
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a6330303a3a2f33382d313238203d3e20323130343634.roa
File: 323630323a663730343a6330303a3a2f33382d313238203d3e20323130343634.roa (raw, json)
Hash identifier: SwYmKY7VAfP3jCpaL+7DOdOQSf38T4XFjf21rHXyXZw=
Subject key identifier: 7F:FA:DC:BC:B3:1B:9A:5C:C2:7B:89:89:96:A0:DA:20:12:81:DA:AF
Certificate issuer: /CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
Certificate serial: 5D225CC0FF05A5B57BC21DBAB3E1E52B92F1DB29
Authority key identifier: C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a6330303a3a2f33382d313238203d3e20323130343634.roa
Signing time: Wed 15 Apr 2026 16:37:15 +0000
ROA not before: Wed 15 Apr 2026 16:32:15 +0000
ROA not after: Wed 14 Apr 2027 16:37:15 +0000
asID: 210464
IP address blocks: 2602:f704:c00::/38 maxlen: 128
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 16:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:22:5c:c0:ff:05:a5:b5:7b:c2:1d:ba:b3:e1:e5:2b:92:f1:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
Validity
Not Before: Apr 15 16:32:15 2026 GMT
Not After : Apr 14 16:37:15 2027 GMT
Subject: CN=7FFADCBCB31B9A5CC27B898996A0DA201281DAAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:d9:d9:ac:30:d7:b0:50:72:40:ff:33:79:
5e:19:cf:1a:3c:a2:94:92:b5:78:55:da:01:df:8f:
d2:59:45:02:2f:2e:28:24:5a:7c:e8:2a:4d:78:e1:
cc:65:35:21:cf:2f:b5:c7:20:e1:9f:db:9a:f2:fb:
86:04:c0:02:80:c4:7a:33:73:62:f7:53:f8:b4:ac:
18:ff:ff:90:08:96:e5:2d:a8:69:ed:e2:99:7b:89:
62:b9:58:0b:1a:5b:52:06:f8:a6:66:60:2f:08:9a:
c4:07:7d:a6:18:83:01:89:67:f0:6f:6c:01:8c:10:
ba:9b:a7:95:2f:8c:c2:a0:72:60:67:9a:32:52:5a:
b8:90:6c:86:64:3c:ec:0e:90:1f:b8:99:04:8f:a3:
b4:28:05:b2:9d:50:a5:4f:d6:95:63:0a:a8:9c:86:
a8:f7:51:d9:4f:aa:f8:fb:15:45:c3:b8:29:fa:aa:
fb:a8:48:c2:c9:0c:64:59:c4:ca:54:97:ae:fb:34:
1c:fb:79:4a:98:cc:03:13:7e:36:1e:cb:d0:aa:d4:
ac:80:64:70:23:82:8d:4a:1f:cb:92:70:75:68:18:
d3:23:43:9f:e3:6e:20:99:39:22:5b:fe:1c:1b:e1:
63:0c:7a:54:4d:bc:6a:44:82:84:52:3a:3d:fa:56:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:DC:BC:B3:1B:9A:5C:C2:7B:89:89:96:A0:DA:20:12:81:DA:AF
X509v3 Authority Key Identifier:
keyid:C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a6330303a3a2f33382d313238203d3e20323130343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f704:c00::/38
Signature Algorithm: sha256WithRSAEncryption
52:f5:29:98:a4:ee:0a:00:fd:18:13:20:cc:62:97:e0:a3:60:
7b:4e:3c:8a:37:c8:78:d9:b2:f6:25:97:09:6c:e7:f1:c0:8b:
21:e5:90:e2:9c:23:5a:e8:17:f2:ac:00:c5:e1:10:22:fe:0d:
72:59:20:47:1b:c1:85:41:43:12:ba:8c:a0:2f:dd:0a:fd:87:
85:e2:0c:a9:5f:7e:01:d8:4f:d5:fe:2e:8d:03:02:c1:3e:dd:
47:fe:dc:df:2f:cd:10:d5:3f:1f:72:a4:37:9b:25:4c:5b:02:
01:89:8d:cd:8d:43:74:41:14:9d:c9:0d:7f:f1:17:99:07:49:
0d:1a:98:13:59:4f:c8:db:2e:17:ca:3a:f6:24:20:b3:43:74:
6c:78:de:cc:4a:63:b5:d5:9a:ac:f5:fc:f6:ef:9d:2c:35:1a:
0f:35:f9:b3:cb:0e:6f:24:77:d4:ed:c5:e7:42:80:80:5b:29:
dd:f8:e6:28:f4:fc:30:88:9c:70:f9:8c:3b:65:02:53:ec:e4:
28:6f:14:3a:d9:5e:4a:22:98:49:15:4c:29:86:76:d4:e1:0d:
fe:40:b3:fd:a8:9d:ce:e7:12:b0:fd:9c:df:36:d3:d6:4f:3b:
bb:42:09:76:80:7b:b7:6e:90:41:43:e0:68:82:2a:7e:db:86:
90:a8:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:30 2026 by rpki-client