$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/2/323630323a663730343a3a2f33382d3338203d3e203233353037.roa File: 323630323a663730343a3a2f33382d3338203d3e203233353037.roa (raw, json) Hash identifier: VbLDhXKkyGkfdIT6CP2Hi7/NLa3x7wOKKIiU/WhWxpY= Subject key identifier: BC:29:DC:9D:B9:2F:D1:13:F2:09:17:4C:70:34:1E:82:04:0C:AC:33 Certificate issuer: /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770 Certificate serial: 069F75890181029D5446ED99A29000AFAF278420 Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/2/323630323a663730343a3a2f33382d3338203d3e203233353037.roa Signing time: Mon 27 Oct 2025 06:48:15 +0000 ROA not before: Mon 27 Oct 2025 06:43:15 +0000 ROA not after: Mon 26 Oct 2026 06:48:15 +0000 asID: 23507 IP address blocks: 2602:f704::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9f:75:89:01:81:02:9d:54:46:ed:99:a2:90:00:af:af:27:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770 Validity Not Before: Oct 27 06:43:15 2025 GMT Not After : Oct 26 06:48:15 2026 GMT Subject: CN=BC29DC9DB92FD113F209174C70341E82040CAC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:85:89:f1:7f:a9:09:86:4c:a0:50:2b:38: 8b:df:ab:65:d1:f9:69:3c:59:c7:c7:8f:58:c8:fe: 5e:b8:e1:e7:be:f4:18:90:4e:e0:1a:76:02:50:cc: 59:e9:f9:ca:66:8d:ae:f1:5f:89:62:ea:ae:a7:6d: b7:5d:dc:2e:f5:d8:33:12:7f:72:1e:15:84:5d:e5: 9c:32:eb:1a:38:7e:ba:ad:8c:29:08:b9:cb:b9:05: 60:c4:79:49:47:75:51:ca:31:bc:32:69:e0:05:12: 12:94:f0:6e:8e:eb:50:0c:ee:ef:ea:56:dc:48:3d: b1:74:1b:fa:f1:4a:e7:eb:cf:2c:64:c5:e9:35:b7: 92:66:04:5e:e8:2b:55:24:ca:8f:bf:42:b7:bd:bd: ea:33:57:32:c6:f5:dc:ff:52:b3:8d:bf:a8:ce:8d: 12:64:54:75:fa:6d:c9:69:65:62:1d:b5:72:54:2a: 57:84:15:0e:09:6a:f1:62:0e:ac:76:04:76:f5:f7: 88:33:94:77:0c:5d:c3:b1:8e:96:f7:4e:f6:5b:fc: 49:04:77:ce:9b:92:e9:5b:13:c3:39:70:66:bc:16: 8e:cc:92:36:a8:ef:64:ba:db:b1:b0:3a:31:6c:90: 4e:64:f6:12:d2:dc:7c:5e:cc:f6:ba:10:00:ee:f0: 73:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:DC:9D:B9:2F:D1:13:F2:09:17:4C:70:34:1E:82:04:0C:AC:33 X509v3 Authority Key Identifier: keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer Subject Information Access: Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/323630323a663730343a3a2f33382d3338203d3e203233353037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f704::/38 Signature Algorithm: sha256WithRSAEncryption 08:9b:25:2b:27:d9:ad:cf:c3:f0:b2:85:d7:eb:cc:07:04:9f: 4c:dc:59:13:6f:27:cd:10:0e:6c:7b:2f:5d:4a:33:b8:62:27: 3d:58:a1:ed:b5:99:93:81:8d:00:d0:46:3b:5a:79:2a:0e:1c: 29:ab:14:5b:fd:6f:af:f4:7c:af:03:da:e9:f9:d4:44:8a:e7: ac:6b:56:86:00:a2:06:a5:88:1c:e0:24:e6:e6:22:27:08:78: 09:00:31:3f:4c:a9:7e:9b:85:c6:a3:75:2f:f2:ea:61:1c:01: 4e:36:a5:36:2b:67:e0:f4:8d:64:7d:4d:71:6d:d4:d7:0c:d8: 03:70:fa:84:04:7e:30:6e:e0:2a:9f:d1:7a:bb:46:e6:2e:dd: 9b:40:a2:59:50:1d:57:c6:37:8e:1d:c8:b7:97:c9:41:a3:16: 84:bc:1b:e8:c9:4f:a7:72:24:cb:ca:27:6f:1e:6f:bd:80:5b: 41:82:42:b1:75:32:9f:2d:11:f2:8b:1e:b2:0f:0e:36:d0:35: 7e:ea:2e:2e:5c:ad:d6:4d:2b:44:26:42:45:87:c1:97:9f:a0: df:bf:40:23:92:b7:57:0d:93:fc:0f:46:fb:0e:91:46:96:88: 51:01:20:e2:42:9b:fa:3c:f3:24:7f:9a:db:89:d1:03:2f:0c: aa:e6:38:85 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUBp91iQGBAp1URu2ZopAAr68nhCAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjJiMTM5MWEwMGE3YjJmMDdkNzM1MjBhZmY2YTEzNjAy NTU0YzQ3MjFhZmM0NDc3NzAwHhcNMjUxMDI3MDY0MzE1WhcNMjYxMDI2MDY0ODE1 WjAzMTEwLwYDVQQDEyhCQzI5REM5REI5MkZEMTEzRjIwOTE3NEM3MDM0MUU4MjA0 MENBQzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuqFifF/qQmG TKBQKziL36tl0flpPFnHx49YyP5euOHnvvQYkE7gGnYCUMxZ6fnKZo2u8V+JYuqu p223Xdwu9dgzEn9yHhWEXeWcMusaOH66rYwpCLnLuQVgxHlJR3VRyjG8MmngBRIS lPBujutQDO7v6lbcSD2xdBv68Urn688sZMXpNbeSZgRe6CtVJMqPv0K3vb3qM1cy xvXc/1Kzjb+ozo0SZFR1+m3JaWViHbVyVCpXhBUOCWrxYg6sdgR29feIM5R3DF3D sY6W9072W/xJBHfOm5LpWxPDOXBmvBaOzJI2qO9kutuxsDoxbJBOZPYS0tx8Xsz2 uhAA7vBz9QIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFLwp3J25L9ET8gkXTHA0HoIE DKwzMB8GA1UdIwQYMBaAFDu2RoZHPtN0xh//xo6Kzah0GrvLMA4GA1UdDwEB/wQE AwIHgDBjBgNVHR8EXDBaMFigVqBUhlJyc3luYzovL3Jwa2kuYXZzaXNwLmNvbS9y ZXBvL0FWU0lTUC8yLzNCQjY0Njg2NDczRUQzNzRDNjFGRkZDNjhFOEFDREE4NzQx QUJCQ0IuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4 MTJmZjdkODcvMjJiMTM5MWEwMGE3YjJmMDdkNzM1MjBhZmY2YTEzNjAyNTU0YzQ3 MjFhZmM0NDc3NzAuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5 bmM6Ly9ycGtpLmF2c2lzcC5jb20vcmVwby9BVlNJU1AvMi8zMjM2MzAzMjNhNjYz NzMwMzQzYTNhMmYzMzM4MmQzMzM4MjAzZDNlMjAzMjMzMzUzMDM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYCJgL3BAAwDQYJKoZIhvcNAQELBQADggEBAAibJSsn2a3Pw/CyhdfrzAcEn0zc WRNvJ80QDmx7L11KM7hiJz1Yoe21mZOBjQDQRjtaeSoOHCmrFFv9b6/0fK8D2un5 1ESK56xrVoYAogaliBzgJObmIicIeAkAMT9MqX6bhcajdS/y6mEcAU42pTYrZ+D0 jWR9TXFt1NcM2ANw+oQEfjBu4Cqf0Xq7RuYu3ZtAollQHVfGN44dyLeXyUGjFoS8 G+jJT6dyJMvKJ28eb72AW0GCQrF1Mp8tEfKLHrIPDjbQNX7qLi5crdZNK0QmQkWH wZefoN+/QCOSt1cNk/wPRvsOkUaWiFEBIOJCm/o88yR/mtuJ0QMvDKrmOIU= -----END CERTIFICATE-----Generated at Wed Nov 5 17:26:28 2025 by rpki-client