$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/323630323a663838323a3a2f33362d3438203d3e20343031323138.roa File: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (raw, json) Hash identifier: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o= Subject key identifier: 9B:C0:B3:8B:FA:79:7F:9B:E7:E6:10:80:35:65:CB:93:FC:73:9B:54 Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 759704BCAE069E30CCA37110C1A4A0FFE009A61B Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/323630323a663838323a3a2f33362d3438203d3e20343031323138.roa Signing time: Tue 03 Jun 2025 10:10:24 +0000 ROA not before: Tue 03 Jun 2025 10:05:24 +0000 ROA not after: Tue 02 Jun 2026 10:10:24 +0000 asID: 401218 IP address blocks: 2602:f882::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:97:04:bc:ae:06:9e:30:cc:a3:71:10:c1:a4:a0:ff:e0:09:a6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Jun 3 10:05:24 2025 GMT Not After : Jun 2 10:10:24 2026 GMT Subject: CN=9BC0B38BFA797F9BE7E610803565CB93FC739B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:51:ee:a3:36:ee:7b:dc:ba:fc:1f:d1:0a: e4:43:c3:44:1c:c8:18:94:40:9d:27:0f:b1:56:47: a4:f8:f4:f8:f0:9a:98:cf:4f:57:83:1a:ea:5f:fa: 52:f6:10:85:07:be:17:32:ab:8a:9f:24:64:fc:9f: da:3c:2f:90:2c:3b:9f:ea:30:e3:3e:dc:60:ca:50: eb:74:71:a0:75:5b:c2:46:79:fd:31:11:97:53:5e: 89:a5:bb:9e:a6:c4:80:e4:6b:16:8d:e9:d5:c7:23: 07:eb:fa:f8:2d:d6:42:f6:c9:41:dd:6f:ef:0f:bd: d5:53:2e:56:1d:20:0e:1d:30:68:06:56:36:21:66: 8d:ac:f6:03:75:a0:34:c4:71:0b:18:93:90:25:28: 33:b0:a3:83:69:ec:53:db:7a:77:2d:cc:be:f4:ad: 74:1d:68:55:9b:a4:18:d5:9c:64:db:10:c5:c8:25: f4:a7:38:fb:a8:65:1f:69:07:92:57:3e:0c:02:2c: 05:77:0f:f6:8e:6b:eb:ac:9b:76:59:ed:ea:3c:70: 8c:d3:69:27:ad:c6:f9:94:2b:af:a8:48:b7:5d:88: 0f:03:7f:cc:83:27:d9:e8:f1:ae:9f:db:7b:4b:76: c5:d0:fb:98:0b:94:c1:80:27:2e:3b:68:74:b0:c7: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C0:B3:8B:FA:79:7F:9B:E7:E6:10:80:35:65:CB:93:FC:73:9B:54 X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/323630323a663838323a3a2f33362d3438203d3e20343031323138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f882::/36 Signature Algorithm: sha256WithRSAEncryption 53:66:c3:b9:d0:2c:26:19:18:27:bf:3c:49:65:75:2a:58:b3: b5:af:c1:66:78:4a:3d:9c:5a:ed:e9:8c:6b:11:a5:67:a9:ac: c8:5c:15:69:e2:c1:8b:63:fd:42:e5:40:8e:52:9f:3d:4b:e7: 83:b1:4e:34:df:11:6c:d1:8f:9b:78:1b:28:ac:9c:53:bc:86: 3f:3a:3b:cf:23:50:be:80:3a:34:a2:f6:33:c1:25:54:49:eb: 21:6c:1e:49:e8:6e:46:6f:ac:c6:c7:14:01:8f:6c:3a:3f:10: cd:d7:72:de:68:d7:47:b1:45:b0:69:a8:a6:4e:f4:3c:2f:13: 0f:8a:9b:cc:c0:ae:c0:73:34:71:08:e0:a1:5b:ee:eb:db:9a: bb:7b:78:1a:2e:6f:cc:fe:b0:c4:e0:37:0f:b8:a3:0d:6f:39: a0:fa:bf:73:1b:af:15:a2:3f:44:37:0e:51:1f:7e:4a:ac:eb: ae:82:b7:73:d3:99:87:c9:b9:6f:a6:97:e2:aa:c8:01:79:aa: 58:ad:c1:b3:33:9d:8f:55:1b:d6:d2:d8:e7:c5:fe:dc:69:1f: b7:64:9a:ed:cf:13:72:69:6e:fa:c0:59:ca:58:bb:31:10:00: ec:e9:2c:9a:00:65:1a:28:cb:be:33:96:8c:f6:9f:97:8c:09: b2:b7:6a:e5 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUdZcEvK4GnjDMo3EQwaSg/+AJphswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUwNjAzMTAwNTI0WhcNMjYwNjAyMTAxMDI0 WjAzMTEwLwYDVQQDEyg5QkMwQjM4QkZBNzk3RjlCRTdFNjEwODAzNTY1Q0I5M0ZD NzM5QjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeVR7qM27nvc uvwf0QrkQ8NEHMgYlECdJw+xVkek+PT48JqYz09XgxrqX/pS9hCFB74XMquKnyRk /J/aPC+QLDuf6jDjPtxgylDrdHGgdVvCRnn9MRGXU16JpbuepsSA5GsWjenVxyMH 6/r4LdZC9slB3W/vD73VUy5WHSAOHTBoBlY2IWaNrPYDdaA0xHELGJOQJSgzsKOD aexT23p3Lcy+9K10HWhVm6QY1Zxk2xDFyCX0pzj7qGUfaQeSVz4MAiwFdw/2jmvr rJt2We3qPHCM02knrcb5lCuvqEi3XYgPA3/MgyfZ6PGun9t7S3bF0PuYC5TBgCcu O2h0sMf08QIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFJvAs4v6eX+b5+YQgDVly5P8 c5tUMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGbBggrBgEF BQcwC4aBjnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwLzMyMzYz MDMyM2E2NjM4MzgzMjNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDM0MzAzMTMyMzEz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwDgQCAAIwCAMGBCYC+IIAMA0GCSqGSIb3DQEBCwUAA4IBAQBTZsO50CwmGRgn vzxJZXUqWLO1r8FmeEo9nFrt6YxrEaVnqazIXBVp4sGLY/1C5UCOUp89S+eDsU40 3xFs0Y+beBsorJxTvIY/OjvPI1C+gDo0ovYzwSVUSeshbB5J6G5Gb6zGxxQBj2w6 PxDN13LeaNdHsUWwaaimTvQ8LxMPipvMwK7AczRxCOChW+7r25q7e3gaLm/M/rDE 4DcPuKMNbzmg+r9zG68Voj9ENw5RH35KrOuugrdz05mHyblvppfiqsgBeapYrcGz M52PVRvW0tjnxf7caR+3ZJrtzxNyaW76wFnKWLsxEADs6SyaAGUaKMu+M5aM9p+X jAmyt2rl -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:28 2025 by rpki-client