$ rpki-client -vvvf rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa File: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (raw, json) Hash identifier: zbuw7s7PXjQFZcJ28sCUaJeTxqXw9qAU6xAVMHUSGHs= Subject key identifier: 65:00:C0:86:F5:F5:C6:26:A3:92:79:6F:D3:62:D6:55:2D:53:C1:90 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 42EA3B62B1B4202FCF5C4CC6A168632E1188353A Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa Signing time: Sun 06 Sep 2026 22:47:48 +0000 ROA not before: Sun 06 Sep 2026 22:42:48 +0000 ROA not after: Sun 05 Sep 2027 22:47:48 +0000 asID: 1001 IP address blocks: 2602:fb55::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 03:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ea:3b:62:b1:b4:20:2f:cf:5c:4c:c6:a1:68:63:2e:11:88:35:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Sep 6 22:42:48 2026 GMT Not After : Sep 5 22:47:48 2027 GMT Subject: CN=6500C086F5F5C626A392796FD362D6552D53C190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c6:ba:44:51:ea:4a:b0:84:76:f2:94:5f:1c: 31:0d:bb:af:bf:40:5a:90:72:b5:f7:4e:ba:b6:fb: 28:30:51:e0:bf:bd:98:90:bc:ae:1a:ae:92:69:b7: 4e:38:57:ee:9e:9a:2c:72:9b:fa:be:7e:ac:30:aa: 6d:57:0e:62:23:b4:53:84:ed:29:0a:04:19:a5:74: a4:e0:c9:c3:6c:44:2c:11:ce:d0:db:03:14:ab:71: 0b:85:85:c4:3d:b8:e3:52:4e:94:b6:f3:be:cd:70: 6e:49:66:16:45:2e:8a:d1:8a:a9:14:cc:e9:12:14: 96:ce:16:2c:24:c2:a7:4c:fc:a7:04:95:87:59:a4: 20:a0:2a:82:fa:5e:29:91:56:6c:e2:74:00:3e:51: b7:f9:35:01:e9:91:85:7a:19:4f:d5:18:b6:e8:ba: bf:e9:67:b1:49:75:75:2d:16:73:43:b4:76:a7:5b: be:c4:5b:87:ce:0e:5c:d9:45:3a:3f:10:1c:a6:b3: ba:73:e4:64:6e:00:29:a5:56:db:00:bc:77:0e:f6: 0a:56:fe:37:1c:04:b9:f4:06:be:62:fd:ff:39:7a: f6:fb:6f:0d:50:6e:bd:7e:fa:2a:7a:0e:d7:86:27: 05:12:4d:07:d1:b0:db:d1:f5:dd:08:f3:91:60:5a: ca:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:00:C0:86:F5:F5:C6:26:A3:92:79:6F:D3:62:D6:55:2D:53:C1:90 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fb55::/36 Signature Algorithm: sha256WithRSAEncryption 95:f6:b4:82:43:03:42:c7:47:05:44:33:2c:00:4a:7b:00:e7: 97:1c:fe:bc:3b:7c:d9:21:8d:8a:65:5d:fc:01:93:3e:9f:93: a3:a5:ff:41:18:8a:f0:98:a3:b8:0f:f4:e9:e9:3e:f5:a3:00: d2:70:0a:16:16:bb:9a:a4:b3:c8:1a:3c:25:7c:ca:2d:1c:57: 80:e8:cb:05:a7:4c:13:87:6c:34:9c:9a:d4:a3:42:e2:66:3f: ce:98:fc:21:32:44:45:f7:5e:b4:9a:6e:bf:46:1a:ea:b3:00: 31:fb:2b:84:0a:cf:68:73:9a:6a:3f:c1:8c:f3:04:f1:82:67: bc:dd:97:72:5d:3d:62:22:72:50:c0:d2:64:ca:e7:48:48:cf: d8:63:80:c4:64:4c:e6:62:7f:a8:8b:85:9d:d2:b9:72:01:62: 57:d3:38:bc:4c:da:0d:29:a9:7c:ef:ef:f5:d8:f9:d3:08:0e: 88:1b:00:fc:25:1d:31:54:b7:26:92:5c:28:07:7f:bc:92:e1: 39:7b:e3:d8:03:74:66:5a:51:93:e9:8a:60:0d:41:e0:64:7f: 9d:d7:4a:0c:ae:3b:79:83:62:4f:ac:1f:7a:2f:0c:53:86:c5: 43:47:1e:46:a3:59:14:67:c8:10:fa:ba:d4:15:d6:d8:83:cd: 3b:ce:22:50 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUQuo7YrG0IC/PXEzGoWhjLhGINTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwOTA2MjI0MjQ4WhcNMjcwOTA1MjI0NzQ4 WjAzMTEwLwYDVQQDEyg2NTAwQzA4NkY1RjVDNjI2QTM5Mjc5NkZEMzYyRDY1NTJE NTNDMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyca6RFHqSrCE dvKUXxwxDbuvv0BakHK19066tvsoMFHgv72YkLyuGq6SabdOOFfunposcpv6vn6s MKptVw5iI7RThO0pCgQZpXSk4MnDbEQsEc7Q2wMUq3ELhYXEPbjjUk6UtvO+zXBu SWYWRS6K0YqpFMzpEhSWzhYsJMKnTPynBJWHWaQgoCqC+l4pkVZs4nQAPlG3+TUB 6ZGFehlP1Ri26Lq/6WexSXV1LRZzQ7R2p1u+xFuHzg5c2UU6PxAcprO6c+RkbgAp pVbbALx3DvYKVv43HAS59Aa+Yv3/OXr2+28NUG69fvoqeg7XhicFEk0H0bDb0fXd CPORYFrKywIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFGUAwIb19cYmo5J5b9Ni1lUt U8GQMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwcQYIKwYBBQUHAQsEZTBjMGEGCCsGAQUFBzALhlVyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMzIzNjMwMzIzYTY2NjIzNTM1M2EzYTJmMzMz NjJkMzQzODIwM2QzZTIwMzEzMDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQmAvtVADANBgkqhkiG 9w0BAQsFAAOCAQEAlfa0gkMDQsdHBUQzLABKewDnlxz+vDt82SGNimVd/AGTPp+T o6X/QRiK8JijuA/06ek+9aMA0nAKFha7mqSzyBo8JXzKLRxXgOjLBadME4dsNJya 1KNC4mY/zpj8ITJERfdetJpuv0Ya6rMAMfsrhArPaHOaaj/BjPME8YJnvN2Xcl09 YiJyUMDSZMrnSEjP2GOAxGRM5mJ/qIuFndK5cgFiV9M4vEzaDSmpfO/v9dj50wgO iBsA/CUdMVS3JpJcKAd/vJLhOXvj2AN0ZlpRk+mKYA1B4GR/nddKDK47eYNiT6wf ei8MU4bFQ0ceRqNZFGfIEPq61BXW2IPNO84iUA== -----END CERTIFICATE-----Generated at Mon Oct 5 22:19:33 2026 by rpki-client