$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331313a3a2f34382d3438203d3e20323031373035.roa File: 323630323a663932613a313331313a3a2f34382d3438203d3e20323031373035.roa (raw, json) Hash identifier: XTGQNT17p7ELr1SUQ9Y6h7jR6Cw3EEiWIAWWkNaqTGE= Subject key identifier: 49:B4:DF:25:F5:B5:F1:86:9C:7E:77:2A:A6:0B:22:30:E5:24:49:69 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 3640E4EB67D797D43F86BB5FAB1D16F679BCF83F Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331313a3a2f34382d3438203d3e20323031373035.roa Signing time: Fri 18 Sep 2026 11:10:51 +0000 ROA not before: Fri 18 Sep 2026 11:05:51 +0000 ROA not after: Fri 17 Sep 2027 11:10:51 +0000 asID: 201705 IP address blocks: 2602:f92a:1311::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:40:e4:eb:67:d7:97:d4:3f:86:bb:5f:ab:1d:16:f6:79:bc:f8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Sep 18 11:05:51 2026 GMT Not After : Sep 17 11:10:51 2027 GMT Subject: CN=49B4DF25F5B5F1869C7E772AA60B2230E5244969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5a:42:13:33:6e:57:88:65:35:73:8e:05:b0: 60:01:ce:49:a2:35:58:14:c0:f5:47:96:76:ae:19: 01:bb:06:e4:e2:7a:8e:36:9b:ef:da:b6:a5:57:f3: 7f:3f:18:88:f9:2a:6c:6d:1e:16:6d:79:cd:bf:29: 95:f3:07:3b:ef:ca:22:c3:a2:fb:0f:45:01:c1:3c: d0:cc:cf:22:7d:0d:03:7e:72:7f:8c:70:83:a7:aa: 49:89:50:5a:94:89:d0:18:f5:ca:32:e1:4b:e7:98: d6:89:1a:34:20:52:ec:2c:07:92:c9:70:c6:a1:8a: 61:53:41:7e:17:4d:73:22:92:eb:1f:7b:50:70:67: 5c:d5:d4:1f:17:01:48:c0:aa:47:88:87:5c:83:17: f3:a7:71:73:04:23:9b:f0:96:44:09:51:df:06:c5: fe:81:e3:4d:a3:3b:5b:65:98:6a:8d:d1:06:97:41: 34:73:19:f6:f6:db:58:e3:0a:ed:12:88:cf:35:6d: ff:a4:c5:e7:b0:57:6d:d5:44:c8:4c:03:d7:f4:90: 9e:51:89:ea:ce:a5:6b:1d:23:3b:83:75:9f:0b:fd: 81:63:ee:d2:8f:af:62:fe:9e:1b:35:21:60:29:79: 19:5b:bf:f5:37:18:7c:be:cb:c2:f4:84:ee:71:37: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:DF:25:F5:B5:F1:86:9C:7E:77:2A:A6:0B:22:30:E5:24:49:69 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331313a3a2f34382d3438203d3e20323031373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1311::/48 Signature Algorithm: sha256WithRSAEncryption 0a:b8:95:e7:8a:ab:62:cf:31:ef:58:29:e2:c7:19:67:18:0c: f9:24:af:fb:80:0e:be:96:a3:37:d5:f4:e0:b7:1f:c3:e2:07: 6b:34:eb:38:a6:60:7d:c3:e7:c0:92:dd:21:89:56:81:13:6a: 04:e2:3c:38:d9:bb:ca:06:27:09:15:41:a9:f8:27:d8:83:f4: 21:a9:f4:f7:98:a9:97:4b:b5:9b:0d:2e:18:cc:16:75:80:88: 16:ea:2a:6a:39:28:36:7d:bb:4c:1d:d0:b6:39:15:4f:c5:ec: 2a:1f:6a:69:2b:cd:36:1f:4a:74:61:33:ff:5a:fc:75:65:d8: 51:06:d2:b3:d5:74:db:6c:fd:da:c8:0b:56:65:f5:e5:f4:9c: 83:60:58:2a:e2:e8:2b:3a:f4:90:3a:af:9f:3d:36:63:90:cb: e1:ec:e4:96:ef:4d:86:ec:c7:8d:f3:2e:a4:e1:71:be:a2:2a: 5c:1e:5a:0d:8d:34:10:af:a2:ba:f6:6a:87:93:52:45:b8:f6: 37:da:29:b4:8d:5a:10:4d:bf:94:60:3f:f5:66:7b:ee:6a:b6: 77:fe:41:50:a0:9b:ad:ac:fd:ad:04:f0:41:2e:97:6b:c3:d9: 28:c6:6a:8a:68:58:8c:3c:cf:16:22:e3:80:d1:ec:c2:c3:6c: bb:71:c2:b5 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUNkDk62fXl9Q/hrtfqx0W9nm8+D8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwOTE4MTEwNTUxWhcNMjcwOTE3MTExMDUx WjAzMTEwLwYDVQQDEyg0OUI0REYyNUY1QjVGMTg2OUM3RTc3MkFBNjBCMjIzMEU1 MjQ0OTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolpCEzNuV4hl NXOOBbBgAc5JojVYFMD1R5Z2rhkBuwbk4nqONpvv2ralV/N/PxiI+SpsbR4WbXnN vymV8wc778oiw6L7D0UBwTzQzM8ifQ0DfnJ/jHCDp6pJiVBalInQGPXKMuFL55jW iRo0IFLsLAeSyXDGoYphU0F+F01zIpLrH3tQcGdc1dQfFwFIwKpHiIdcgxfzp3Fz BCOb8JZECVHfBsX+geNNoztbZZhqjdEGl0E0cxn29ttY4wrtEojPNW3/pMXnsFdt 1UTITAPX9JCeUYnqzqVrHSM7g3WfC/2BY+7Sj69i/p4bNSFgKXkZW7/1Nxh8vsvC 9ITucTctJQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFEm03yX1tfGGnH53KqYLIjDl JElpMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMxMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMw MzEzNzMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqExEwDQYJKoZIhvcNAQELBQADggEBAAq4 leeKq2LPMe9YKeLHGWcYDPkkr/uADr6WozfV9OC3H8PiB2s06zimYH3D58CS3SGJ VoETagTiPDjZu8oGJwkVQan4J9iD9CGp9PeYqZdLtZsNLhjMFnWAiBbqKmo5KDZ9 u0wd0LY5FU/F7CofamkrzTYfSnRhM/9a/HVl2FEG0rPVdNts/drIC1Zl9eX0nINg WCri6Cs69JA6r589NmOQy+Hs5JbvTYbsx43zLqThcb6iKlweWg2NNBCvorr2aoeT UkW49jfaKbSNWhBNv5RgP/Vme+5qtnf+QVCgm62s/a0E8EEul2vD2SjGaopoWIw8 zxYi44DR7MLDbLtxwrU= -----END CERTIFICATE-----Generated at Tue Sep 22 22:14:13 2026 by rpki-client