$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa File: 323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa (raw, json) Hash identifier: pU0ZnM3XlKB6GD5HhzNYR1xLlIiBzU0KSYhW4ta0NEU= Subject key identifier: EB:F3:AD:3D:4C:2E:68:8B:64:CF:16:87:85:6F:15:0E:3C:15:B0:4C Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 2DB3E889BCAA920C8F369F43A8567A9E0D80F839 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa Signing time: Fri 23 May 2025 17:56:43 +0000 ROA not before: Fri 23 May 2025 17:51:43 +0000 ROA not after: Fri 22 May 2026 17:56:43 +0000 asID: 701 IP address blocks: 2602:f992:a0::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b3:e8:89:bc:aa:92:0c:8f:36:9f:43:a8:56:7a:9e:0d:80:f8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: May 23 17:51:43 2025 GMT Not After : May 22 17:56:43 2026 GMT Subject: CN=EBF3AD3D4C2E688B64CF1687856F150E3C15B04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:78:5a:32:77:2e:f3:11:20:9d:16:24:8d: 6c:04:37:33:11:04:ec:57:0e:70:eb:fe:a3:7f:ff: 18:1a:1b:21:84:65:53:94:0f:a7:66:42:93:b1:86: 30:e0:a9:e2:0d:ef:c8:1e:df:13:23:ae:3f:35:a9: 8a:f1:5d:7c:be:2a:75:a5:a5:f6:7c:1e:6e:8c:74: cb:4b:4f:64:ef:82:19:e2:e0:a9:68:01:2f:a7:d9: da:32:84:2b:25:4d:91:a3:59:e6:29:1c:29:bb:62: a6:d1:c0:33:f8:22:a0:4d:04:35:84:61:76:a4:23: 9a:d3:0b:74:a1:dd:21:59:04:a7:15:35:1c:88:39: 31:d6:4c:2c:62:57:d7:1e:c9:89:d9:17:68:e0:69: 25:f8:e0:9a:d3:a5:ce:ad:46:12:5e:08:6f:72:ab: d4:42:0c:53:42:0b:a8:a2:e4:a4:78:58:94:ca:f6: 87:01:2c:27:12:ce:81:fb:0c:7d:de:aa:45:f3:94: 3f:8c:12:4b:23:b1:06:1d:35:0c:3f:00:23:ef:aa: 0d:e8:9b:45:11:8a:5e:11:01:c2:d4:a4:ea:92:3f: f8:1a:f6:fe:32:07:98:1f:48:b4:e6:71:29:06:87: 6c:2a:9e:e0:f2:fa:9e:9c:54:91:b8:66:f1:bd:6a: cf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F3:AD:3D:4C:2E:68:8B:64:CF:16:87:85:6F:15:0E:3C:15:B0:4C X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:a0::/46 Signature Algorithm: sha256WithRSAEncryption 19:16:05:f5:af:c8:de:1c:22:3c:fc:18:93:60:de:54:30:20: f0:28:e1:f4:20:d0:7a:3a:37:a0:bf:bc:33:50:62:7f:8e:47: 94:62:29:a2:26:4c:dd:bd:4a:4a:fb:0f:af:37:d3:d3:3a:82: d3:bc:35:bd:52:29:87:8f:3d:36:9a:f5:52:d1:f3:d0:90:03: 9d:18:e4:c1:27:e4:da:4e:e3:51:5e:1e:4b:05:d4:96:ec:f2: f0:d6:99:03:f8:04:11:e2:49:55:75:be:f7:aa:34:55:86:1e: a4:4b:fd:c7:da:bb:d1:74:40:27:59:82:15:77:f9:93:07:3f: a1:6e:83:79:9f:e1:29:59:6b:58:f1:e8:c9:3d:2e:4b:7d:84: ba:53:ea:35:b2:89:bf:8b:88:cf:c3:a9:8e:65:99:ae:fd:ae: e7:e1:65:0d:f0:fa:4d:ea:fd:ac:5d:c9:9a:0a:11:c0:bf:26: 91:33:a2:52:d3:f2:4e:fd:a7:a4:f5:65:b1:54:83:82:49:5d: e0:65:f0:49:20:d4:18:cd:b8:35:b9:7b:25:6e:3e:24:69:c3: 3a:40:a1:11:a8:f4:1f:44:ac:86:eb:c5:22:fb:76:a8:3b:9b: 20:0e:86:1a:37:e7:c2:b9:d1:98:42:3b:1c:29:d9:63:a4:e5: 02:13:99:9b -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIULbPoibyqkgyPNp9DqFZ6ng2A+DkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNTIzMTc1MTQzWhcNMjYwNTIyMTc1NjQz WjAzMTEwLwYDVQQDEyhFQkYzQUQzRDRDMkU2ODhCNjRDRjE2ODc4NTZGMTUwRTND MTVCMDRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMR4WjJ3LvMR IJ0WJI1sBDczEQTsVw5w6/6jf/8YGhshhGVTlA+nZkKTsYYw4KniDe/IHt8TI64/ NamK8V18vip1paX2fB5ujHTLS09k74IZ4uCpaAEvp9naMoQrJU2Ro1nmKRwpu2Km 0cAz+CKgTQQ1hGF2pCOa0wt0od0hWQSnFTUciDkx1kwsYlfXHsmJ2Rdo4Gkl+OCa 06XOrUYSXghvcqvUQgxTQguoouSkeFiUyvaHASwnEs6B+wx93qpF85Q/jBJLI7EG HTUMPwAj76oN6JtFEYpeEQHC1KTqkj/4Gvb+MgeYH0i05nEpBodsKp7g8vqenFSR uGbxvWrPcQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFOvzrT1MLmiLZM8Wh4VvFQ48 FbBMMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjEzMDNhM2EyZjM0MzYyZDM0MzgyMDNkM2UyMDM3MzAzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHAiYC+ZIAoDANBgkqhkiG9w0BAQsFAAOCAQEAGRYF9a/I3hwiPPwY k2DeVDAg8Cjh9CDQejo3oL+8M1Bif45HlGIpoiZM3b1KSvsPrzfT0zqC07w1vVIp h489Npr1UtHz0JADnRjkwSfk2k7jUV4eSwXUluzy8NaZA/gEEeJJVXW+96o0VYYe pEv9x9q70XRAJ1mCFXf5kwc/oW6DeZ/hKVlrWPHoyT0uS32EulPqNbKJv4uIz8Op jmWZrv2u5+FlDfD6Ter9rF3JmgoRwL8mkTOiUtPyTv2npPVlsVSDgkld4GXwSSDU GM24Nbl7JW4+JGnDOkChEaj0H0SshuvFIvt2qDubIA6GGjfnwrnRmEI7HCnZY6Tl AhOZmw== -----END CERTIFICATE-----Generated at Fri Jun 6 06:17:38 2025 by rpki-client