTatbI6fDtQ= Subject key identifier: 71:0E:0A:5F:EE:6A:EF:05:43:F7:DC:05:8D:F8:97:DA:B1:5B:71:8C Certificate issuer: /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6 Certificate serial: 34DC8E8EF8AC852A5B909718E4AA968866841AFA Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134362e302f32342d3234203d3e20333936393933.roa Signing time: Thu 23 Jul 2026 07:39:12 +0000 ROA not before: Thu 23 Jul 2026 07:34:12 +0000 ROA not after: Thu 22 Jul 2027 07:39:12 +0000 asID: 396993 IP address blocks: 199.47.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 02:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:dc:8e:8e:f8:ac:85:2a:5b:90:97:18:e4:aa:96:88:66:84:1a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6 Validity Not Before: Jul 23 07:34:12 2026 GMT Not After : Jul 22 07:39:12 2027 GMT Subject: CN=710E0A5FEE6AEF0543F7DC058DF897DAB15B718C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:b1:43:84:0f:a1:fe:93:80:48:fa:c0:7b: 16:cb:c6:61:c6:64:a1:ee:be:9f:b3:ee:57:f6:f1: b3:3b:df:aa:2e:23:37:95:40:89:67:c2:28:51:bc: e0:96:02:81:17:ab:15:e5:98:90:00:fb:9d:d1:2e: 30:b2:94:4d:1a:95:7d:80:24:49:bd:e1:ca:8c:5d: 53:50:04:b3:62:ec:d8:79:41:e7:c1:62:6e:93:b7: fb:ec:12:f1:22:06:31:24:3c:a3:ac:e6:9b:05:1b: 1d:9a:f0:ed:8c:e1:2b:2c:10:bf:1b:f8:81:92:a9: b5:92:77:29:88:f2:20:3b:48:7c:05:eb:c2:be:a0: 15:fc:74:db:84:a0:08:4b:07:44:0a:5b:31:a1:af: 06:e8:9f:82:0a:06:f9:37:74:b6:14:f9:14:29:48: 11:03:30:be:b9:5f:ff:e5:15:69:c0:f6:c8:06:f2: 82:f2:f7:e5:05:0c:ca:30:eb:13:67:43:58:05:aa: a5:f4:bb:81:75:54:86:4f:40:0e:8a:5d:5a:6f:f1: d5:bc:c3:87:5a:42:2f:76:36:38:c5:e6:c8:f1:05: 07:3a:0e:c4:28:d7:c9:b3:e5:51:d3:35:93:01:cc: bd:a7:a6:3a:ba:93:5e:e3:3d:3e:2d:95:5d:ca:15: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0E:0A:5F:EE:6A:EF:05:43:F7:DC:05:8D:F8:97:DA:B1:5B:71:8C X509v3 Authority Key Identifier: keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134362e302f32342d3234203d3e20333936393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.47.146.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:02:93:07:d8:8e:32:7d:5b:12:66:76:d4:01:e7:a8:4b:5d: 62:a9:a1:4d:06:16:0a:42:71:d6:10:bd:9a:dc:ca:a4:98:18: 68:98:7f:7b:50:83:3d:4b:0c:68:3a:61:6d:06:33:7e:5a:e8: ec:6e:1c:54:40:4f:ee:97:1d:d6:b3:b7:f4:cb:dd:17:c7:b5: f8:05:57:52:6b:e4:d3:0c:f1:a8:91:67:5a:59:e5:b4:e0:16: 4b:f7:5a:0e:77:2a:da:89:7a:2c:75:7e:28:0a:31:36:8d:a3: a6:98:ae:1c:c2:c4:e9:cf:5d:7f:47:69:51:23:60:49:b6:3e: f2:bd:41:c2:4d:0d:81:65:90:ab:ee:1a:97:13:f6:cc:fa:0f: ae:ed:50:dc:27:5e:16:27:5b:a2:5f:34:dd:31:ae:c3:85:ff: ef:24:2e:94:bb:9c:7a:50:80:83:42:3a:b4:ad:e8:f7:eb:d8: ed:11:ab:21:ba:63:23:7a:56:03:bf:45:a5:72:cd:04:5e:ff: c1:18:ff:15:dc:c4:5c:e4:5f:03:fe:bf:f4:d2:15:8d:ed:d5: d3:ea:54:d3:41:82:89:b9:3b:f4:eb:84:83:c7:fd:50:5d:e5: 48:0e:36:66:3d:50:8e:c4:2e:f5:63:ce:b9:40:1a:55:40:bf: 40:86:c5:d6 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIUNNyOjvishSpbkJcY5KqWiGaEGvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjYwNzIzMDczNDEyWhcNMjcwNzIyMDczOTEy WjAzMTEwLwYDVQQDEyg3MTBFMEE1RkVFNkFFRjA1NDNGN0RDMDU4REY4OTdEQUIx NUI3MThDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvWxQ4QPof6T gEj6wHsWy8ZhxmSh7r6fs+5X9vGzO9+qLiM3lUCJZ8IoUbzglgKBF6sV5ZiQAPud 0S4wspRNGpV9gCRJveHKjF1TUASzYuzYeUHnwWJuk7f77BLxIgYxJDyjrOabBRsd mvDtjOErLBC/G/iBkqm1kncpiPIgO0h8BevCvqAV/HTbhKAISwdEClsxoa8G6J+C Cgb5N3S2FPkUKUgRAzC+uV//5RVpwPbIBvKC8vflBQzKMOsTZ0NYBaql9LuBdVSG T0AOil1ab/HVvMOHWkIvdjY4xebI8QUHOg7EKNfJs+VR0zWTAcy9p6Y6upNe4z0+ LZVdyhWL6wIDAQABo4ICzzCCAsswHQYDVR0OBBYEFHEOCl/uau8FQ/fcBY34l9qx W3GMMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk MDMyMmUwY2UwMmRhZDYuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMxMzkzOTJl MzQzNzJlMzEzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzOTMz LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQAxy+SMA0GCSqGSIb3DQEBCwUAA4IBAQCKApMH2I4yfVsSZnbU AeeoS11iqaFNBhYKQnHWEL2a3MqkmBhomH97UIM9SwxoOmFtBjN+WujsbhxUQE/u lx3Ws7f0y90Xx7X4BVdSa+TTDPGokWdaWeW04BZL91oOdyraiXosdX4oCjE2jaOm mK4cwsTpz11/R2lRI2BJtj7yvUHCTQ2BZZCr7hqXE/bM+g+u7VDcJ14WJ1uiXzTd Ma7Dhf/vJC6Uu5x6UICDQjq0rej369jtEashumMjelYDv0Wlcs0EXv/BGP8V3MRc 5F8D/r/00hWN7dXT6lTTQYKJuTv064SDx/1QXeVIDjZmPVCOxC71Y865QBpVQL9A hsXW -----END CERTIFICATE-----Generated at Fri Jul 24 04:58:46 2026 by rpki-client