
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a3a2f33322d3438203d3e203533383038.roa
File: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (raw, json)
Hash identifier: hSQPQNYtaloGuIBTmiDXNzK85H3WsPwGL3kSwWeFwys=
Subject key identifier: 13:9D:1B:AB:24:7E:8D:CA:08:B3:E4:5C:62:16:19:C7:C2:61:B4:49
Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial: 3B03C6AA00BDA8FF67DF6A099DF420F65E7FDA86
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a3a2f33322d3438203d3e203533383038.roa
Signing time: Fri 24 Oct 2025 17:07:00 +0000
ROA not before: Fri 24 Oct 2025 17:02:00 +0000
ROA not after: Fri 23 Oct 2026 17:07:00 +0000
asID: 53808
IP address blocks: 2602:f92a::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 11:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:03:c6:aa:00:bd:a8:ff:67:df:6a:09:9d:f4:20:f6:5e:7f:da:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Validity
Not Before: Oct 24 17:02:00 2025 GMT
Not After : Oct 23 17:07:00 2026 GMT
Subject: CN=139D1BAB247E8DCA08B3E45C621619C7C261B449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:f3:cc:a0:3e:29:27:22:d8:55:b6:4e:44:
6e:36:49:8a:2d:8e:ee:31:ca:c6:eb:8b:16:51:56:
73:e2:ec:53:e1:f7:3c:68:1b:35:da:a1:85:4c:8b:
c6:98:8a:40:40:64:50:3c:11:9a:3b:a6:3f:81:99:
4b:08:81:f7:a7:b7:ee:a1:9c:33:29:83:0e:1d:2f:
19:d5:c6:c5:a5:01:13:22:55:ab:68:04:a5:88:6d:
e0:24:9b:98:c4:f0:a4:de:ba:c0:14:37:fb:81:6f:
90:67:88:91:c4:ae:89:ce:d0:58:56:26:c8:c1:c7:
62:2d:2e:55:79:15:cb:38:23:18:b3:ab:8f:ae:e5:
8b:04:d6:a0:33:08:23:77:ea:e0:6e:d0:ce:95:b4:
d7:b7:5b:af:4a:ca:51:e3:8a:f8:cc:29:ba:65:dd:
7c:8e:93:24:76:7a:b5:0c:ae:91:69:5c:51:64:7b:
b7:7d:a6:ea:1e:c4:1f:b0:30:ea:ee:ab:8f:e0:f2:
d7:8e:41:35:4b:8a:6d:27:c3:75:3c:7c:e9:d7:65:
07:3f:11:d1:46:dd:57:27:96:37:cb:99:f9:6d:35:
82:91:77:4b:31:2c:6c:13:05:b7:0d:4a:1c:27:f2:
6b:49:c1:1e:16:a0:4a:61:0e:72:f5:86:53:c0:ac:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:1B:AB:24:7E:8D:CA:08:B3:E4:5C:62:16:19:C7:C2:61:B4:49
X509v3 Authority Key Identifier:
keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a3a2f33322d3438203d3e203533383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a::/32
Signature Algorithm: sha256WithRSAEncryption
17:a6:64:53:0a:69:f5:81:18:6b:a4:80:15:dd:3a:56:6f:fa:
b1:84:2a:93:e2:16:33:f0:13:de:10:3d:45:e2:2b:05:97:7f:
84:98:07:b2:e8:68:95:bd:5c:5e:b0:f7:f1:2a:ce:d9:b1:ea:
0d:84:46:e0:a1:93:16:cc:85:2c:f6:e8:ad:55:44:26:ed:8a:
d1:3e:66:e4:bb:36:d0:f3:1c:32:8f:e7:78:0d:fa:fb:ad:7a:
9e:f4:9f:74:f5:50:15:8c:05:05:77:7f:b6:81:5b:9c:f9:01:
df:50:01:b7:b5:ee:c0:46:42:07:de:8f:d8:fd:9a:3a:1e:50:
eb:bd:db:40:75:bf:fd:83:d2:a8:8b:bf:b8:47:9f:63:57:ac:
a5:24:82:15:40:29:98:d1:4c:86:c7:ea:7a:f2:33:af:6c:be:
14:3c:f5:2e:f1:0a:1d:cd:ca:45:7a:6c:c0:5f:b5:83:66:3c:
49:bd:be:00:7d:ef:65:1b:5f:98:f6:61:13:68:b9:40:6f:d9:
05:ce:c4:81:61:96:52:d4:74:db:c5:75:81:90:96:c3:79:ed:
df:57:f2:f2:b9:26:96:b5:70:bd:80:b9:aa:a7:35:00:81:a6:
a2:d3:5e:a6:e6:b3:a2:40:4c:f0:d7:ff:3f:67:22:b0:68:74:
38:18:fd:07
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIUOwPGqgC9qP9n32oJnfQg9l5/2oYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2
MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwMjAwWhcNMjYxMDIzMTcwNzAw
WjAzMTEwLwYDVQQDEygxMzlEMUJBQjI0N0U4RENBMDhCM0U0NUM2MjE2MTlDN0My
NjFCNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviPzzKA+KSci
2FW2TkRuNkmKLY7uMcrG64sWUVZz4uxT4fc8aBs12qGFTIvGmIpAQGRQPBGaO6Y/
gZlLCIH3p7fuoZwzKYMOHS8Z1cbFpQETIlWraASliG3gJJuYxPCk3rrAFDf7gW+Q
Z4iRxK6JztBYVibIwcdiLS5VeRXLOCMYs6uPruWLBNagMwgjd+rgbtDOlbTXt1uv
SspR44r4zCm6Zd18jpMkdnq1DK6RaVxRZHu3fabqHsQfsDDq7quP4PLXjkE1S4pt
J8N1PHzp12UHPxHRRt1XJ5Y3y5n5bTWCkXdLMSxsEwW3DUocJ/JrScEeFqBKYQ5y
9YZTwKzjUwIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFBOdG6skfo3KCLPkXGIWGcfC
YbRJMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4
LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND
NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx
NzZmMTBlMjAxMGQyMmQuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH
MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzODMwMzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAmAvkqMA0GCSqGSIb3DQEBCwUAA4IBAQAXpmRTCmn1gRhrpIAV3TpW
b/qxhCqT4hYz8BPeED1F4isFl3+EmAey6GiVvVxesPfxKs7ZseoNhEbgoZMWzIUs
9uitVUQm7YrRPmbkuzbQ8xwyj+d4Dfr7rXqe9J909VAVjAUFd3+2gVuc+QHfUAG3
te7ARkIH3o/Y/Zo6HlDrvdtAdb/9g9Koi7+4R59jV6ylJIIVQCmY0UyGx+p68jOv
bL4UPPUu8QodzcpFemzAX7WDZjxJvb4Afe9lG1+Y9mETaLlAb9kFzsSBYZZS1HTb
xXWBkJbDee3fV/LyuSaWtXC9gLmqpzUAgaai016m5rOiQEzw1/8/ZyKwaHQ4GP0H
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:01:37 2025 by rpki-client