
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436313a3a2f34382d3438203d3e20313937383137.roa
File: 323630323a663932613a613436313a3a2f34382d3438203d3e20313937383137.roa (raw, json)
Hash identifier: EBOSzPhoeaczkpz2DG/e9RZJ31GhZJgoQl34//12/Oc=
Subject key identifier: 3E:4A:AC:9F:63:4B:63:40:49:4D:31:0A:70:42:D6:D4:00:6B:8F:BF
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 602421B360535BCFB13B048A67C3B890F412269D
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436313a3a2f34382d3438203d3e20313937383137.roa
Signing time: Tue 02 Jun 2026 12:17:51 +0000
ROA not before: Tue 02 Jun 2026 12:12:51 +0000
ROA not after: Tue 01 Jun 2027 12:17:51 +0000
asID: 197817
IP address blocks: 2602:f92a:a461::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 22:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:24:21:b3:60:53:5b:cf:b1:3b:04:8a:67:c3:b8:90:f4:12:26:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:51 2026 GMT
Not After : Jun 1 12:17:51 2027 GMT
Subject: CN=3E4AAC9F634B6340494D310A7042D6D4006B8FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:c2:b0:2e:09:16:af:dc:8b:7a:36:81:77:
7a:91:8d:a3:a0:ca:80:21:01:ea:81:20:0c:00:b5:
da:85:e3:2d:7d:8b:b0:d7:7c:7f:ac:2e:a6:0d:c7:
81:7a:08:93:83:bc:78:e7:bd:33:e5:5e:51:f4:c0:
0f:a6:99:df:d3:61:ba:94:ce:4f:d3:98:25:8d:9b:
bd:2b:8f:59:fb:50:46:4c:45:49:0a:48:72:1b:b1:
da:c8:f0:00:53:a3:b7:95:11:ac:ee:ef:27:69:4c:
8d:d2:21:74:88:1b:ad:c2:7c:16:ae:d4:21:c1:d5:
cf:c8:55:cb:a5:4f:f3:09:b7:3e:ab:e8:a6:1b:20:
8f:2d:3e:0d:54:69:08:60:71:51:33:5e:8b:70:70:
a5:b9:1e:3e:c5:eb:3d:07:7c:ec:5f:af:38:9c:de:
47:d7:a9:04:d1:3c:d2:d6:ea:af:d7:4b:de:2c:5a:
90:f7:da:af:75:f2:58:3e:ad:aa:2e:7e:4d:49:14:
6e:46:41:c0:8f:a9:bc:29:8a:3b:27:ae:c6:7c:6e:
2c:b5:f1:c3:00:91:73:94:f0:07:bf:71:e6:9b:3b:
0a:94:19:b4:f5:3d:7a:d1:bb:4c:93:9e:fe:7b:5d:
a5:b5:55:b8:12:0e:18:63:ac:b9:df:bf:d4:12:11:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:AC:9F:63:4B:63:40:49:4D:31:0A:70:42:D6:D4:00:6B:8F:BF
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436313a3a2f34382d3438203d3e20313937383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a461::/48
Signature Algorithm: sha256WithRSAEncryption
9c:38:b3:b9:8b:9a:57:36:a6:29:8c:db:48:b2:9e:41:bd:7c:
ae:11:b9:9a:c5:94:61:50:43:3e:24:0b:23:33:16:96:cb:e4:
f1:af:f6:27:4d:ba:98:86:a5:13:87:59:c7:96:d1:62:b0:4c:
d7:62:47:a8:3e:ec:1e:d7:e3:ac:a2:a7:97:cc:c1:a1:64:58:
85:76:66:a8:63:0c:f5:87:fe:a1:96:24:55:61:4b:a9:c5:57:
1e:8c:39:86:4b:67:a5:ba:98:b4:b9:f1:c1:46:77:52:16:2f:
73:50:8a:ef:bf:46:37:80:33:4c:5a:05:27:15:97:67:a3:6f:
a0:17:be:f6:f8:bc:bc:fd:3f:13:48:cc:68:a2:dc:bf:99:bf:
39:da:09:5b:c9:8e:ed:b9:93:a8:74:97:39:57:85:f8:98:77:
0b:4e:c6:ef:57:58:04:30:ba:ea:31:b7:6d:68:09:0b:78:7b:
34:b0:c8:39:15:61:c8:65:ec:cc:41:b9:1b:8a:04:1a:68:55:
92:b2:9f:fc:ac:99:7f:2e:d6:5f:0b:2b:e7:d1:7e:2f:dc:f4:
f4:77:dc:93:1e:f4:58:c0:3e:04:38:24:76:59:bc:0e:a2:73:
3e:af:29:29:60:fc:12:40:de:97:01:c9:e1:ba:de:16:a9:08:
f0:a8:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:09:15 2026 by rpki-client