$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e2030.roa File: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (raw, json) Hash identifier: NC2ZhEPelpHdoSSljxfD6WpRWcBV8zPEY0f/OMUilVM= Subject key identifier: 84:91:09:FA:BE:9B:F2:28:33:44:BA:7B:AA:2E:BE:44:85:A9:1A:B2 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 58B052C71884C5233CDE2D5EAD67BCFE1F2D644C Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e2030.roa Signing time: Fri 08 Aug 2025 08:44:43 +0000 ROA not before: Fri 08 Aug 2025 08:39:43 +0000 ROA not after: Fri 07 Aug 2026 08:44:43 +0000 asID: 0 IP address blocks: 2602:f992:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 20:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b0:52:c7:18:84:c5:23:3c:de:2d:5e:ad:67:bc:fe:1f:2d:64:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Aug 8 08:39:43 2025 GMT Not After : Aug 7 08:44:43 2026 GMT Subject: CN=849109FABE9BF2283344BA7BAA2EBE4485A91AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:ed:e8:c3:ee:a1:f9:8c:a1:b1:36:a1:7f: f0:26:b7:32:46:23:72:db:47:1d:f3:c3:86:77:b1: af:b6:d1:d8:99:68:43:a9:47:2d:d1:79:cb:42:72: 96:01:f1:64:dd:3e:0f:f4:63:20:5b:fc:8a:d2:72: 43:27:9c:87:72:00:1a:a7:b4:4c:96:33:86:7e:a0: 77:4d:6a:7d:40:95:2d:6f:69:a3:72:24:c2:88:a6: 2a:75:2e:75:4b:07:d3:ad:1f:b3:7f:39:a3:6c:66: c3:63:f5:7d:a0:1e:35:be:ed:25:cc:4a:53:5f:18: 8f:23:86:b8:1e:2e:aa:f9:db:fc:27:f4:a7:26:2c: 09:69:1f:e5:4c:53:da:7b:8f:c9:df:10:60:44:f9: cf:82:ef:31:d4:54:e3:2f:f8:99:9b:e0:c2:20:29: 4d:4a:b4:93:0a:95:fb:b2:dc:9f:6b:1e:58:a7:20: e8:fc:98:c2:4c:ae:74:16:7c:ff:37:24:db:38:15: 92:51:31:02:80:70:eb:50:fd:b2:a7:15:80:fd:32: 4b:bf:2a:90:83:cb:5b:7a:46:45:e1:19:2c:99:9b: ab:99:6f:37:3d:65:b1:38:5c:00:43:78:0a:5a:de: f0:f0:8c:3c:c0:6f:66:89:77:5a:19:e6:0b:b3:52: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:91:09:FA:BE:9B:F2:28:33:44:BA:7B:AA:2E:BE:44:85:A9:1A:B2 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:90::/44 Signature Algorithm: sha256WithRSAEncryption ac:35:09:2d:35:8f:6a:13:ff:9d:86:0e:97:13:1a:a4:84:fd: 03:30:5a:30:94:fd:85:9c:9f:10:8d:60:bd:07:13:a4:df:fd: d3:5b:39:ba:db:42:6c:01:d0:0e:b3:14:47:7a:87:59:af:ab: 7f:fb:35:a3:5d:6c:6b:90:f2:18:73:94:bd:b2:16:dc:82:90: e1:14:7d:f4:c3:50:e6:20:58:e9:ef:f4:57:35:d8:2c:68:21: 50:85:00:1f:a8:1b:b3:cd:1e:f2:f6:a8:42:19:33:14:96:e7: 8e:a9:d2:9e:43:8b:79:98:37:bc:de:76:85:c8:c3:90:67:f6: 0b:a9:d6:e7:79:be:52:96:20:a9:69:87:04:3a:da:93:ba:32: a7:22:b4:51:de:16:5f:b9:7a:3e:2a:d8:db:7d:51:50:9f:78: 82:29:50:90:48:c2:14:0e:c9:f7:14:4d:7e:cd:35:02:2a:7a: a3:f1:df:60:f3:17:a3:ef:a9:85:fc:e7:1b:13:c8:65:db:81: 25:96:73:b5:41:e3:06:e1:14:fe:f9:d5:7a:46:b1:d8:b0:8c: 55:1d:71:4f:3d:92:2c:1e:72:70:94:ae:79:0f:39:07:e6:65: de:61:72:9c:8e:7f:65:94:88:e3:f2:c9:87:70:b2:81:59:a8: 81:de:51:ca -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUWLBSxxiExSM83i1erWe8/h8tZEwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwODA4MDgzOTQzWhcNMjYwODA3MDg0NDQz WjAzMTEwLwYDVQQDEyg4NDkxMDlGQUJFOUJGMjI4MzM0NEJBN0JBQTJFQkU0NDg1 QTkxQUIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5zt6MPuofmM obE2oX/wJrcyRiNy20cd88OGd7GvttHYmWhDqUct0XnLQnKWAfFk3T4P9GMgW/yK 0nJDJ5yHcgAap7RMljOGfqB3TWp9QJUtb2mjciTCiKYqdS51SwfTrR+zfzmjbGbD Y/V9oB41vu0lzEpTXxiPI4a4Hi6q+dv8J/SnJiwJaR/lTFPae4/J3xBgRPnPgu8x 1FTjL/iZm+DCIClNSrSTCpX7styfax5YpyDo/JjCTK50Fnz/NyTbOBWSUTECgHDr UP2ypxWA/TJLvyqQg8tbekZF4RksmZurmW83PWWxOFwAQ3gKWt7w8Iw8wG9miXda GeYLs1LRQwIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFISRCfq+m/IoM0S6e6ouvkSF qRqyMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGpBggrBgEFBQcBCwSBnDCBmTCBlgYIKwYBBQUH MAuGgYlyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhMzkzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL5kgCQMA0GCSqGSIb3DQEBCwUAA4IBAQCsNQktNY9qE/+dhg6XExqk hP0DMFowlP2FnJ8QjWC9BxOk3/3TWzm620JsAdAOsxRHeodZr6t/+zWjXWxrkPIY c5S9shbcgpDhFH30w1DmIFjp7/RXNdgsaCFQhQAfqBuzzR7y9qhCGTMUlueOqdKe Q4t5mDe83naFyMOQZ/YLqdbneb5SliCpaYcEOtqTujKnIrRR3hZfuXo+KtjbfVFQ n3iCKVCQSMIUDsn3FE1+zTUCKnqj8d9g8xej76mF/OcbE8hl24EllnO1QeMG4RT+ +dV6RrHYsIxVHXFPPZIsHnJwlK55DzkH5mXeYXKcjn9llIjj8smHcLKBWaiB3lHK -----END CERTIFICATE-----Generated at Sun Oct 26 06:10:32 2025 by rpki-client