$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa File: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (raw, json) Hash identifier: JcXzbGu5aoqW4eGRLqUocgWZf+gjmi1jki466ucPd4g= Subject key identifier: 14:99:A6:8A:BD:27:7A:A8:06:BE:C0:CA:38:3F:08:EB:A8:15:F1:E1 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 02633E0D977F911923E40736450347194A2A7EBB Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa Signing time: Wed 30 Jul 2025 16:24:00 +0000 ROA not before: Wed 30 Jul 2025 16:19:00 +0000 ROA not after: Wed 29 Jul 2026 16:24:00 +0000 asID: 33387 IP address blocks: 2602:f992:e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 01:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:63:3e:0d:97:7f:91:19:23:e4:07:36:45:03:47:19:4a:2a:7e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jul 30 16:19:00 2025 GMT Not After : Jul 29 16:24:00 2026 GMT Subject: CN=1499A68ABD277AA806BEC0CA383F08EBA815F1E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:bb:00:30:4f:e8:bd:75:55:5a:2c:1c:41: c9:21:4a:f0:a5:87:63:f5:61:c1:74:32:97:c5:ee: 4a:9b:ae:82:80:69:49:99:21:fa:59:60:67:df:04: 10:77:89:fd:22:8b:50:ad:a4:84:90:6c:bd:2c:d1: 26:36:6e:a9:15:24:b5:ce:44:34:ac:96:23:c0:48: 01:e3:80:f3:be:17:0b:43:6c:5a:fd:0a:10:93:9d: 3d:b6:d1:1d:83:13:64:07:8e:2c:a7:62:e5:2a:73: 6f:74:04:0d:60:04:33:e5:e2:44:a1:44:9c:54:e9: e0:9c:ed:4c:35:6a:b2:d3:6e:64:76:aa:dc:a9:cd: ce:8b:00:e3:32:8e:14:3f:d4:9c:65:af:26:bf:15: ec:b8:62:86:68:fd:4e:a4:a9:62:07:08:26:2b:c7: 7f:9a:ae:8f:be:21:74:35:2b:0a:a1:e4:a8:aa:5c: c8:69:08:e6:85:7e:f6:5b:aa:d3:f3:0d:a4:b9:56: cb:2a:56:65:00:23:81:92:c2:87:f3:3e:ed:b1:4a: e3:cc:50:6f:73:eb:83:96:2f:df:48:a5:6e:df:b2: 7b:1c:cf:27:50:08:0a:82:66:a3:bf:ba:b0:c7:01: df:fa:2c:ae:6a:4b:69:b8:d2:19:77:67:5f:ab:03: d6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:99:A6:8A:BD:27:7A:A8:06:BE:C0:CA:38:3F:08:EB:A8:15:F1:E1 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:e0::/44 Signature Algorithm: sha256WithRSAEncryption 96:af:7c:10:75:76:d6:bf:72:df:58:7c:33:16:16:55:1d:b0: 24:0e:2f:da:40:4a:96:ab:73:37:fe:e9:c7:df:1a:6d:d4:63: 98:dc:59:7c:7c:1f:3d:88:a3:74:cd:46:21:f7:43:b7:ca:1e: 0e:5f:74:e0:7a:f9:57:55:7b:7a:0f:e8:2c:14:8f:cc:cc:30: f5:78:be:4e:69:7e:a2:3a:6c:40:e7:6f:42:8d:11:97:b1:9b: bb:d8:ef:4f:0d:b0:7f:60:71:8d:dc:51:c5:da:83:89:ce:01: 3a:a2:e2:99:d8:f6:36:20:0e:90:e7:4e:1d:24:02:1b:6d:25: d8:7d:26:04:b6:c2:47:d9:88:43:28:fb:16:fa:ef:19:e0:f9: 1f:a5:38:6d:9f:b2:06:33:9a:b6:d6:8c:52:e9:61:62:0d:6c: 19:fd:16:fa:ac:d2:b0:91:1c:89:e3:39:42:9e:fd:42:ed:70: 4a:5d:3f:ab:43:b7:7a:c2:5b:67:1e:ec:13:7c:ba:a7:e4:20: a6:99:94:58:13:20:b3:3a:ef:49:9c:63:04:63:b2:5b:01:08: 37:b2:71:a1:67:72:8e:aa:dd:fc:7b:18:64:a5:31:22:ce:e3: 90:00:db:8e:22:a0:39:d8:d4:54:70:cb:fa:8a:e7:79:78:c2: d9:7c:c8:36 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUAmM+DZd/kRkj5Ac2RQNHGUoqfrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNzMwMTYxOTAwWhcNMjYwNzI5MTYyNDAw WjAzMTEwLwYDVQQDEygxNDk5QTY4QUJEMjc3QUE4MDZCRUMwQ0EzODNGMDhFQkE4 MTVGMUUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFq7ADBP6L11 VVosHEHJIUrwpYdj9WHBdDKXxe5Km66CgGlJmSH6WWBn3wQQd4n9IotQraSEkGy9 LNEmNm6pFSS1zkQ0rJYjwEgB44DzvhcLQ2xa/QoQk509ttEdgxNkB44sp2LlKnNv dAQNYAQz5eJEoUScVOngnO1MNWqy025kdqrcqc3OiwDjMo4UP9ScZa8mvxXsuGKG aP1OpKliBwgmK8d/mq6PviF0NSsKoeSoqlzIaQjmhX72W6rT8w2kuVbLKlZlACOB ksKH8z7tsUrjzFBvc+uDli/fSKVu37J7HM8nUAgKgmajv7qwxwHf+iyuaktpuNIZ d2dfqwPWTwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFBSZpoq9J3qoBr7Ayjg/COuo FfHhMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMzMzMzMzM4 Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQmAvmSAOAwDQYJKoZIhvcNAQELBQADggEBAJavfBB1dta/ ct9YfDMWFlUdsCQOL9pASparczf+6cffGm3UY5jcWXx8Hz2Io3TNRiH3Q7fKHg5f dOB6+VdVe3oP6CwUj8zMMPV4vk5pfqI6bEDnb0KNEZexm7vY708NsH9gcY3cUcXa g4nOATqi4pnY9jYgDpDnTh0kAhttJdh9JgS2wkfZiEMo+xb67xng+R+lOG2fsgYz mrbWjFLpYWINbBn9Fvqs0rCRHInjOUKe/ULtcEpdP6tDt3rCW2ce7BN8uqfkIKaZ lFgTILM670mcYwRjslsBCDeycaFnco6q3fx7GGSlMSLO45AA244ioDnY1FRwy/qK 53l4wtl8yDY= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:13 2025 by rpki-client