$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e2030.roa File: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: Sevc+sKUYYnZUHh1gZrExTog3yoYNcVhrxdIQjC4dVM= Subject key identifier: 41:AF:8A:01:90:15:03:25:AF:32:08:61:D3:90:43:98:04:05:2A:5B Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 7365A9A6AC30584CCCAA515A464FC0691FFD7423 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e2030.roa Signing time: Mon 28 Sep 2026 08:49:31 +0000 ROA not before: Mon 28 Sep 2026 08:44:31 +0000 ROA not after: Mon 27 Sep 2027 08:49:31 +0000 asID: 0 IP address blocks: 2602:f992:f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 23:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:65:a9:a6:ac:30:58:4c:cc:aa:51:5a:46:4f:c0:69:1f:fd:74:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Sep 28 08:44:31 2026 GMT Not After : Sep 27 08:49:31 2027 GMT Subject: CN=41AF8A0190150325AF320861D390439804052A5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:e0:66:2d:51:35:de:d2:2d:67:cf:61:b7: 32:0b:6a:60:18:29:dc:54:e8:19:46:03:d1:e4:ad: ca:7e:4e:53:f9:e7:4e:91:3e:f5:71:1c:9a:46:65: ce:f3:13:00:54:06:5b:64:1a:c6:d1:29:00:d2:3e: 78:84:b4:7a:ab:11:49:b8:8b:36:59:e6:dd:52:1f: 1a:9b:bd:95:2d:bf:6e:b9:0e:12:e6:2a:a2:b4:6c: bb:a9:cb:c1:07:9c:f7:00:77:1d:34:f8:d5:51:22: 28:5b:c5:8c:62:b8:a6:35:c9:73:d6:c7:61:da:60: 4c:42:68:f2:fd:44:f5:e6:0e:9d:99:9f:79:f2:2c: d3:19:69:a3:a1:eb:cc:3a:61:1d:87:e7:93:8b:59: 92:94:9a:36:b8:5d:7f:44:7e:9a:4f:e7:89:6f:8e: 8d:ba:75:b1:56:48:1a:85:7f:45:bf:33:37:d9:05: fd:ad:90:3d:a2:93:87:25:bc:77:74:c8:9e:1c:54: b8:6b:ec:3a:51:8b:04:16:2b:31:b4:f7:12:d9:2e: be:cc:54:98:1c:a3:74:b5:d0:c8:c4:4c:c6:17:e1: a0:26:9e:03:88:70:30:f0:5c:a1:34:34:9e:e4:e8: b4:b1:51:c7:1a:ad:b8:a0:ab:9b:eb:b3:7d:aa:50: f9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AF:8A:01:90:15:03:25:AF:32:08:61:D3:90:43:98:04:05:2A:5B X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:f7::/48 Signature Algorithm: sha256WithRSAEncryption 77:53:17:2c:4c:02:92:23:ff:8a:0a:c3:54:f9:7a:27:5b:46: 7a:bd:bd:a7:23:1a:8f:4c:4b:3a:a7:b6:c4:d0:79:f5:43:ad: 43:b5:f0:1d:c9:67:a8:d6:f3:7c:41:ba:17:8e:6f:49:e9:91: d7:60:7e:31:85:f7:dd:3d:ee:4d:3b:f1:b2:13:d3:75:3d:c8: 55:7a:25:04:3c:cd:69:9e:c7:6c:35:21:2f:b3:96:ef:f9:7a: 7e:f2:7c:80:66:fb:2f:1c:be:f5:0b:e7:48:bf:fa:aa:02:0c: cf:ad:37:7e:2a:db:e9:f6:35:28:c1:7b:72:72:06:b1:28:70: 82:0e:dd:59:79:bf:74:38:0a:73:27:72:d1:2e:80:b6:78:49: a9:d8:3a:5b:e9:28:58:96:26:99:a4:b8:bc:80:7a:26:13:f4: 8e:3a:a4:64:75:73:9c:43:7e:f9:18:b1:68:d5:50:bd:27:18: 23:35:3f:69:c2:70:b9:45:4c:02:e6:ff:22:d3:cd:d5:ed:95: 21:6e:fc:8f:33:67:bd:da:69:8d:70:b9:53:8c:4e:7b:14:ac: f9:2e:15:10:7c:aa:3a:82:6e:ef:a9:3e:04:7a:53:ae:c6:d6: 13:b6:e2:6b:3e:bc:e6:65:e3:f0:51:a7:da:4b:77:0e:eb:cb: 50:7e:3e:61 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUc2WppqwwWEzMqlFaRk/AaR/9dCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwOTI4MDg0NDMxWhcNMjcwOTI3MDg0OTMx WjAzMTEwLwYDVQQDEyg0MUFGOEEwMTkwMTUwMzI1QUYzMjA4NjFEMzkwNDM5ODA0 MDUyQTVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoavgZi1RNd7S LWfPYbcyC2pgGCncVOgZRgPR5K3Kfk5T+edOkT71cRyaRmXO8xMAVAZbZBrG0SkA 0j54hLR6qxFJuIs2WebdUh8am72VLb9uuQ4S5iqitGy7qcvBB5z3AHcdNPjVUSIo W8WMYrimNclz1sdh2mBMQmjy/UT15g6dmZ958izTGWmjoevMOmEdh+eTi1mSlJo2 uF1/RH6aT+eJb46NunWxVkgahX9FvzM32QX9rZA9opOHJbx3dMieHFS4a+w6UYsE FisxtPcS2S6+zFSYHKN0tdDIxEzGF+GgJp4DiHAw8FyhNDSe5Oi0sVHHGq24oKub 67N9qlD5kQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFEGvigGQFQMlrzIIYdOQQ5gE BSpbMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGpBggrBgEFBQcBCwSBnDCBmTCBlgYIKwYBBQUH MAuGgYlyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjYzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL5kgD3MA0GCSqGSIb3DQEBCwUAA4IBAQB3UxcsTAKSI/+KCsNU+Xon W0Z6vb2nIxqPTEs6p7bE0Hn1Q61DtfAdyWeo1vN8QboXjm9J6ZHXYH4xhffdPe5N O/GyE9N1PchVeiUEPM1pnsdsNSEvs5bv+Xp+8nyAZvsvHL71C+dIv/qqAgzPrTd+ Ktvp9jUowXtycgaxKHCCDt1Zeb90OApzJ3LRLoC2eEmp2Dpb6ShYliaZpLi8gHom E/SOOqRkdXOcQ375GLFo1VC9JxgjNT9pwnC5RUwC5v8i083V7ZUhbvyPM2e92mmN cLlTjE57FKz5LhUQfKo6gm7vqT4EelOuxtYTtuJrPrzmZePwUafaS3cO68tQfj5h -----END CERTIFICATE-----Generated at Sun Oct 11 08:14:34 2026 by rpki-client