$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/32332e3137302e3231362e302f32342d3234203d3e203538323032.roa File: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (raw, json) Hash identifier: dhvuFNP+dKjaylM9bJGDtxRtOBzy7kE4O1dRl7JrhAc= Subject key identifier: 30:BE:8E:91:45:85:E0:1B:6F:CA:E6:B9:31:31:E0:D1:13:16:51:D2 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 51840A8AACF163934C483E0D7DA7F6CF14D7C409 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/32332e3137302e3231362e302f32342d3234203d3e203538323032.roa Signing time: Sun 19 Jul 2026 12:27:36 +0000 ROA not before: Sun 19 Jul 2026 12:22:36 +0000 ROA not after: Sun 18 Jul 2027 12:27:36 +0000 asID: 58202 IP address blocks: 23.170.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 14:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:84:0a:8a:ac:f1:63:93:4c:48:3e:0d:7d:a7:f6:cf:14:d7:c4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jul 19 12:22:36 2026 GMT Not After : Jul 18 12:27:36 2027 GMT Subject: CN=30BE8E914585E01B6FCAE6B93131E0D1131651D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:f4:d2:98:28:2a:7e:eb:be:21:60:f5:f6: 03:e6:25:ec:5d:59:77:81:a3:e5:b0:5f:a5:02:08: 9b:0a:1b:00:57:7b:99:e9:0f:15:1c:3e:1a:53:60: 10:2e:4d:21:24:8f:f5:33:8f:8f:c4:49:10:2d:f7: 27:fa:35:83:17:81:4e:eb:8b:85:c1:9d:e0:ad:68: 55:21:7d:2e:14:d0:df:39:9a:5d:23:20:a2:19:38: 3c:f2:40:54:05:4d:51:05:74:08:e6:94:2b:7c:bf: dc:44:2a:c5:e1:35:6f:c5:06:f0:0c:00:51:91:b4: c7:1d:8c:ab:68:a1:2d:16:28:06:e6:7c:6e:f7:98: 08:9f:cd:a6:8d:0c:4f:25:9b:18:a1:21:56:c4:7b: 0a:fa:26:38:af:58:d1:97:bf:e9:e0:39:9b:cf:90: 48:d9:37:4e:ce:96:16:fe:8c:8d:42:e0:97:25:49: 32:fe:f0:ba:05:6e:03:91:51:56:66:4d:5d:2b:71: f0:7f:8f:36:74:6b:ad:dc:8a:e3:84:7d:2a:e4:d0: 7f:04:e9:1c:d8:b7:c9:ba:30:02:13:95:cd:6a:d8: c9:09:d1:d8:af:41:63:eb:3c:64:5f:f3:44:f5:07: d6:8d:85:c3:7b:22:dc:e2:f6:50:5f:d5:18:e4:34: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BE:8E:91:45:85:E0:1B:6F:CA:E6:B9:31:31:E0:D1:13:16:51:D2 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/32332e3137302e3231362e302f32342d3234203d3e203538323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.170.216.0/24 Signature Algorithm: sha256WithRSAEncryption 45:3d:14:61:82:df:68:97:d1:8c:42:38:c8:11:bf:f9:4a:3b: d5:f1:fa:4f:0d:f6:e6:f0:c1:35:60:6d:5a:5b:0b:d9:9a:49: 80:38:71:15:09:98:18:b2:7f:96:a5:49:51:2a:2a:65:aa:46: 7a:e8:6b:62:fe:8a:bc:32:97:55:9c:5f:ed:65:48:7f:8a:90: 1f:1c:b4:bd:39:00:cc:43:29:ff:b3:6c:26:ce:4d:3d:6e:63: 21:8a:cd:b0:7d:48:e0:6d:c2:ec:2e:bf:f3:a3:c7:03:6d:7f: 89:2e:e9:f4:8e:4c:09:0c:9b:b9:65:e2:10:e5:23:c4:9d:97: 81:1f:5a:bf:23:76:ed:ba:40:6d:c4:e8:79:e5:8e:19:64:0e: 62:54:33:61:bc:4a:a6:5c:a4:65:43:5a:c8:65:f9:09:60:b9: 88:15:f3:af:e6:05:7b:ce:7d:05:3c:50:bd:24:66:f2:c0:6e: b7:3c:74:29:ba:c0:d4:d3:7e:40:96:20:9f:aa:a8:91:87:ef: 0a:3a:3a:cf:6c:03:1f:12:54:f0:6c:a7:44:f4:b5:f9:86:8e: b0:29:d5:e5:39:24:3e:69:79:4e:e6:82:29:6b:51:6d:d4:a1: 36:c5:d6:ec:21:35:55:af:8e:9a:c5:0e:24:89:27:09:c7:be: aa:be:24:76 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUUYQKiqzxY5NMSD4Nfaf2zxTXxAkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwNzE5MTIyMjM2WhcNMjcwNzE4MTIyNzM2 WjAzMTEwLwYDVQQDEygzMEJFOEU5MTQ1ODVFMDFCNkZDQUU2QjkzMTMxRTBEMTEz MTY1MUQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIf00pgoKn7r viFg9fYD5iXsXVl3gaPlsF+lAgibChsAV3uZ6Q8VHD4aU2AQLk0hJI/1M4+PxEkQ Lfcn+jWDF4FO64uFwZ3grWhVIX0uFNDfOZpdIyCiGTg88kBUBU1RBXQI5pQrfL/c RCrF4TVvxQbwDABRkbTHHYyraKEtFigG5nxu95gIn82mjQxPJZsYoSFWxHsK+iY4 r1jRl7/p4Dmbz5BI2TdOzpYW/oyNQuCXJUky/vC6BW4DkVFWZk1dK3Hwf482dGut 3IrjhH0q5NB/BOkc2LfJujACE5XNatjJCdHYr0Fj6zxkX/NE9QfWjYXDeyLc4vZQ X9UY5DSsYQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFDC+jpFFheAbb8rmuTEx4NET FlHSMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzMyZTMx MzczMDJlMzIzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODMyMzAzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEABeq2DANBgkqhkiG9w0BAQsFAAOCAQEART0UYYLfaJfRjEI4yBG/ +Uo71fH6Tw325vDBNWBtWlsL2ZpJgDhxFQmYGLJ/lqVJUSoqZapGeuhrYv6KvDKX VZxf7WVIf4qQHxy0vTkAzEMp/7NsJs5NPW5jIYrNsH1I4G3C7C6/86PHA21/iS7p 9I5MCQybuWXiEOUjxJ2XgR9avyN27bpAbcToeeWOGWQOYlQzYbxKplykZUNayGX5 CWC5iBXzr+YFe859BTxQvSRm8sButzx0KbrA1NN+QJYgn6qokYfvCjo6z2wDHxJU 8GynRPS1+YaOsCnV5TkkPml5TuaCKWtRbdShNsXW7CE1Va+OmsUOJIknCce+qr4k dg== -----END CERTIFICATE-----Generated at Fri Jul 24 18:04:24 2026 by rpki-client