
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203331383938.roa
File: 323630323a663932613a613436393a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier: OV+J7peOuymct3LneGHLZNpG3HJVYIr/LIrYZ2P0Flk=
Subject key identifier: 12:F9:A1:04:58:7D:6B:B6:4B:18:D4:B0:02:DE:1A:5B:1F:69:A0:C1
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 2FCFE8D3AF747F85B2A55827876089A2A3EF3C1A
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203331383938.roa
Signing time: Fri 24 Jul 2026 08:10:15 +0000
ROA not before: Fri 24 Jul 2026 08:05:15 +0000
ROA not after: Fri 23 Jul 2027 08:10:15 +0000
asID: 31898
IP address blocks: 2602:f92a:a469::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 06:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:cf:e8:d3:af:74:7f:85:b2:a5:58:27:87:60:89:a2:a3:ef:3c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jul 24 08:05:15 2026 GMT
Not After : Jul 23 08:10:15 2027 GMT
Subject: CN=12F9A104587D6BB64B18D4B002DE1A5B1F69A0C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:c6:e8:d7:c5:e9:fe:27:65:c6:63:f2:17:
ec:c8:0b:39:c7:b4:1e:9f:90:fa:e4:e8:a6:09:b7:
49:04:79:16:0b:88:84:ac:81:67:f8:5d:ae:fa:94:
dd:4a:d9:fe:97:4c:ae:9c:b6:07:a2:45:dd:54:2d:
ae:3c:42:8e:d2:1f:81:53:a5:49:6f:af:66:4f:12:
e8:dc:33:4a:d5:bb:c6:44:e5:b3:a4:89:ff:0f:8b:
1c:13:cc:1a:e3:6f:e4:a2:d6:3a:53:01:fe:b6:1a:
fc:45:50:d5:f1:e4:3a:ae:0b:23:ea:ed:c0:79:44:
88:97:35:bf:be:4a:d0:bf:52:44:a4:95:a5:df:19:
1f:2a:b7:19:d7:fc:63:35:ff:2f:48:5a:ee:7c:a7:
9b:cc:a0:5b:77:da:96:1e:f2:00:67:e1:86:d5:93:
af:13:3a:1c:02:06:65:82:77:98:3b:6a:90:43:85:
45:a0:74:8f:1e:2c:78:0c:c2:32:89:27:c8:48:21:
70:47:00:96:ed:32:69:53:6a:4a:a7:9e:7f:00:95:
8e:2d:6f:89:a7:c2:28:1f:53:df:0a:ad:07:f2:96:
25:15:7b:e2:c9:ad:40:65:39:84:ab:69:90:c9:af:
61:59:36:a9:e7:a5:2c:34:ff:82:82:bd:d4:be:56:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:A1:04:58:7D:6B:B6:4B:18:D4:B0:02:DE:1A:5B:1F:69:A0:C1
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a469::/48
Signature Algorithm: sha256WithRSAEncryption
4f:5e:af:b5:6c:05:27:7b:30:78:c9:4f:03:ea:0e:cd:12:12:
71:4a:c1:4a:9f:1e:2b:f0:45:4e:7e:ac:d2:e2:f6:e3:62:d6:
7e:87:0e:4b:07:e7:fe:e8:a0:15:48:a0:6f:b6:39:c9:8a:d1:
f8:b0:2b:06:19:ae:41:c2:7b:02:02:8d:fb:13:f1:fa:7c:bb:
61:27:56:a1:38:e8:8d:7a:40:11:74:fe:2d:e8:b8:69:e0:ac:
3e:4d:61:3b:90:24:58:91:c6:ef:19:84:26:97:2a:f8:d6:b2:
46:03:4a:24:c2:b8:d6:8e:be:30:ee:8f:b7:86:83:15:c0:d2:
62:ef:a7:5b:2d:0a:08:30:99:bf:09:88:36:7e:b1:64:cd:64:
b6:93:12:10:51:09:09:f9:7a:84:69:fc:b4:2c:1a:4a:f8:b8:
e0:2e:1c:f6:fd:a8:8b:f3:25:a1:52:eb:bd:e8:9d:29:7d:b2:
0f:41:a8:42:62:d6:69:7a:41:fe:0c:f5:78:9b:96:fe:61:18:
fa:7a:12:2f:40:d5:5a:84:90:f8:fb:e2:25:f2:05:1f:68:b3:
69:49:a7:16:75:a7:50:3f:22:c8:42:41:b5:e7:42:4e:1c:64:
b6:4a:55:48:b9:fb:74:af:f9:96:e6:18:a9:8d:96:fb:71:c4:
4d:4c:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:28 2026 by rpki-client