$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u7/3/AS218995.roa File: AS218995.roa (raw, json) Hash identifier: 0znIuGJwVRvRIi0hrOg4YAPl9h5274uqXiGZ9OtRzMw= Subject key identifier: C3:40:F8:C9:A6:A2:D8:BE:5B:67:6C:A7:88:5F:52:33:C2:E7:9F:FF Certificate issuer: /CN=57C4BC98201FEEFD6892394642DD684EE5729821 Certificate serial: 1372D751015271861F32DC11CCFA4E6248772984 Authority key identifier: 57:C4:BC:98:20:1F:EE:FD:68:92:39:46:42:DD:68:4E:E5:72:98:21 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/57C4BC98201FEEFD6892394642DD684EE5729821.cer Subject info access: rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/AS218995.roa Signing time: Tue 10 Nov 2026 21:20:54 +0000 ROA not before: Tue 10 Nov 2026 21:15:54 +0000 ROA not after: Tue 09 Nov 2027 21:20:54 +0000 asID: 218995 IP address blocks: 2a0b:4e07:b30::/44 maxlen: 44 2a0b:4e07:b32::/48 maxlen: 48 2a0b:4e07:b33::/48 maxlen: 48 2a0b:4e07:b34::/48 maxlen: 48 2a0b:4e07:b36::/48 maxlen: 48 2a0b:4e07:b37::/48 maxlen: 48 2a0b:4e07:b3a::/48 maxlen: 48 2a0b:4e07:b3b::/48 maxlen: 48 2a0b:4e07:b3d::/48 maxlen: 48 2a0b:4e07:b3f::/48 maxlen: 48 2a0b:4e07:5100::/40 maxlen: 40 2a0b:4e07:5101::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.crl rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/57C4BC98201FEEFD6892394642DD684EE5729821.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:72:d7:51:01:52:71:86:1f:32:dc:11:cc:fa:4e:62:48:77:29:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57C4BC98201FEEFD6892394642DD684EE5729821 Validity Not Before: Nov 10 21:15:54 2026 GMT Not After : Nov 9 21:20:54 2027 GMT Subject: CN=C340F8C9A6A2D8BE5B676CA7885F5233C2E79FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:71:33:8a:7d:a1:ac:71:8b:cd:49:2b:bd:87: 9f:e5:1a:20:b5:18:70:fc:13:27:86:54:ad:e7:63: 2a:f3:8d:70:fb:a5:f0:b3:f6:79:d1:b2:00:b3:60: 51:28:ce:2a:73:c4:97:56:17:f0:7e:3b:00:05:1d: ae:b4:db:46:ba:67:72:4a:d6:18:9f:a1:be:e1:37: 16:2d:e4:1a:6a:66:ae:8b:47:51:df:79:9c:ad:9d: 8b:f0:0b:c3:06:f8:52:19:38:20:6b:52:06:23:0b: 82:e3:f9:d6:8f:e8:41:6c:2a:51:68:62:fe:af:78: af:2b:5c:1e:99:39:12:cd:98:c7:d7:2d:cb:23:66: 4c:52:b6:86:e5:94:fe:e7:64:ee:60:8a:62:1b:4b: ed:fb:b4:8f:0b:33:3a:26:2f:09:c6:34:d0:80:93: 0b:b7:bb:84:d5:e2:ed:c7:ab:37:0c:39:a0:04:bc: ef:6c:77:11:50:af:e4:1b:dc:1a:03:8a:e9:9d:9e: 34:25:b4:02:f0:ba:6a:31:07:56:45:82:6e:66:2d: ec:a5:81:49:ff:b9:52:11:cc:f4:fc:a9:e5:60:9b: a2:7f:fa:b0:f2:8b:42:6c:d7:d1:87:6f:8f:a2:13: b1:e2:9c:b6:c0:e4:fc:83:79:08:b8:69:e2:af:24: 01:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:40:F8:C9:A6:A2:D8:BE:5B:67:6C:A7:88:5F:52:33:C2:E7:9F:FF X509v3 Authority Key Identifier: keyid:57:C4:BC:98:20:1F:EE:FD:68:92:39:46:42:DD:68:4E:E5:72:98:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/57C4BC98201FEEFD6892394642DD684EE5729821.cer Subject Information Access: Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/AS218995.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b30::/44 2a0b:4e07:5100::/40 Signature Algorithm: sha256WithRSAEncryption 29:c2:5f:b4:46:4e:f3:8f:e0:7c:84:6d:bd:ad:bc:5e:33:b6: f2:01:7d:ff:c2:99:a3:4f:58:a4:cc:9d:de:c9:f2:9f:00:a9: 4c:c4:d9:0f:ad:96:f2:0c:3c:55:9a:90:a5:16:65:84:be:fc: 49:79:d9:d4:00:6c:97:94:94:93:62:07:3c:37:ce:21:bc:05: 2e:86:06:d4:99:84:05:1d:95:bc:84:66:a9:68:73:57:52:6a: b6:c2:f6:e1:1a:6d:f3:f0:d7:3d:f4:97:f2:87:2f:f9:34:a6: 38:65:53:32:b8:5a:ca:e3:7b:f3:8f:ec:ea:d2:53:f5:0a:dd: d0:44:aa:9e:b0:80:df:90:80:25:3c:2b:2f:82:f2:97:b2:d8: 45:0b:24:0e:f7:9c:22:90:8d:1c:30:3c:08:e4:5e:fb:d5:ed: e8:ff:57:93:25:23:a7:a3:a5:ff:b7:e8:61:4a:96:71:cf:f5: 61:e7:48:3f:93:8e:aa:4f:b1:ae:40:10:64:dd:c8:c8:b6:4e: 0e:cf:e4:38:66:77:92:03:08:dc:d3:87:6b:6b:99:5f:54:6e: a6:eb:8d:4d:d8:37:be:6b:cc:21:b8:f4:da:fd:5e:19:d8:c8: 48:d2:a2:1d:dc:a7:ff:a4:c9:77:c1:e8:00:41:81:0b:85:54: 3f:c4:83:15 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUE3LXUQFScYYfMtwRzPpOYkh3KYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdDNEJDOTgyMDFGRUVGRDY4OTIzOTQ2NDJERDY4NEVF NTcyOTgyMTAeFw0yNjExMTAyMTE1NTRaFw0yNzExMDkyMTIwNTRaMDMxMTAvBgNV BAMTKEMzNDBGOEM5QTZBMkQ4QkU1QjY3NkNBNzg4NUY1MjMzQzJFNzlGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDncTOKfaGscYvNSSu9h5/lGiC1 GHD8EyeGVK3nYyrzjXD7pfCz9nnRsgCzYFEozipzxJdWF/B+OwAFHa6020a6Z3JK 1hifob7hNxYt5BpqZq6LR1HfeZytnYvwC8MG+FIZOCBrUgYjC4Lj+daP6EFsKlFo Yv6veK8rXB6ZORLNmMfXLcsjZkxStobllP7nZO5gimIbS+37tI8LMzomLwnGNNCA kwu3u4TV4u3HqzcMOaAEvO9sdxFQr+Qb3BoDiumdnjQltALwumoxB1ZFgm5mLeyl gUn/uVIRzPT8qeVgm6J/+rDyi0Js19GHb4+iE7HinLbA5PyDeQi4aeKvJAFDAgMB AAGjggH5MIIB9TAdBgNVHQ4EFgQUw0D4yaai2L5bZ2yniF9SM8Lnn/8wHwYDVR0j BBgwFoAUV8S8mCAf7v1okjlGQt1oTuVymCEwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnN5bmMucHJveHktYXJwLm5ldHdvcmsvcmVw by9iZ3A0My11Ny8zLzU3QzRCQzk4MjAxRkVFRkQ2ODkyMzk0NjQyREQ2ODRFRTU3 Mjk4MjEuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5j Oi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4 YjY3ZWVkMzA1M2Y4MjBmNS8xLzU3QzRCQzk4MjAxRkVFRkQ2ODkyMzk0NjQyREQ2 ODRFRTU3Mjk4MjEuY2VyMFgGCCsGAQUFBwELBEwwSjBIBggrBgEFBQcwC4Y8cnN5 bmM6Ly9yc3luYy5wcm94eS1hcnAubmV0d29yay9yZXBvL2JncDQzLXU3LzMvQVMy MTg5OTUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcB Af8EGzAZMBcEAgACMBEDBwQqC04HCzADBgAqC04HUTANBgkqhkiG9w0BAQsFAAOC AQEAKcJftEZO84/gfIRtva28XjO28gF9/8KZo09YpMyd3snynwCpTMTZD62W8gw8 VZqQpRZlhL78SXnZ1ABsl5SUk2IHPDfOIbwFLoYG1JmEBR2VvIRmqWhzV1JqtsL2 4Rpt8/DXPfSX8ocv+TSmOGVTMrhayuN784/s6tJT9Qrd0ESqnrCA35CAJTwrL4Ly l7LYRQskDvecIpCNHDA8CORe+9Xt6P9XkyUjp6Ol/7foYUqWcc/1YedIP5OOqk+x rkAQZN3IyLZODs/kOGZ3kgMI3NOHa2uZX1RupuuNTdg3vmvMIbj02v1eGdjISNKi Hdyn/6TJd8HoAEGBC4VUP8SDFQ== -----END CERTIFICATE-----Generated at Sat Nov 14 23:15:08 2026 by rpki-client