$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa File: 323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa (raw, json) Hash identifier: gL71Oo4khFGG4+rwcF6m9KHJDaySt3piSD+oyO2G3+0= Subject key identifier: BF:42:74:AB:ED:D7:6E:B2:76:0C:01:65:FA:80:AB:C7:08:77:B7:3E Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 58883BBD93F77318612C7A11AC8057D106AAC775 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa Signing time: Fri 23 May 2025 17:56:43 +0000 ROA not before: Fri 23 May 2025 17:51:43 +0000 ROA not after: Fri 22 May 2026 17:56:43 +0000 asID: 208063 IP address blocks: 2602:f992:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:88:3b:bd:93:f7:73:18:61:2c:7a:11:ac:80:57:d1:06:aa:c7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: May 23 17:51:43 2025 GMT Not After : May 22 17:56:43 2026 GMT Subject: CN=BF4274ABEDD76EB2760C0165FA80ABC70877B73E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:16:98:19:5d:10:9d:00:fa:05:d2:ed:16: ea:95:82:05:a7:1c:86:7b:5d:f8:9b:a9:23:d5:a1: d6:d6:1a:91:34:62:68:db:36:64:e0:01:c0:42:65: 31:76:ba:df:ad:ca:e1:f6:79:8c:72:5f:3c:f7:54: f6:0d:62:00:1b:6c:27:4e:0d:28:bf:86:d5:66:17: cf:8d:e5:8c:5a:b5:63:f9:35:05:fe:d2:6e:2f:9e: 06:53:47:ea:ca:a3:d6:80:0c:b3:b2:d0:95:99:45: 22:80:0b:94:85:c9:8d:09:68:dc:01:71:5b:05:3d: cc:35:ed:f6:49:d7:c4:6e:22:59:55:72:61:bf:73: 8e:05:23:d9:df:de:ab:70:dd:74:ae:db:23:dd:11: df:06:3e:4f:f5:b0:34:58:fb:cb:dd:c4:77:bd:ad: 61:1c:10:99:56:ec:8b:f8:e8:e8:14:a0:4f:ad:3e: 5b:80:ac:50:7d:90:e1:67:db:7c:75:95:07:eb:bb: e7:3b:31:4e:d0:6d:a7:86:51:fa:87:bc:22:4c:4c: 63:5b:93:0b:1a:a8:86:c1:3b:98:ba:94:c2:bc:93: c6:db:6f:b2:b5:d0:d7:57:00:a7:7a:f4:e4:ad:03: 09:fc:ed:c3:11:3e:c8:6c:1f:a6:54:2d:4d:9b:a6: 98:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:42:74:AB:ED:D7:6E:B2:76:0C:01:65:FA:80:AB:C7:08:77:B7:3E X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:a5::/48 Signature Algorithm: sha256WithRSAEncryption 99:1e:5f:27:b5:a5:9d:a6:3e:2b:48:30:b6:fb:ce:c3:2b:5b: ce:fd:8c:22:0a:f8:46:c6:e4:b9:d5:a8:c3:aa:5b:42:7a:52: 54:ec:ed:6a:5e:43:94:af:86:4e:0f:fa:42:93:2d:af:8b:09: ad:de:c7:a7:0a:a0:d1:69:af:0a:44:cd:f2:b5:53:63:bb:14: 1f:02:08:d6:71:23:49:98:25:b0:3b:2a:9f:b0:87:56:32:2c: 73:f3:b4:42:30:11:62:04:f1:2a:5a:67:5b:82:b1:f0:b9:b5: c7:eb:b2:44:e8:29:57:c7:f4:06:74:cc:7c:d2:2c:26:1c:da: ec:b2:2f:3e:1c:11:c9:b4:30:a7:1a:c5:3d:21:b9:76:49:25: 24:09:e3:ed:0e:66:fc:12:46:99:84:0e:48:13:1a:8f:92:df: 20:e9:13:b1:d5:88:9d:11:fa:30:93:22:67:d0:57:ed:2e:cd: fe:88:98:6b:98:35:53:e1:73:d2:ef:b3:22:97:88:d7:7d:e1: 68:e5:5a:3d:97:ae:49:25:21:c1:bd:6b:1c:4f:bd:d0:6f:ab: ab:21:4b:bc:59:fc:8d:a7:a2:11:c5:03:a3:91:90:f7:52:c9: d6:6b:93:0f:72:0f:ac:3c:a0:9e:fb:a0:98:e4:43:1a:59:c3: e2:74:d7:ac -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUWIg7vZP3cxhhLHoRrIBX0Qaqx3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNTIzMTc1MTQzWhcNMjYwNTIyMTc1NjQz WjAzMTEwLwYDVQQDEyhCRjQyNzRBQkVERDc2RUIyNzYwQzAxNjVGQTgwQUJDNzA4 NzdCNzNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq8WmBldEJ0A +gXS7RbqlYIFpxyGe134m6kj1aHW1hqRNGJo2zZk4AHAQmUxdrrfrcrh9nmMcl88 91T2DWIAG2wnTg0ov4bVZhfPjeWMWrVj+TUF/tJuL54GU0fqyqPWgAyzstCVmUUi gAuUhcmNCWjcAXFbBT3MNe32SdfEbiJZVXJhv3OOBSPZ396rcN10rtsj3RHfBj5P 9bA0WPvL3cR3va1hHBCZVuyL+OjoFKBPrT5bgKxQfZDhZ9t8dZUH67vnOzFO0G2n hlH6h7wiTExjW5MLGqiGwTuYupTCvJPG22+ytdDXVwCnevTkrQMJ/O3DET7IbB+m VC1Nm6aYswIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFL9CdKvt126ydgwBZfqAq8cI d7c+MB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjEzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzODMw MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHACYC+ZIApTANBgkqhkiG9w0BAQsFAAOCAQEAmR5fJ7Wl naY+K0gwtvvOwytbzv2MIgr4RsbkudWow6pbQnpSVOztal5DlK+GTg/6QpMtr4sJ rd7Hpwqg0WmvCkTN8rVTY7sUHwII1nEjSZglsDsqn7CHVjIsc/O0QjARYgTxKlpn W4Kx8Lm1x+uyROgpV8f0BnTMfNIsJhza7LIvPhwRybQwpxrFPSG5dkklJAnj7Q5m /BJGmYQOSBMaj5LfIOkTsdWInRH6MJMiZ9BX7S7N/oiYa5g1U+Fz0u+zIpeI133h aOVaPZeuSSUhwb1rHE+90G+rqyFLvFn8jaeiEcUDo5GQ91LJ1muTD3IPrDygnvug mORDGlnD4nTXrA== -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:20 2025 by rpki-client