$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/3139392e3234312e36302e302f32342d3234203d3e203436373636.roa File: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (raw, json) Hash identifier: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0= Subject key identifier: C6:1F:38:5B:7F:1B:BB:2E:3A:62:D5:87:D4:74:1E:97:C0:06:C5:6B Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 6EF76037C1AC5C6099710CCE4FBD6D38096BE431 Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/3139392e3234312e36302e302f32342d3234203d3e203436373636.roa Signing time: Tue 07 Oct 2025 23:46:43 +0000 ROA not before: Tue 07 Oct 2025 23:41:43 +0000 ROA not after: Tue 06 Oct 2026 23:46:43 +0000 asID: 46766 IP address blocks: 199.241.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f7:60:37:c1:ac:5c:60:99:71:0c:ce:4f:bd:6d:38:09:6b:e4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Oct 7 23:41:43 2025 GMT Not After : Oct 6 23:46:43 2026 GMT Subject: CN=C61F385B7F1BBB2E3A62D587D4741E97C006C56B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:02:74:5f:ce:c1:59:1f:0d:ee:d0:ad:bc: b2:1b:82:b4:98:e5:84:b2:28:b9:c2:66:32:77:60: 2e:e5:9f:9b:d9:e4:0f:10:1b:6c:32:53:33:c2:cc: 6d:d4:bd:bc:67:de:c2:df:a4:52:df:b3:02:07:1a: d5:61:2d:d7:69:da:2c:b9:93:3c:eb:63:b6:8b:af: e9:dc:75:45:25:d8:8d:be:20:72:bd:57:08:1f:ea: e8:c5:1c:82:97:18:2b:df:05:52:dd:ca:b6:9c:68: 16:f1:20:b1:25:5e:87:4c:a8:5b:d9:07:54:a8:23: 81:5a:b1:66:f8:7a:de:24:09:c9:89:3b:8e:d9:ac: e1:54:2d:a0:ac:be:76:eb:2e:71:99:00:26:e5:73: 3e:45:45:38:78:0f:52:1f:d8:4d:4c:f3:e6:51:d8: bd:3b:81:9b:d8:17:a7:9d:64:61:74:1c:16:56:43: cd:8a:75:ce:18:75:51:24:1e:a2:09:a1:13:0b:15: 40:4a:b5:25:5a:72:78:d4:9b:68:2b:46:09:a1:7c: 1d:5d:82:d0:f1:9d:ce:2c:44:87:97:b1:2a:04:8a: 39:22:e3:77:f3:42:68:63:fe:c1:de:e3:56:3e:a9: 0b:a8:f8:a8:eb:1a:86:ba:71:25:96:62:cb:cd:35: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1F:38:5B:7F:1B:BB:2E:3A:62:D5:87:D4:74:1E:97:C0:06:C5:6B X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/3139392e3234312e36302e302f32342d3234203d3e203436373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.241.60.0/24 Signature Algorithm: sha256WithRSAEncryption a6:f0:a4:f6:42:e6:12:ad:01:b5:9f:23:37:dd:e8:fa:07:72: 21:d5:5e:4a:df:da:26:af:63:ea:c0:ad:37:85:a6:ad:77:a9: 0c:c3:3b:f0:41:3d:c4:06:9f:8e:ca:ef:ee:48:36:ee:83:56: 23:0a:aa:0d:32:17:87:4c:58:55:ee:d5:b6:12:c3:d5:30:1c: 28:78:1e:12:f0:4f:52:a3:b3:64:b9:0a:9f:4b:be:f1:8c:d8: 2e:93:73:3f:55:6f:4d:cf:d0:7b:ef:1e:fa:0d:e0:93:41:2c: 5a:ac:fd:64:f1:cf:06:78:15:0e:7b:82:9a:e5:b5:b2:51:84: d3:8f:12:52:db:60:8f:84:eb:91:82:bf:0e:77:d4:1d:5b:9b: b0:e8:65:ef:c2:4d:99:86:9e:26:cf:cb:82:4f:12:e0:9a:62: ea:72:36:e3:7a:0b:0e:c9:bd:c4:d9:7b:75:09:fa:65:a6:a7: c9:e7:01:af:79:1b:93:e2:b0:c9:98:a6:b6:4d:3b:9e:c6:44: 54:9f:92:0c:fe:20:d6:59:cd:d0:58:4b:51:3c:ab:5a:c9:df: 0c:e5:9a:c7:e2:98:3b:99:65:7a:84:54:4c:88:eb:da:44:dd: a6:f3:dc:c0:1c:38:4e:19:cf:97:26:cd:98:54:57:f6:f3:22: 2b:48:35:c9 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUbvdgN8GsXGCZcQzOT71tOAlr5DEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUxMDA3MjM0MTQzWhcNMjYxMDA2MjM0NjQz WjAzMTEwLwYDVQQDEyhDNjFGMzg1QjdGMUJCQjJFM0E2MkQ1ODdENDc0MUU5N0Mw MDZDNTZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QwCdF/OwVkf De7QrbyyG4K0mOWEsii5wmYyd2Au5Z+b2eQPEBtsMlMzwsxt1L28Z97C36RS37MC BxrVYS3XadosuZM862O2i6/p3HVFJdiNviByvVcIH+roxRyClxgr3wVS3cq2nGgW 8SCxJV6HTKhb2QdUqCOBWrFm+HreJAnJiTuO2azhVC2grL526y5xmQAm5XM+RUU4 eA9SH9hNTPPmUdi9O4Gb2BennWRhdBwWVkPNinXOGHVRJB6iCaETCxVASrUlWnJ4 1JtoK0YJoXwdXYLQ8Z3OLESHl7EqBIo5IuN380JoY/7B3uNWPqkLqPio6xqGunEl lmLLzTVYUQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFMYfOFt/G7suOmLVh9R0HpfA BsVrMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC82LzMxMzkzOTJl MzIzNDMxMmUzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjM3MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMfxPDANBgkqhkiG9w0BAQsFAAOCAQEApvCk9kLmEq0BtZ8jN93o +gdyIdVeSt/aJq9j6sCtN4WmrXepDMM78EE9xAafjsrv7kg27oNWIwqqDTIXh0xY Ve7VthLD1TAcKHgeEvBPUqOzZLkKn0u+8YzYLpNzP1VvTc/Qe+8e+g3gk0EsWqz9 ZPHPBngVDnuCmuW1slGE048SUttgj4TrkYK/DnfUHVubsOhl78JNmYaeJs/Lgk8S 4Jpi6nI243oLDsm9xNl7dQn6ZaanyecBr3kbk+KwyZimtk07nsZEVJ+SDP4g1lnN 0FhLUTyrWsnfDOWax+KYO5lleoRUTIjr2kTdpvPcwBw4ThnPlybNmFRX9vMiK0g1 yQ== -----END CERTIFICATE-----Generated at Mon Oct 20 12:48:34 2025 by rpki-client