$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa File: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (raw, json) Hash identifier: wWs8ib9AxdStlITj+fRhlFovwHg1pfm3ljVihr6bW+k= Subject key identifier: A6:7F:2D:98:6D:45:97:48:F2:57:69:38:D6:90:92:0F:73:1E:BF:F1 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 637062E3A9D2EBCF1AB2BF2E73A7E10FF8461C8C Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa Signing time: Tue 09 Jun 2026 10:27:07 +0000 ROA not before: Tue 09 Jun 2026 10:22:07 +0000 ROA not after: Tue 08 Jun 2027 10:27:07 +0000 asID: 33387 IP address blocks: 2602:f992:f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 19:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:70:62:e3:a9:d2:eb:cf:1a:b2:bf:2e:73:a7:e1:0f:f8:46:1c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jun 9 10:22:07 2026 GMT Not After : Jun 8 10:27:07 2027 GMT Subject: CN=A67F2D986D459748F2576938D690920F731EBFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:00:f7:df:d3:a0:44:9b:3e:2d:cd:8b:1c:dd: ea:59:4c:e5:2e:9b:4d:73:29:f3:ad:8e:da:ea:86: 7b:b5:e0:c5:94:ca:51:fe:1a:47:9f:72:70:ab:5d: 72:3b:8d:e3:80:08:f4:a9:3c:12:c3:91:74:93:ce: b2:06:7e:d2:1e:6f:d6:cc:48:01:51:e6:fe:3a:f6: 54:65:28:19:fe:81:cc:c9:71:6d:31:91:ff:6e:34: e0:9a:e5:a7:d4:bd:75:6a:34:00:a6:a7:78:cb:d6: c0:c1:14:f3:ea:03:fb:b2:92:b0:44:7c:17:3c:91: eb:fd:af:36:33:5a:74:bb:03:d8:f7:d9:25:d1:60: d9:30:85:2d:01:b1:33:44:ff:e8:d2:7d:4b:0c:20: 9b:eb:31:9b:7a:f5:04:40:5b:4f:d1:05:25:9e:4a: 0d:b8:3a:9b:0e:46:09:22:3f:55:59:c4:8e:2e:d5: 1c:d5:5a:94:a1:b9:cf:ea:50:a1:c1:55:86:5c:76: 0a:96:b7:7a:c2:a3:59:88:69:b1:50:7e:61:49:d6: 74:eb:da:5e:4c:26:ee:36:bd:fa:95:1f:82:36:7a: 72:59:78:66:4e:77:1f:2e:14:29:4a:87:fe:42:16: 3f:c9:a6:46:72:1a:64:3b:3d:16:98:1e:fd:ca:8b: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7F:2D:98:6D:45:97:48:F2:57:69:38:D6:90:92:0F:73:1E:BF:F1 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:f3::/48 Signature Algorithm: sha256WithRSAEncryption 8a:c4:52:f0:33:d0:8e:0c:70:5e:2e:5e:31:90:a4:eb:ed:df: 02:cd:64:6b:7a:92:cf:5b:cb:b4:f2:9d:e3:88:f8:4b:51:6c: 13:90:3a:b8:74:8c:92:a2:55:7b:b7:62:45:43:ae:1e:0d:04: b7:a1:fb:8e:c6:50:02:6d:6a:b0:ad:94:fe:14:c7:4d:01:22: 46:50:99:7c:ff:7d:79:b2:b6:f4:fa:10:43:98:ad:10:09:d8: 7e:e2:ff:07:a0:83:0b:3a:68:c2:42:cf:65:aa:b1:ca:b4:75: 42:d7:95:aa:80:51:db:40:d3:61:10:a3:b6:24:42:95:07:c3: 3a:a2:ff:a9:4f:48:56:b0:bd:4b:ca:18:6a:24:e1:7a:51:6a: 77:79:49:10:8d:55:bd:46:91:12:96:3f:62:33:f7:04:05:eb: 1c:ab:3c:37:6e:c7:d5:9e:c4:41:5c:a4:5a:42:30:99:06:32: 26:d9:94:fb:ba:01:09:fb:e9:74:5d:e0:3f:00:09:c1:b0:8b: 6b:e9:d4:a8:4c:b9:f3:cc:08:c5:7d:27:fc:43:79:02:0a:e1: da:33:15:81:92:e4:48:13:be:85:2b:0f:8c:76:7d:e4:27:7a: 6e:e1:cd:86:0d:bd:6b:75:e9:16:6c:b3:ae:92:d8:7c:35:ae: 2a:fc:42:c0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUY3Bi46nS688asr8uc6fhD/hGHIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwNjA5MTAyMjA3WhcNMjcwNjA4MTAyNzA3 WjAzMTEwLwYDVQQDEyhBNjdGMkQ5ODZENDU5NzQ4RjI1NzY5MzhENjkwOTIwRjcz MUVCRkYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AD339OgRJs+ Lc2LHN3qWUzlLptNcynzrY7a6oZ7teDFlMpR/hpHn3Jwq11yO43jgAj0qTwSw5F0 k86yBn7SHm/WzEgBUeb+OvZUZSgZ/oHMyXFtMZH/bjTgmuWn1L11ajQApqd4y9bA wRTz6gP7spKwRHwXPJHr/a82M1p0uwPY99kl0WDZMIUtAbEzRP/o0n1LDCCb6zGb evUEQFtP0QUlnkoNuDqbDkYJIj9VWcSOLtUc1VqUobnP6lChwVWGXHYKlrd6wqNZ iGmxUH5hSdZ069peTCbuNr36lR+CNnpyWXhmTncfLhQpSof+QhY/yaZGchpkOz0W mB79yosOEQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFKZ/LZhtRZdI8ldpONaQkg9z Hr/xMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjYzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzMzMzM4 Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAmAvmSAPMwDQYJKoZIhvcNAQELBQADggEBAIrEUvAz0I4M cF4uXjGQpOvt3wLNZGt6ks9by7TyneOI+EtRbBOQOrh0jJKiVXu3YkVDrh4NBLeh +47GUAJtarCtlP4Ux00BIkZQmXz/fXmytvT6EEOYrRAJ2H7i/weggws6aMJCz2Wq scq0dULXlaqAUdtA02EQo7YkQpUHwzqi/6lPSFawvUvKGGok4XpRand5SRCNVb1G kRKWP2Iz9wQF6xyrPDdux9WexEFcpFpCMJkGMibZlPu6AQn76XRd4D8ACcGwi2vp 1KhMufPMCMV9J/xDeQIK4dozFYGS5EgTvoUrD4x2feQnem7hzYYNvWt16RZss66S 2Hw1rir8QsA= -----END CERTIFICATE-----Generated at Sat Jun 13 06:59:50 2026 by rpki-client