$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313330303a3a2f34342d3438203d3e20313531373835.roa File: 323630323a663932613a313330303a3a2f34342d3438203d3e20313531373835.roa (raw, json) Hash identifier: FbSIaiTBOvrhtKT7oj6gN9Js/bTB8X1Xlmigr0eVnQ8= Subject key identifier: 5D:C4:63:CE:06:95:B5:B1:FD:9A:C3:00:B1:7D:F4:63:6B:36:72:3A Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 0B8913E4801C390437A8AE4A3ACCB14B2B9E9CFF Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313330303a3a2f34342d3438203d3e20313531373835.roa Signing time: Tue 08 Sep 2026 12:13:56 +0000 ROA not before: Tue 08 Sep 2026 12:08:56 +0000 ROA not after: Tue 07 Sep 2027 12:13:56 +0000 asID: 151785 IP address blocks: 2602:f92a:1300::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 02:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:89:13:e4:80:1c:39:04:37:a8:ae:4a:3a:cc:b1:4b:2b:9e:9c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Sep 8 12:08:56 2026 GMT Not After : Sep 7 12:13:56 2027 GMT Subject: CN=5DC463CE0695B5B1FD9AC300B17DF4636B36723A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:14:f9:15:b2:b4:d7:8a:d5:3c:0a:71:2f: 48:95:13:ac:83:85:c5:94:4c:31:73:33:9d:e9:22: 30:d4:15:fa:07:43:66:ec:c3:a5:71:b7:ce:44:94: e9:de:35:52:76:fa:ad:ad:9d:61:b9:ba:4d:78:e3: 4e:c8:dc:9d:be:90:4c:56:33:e5:40:56:f6:ad:52: 55:f8:8f:61:c3:e2:d5:32:96:b1:44:5b:a7:99:ac: fc:2a:d6:b9:d5:b4:db:2d:00:69:36:ff:76:78:01: 9e:cf:8d:b7:69:77:4e:04:5f:75:ef:12:27:dc:d3: 79:dd:4f:bc:f6:7b:fc:33:40:87:c2:93:64:13:6a: a3:c6:03:55:dc:1e:d8:17:47:f8:b4:f9:89:52:01: 47:1b:33:b1:79:45:a3:30:db:ff:a3:de:5e:39:45: fa:ad:ea:8c:d5:39:09:b2:1c:06:32:f6:b6:be:02: 4e:c1:65:bd:07:da:83:63:af:19:5e:84:a6:91:56: e6:e8:5a:de:86:d3:4b:19:8d:79:f0:fa:95:fa:d1: 28:21:ac:62:07:d5:68:ad:7d:55:26:d6:65:13:0d: be:6c:b1:73:ea:29:2a:95:df:1c:6d:e9:e4:da:f4: 06:a1:38:9c:1a:c1:19:93:52:e8:24:0e:af:b7:bc: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C4:63:CE:06:95:B5:B1:FD:9A:C3:00:B1:7D:F4:63:6B:36:72:3A X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313330303a3a2f34342d3438203d3e20313531373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1300::/44 Signature Algorithm: sha256WithRSAEncryption a7:fc:3f:1c:d4:18:71:08:ce:ec:32:a5:20:df:1d:dc:c7:af: e3:db:0e:60:f9:e0:0f:93:72:d4:5d:55:70:17:60:c5:24:29: 22:8b:77:b7:97:7e:bd:6a:fe:d1:9a:2d:6f:14:83:57:90:95: d3:24:4e:be:31:16:0c:02:ff:b3:60:7a:bb:41:8e:f1:9d:5d: f2:d0:0e:5e:b8:f0:03:5e:a1:17:13:92:d3:8a:0b:0e:f1:38: f2:5c:ef:f2:36:df:7e:a1:a3:d3:12:35:f5:45:e5:e8:e6:e5: c9:e2:00:71:7d:4f:6f:db:bc:92:3b:96:b0:09:98:3c:6c:ab: c4:08:8a:5c:91:9a:39:25:9c:dc:b6:b2:f3:cb:1d:2b:12:d0: b9:8d:d3:71:59:9a:2b:03:5e:e7:7d:b8:d2:19:d3:b7:6c:b8: 3b:3a:f0:86:70:36:61:db:b7:b8:b9:d2:d9:7a:4c:9b:5f:99: 25:3a:86:b0:31:bd:2c:3a:ee:c5:ab:01:16:60:eb:56:1f:6c: c7:5d:dc:d8:54:a6:ba:dd:9a:f8:52:fc:1e:6f:fa:7c:5e:d1: 51:68:17:b7:c7:5f:d3:ab:a8:cc:31:ed:8d:32:e3:9f:fb:19: bf:80:2b:e1:21:91:ea:d8:b1:e0:f9:6b:57:b5:3d:3f:30:0c: 4c:18:5c:2d -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUC4kT5IAcOQQ3qK5KOsyxSyuenP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwOTA4MTIwODU2WhcNMjcwOTA3MTIxMzU2 WjAzMTEwLwYDVQQDEyg1REM0NjNDRTA2OTVCNUIxRkQ5QUMzMDBCMTdERjQ2MzZC MzY3MjNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmggU+RWytNeK 1TwKcS9IlROsg4XFlEwxczOd6SIw1BX6B0Nm7MOlcbfORJTp3jVSdvqtrZ1hubpN eONOyNydvpBMVjPlQFb2rVJV+I9hw+LVMpaxRFunmaz8Kta51bTbLQBpNv92eAGe z423aXdOBF917xIn3NN53U+89nv8M0CHwpNkE2qjxgNV3B7YF0f4tPmJUgFHGzOx eUWjMNv/o95eOUX6reqM1TkJshwGMva2vgJOwWW9B9qDY68ZXoSmkVbm6FrehtNL GY158PqV+tEoIaxiB9VorX1VJtZlEw2+bLFz6ikqld8cbenk2vQGoTicGsEZk1Lo JA6vt7w4XQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFF3EY84GlbWx/ZrDALF99GNr NnI6MB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMwMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMTM1 MzEzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAvkqEwAwDQYJKoZIhvcNAQELBQADggEBAKf8 PxzUGHEIzuwypSDfHdzHr+PbDmD54A+TctRdVXAXYMUkKSKLd7eXfr1q/tGaLW8U g1eQldMkTr4xFgwC/7NgertBjvGdXfLQDl648ANeoRcTktOKCw7xOPJc7/I2336h o9MSNfVF5ejm5cniAHF9T2/bvJI7lrAJmDxsq8QIilyRmjklnNy2svPLHSsS0LmN 03FZmisDXud9uNIZ07dsuDs68IZwNmHbt7i50tl6TJtfmSU6hrAxvSw67sWrARZg 61YfbMdd3NhUprrdmvhS/B5v+nxe0VFoF7fHX9OrqMwx7Y0y45/7Gb+AK+EhkerY seD5a1e1PT8wDEwYXC0= -----END CERTIFICATE-----Generated at Tue Sep 22 12:24:59 2026 by rpki-client