$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3133302e31322e39332e302f32342d3234203d3e203236393534.roa File: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (raw, json) Hash identifier: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU= Subject key identifier: B3:39:3C:11:C0:2D:19:16:AE:09:47:95:5A:73:BF:96:99:80:70:58 Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 365E8176BAE19F1D2B16D0346D1F1C9BC9855615 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3133302e31322e39332e302f32342d3234203d3e203236393534.roa Signing time: Sat 11 Oct 2025 03:37:29 +0000 ROA not before: Sat 11 Oct 2025 03:32:29 +0000 ROA not after: Sat 10 Oct 2026 03:37:29 +0000 asID: 26954 IP address blocks: 130.12.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5e:81:76:ba:e1:9f:1d:2b:16:d0:34:6d:1f:1c:9b:c9:85:56:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Oct 11 03:32:29 2025 GMT Not After : Oct 10 03:37:29 2026 GMT Subject: CN=B3393C11C02D1916AE0947955A73BF9699807058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:b7:12:ca:3f:df:b8:14:9b:1b:d9:97:17: 84:c5:64:57:1c:b9:fc:27:68:52:30:1b:ed:11:73: 77:40:a8:18:63:fd:2b:55:24:50:c0:44:52:7c:fd: ce:84:db:ae:a8:c8:ef:cc:ce:36:60:58:33:57:12: 3e:31:9a:c5:80:ef:6a:91:06:bc:1b:f5:ab:41:08: 4c:ac:73:44:16:01:f3:54:ff:c4:45:5c:a5:f1:97: f4:d9:bd:2f:d7:10:cb:04:e2:b5:c4:3a:b7:42:c6: f4:a7:dc:a7:91:e1:b9:e3:18:7d:4b:74:eb:85:a3: 83:5d:e8:2e:cc:0d:9c:0a:cc:19:67:a0:30:80:c7: 17:71:08:dc:34:f1:b4:16:07:8f:25:b9:14:b9:da: 01:b9:ed:46:ef:1a:7e:fa:ab:f7:53:64:ae:cb:b5: 1d:c8:55:a2:f9:15:50:5c:4b:c5:da:19:6a:06:7a: 4b:47:e3:1b:6c:35:4f:a3:65:55:c9:24:0e:cd:af: 12:08:60:ad:68:79:91:9d:81:8b:5d:9c:ad:99:5f: a1:41:2a:87:1d:dc:6f:ff:5f:db:41:e0:88:39:64: fb:44:49:b8:4a:7f:36:9b:25:1c:75:74:37:60:70: cd:00:a2:6c:cc:d8:05:43:55:07:6a:8c:0e:0c:02: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:39:3C:11:C0:2D:19:16:AE:09:47:95:5A:73:BF:96:99:80:70:58 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3133302e31322e39332e302f32342d3234203d3e203236393534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.12.93.0/24 Signature Algorithm: sha256WithRSAEncryption 19:da:1c:40:a1:ff:4b:36:2a:c8:fb:6f:db:b5:82:db:e8:0d: d2:1a:6a:9c:95:06:14:d9:c0:b5:79:72:aa:84:80:83:41:72: 64:28:f5:e2:cd:93:4f:b9:ec:77:a9:88:e0:ea:b4:ad:3a:f7: 23:51:e8:4c:43:3f:66:1a:a6:03:44:f7:d8:38:fe:e1:b6:54: 87:da:e9:89:44:64:cb:1d:fa:43:8a:a8:c6:4b:2b:80:95:4b: a9:a4:00:8d:bd:8e:c7:33:98:08:58:2a:d4:63:4d:88:5a:b5: b3:15:57:4c:49:d5:70:17:db:e6:f5:69:ae:5f:0d:1b:b4:75: 43:cc:99:75:12:40:2c:16:a0:33:a4:02:09:3c:84:ab:86:ac: df:dd:c7:73:f4:42:81:b8:4d:69:6b:08:1c:07:88:b2:89:a8: 0e:46:6e:da:84:7b:16:ff:0f:c3:9c:17:23:bf:e5:9d:cc:9e: 71:50:1e:00:0b:0b:fb:5c:d9:76:bb:c8:92:18:1c:a0:cd:97: 3d:55:e4:3f:26:07:df:46:8c:a0:f3:30:5a:90:26:4c:84:7c: 1f:69:52:f8:f0:4d:2e:6e:34:f9:84:9c:b2:9d:0d:ff:b2:a8: 86:9a:94:77:88:42:ae:95:a0:69:cd:12:79:e8:b7:05:f7:65: 66:32:54:a5 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUNl6Bdrrhnx0rFtA0bR8cm8mFVhUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMDExMDMzMjI5WhcNMjYxMDEwMDMzNzI5 WjAzMTEwLwYDVQQDEyhCMzM5M0MxMUMwMkQxOTE2QUUwOTQ3OTU1QTczQkY5Njk5 ODA3MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthy3Eso/37gU mxvZlxeExWRXHLn8J2hSMBvtEXN3QKgYY/0rVSRQwERSfP3OhNuuqMjvzM42YFgz VxI+MZrFgO9qkQa8G/WrQQhMrHNEFgHzVP/ERVyl8Zf02b0v1xDLBOK1xDq3Qsb0 p9ynkeG54xh9S3TrhaODXeguzA2cCswZZ6AwgMcXcQjcNPG0FgePJbkUudoBue1G 7xp++qv3U2Suy7UdyFWi+RVQXEvF2hlqBnpLR+MbbDVPo2VVySQOza8SCGCtaHmR nYGLXZytmV+hQSqHHdxv/1/bQeCIOWT7REm4Sn82myUcdXQ3YHDNAKJszNgFQ1UH aowODAI4zQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFLM5PBHALRkWrglHlVpzv5aZ gHBYMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4MTViYi8xLzMxMzMzMDJl MzEzMjJlMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM1MzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACCDF0wDQYJKoZIhvcNAQELBQADggEBABnaHECh/0s2Ksj7b9u1gtvo DdIaapyVBhTZwLV5cqqEgINBcmQo9eLNk0+57HepiODqtK069yNR6ExDP2YapgNE 99g4/uG2VIfa6YlEZMsd+kOKqMZLK4CVS6mkAI29jsczmAhYKtRjTYhatbMVV0xJ 1XAX2+b1aa5fDRu0dUPMmXUSQCwWoDOkAgk8hKuGrN/dx3P0QoG4TWlrCBwHiLKJ qA5GbtqEexb/D8OcFyO/5Z3MnnFQHgALC/tc2Xa7yJIYHKDNlz1V5D8mB99GjKDz MFqQJkyEfB9pUvjwTS5uNPmEnLKdDf+yqIaalHeIQq6VoGnNEnnotwX3ZWYyVKU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:45 2025 by rpki-client