
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e2030.roa
File: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (raw, json)
Hash identifier: dIrRhUCsqIlQRkKASf3euKWdJjEjwQuOt/Ix4ZqqXVk=
Subject key identifier: 06:B8:53:AD:AC:E9:E3:8C:E8:33:D2:68:5C:02:4B:B2:9C:31:FD:CB
Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial: 1233EDC658C0C477E528A5376F48B8BD090881EC
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e2030.roa
Signing time: Tue 26 May 2026 12:16:06 +0000
ROA not before: Tue 26 May 2026 12:11:06 +0000
ROA not after: Tue 25 May 2027 12:16:06 +0000
asID: 0
IP address blocks: 2602:f992:a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 16:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:33:ed:c6:58:c0:c4:77:e5:28:a5:37:6f:48:b8:bd:09:08:81:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Validity
Not Before: May 26 12:11:06 2026 GMT
Not After : May 25 12:16:06 2027 GMT
Subject: CN=06B853ADACE9E38CE833D2685C024BB29C31FDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:95:1a:1c:a2:da:b5:26:3e:8e:fd:d5:3e:
cb:84:8e:fb:f3:1b:33:bd:4b:a1:8e:76:6e:9f:b9:
e4:cd:78:d8:fa:1c:83:43:51:1b:08:3a:b7:ab:d3:
ad:99:ef:0a:87:b1:d5:91:e2:2b:71:3f:3d:e7:d8:
0b:db:72:a4:de:bb:82:fe:df:56:05:0e:a7:36:e2:
e9:36:f6:95:72:82:e7:ea:71:de:c6:45:46:c2:6b:
29:2f:b1:7c:2d:bb:36:0a:6d:12:c2:4c:09:d6:50:
2d:99:95:46:0e:5c:30:43:58:22:5f:d0:07:50:40:
bb:43:d1:38:7c:5b:f5:a5:b0:5a:b3:10:de:1d:f0:
d9:21:69:c5:e5:d7:c3:c7:16:49:0b:8a:ee:b1:e6:
13:2e:a5:50:30:78:79:13:9d:07:d6:8c:f1:83:cb:
6d:dc:06:3a:6c:d2:8d:e6:4c:c0:f3:cd:5b:50:4b:
e5:8a:39:76:cf:32:47:e1:9a:7f:5f:dd:8f:c9:77:
df:b1:3e:85:35:9d:ae:38:d1:34:57:c1:56:5d:07:
3f:e2:9a:f4:dc:f4:3f:dd:04:30:a4:4e:80:e0:1e:
d9:6f:36:52:c0:2c:03:ac:49:a1:5d:6f:10:0d:67:
32:82:31:6c:5a:14:73:df:da:dd:58:fd:93:61:8e:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B8:53:AD:AC:E9:E3:8C:E8:33:D2:68:5C:02:4B:B2:9C:31:FD:CB
X509v3 Authority Key Identifier:
keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f992:a0::/44
Signature Algorithm: sha256WithRSAEncryption
65:a9:7f:d3:86:8e:5d:e5:66:fc:a7:59:89:79:e8:ed:19:0e:
ba:1b:59:27:f3:8c:99:89:85:83:b0:5f:ca:8f:4f:b0:d5:3b:
f5:72:3b:94:e4:cb:59:46:26:5b:32:b4:ed:bd:41:2e:e4:9a:
c0:da:5f:a9:d7:57:c3:6a:59:03:9a:89:2a:c7:a3:d5:c7:1e:
20:0c:3f:cf:36:6e:67:5f:71:ef:54:28:55:51:75:6e:98:1b:
8f:9f:e7:67:e4:20:d3:c3:2f:36:29:91:32:85:cb:55:ec:dc:
92:d6:57:45:c9:72:75:9b:bb:10:f3:a3:c2:d6:db:db:17:9a:
ad:85:95:1e:3c:fb:ad:d3:9f:b3:3d:64:6d:6c:fd:11:c1:4d:
49:8c:48:79:ad:cb:4b:23:4d:e8:a4:cd:33:d8:f1:91:4a:14:
99:ce:a0:3d:ad:d0:fa:41:5a:16:b9:8b:16:5c:e3:2e:2a:b3:
92:33:7d:6b:77:d8:b6:f2:e9:63:e4:05:88:4e:8b:c2:b4:10:
5e:6a:b2:de:05:f5:60:99:1a:4f:7e:55:09:6c:77:c1:2c:db:
5a:98:0c:1a:89:bb:22:a0:d3:23:c7:6a:68:c2:80:54:ac:63:
26:fa:e4:b2:1d:86:6f:80:1d:27:d1:57:da:72:f2:dd:20:3e:
72:c5:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:01:54 2026 by rpki-client