$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e2030.roa File: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg= Subject key identifier: 5A:A1:1D:6E:A7:32:07:84:18:42:BC:05:E7:EC:A7:48:64:23:7B:1D Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 768C5D0B41C37109FEC47A7796C32F95E97BC92A Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e2030.roa Signing time: Mon 27 Oct 2025 08:46:43 +0000 ROA not before: Mon 27 Oct 2025 08:41:43 +0000 ROA not after: Mon 26 Oct 2026 08:46:43 +0000 asID: 0 IP address blocks: 2602:f992:f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8c:5d:0b:41:c3:71:09:fe:c4:7a:77:96:c3:2f:95:e9:7b:c9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Oct 27 08:41:43 2025 GMT Not After : Oct 26 08:46:43 2026 GMT Subject: CN=5AA11D6EA73207841842BC05E7ECA74864237B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:b9:9e:8f:f8:b7:10:7f:7c:89:b6:56:df: 5c:69:50:7c:18:1f:69:72:8e:a1:c4:8c:01:b4:85: 24:17:f0:f2:ad:49:b0:a0:37:17:79:bb:1f:78:1c: 45:a5:df:72:3c:7b:17:3c:6b:10:52:2f:4f:79:5a: 4d:f0:6f:8b:c4:5c:05:b5:4f:38:40:17:08:f5:aa: aa:9a:fa:1e:1b:fb:3d:ca:c2:eb:5f:f4:78:99:ab: 17:ae:4e:b8:eb:47:3a:fa:f3:36:e9:41:cf:00:f0: cf:b2:b8:eb:e4:e5:1c:cf:bc:98:99:29:09:2d:82: 6e:5a:24:b6:7a:49:9a:ee:ae:8a:ad:ab:38:9b:73: 90:c4:69:68:40:ea:38:57:20:ab:37:6f:c3:62:f9: bd:37:79:3d:32:c5:61:89:45:0d:1b:84:0b:45:47: 54:a9:a7:b7:22:38:f5:bf:ab:61:d6:86:92:90:47: 4b:9c:89:df:62:95:cf:f6:12:56:96:06:d2:5c:25: 31:35:a6:9b:be:25:80:22:02:8a:bf:40:3f:6f:90: 1c:ac:f4:61:39:3e:15:d2:94:4d:68:26:f9:43:6e: cc:a9:f0:f2:77:60:f0:27:7d:65:90:41:84:3e:25: 45:cf:6e:64:28:fc:de:72:b5:eb:98:cf:b6:7c:57: d7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:1D:6E:A7:32:07:84:18:42:BC:05:E7:EC:A7:48:64:23:7B:1D X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:f7::/48 Signature Algorithm: sha256WithRSAEncryption a7:3a:e7:d7:8c:c6:7e:24:7a:74:f2:7d:14:78:53:8f:0e:41: f9:fd:e6:ca:d4:5e:d2:2f:14:f7:54:67:23:75:fc:40:2f:52: c5:67:4a:ab:4c:df:d8:dd:d2:fa:bc:6f:e8:51:c7:6f:ab:15: c2:fd:80:08:97:5f:f4:ad:dd:51:62:f4:62:9b:8c:78:6d:96: ab:8c:e4:2f:57:80:60:97:49:71:31:76:1f:39:c2:e1:94:c5: 68:59:e6:10:d0:26:c4:a8:40:f9:1d:2f:09:7e:69:35:b6:80: e3:57:0f:09:45:7f:3f:33:97:48:67:c7:00:52:d1:c5:ba:a9: bb:c5:d0:25:8e:7e:94:bf:f0:c3:0a:a7:7c:a5:ec:d1:99:4d: 9e:1d:ed:1d:3b:16:2d:1e:a3:1a:ea:b6:f9:51:46:c6:7f:0d: b4:03:f5:11:35:ad:a6:5e:aa:f6:8e:9f:45:54:69:8d:d1:a9: 9a:f0:02:c2:79:1b:5f:f8:53:82:a4:8f:1b:83:33:fd:a1:e8: 4b:da:aa:1a:04:c0:38:4c:c2:91:e7:a9:2c:b9:dc:fa:78:45: f7:36:0d:d5:39:5e:3f:27:5e:e1:a2:fa:43:df:a4:df:a3:79: d1:41:24:2f:d6:a0:b5:f2:45:3a:1f:53:eb:b2:05:2f:3a:0c: 1d:74:ea:36 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUdoxdC0HDcQn+xHp3lsMvlel7ySowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUxMDI3MDg0MTQzWhcNMjYxMDI2MDg0NjQz WjAzMTEwLwYDVQQDEyg1QUExMUQ2RUE3MzIwNzg0MTg0MkJDMDVFN0VDQTc0ODY0 MjM3QjFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDq5no/4txB/ fIm2Vt9caVB8GB9pco6hxIwBtIUkF/DyrUmwoDcXebsfeBxFpd9yPHsXPGsQUi9P eVpN8G+LxFwFtU84QBcI9aqqmvoeG/s9ysLrX/R4masXrk6460c6+vM26UHPAPDP srjr5OUcz7yYmSkJLYJuWiS2ekma7q6Kras4m3OQxGloQOo4VyCrN2/DYvm9N3k9 MsVhiUUNG4QLRUdUqae3Ijj1v6th1oaSkEdLnInfYpXP9hJWlgbSXCUxNaabviWA IgKKv0A/b5AcrPRhOT4V0pRNaCb5Q27MqfDyd2DwJ31lkEGEPiVFz25kKPzecrXr mM+2fFfX6wIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFFqhHW6nMgeEGEK8Befsp0hk I3sdMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGpBggrBgEFBQcBCwSBnDCBmTCBlgYIKwYBBQUH MAuGgYlyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjYzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL5kgD3MA0GCSqGSIb3DQEBCwUAA4IBAQCnOufXjMZ+JHp08n0UeFOP DkH5/ebK1F7SLxT3VGcjdfxAL1LFZ0qrTN/Y3dL6vG/oUcdvqxXC/YAIl1/0rd1R YvRim4x4bZarjOQvV4Bgl0lxMXYfOcLhlMVoWeYQ0CbEqED5HS8Jfmk1toDjVw8J RX8/M5dIZ8cAUtHFuqm7xdAljn6Uv/DDCqd8pezRmU2eHe0dOxYtHqMa6rb5UUbG fw20A/URNa2mXqr2jp9FVGmN0ama8ALCeRtf+FOCpI8bgzP9oehL2qoaBMA4TMKR 56ksudz6eEX3Ng3VOV4/J17hovpD36Tfo3nRQSQv1qC18kU6H1PrsgUvOgwddOo2 -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:57 2025 by rpki-client