$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313330303a3a2f34342d3434203d3e20313531373835.roa File: 323630323a663932613a313330303a3a2f34342d3434203d3e20313531373835.roa (raw, json) Hash identifier: CEEFh6y11J5sPo4PeFmo7jTomrCahBWJP/i3XOGgmfQ= Subject key identifier: A0:BF:06:E6:BC:96:7E:4C:54:7F:03:29:B0:82:3E:AC:26:5C:95:60 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 05EB9424D63D3DDB1E2C6CA9E9FECECA3FA28DFA Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313330303a3a2f34342d3434203d3e20313531373835.roa Signing time: Mon 07 Sep 2026 11:53:48 +0000 ROA not before: Mon 07 Sep 2026 11:48:48 +0000 ROA not after: Mon 06 Sep 2027 11:53:48 +0000 asID: 151785 IP address blocks: 2602:f92a:1300::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 02:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:eb:94:24:d6:3d:3d:db:1e:2c:6c:a9:e9:fe:ce:ca:3f:a2:8d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Sep 7 11:48:48 2026 GMT Not After : Sep 6 11:53:48 2027 GMT Subject: CN=A0BF06E6BC967E4C547F0329B0823EAC265C9560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e2:e6:8a:11:f7:ac:f0:70:9d:11:d3:7e:3a: c6:9a:e6:36:8b:4f:0a:eb:c5:48:05:22:6c:9f:2a: 0e:2d:19:ac:36:41:1e:cc:aa:3e:b4:25:03:bb:c9: ca:e8:9f:33:41:b6:8e:27:4f:df:4c:77:bf:14:61: 03:9f:27:b2:a5:1c:e1:b7:89:6e:5f:15:fd:f6:d4: 87:bd:a3:39:09:41:aa:40:27:4e:4f:eb:9d:c7:be: e0:49:1e:a0:59:6d:ba:be:f1:fd:34:21:c1:0a:e2: 65:cd:eb:a0:df:34:d0:86:68:b3:bc:bd:21:2d:71: 45:fc:c7:9d:49:d8:b2:91:e5:71:26:ec:d2:77:4e: 73:27:05:61:fe:9e:af:77:06:65:77:ef:f0:97:8b: b3:ce:dc:02:18:bb:c1:34:2f:d8:91:a8:a1:9c:9d: 3a:e2:ce:b2:7f:f0:f7:fe:36:80:65:e5:86:8f:c2: bf:60:ae:e8:a1:8e:7e:58:f8:d3:c0:4b:c1:fb:b7: c1:c9:a3:a1:0c:88:60:4e:b0:d9:81:72:ea:e3:fd: d1:fb:71:fd:c2:2a:46:cf:33:13:5a:df:55:07:fa: 3c:5e:0b:43:34:8f:54:8d:d4:bb:90:28:e6:51:f6: 2e:cc:03:fd:e6:73:bb:5e:c5:8c:90:2e:4a:5f:ed: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BF:06:E6:BC:96:7E:4C:54:7F:03:29:B0:82:3E:AC:26:5C:95:60 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313330303a3a2f34342d3434203d3e20313531373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1300::/44 Signature Algorithm: sha256WithRSAEncryption 85:52:89:d8:84:3b:65:00:72:56:09:b3:f1:e1:55:0c:b9:91: e3:e1:79:ea:36:87:00:98:e7:41:bd:56:5d:77:27:b1:86:bc: 66:09:40:a2:42:f8:68:1b:96:3f:53:ef:49:df:df:0f:44:d9: 85:c4:f9:5c:db:f9:42:d5:92:b6:ef:29:84:f3:6d:dc:09:f0: e8:53:e3:4b:ac:6e:94:4c:fd:84:38:f1:de:96:5b:55:d5:5f: fe:c0:e5:31:1e:b4:44:65:65:e4:55:7f:4a:02:b9:69:6c:1d: 90:10:cc:18:98:63:47:70:cf:ff:ea:33:91:66:35:71:50:08: 74:b2:0a:8b:5e:29:4d:c8:3a:15:9b:92:d9:54:c1:b3:c9:43: 30:bd:a4:46:2e:44:e2:54:3c:7a:e4:eb:af:c1:db:95:fb:6c: f2:f8:ad:1b:5b:0a:cb:97:62:c9:33:fc:2b:66:8f:59:a4:ca: 54:c7:b0:33:ff:37:29:05:fb:32:62:46:a9:bb:f0:37:e3:7b: 64:70:39:2f:05:86:62:5c:f6:e2:f0:91:e1:15:7c:12:a2:11: 80:79:cb:48:4c:6a:21:ef:a2:93:30:5f:22:3a:b3:c4:d2:f0: 17:be:43:b4:43:48:a1:dd:bb:03:9c:10:d9:cb:b6:f4:4b:7f: 45:3f:c8:18 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUBeuUJNY9PdseLGyp6f7Oyj+ijfowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwOTA3MTE0ODQ4WhcNMjcwOTA2MTE1MzQ4 WjAzMTEwLwYDVQQDEyhBMEJGMDZFNkJDOTY3RTRDNTQ3RjAzMjlCMDgyM0VBQzI2 NUM5NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OLmihH3rPBw nRHTfjrGmuY2i08K68VIBSJsnyoOLRmsNkEezKo+tCUDu8nK6J8zQbaOJ0/fTHe/ FGEDnyeypRzht4luXxX99tSHvaM5CUGqQCdOT+udx77gSR6gWW26vvH9NCHBCuJl zeug3zTQhmizvL0hLXFF/MedSdiykeVxJuzSd05zJwVh/p6vdwZld+/wl4uzztwC GLvBNC/YkaihnJ064s6yf/D3/jaAZeWGj8K/YK7ooY5+WPjTwEvB+7fByaOhDIhg TrDZgXLq4/3R+3H9wipGzzMTWt9VB/o8XgtDNI9UjdS7kCjmUfYuzAP95nO7XsWM kC5KX+33wQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFKC/Bua8ln5MVH8DKbCCPqwm XJVgMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMwMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTM1 MzEzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAvkqEwAwDQYJKoZIhvcNAQELBQADggEBAIVS idiEO2UAclYJs/HhVQy5kePheeo2hwCY50G9Vl13J7GGvGYJQKJC+Ggblj9T70nf 3w9E2YXE+Vzb+ULVkrbvKYTzbdwJ8OhT40usbpRM/YQ48d6WW1XVX/7A5TEetERl ZeRVf0oCuWlsHZAQzBiYY0dwz//qM5FmNXFQCHSyCoteKU3IOhWbktlUwbPJQzC9 pEYuROJUPHrk66/B25X7bPL4rRtbCsuXYskz/Ctmj1mkylTHsDP/NykF+zJiRqm7 8Dfje2RwOS8FhmJc9uLwkeEVfBKiEYB5y0hMaiHvopMwXyI6s8TS8Be+Q7RDSKHd uwOcENnLtvRLf0U/yBg= -----END CERTIFICATE-----Generated at Tue Sep 22 12:24:41 2026 by rpki-client