
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa
File: 323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (raw, json)
Hash identifier: 00cEFDgpVA4UIkTJ20Sbm3J+Mc4bybyoiSZwdDvNsnk=
Subject key identifier: 8B:90:47:57:BD:95:54:B4:1D:8A:6D:BB:95:0E:7C:7E:41:3F:F9:91
Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial: 6691AAB696F0CE1E672B538068AE01733E4B934B
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa
Signing time: Fri 24 Oct 2025 17:14:11 +0000
ROA not before: Fri 24 Oct 2025 17:09:11 +0000
ROA not after: Fri 23 Oct 2026 17:14:11 +0000
asID: 214439
IP address blocks: 2602:f92a:a473::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 16:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:91:aa:b6:96:f0:ce:1e:67:2b:53:80:68:ae:01:73:3e:4b:93:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Validity
Not Before: Oct 24 17:09:11 2025 GMT
Not After : Oct 23 17:14:11 2026 GMT
Subject: CN=8B904757BD9554B41D8A6DBB950E7C7E413FF991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:90:d0:38:da:7c:73:d6:98:97:d1:32:37:
50:e7:c4:00:11:0e:ec:bf:bd:39:41:a5:2a:17:c8:
7e:b2:d9:7d:81:e8:1d:2d:82:c3:b1:76:f4:b4:20:
db:0c:8f:22:55:a1:56:04:38:9b:84:ab:a8:a1:42:
08:ff:dc:a1:6d:d3:8c:e5:cd:4d:0f:c1:2f:d4:ae:
47:da:03:eb:e5:02:a2:d2:11:bf:10:c8:7d:63:a7:
1c:e3:d1:42:d6:d9:e4:8c:87:9d:b4:7e:a8:55:e8:
bd:6b:3a:67:dc:0d:1c:93:34:ff:05:72:0a:d9:1f:
d2:06:2d:a6:ea:ef:2a:eb:4a:eb:fb:00:ef:49:35:
37:ca:50:ff:88:90:c6:7a:d5:19:00:c1:eb:4d:14:
27:1c:de:74:5c:6b:4c:c6:99:a4:2a:9f:c6:06:0a:
33:a7:ee:f7:2b:1d:a9:6b:48:0a:ee:91:9e:e4:54:
aa:1d:bd:ff:e3:3f:23:ef:fe:54:6f:ff:8f:9e:22:
9b:68:af:b8:a1:5c:93:f6:44:a1:e7:42:2b:76:98:
a8:0e:cf:22:03:b4:b7:ab:14:47:e3:7e:01:e3:51:
5f:d4:9b:bb:c1:b3:eb:d0:1b:7a:83:7c:c0:99:ca:
e4:71:fb:06:0b:bb:43:07:63:ec:b5:6d:7e:0e:ba:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:47:57:BD:95:54:B4:1D:8A:6D:BB:95:0E:7C:7E:41:3F:F9:91
X509v3 Authority Key Identifier:
keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a473::/48
Signature Algorithm: sha256WithRSAEncryption
17:f4:18:db:c4:f9:c1:a2:9f:58:33:56:13:77:c6:25:20:f3:
62:37:4c:14:a7:8f:5d:27:75:1e:a6:d6:96:ea:2b:6b:91:35:
9a:27:23:90:54:41:bc:bc:63:49:25:c2:a9:ce:b5:72:63:7f:
74:e7:43:a5:6b:d2:d0:95:71:0a:d9:88:76:11:54:32:46:bd:
22:d0:9b:0a:3a:ba:e8:dc:af:f4:7e:c1:aa:d8:62:cd:89:ee:
e9:59:d6:46:ef:0a:dc:0d:64:9b:82:eb:81:d0:d8:ab:59:42:
5c:fc:11:bb:f7:af:4f:8c:b6:6d:d4:3f:63:d8:9f:e1:28:21:
41:ff:77:0e:93:b2:78:75:36:6d:6f:f9:bd:a6:7a:68:98:e0:
f6:0e:25:79:d8:82:15:0f:23:33:45:ce:68:a9:9f:fe:34:b7:
44:85:4a:8b:b8:e5:f3:d8:86:db:5e:48:d0:c7:bc:d1:c8:fc:
f1:a6:bd:a7:93:6e:a9:8c:1d:0d:9a:94:37:34:c3:4f:fe:db:
67:30:d9:06:bf:c7:e7:e0:65:0d:18:64:65:5b:b9:f4:5d:d6:
d7:f5:f2:83:57:a6:17:0b:8f:7e:cf:4b:61:5a:af:c3:ef:14:
a3:87:85:96:6a:62:72:08:16:83:dc:49:60:3f:52:2f:8e:46:
d1:38:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:22 2025 by rpki-client