$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e203331383938.roa File: 323630323a663932613a313332353a3a2f34382d3438203d3e203331383938.roa (raw, json) Hash identifier: mWNASg2FrH7HsoEPZFYfJueGgDKfZfBpV47aujO8j/c= Subject key identifier: 88:C5:10:2D:D8:76:92:E2:2D:30:78:51:29:93:98:17:9A:55:BA:69 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 58F908CA3A88F8C27430D8CDBD29D7029F442287 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e203331383938.roa Signing time: Sat 24 Oct 2026 10:44:48 +0000 ROA not before: Sat 24 Oct 2026 10:39:48 +0000 ROA not after: Sat 23 Oct 2027 10:44:48 +0000 asID: 31898 IP address blocks: 2602:f92a:1325::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 08:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f9:08:ca:3a:88:f8:c2:74:30:d8:cd:bd:29:d7:02:9f:44:22:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Oct 24 10:39:48 2026 GMT Not After : Oct 23 10:44:48 2027 GMT Subject: CN=88C5102DD87692E22D307851299398179A55BA69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:1a:39:2d:35:06:72:cc:40:75:fa:e5:dc: a2:27:13:fd:33:ac:da:23:91:df:a6:03:69:32:89: 10:96:dc:62:c6:b9:4b:21:ef:74:65:89:f4:b4:d8: 0d:2c:f4:cf:97:41:f3:83:3a:70:3f:8c:df:59:83: b2:29:01:d4:4b:3d:d5:3c:46:e7:8b:88:ef:28:f5: fc:7c:f2:a1:a5:b6:ab:9f:46:37:a7:5d:d5:1b:66: 3a:36:19:65:d7:61:ca:68:c7:9d:3c:71:3e:2e:3a: de:64:48:1e:d3:0c:e0:c1:3d:29:fb:42:99:72:d8: 85:15:45:04:9c:46:5f:dd:b0:c1:aa:27:8a:3e:9c: 97:cc:16:c0:16:84:9b:14:c6:15:e4:2d:2b:c4:28: 90:86:79:e0:9e:33:cd:c4:e0:5b:5a:bd:ee:44:8a: fa:bf:01:c9:2e:5e:e0:5c:8d:9a:91:2a:ba:20:56: 87:c7:f4:38:e5:03:68:aa:be:74:20:34:41:83:ac: b2:4d:57:9e:0f:02:3a:b0:f9:c9:88:61:f1:ec:9a: 71:82:6f:7b:d8:4b:29:50:29:ec:79:81:9f:66:96: 06:03:b0:81:d5:c9:10:fc:4d:a3:d6:9b:39:54:9d: 47:b9:fe:93:0d:e4:84:00:01:79:9a:48:06:d0:ce: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C5:10:2D:D8:76:92:E2:2D:30:78:51:29:93:98:17:9A:55:BA:69 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1325::/48 Signature Algorithm: sha256WithRSAEncryption c2:d9:2a:df:41:9c:63:d6:bc:83:d6:78:03:15:a5:fd:8b:51: f3:58:ef:ad:33:d8:7a:27:7c:a0:55:a8:39:3f:19:3b:9d:80: c0:eb:70:32:ca:6f:63:26:18:ef:bc:27:15:fe:36:37:11:4f: da:32:1a:69:21:b1:10:d9:5c:65:87:f4:81:53:0f:38:76:74: 3a:fd:db:2b:1c:ce:2a:1f:e5:3b:e8:16:2b:d7:af:9a:dd:d7: 2a:f1:ed:c4:08:0f:f5:8f:ad:86:71:d2:98:13:17:bd:b1:59: 48:79:e9:50:9b:e5:ef:27:e7:8a:8f:09:b3:26:18:48:32:45: 0f:f4:f7:07:db:e1:8f:db:40:df:3b:12:b4:40:0e:f7:28:74: 02:9a:e7:74:f4:4b:75:4e:0a:c3:d5:61:ec:c1:22:6d:c6:20: 7e:dc:4f:ea:19:3e:1a:30:40:11:bb:58:2b:70:e0:5e:f9:2f: 9b:2e:e3:f1:80:55:1e:8e:de:ae:a3:84:df:91:3d:0d:be:81: 1a:50:00:af:3c:75:71:10:4c:c2:c1:f4:86:f0:3c:69:3d:66: 76:86:f0:2e:f3:a7:7d:03:57:9f:6b:15:42:c8:ce:94:85:dd: 8b:31:50:e1:5a:f1:ca:1b:9b:83:91:3b:8b:c7:dd:f8:38:df: 87:49:65:c3 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUWPkIyjqI+MJ0MNjNvSnXAp9EIocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYxMDI0MTAzOTQ4WhcNMjcxMDIzMTA0NDQ4 WjAzMTEwLwYDVQQDEyg4OEM1MTAyREQ4NzY5MkUyMkQzMDc4NTEyOTkzOTgxNzlB NTVCQTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZgaOS01BnLM QHX65dyiJxP9M6zaI5HfpgNpMokQltxixrlLIe90ZYn0tNgNLPTPl0HzgzpwP4zf WYOyKQHUSz3VPEbni4jvKPX8fPKhpbarn0Y3p13VG2Y6Nhll12HKaMedPHE+Ljre ZEge0wzgwT0p+0KZctiFFUUEnEZf3bDBqieKPpyXzBbAFoSbFMYV5C0rxCiQhnng njPNxOBbWr3uRIr6vwHJLl7gXI2akSq6IFaHx/Q45QNoqr50IDRBg6yyTVeeDwI6 sPnJiGHx7Jpxgm972EspUCnseYGfZpYGA7CB1ckQ/E2j1ps5VJ1Huf6TDeSEAAF5 mkgG0M7cEwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFIjFEC3YdpLiLTB4USmTmBea VbppMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMyMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMx MzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH AQH/BBMwETAPBAIAAjAJAwcAJgL5KhMlMA0GCSqGSIb3DQEBCwUAA4IBAQDC2Srf QZxj1ryD1ngDFaX9i1HzWO+tM9h6J3ygVag5Pxk7nYDA63Ayym9jJhjvvCcV/jY3 EU/aMhppIbEQ2Vxlh/SBUw84dnQ6/dsrHM4qH+U76BYr16+a3dcq8e3ECA/1j62G cdKYExe9sVlIeelQm+XvJ+eKjwmzJhhIMkUP9PcH2+GP20DfOxK0QA73KHQCmud0 9Et1TgrD1WHswSJtxiB+3E/qGT4aMEARu1grcOBe+S+bLuPxgFUejt6uo4TfkT0N voEaUACvPHVxEEzCwfSG8DxpPWZ2hvAu86d9A1efaxVCyM6Uhd2LMVDhWvHKG5uD kTuLx934ON+HSWXD -----END CERTIFICATE-----Generated at Thu Nov 5 12:50:25 2026 by rpki-client