
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f33362d3336203d3e203135333533.roa
File: 323630323a666131313a3a2f33362d3336203d3e203135333533.roa (raw, json)
Hash identifier: 0TIeElqFHxZMDq0rFed+v9cdcI6oAwAgD+jyiw410O0=
Subject key identifier: 42:4F:70:02:77:59:FF:7B:2A:DC:1C:46:9C:C8:DC:FB:CB:D9:D8:5A
Certificate issuer: /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial: 4993C4B90E7B41528D5EB1791393DB6A7EB3E800
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f33362d3336203d3e203135333533.roa
Signing time: Tue 26 May 2026 05:39:04 +0000
ROA not before: Tue 26 May 2026 05:34:04 +0000
ROA not after: Tue 25 May 2027 05:39:04 +0000
asID: 15353
IP address blocks: 2602:fa11::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 12:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:93:c4:b9:0e:7b:41:52:8d:5e:b1:79:13:93:db:6a:7e:b3:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Validity
Not Before: May 26 05:34:04 2026 GMT
Not After : May 25 05:39:04 2027 GMT
Subject: CN=424F70027759FF7B2ADC1C469CC8DCFBCBD9D85A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:a1:12:35:dc:ab:e9:60:2d:bc:d2:3e:f8:
3c:c0:6e:16:43:44:96:63:ae:a4:cd:8f:4f:3a:c5:
31:c9:ab:2f:f4:58:9f:7d:f9:86:16:a0:f0:62:e9:
7e:94:f4:aa:5b:44:a8:2b:31:bc:e7:41:a1:66:da:
93:c6:93:e7:b8:0a:bf:40:48:a4:af:db:54:6b:01:
66:b5:ac:40:19:6d:b4:ce:dd:48:43:da:ba:54:27:
b4:5a:1d:b9:23:a1:f2:44:35:f5:e5:f5:fa:10:4a:
87:00:29:96:c9:69:3f:51:48:2b:a0:70:db:f7:51:
d5:d2:61:ed:5f:2d:43:df:a7:03:f7:90:5c:a3:dd:
3c:d5:9f:a4:cc:8f:0e:42:e8:f4:f8:ee:27:a1:d7:
a2:9c:83:af:9f:98:69:00:45:74:4d:8b:f5:89:59:
2c:6d:38:10:e8:73:c9:69:33:00:3a:50:21:d4:9a:
08:c9:c6:bd:57:ca:ce:9d:88:66:a5:af:0d:9a:52:
c0:80:7a:4d:6a:a7:6b:17:09:ae:b5:22:52:cf:16:
1e:f8:1e:17:ce:6a:6f:bc:0a:ec:c5:84:c6:15:e0:
89:a5:c6:97:0d:fb:6a:bd:7d:d9:71:45:f7:8c:16:
d6:95:12:5d:7d:60:64:33:33:da:b4:f6:46:82:06:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4F:70:02:77:59:FF:7B:2A:DC:1C:46:9C:C8:DC:FB:CB:D9:D8:5A
X509v3 Authority Key Identifier:
keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f33362d3336203d3e203135333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa11::/36
Signature Algorithm: sha256WithRSAEncryption
5b:e8:e3:1b:76:7b:60:b3:a2:0c:27:6f:d3:de:1b:d2:bd:07:
7a:a5:c0:2a:21:06:95:81:4c:b9:ba:f1:8d:12:a3:37:af:42:
33:d3:cc:fd:bf:5e:ec:e6:71:0c:2a:45:45:6d:60:87:53:f3:
a3:12:c3:d3:95:89:93:63:97:77:5b:6d:15:80:ea:0e:32:c3:
79:e2:03:44:c6:c6:43:02:0a:75:38:75:71:59:2b:71:d6:b6:
7a:98:92:cb:d9:f2:d1:14:36:48:cb:75:ec:e1:ec:3a:bd:01:
7d:ee:37:01:c1:ec:af:64:9a:13:22:56:a9:e6:c2:5b:2a:c4:
8e:d1:6a:4e:a3:88:82:1d:fc:d8:a5:d7:3e:55:c5:ef:4e:5a:
33:0a:a3:e0:02:9e:4b:87:23:0b:cd:3a:e3:01:87:31:f9:0a:
49:40:f3:30:44:8b:38:4c:35:32:f0:d8:21:57:d2:ce:d3:d2:
1a:35:67:ed:1b:df:ba:fe:d1:5a:e2:18:77:8e:75:53:29:40:
e0:6f:91:16:56:9e:36:59:04:3b:1e:5f:20:80:dd:a3:04:36:
3a:83:ad:6f:cf:27:f4:62:3d:8d:a9:f6:88:95:a4:29:e2:c6:
78:41:bb:59:59:09:97:dd:89:83:65:95:d5:c1:7b:af:23:e6:
e3:f1:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:35 2026 by rpki-client