$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa File: 323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa (raw, json) Hash identifier: 7xduKNxFnF4F+moKthO8GxxT77HpW4VFZLxpGPnwP2Q= Subject key identifier: 56:D4:51:F9:43:6B:00:F0:D8:62:3C:BC:41:84:C4:69:B8:63:01:F0 Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8 Certificate serial: 743319CA5F2EADFCB6BD8D416670D9FF178E8F12 Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa Signing time: Wed 04 Feb 2026 23:06:45 +0000 ROA not before: Wed 04 Feb 2026 23:01:45 +0000 ROA not after: Wed 03 Feb 2027 23:06:45 +0000 asID: 202734 IP address blocks: 2602:f92a:a440::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 15:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:33:19:ca:5f:2e:ad:fc:b6:bd:8d:41:66:70:d9:ff:17:8e:8f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8 Validity Not Before: Feb 4 23:01:45 2026 GMT Not After : Feb 3 23:06:45 2027 GMT Subject: CN=56D451F9436B00F0D8623CBC4184C469B86301F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:13:d0:a5:f6:c8:f9:8b:d2:e8:8a:a1:8a: d9:9d:49:e3:72:3a:5c:8e:57:d8:66:b8:07:bd:c5: 91:f9:06:83:db:9a:0d:f2:9a:ed:52:09:7a:7f:95: d5:5e:87:e8:28:1b:d4:f7:63:a0:b3:d6:ab:60:bc: fc:db:e7:40:d0:9c:33:6a:b9:39:21:cf:cc:17:e4: 1f:95:09:69:04:ca:b5:7f:81:14:93:d6:37:05:b8: 6f:3c:3d:43:88:99:af:c9:c8:be:1a:db:87:3c:b2: fe:6d:fd:78:88:b1:fa:d0:02:15:cb:c4:61:9a:34: c7:dc:d2:11:18:13:5d:3e:6d:b2:f5:76:99:f0:3d: 61:71:67:02:50:dd:60:a2:ad:a5:62:7f:68:1a:60: 98:67:d6:6d:8d:12:45:7b:13:29:5d:45:ba:f9:55: 25:72:4f:84:e6:8d:7e:26:9d:0a:f8:41:cb:d5:35: fb:00:70:5f:fb:60:c8:61:54:ef:fe:7c:e1:36:d4: cb:0d:af:18:97:ed:87:7d:51:27:67:22:97:0c:1f: 31:6e:65:f5:f9:6c:2f:aa:1a:ba:a5:23:03:4d:45: f0:ed:1d:fb:ba:ed:cd:fa:f6:ff:5d:b2:5b:a4:fb: 06:57:48:2f:6f:3d:0d:38:b7:a7:4a:fb:c1:1a:d0: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:51:F9:43:6B:00:F0:D8:62:3C:BC:41:84:C4:69:B8:63:01:F0 X509v3 Authority Key Identifier: keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a440::/44 Signature Algorithm: sha256WithRSAEncryption 11:62:0d:cf:36:80:00:67:3f:30:fe:70:76:b4:3f:34:95:d8: 93:4e:00:64:8c:97:d3:13:ea:26:b5:03:e9:90:7a:b2:9a:33: 9a:32:d4:9d:fb:d9:b0:da:90:33:be:0d:de:3e:26:8b:33:23: e7:e1:0c:e0:25:0a:fe:e4:ff:8b:97:36:0b:ec:1f:98:40:12: 01:a4:8f:77:26:4e:97:b6:2e:60:d1:aa:0c:d2:57:3e:e5:16: 05:79:02:3b:05:08:b3:32:b8:e9:9c:25:48:74:7d:7b:58:d4: eb:1b:6a:8d:2d:27:d1:a2:f5:27:71:02:df:79:dc:31:ea:18: cd:b8:ea:f3:09:5d:1e:da:2e:bc:66:84:31:a3:0f:d0:48:09: 39:5f:78:dc:ea:7c:70:4c:2e:1d:16:a8:a1:78:8e:77:fd:c2: 19:26:9a:e0:81:d2:9c:97:78:cd:66:82:a4:59:b2:34:0e:1e: 22:89:9e:64:e1:26:fc:0b:b6:18:cc:dc:58:af:34:95:ae:c0: b4:00:a0:0e:de:ee:f2:32:cb:2a:c3:e4:eb:d2:1c:b2:26:84: 9d:78:0c:71:21:82:01:a7:46:f8:96:7c:66:7a:7c:fa:de:2e: cc:a3:d7:42:71:bc:69:0e:25:bb:8c:23:37:c5:5a:b0:bd:eb: 8b:98:af:40 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUdDMZyl8urfy2vY1BZnDZ/xeOjxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNl ZWYyODUxNDQxZWQ3YzBmZTgwHhcNMjYwMjA0MjMwMTQ1WhcNMjcwMjAzMjMwNjQ1 WjAzMTEwLwYDVQQDEyg1NkQ0NTFGOTQzNkIwMEYwRDg2MjNDQkM0MTg0QzQ2OUI4 NjMwMUYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/cT0KX2yPmL 0uiKoYrZnUnjcjpcjlfYZrgHvcWR+QaD25oN8prtUgl6f5XVXofoKBvU92Ogs9ar YLz82+dA0Jwzark5Ic/MF+QflQlpBMq1f4EUk9Y3BbhvPD1DiJmvyci+GtuHPLL+ bf14iLH60AIVy8RhmjTH3NIRGBNdPm2y9XaZ8D1hcWcCUN1goq2lYn9oGmCYZ9Zt jRJFexMpXUW6+VUlck+E5o1+Jp0K+EHL1TX7AHBf+2DIYVTv/nzhNtTLDa8Yl+2H fVEnZyKXDB8xbmX1+Wwvqhq6pSMDTUXw7R37uu3N+vb/XbJbpPsGV0gvbz0NOLen SvvBGtBPBQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFFbUUflDawDw2GI8vEGExGm4 YwHwMB8GA1UdIwQYMBaAFGUsAZnmVi+2EZ4lkjAWmCYpwhCNMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzY1MkMwMTk5RTY1NjJGQjYxMTlFMjU5MjMwMTY5ODI2 MjlDMjEwOEQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNlZWYy ODUxNDQxZWQ3YzBmZTguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjEzNDM0MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMw MzIzNzMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAvkqpEAwDQYJKoZIhvcNAQELBQADggEBABFi Dc82gABnPzD+cHa0PzSV2JNOAGSMl9MT6ia1A+mQerKaM5oy1J372bDakDO+Dd4+ JoszI+fhDOAlCv7k/4uXNgvsH5hAEgGkj3cmTpe2LmDRqgzSVz7lFgV5AjsFCLMy uOmcJUh0fXtY1Osbao0tJ9Gi9SdxAt953DHqGM246vMJXR7aLrxmhDGjD9BICTlf eNzqfHBMLh0WqKF4jnf9whkmmuCB0pyXeM1mgqRZsjQOHiKJnmThJvwLthjM3Fiv NJWuwLQAoA7e7vIyyyrD5OvSHLImhJ14DHEhggGnRviWfGZ6fPreLsyj10JxvGkO JbuMIzfFWrC964uYr0A= -----END CERTIFICATE-----Generated at Sun Mar 1 20:07:02 2026 by rpki-client