$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/3139322e37352e3139362e302f32342d3234203d3e203139363830.roa File: 3139322e37352e3139362e302f32342d3234203d3e203139363830.roa (raw, json) Hash identifier: yvXeEWRlMmnSNfIrbChtFM+svsvnH2vlOzvMg3QWUIM= Subject key identifier: 0C:39:C6:12:F6:7B:18:F4:12:24:D3:46:41:99:52:3C:B8:5B:38:F1 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 1FFB3D693C711631B72C9B5A218D447322ADFAF5 Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/3139322e37352e3139362e302f32342d3234203d3e203139363830.roa Signing time: Fri 13 Mar 2026 18:55:38 +0000 ROA not before: Fri 13 Mar 2026 18:50:38 +0000 ROA not after: Fri 12 Mar 2027 18:55:38 +0000 asID: 19680 IP address blocks: 192.75.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 01:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fb:3d:69:3c:71:16:31:b7:2c:9b:5a:21:8d:44:73:22:ad:fa:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Mar 13 18:50:38 2026 GMT Not After : Mar 12 18:55:38 2027 GMT Subject: CN=0C39C612F67B18F41224D3464199523CB85B38F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:cd:6d:08:53:48:1d:e9:9d:16:63:27:90: 77:20:ed:4f:86:68:8d:f8:23:21:a7:ec:09:47:ef: db:e2:67:1e:17:27:65:05:ed:66:c5:ef:78:ae:c3: 9d:c1:73:68:bf:a4:88:d9:46:09:82:9b:f0:47:f9: cf:e2:93:eb:67:ea:05:dd:77:27:a9:f3:3a:f7:e8: e2:7b:2d:7c:93:bb:29:5f:f3:30:21:24:a9:5e:a3: 5c:b2:58:b3:bc:eb:03:eb:3f:81:4e:0b:7c:25:8a: 8b:02:8c:df:50:c5:e8:ef:af:d9:db:75:6e:fe:b9: 4b:10:ca:2b:eb:8c:c4:d9:e3:da:f2:f3:4a:9e:0e: 21:9d:4d:dc:95:6c:16:c9:1d:6c:64:23:ab:61:b9: 39:f1:c6:c0:90:eb:d7:24:0d:ee:b0:34:6d:86:af: 15:31:0f:76:bf:65:07:d5:d9:77:95:26:99:70:97: 4b:fb:8a:71:a4:70:30:75:2d:13:0e:a2:f0:25:19: 2d:a0:c9:50:ff:2c:21:c3:19:45:b7:6f:0a:4f:b5: e7:64:bb:e7:d2:6f:29:5f:11:be:01:3b:b0:b0:34: dc:ee:54:d8:7c:80:2b:cf:e9:3e:c8:48:b6:7b:0d: c8:46:c1:c7:d6:28:e4:11:5f:ff:ff:83:27:0a:1b: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:C6:12:F6:7B:18:F4:12:24:D3:46:41:99:52:3C:B8:5B:38:F1 X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/3139322e37352e3139362e302f32342d3234203d3e203139363830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.75.196.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:17:30:5e:d3:cf:51:00:8d:4a:ed:93:8d:ec:13:f4:7f:88: 09:d2:a5:04:20:57:55:b6:bf:4f:5c:3d:05:a7:34:cf:2f:00: 52:63:85:45:56:5e:e5:13:62:cd:26:d1:27:63:d6:d8:19:da: 2f:22:4a:a2:4d:e1:9d:77:c8:33:a9:6e:1f:88:ae:09:95:61: 9b:4a:89:1c:42:7c:5b:06:ef:2e:d2:d0:ca:fa:99:60:63:6c: 24:a1:cf:14:f1:7c:f8:67:c8:43:1d:d2:b4:7c:88:dd:ce:5d: 23:25:a8:f3:75:a0:81:12:c1:f3:9a:db:7f:61:23:da:c9:ef: 8c:f3:da:3a:8d:5d:64:8b:92:db:c0:65:f5:a3:14:eb:b5:c5: f1:69:f5:f9:1e:fd:45:6f:a1:0f:d8:b4:31:87:5c:3b:02:3c: 37:11:d2:7a:24:81:b2:aa:1e:f1:65:27:44:f8:54:4d:8e:06: 95:74:69:25:22:08:54:2d:b6:49:ba:be:0d:75:93:48:22:6b: 4a:02:5a:f3:ef:f9:47:3b:c1:14:d0:fd:6e:e7:7f:98:fd:47: 24:30:d9:e8:ab:b2:88:ef:5d:17:e2:83:cd:4a:5d:1a:c9:5c: b7:66:2f:82:f8:a6:22:45:f2:25:b6:92:ce:92:e5:01:dd:36: f8:5b:2d:61 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUH/s9aTxxFjG3LJtaIY1EcyKt+vUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjYwMzEzMTg1MDM4WhcNMjcwMzEyMTg1NTM4 WjAzMTEwLwYDVQQDEygwQzM5QzYxMkY2N0IxOEY0MTIyNEQzNDY0MTk5NTIzQ0I4 NUIzOEYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuTNbQhTSB3p nRZjJ5B3IO1PhmiN+CMhp+wJR+/b4mceFydlBe1mxe94rsOdwXNov6SI2UYJgpvw R/nP4pPrZ+oF3XcnqfM69+jiey18k7spX/MwISSpXqNcslizvOsD6z+BTgt8JYqL AozfUMXo76/Z23Vu/rlLEMor64zE2ePa8vNKng4hnU3clWwWyR1sZCOrYbk58cbA kOvXJA3usDRthq8VMQ92v2UH1dl3lSaZcJdL+4pxpHAwdS0TDqLwJRktoMlQ/ywh wxlFt28KT7XnZLvn0m8pXxG+ATuwsDTc7lTYfIArz+k+yEi2ew3IRsHH1ijkEV// /4MnChtd7wIDAQABo4ICzTCCAskwHQYDVR0OBBYEFAw5xhL2exj0EiTTRkGZUjy4 WzjxMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi83LzMxMzkzMjJl MzczNTJlMzEzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM2MzgzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMBLxDANBgkqhkiG9w0BAQsFAAOCAQEAGxcwXtPPUQCNSu2TjewT 9H+ICdKlBCBXVba/T1w9Bac0zy8AUmOFRVZe5RNizSbRJ2PW2BnaLyJKok3hnXfI M6luH4iuCZVhm0qJHEJ8WwbvLtLQyvqZYGNsJKHPFPF8+GfIQx3StHyI3c5dIyWo 83WggRLB85rbf2Ej2snvjPPaOo1dZIuS28Bl9aMU67XF8Wn1+R79RW+hD9i0MYdc OwI8NxHSeiSBsqoe8WUnRPhUTY4GlXRpJSIIVC22Sbq+DXWTSCJrSgJa8+/5RzvB FND9bud/mP1HJDDZ6KuyiO9dF+KDzUpdGslct2YvgvimIkXyJbaSzpLlAd02+Fst YQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:15:19 2026 by rpki-client