$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e2030.roa File: 323630323a663939323a62303a3a2f34342d3438203d3e2030.roa (raw, json) Hash identifier: 7NmmEvA5OxLCgc1HX461LiLWtFz8UfSVNBj0uTzj9Mw= Subject key identifier: B9:C8:AA:1A:C6:BA:B0:AE:0B:D1:41:37:7F:A1:68:69:CC:F5:62:64 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 3D4ABD4D50DC95C3F42C7C45B0593B9EE376E77A Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e2030.roa Signing time: Tue 11 Aug 2026 07:07:12 +0000 ROA not before: Tue 11 Aug 2026 07:02:12 +0000 ROA not after: Tue 10 Aug 2027 07:07:12 +0000 asID: 0 IP address blocks: 2602:f992:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 23:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4a:bd:4d:50:dc:95:c3:f4:2c:7c:45:b0:59:3b:9e:e3:76:e7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Aug 11 07:02:12 2026 GMT Not After : Aug 10 07:07:12 2027 GMT Subject: CN=B9C8AA1AC6BAB0AE0BD141377FA16869CCF56264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:69:d1:ff:14:9d:c6:4b:be:9d:08:3e:1e: 0f:ca:88:af:9c:b0:a0:4b:66:39:d1:03:81:8a:17: c0:92:6a:22:1d:5e:7c:5f:02:4a:d4:c0:26:14:36: eb:1f:e8:00:8a:f2:d6:57:80:28:04:41:66:ac:56: 1d:54:46:5d:24:db:a4:6a:2f:1b:f1:a8:bf:ce:07: 6c:51:8d:f7:0f:13:32:da:6a:0e:f1:bc:f7:61:21: f4:f6:ba:36:10:53:d0:da:90:cf:f4:64:35:0c:1b: a8:fc:d2:58:9b:1c:fc:bd:91:d1:03:69:06:20:e0: d2:49:99:92:16:f0:19:c8:21:e0:68:44:e8:5b:91: 2d:e4:15:1e:fb:ae:d6:da:1e:6e:00:9c:5e:7c:9b: 2d:5b:20:8f:13:98:00:1e:f4:f0:da:3b:c6:49:24: 98:d3:7e:be:84:1e:c1:52:88:fb:cf:5b:e4:db:b3: 56:c9:5a:36:5c:80:f3:70:7f:05:e9:7e:37:34:c2: c1:56:5e:7e:4e:d2:e9:2f:ee:d2:30:e1:fe:86:52: 8b:dd:14:cd:e3:a1:14:f4:4a:b3:5a:92:19:d9:de: 5c:b3:fa:16:89:b5:0c:0a:b1:6a:e6:2c:79:a0:59: 27:5e:df:ac:39:f8:0f:ad:a8:01:11:c9:01:c6:89: 12:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C8:AA:1A:C6:BA:B0:AE:0B:D1:41:37:7F:A1:68:69:CC:F5:62:64 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:b0::/44 Signature Algorithm: sha256WithRSAEncryption 56:f2:29:36:23:c5:56:95:45:00:3d:df:95:ec:d3:4a:7d:66: f1:bf:e4:9c:6d:ba:15:b2:9c:2d:9e:5c:56:8d:2d:c2:bb:33: 5b:4b:a1:89:43:b7:90:2f:e1:e2:8d:b4:b8:06:3f:69:84:51: 79:b1:59:63:26:80:f7:12:5f:db:80:dd:43:d5:9e:4a:e9:f5: 7f:3e:6e:43:a8:51:d6:7e:14:25:34:d8:dd:85:d6:5a:9e:5f: c5:39:4d:04:19:4f:2e:49:bb:e3:e8:d2:03:aa:6a:46:98:25: be:be:5b:96:dc:a7:a9:d9:2f:b0:11:8e:77:f2:b2:f4:79:5c: a4:8c:dd:2d:b6:1f:87:7e:df:54:98:94:e0:c7:95:bd:bf:56: 4a:a7:3c:7d:45:67:71:34:17:3f:8e:2c:49:d2:a1:e4:74:87: 82:5d:53:5d:8f:e3:5a:40:a6:5e:3f:96:8e:cf:91:a9:c8:dc: 7e:b6:fd:ce:8f:4a:fa:e7:48:c5:6d:cc:7c:55:e5:f5:fc:45: 54:b0:ba:88:68:5b:a7:02:4f:63:36:44:88:65:3f:b2:14:64: e4:6c:28:4e:96:3c:fc:35:0f:bb:f2:71:9b:30:2f:cf:d1:27: 3f:d2:41:dc:8f:2a:62:8a:98:53:8b:5d:ff:69:98:3f:b0:5b: a7:91:f0:27 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUPUq9TVDclcP0LHxFsFk7nuN253owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwODExMDcwMjEyWhcNMjcwODEwMDcwNzEy WjAzMTEwLwYDVQQDEyhCOUM4QUExQUM2QkFCMEFFMEJEMTQxMzc3RkExNjg2OUND RjU2MjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN9p0f8UncZL vp0IPh4PyoivnLCgS2Y50QOBihfAkmoiHV58XwJK1MAmFDbrH+gAivLWV4AoBEFm rFYdVEZdJNukai8b8ai/zgdsUY33DxMy2moO8bz3YSH09ro2EFPQ2pDP9GQ1DBuo /NJYmxz8vZHRA2kGIODSSZmSFvAZyCHgaEToW5Et5BUe+67W2h5uAJxefJstWyCP E5gAHvTw2jvGSSSY036+hB7BUoj7z1vk27NWyVo2XIDzcH8F6X43NMLBVl5+TtLp L+7SMOH+hlKL3RTN46EU9EqzWpIZ2d5cs/oWibUMCrFq5ix5oFknXt+sOfgPragB EckBxokSrwIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFLnIqhrGurCuC9FBN3+haGnM 9WJkMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGpBggrBgEFBQcBCwSBnDCBmTCBlgYIKwYBBQUH MAuGgYlyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL5kgCwMA0GCSqGSIb3DQEBCwUAA4IBAQBW8ik2I8VWlUUAPd+V7NNK fWbxv+ScbboVspwtnlxWjS3CuzNbS6GJQ7eQL+HijbS4Bj9phFF5sVljJoD3El/b gN1D1Z5K6fV/Pm5DqFHWfhQlNNjdhdZanl/FOU0EGU8uSbvj6NIDqmpGmCW+vluW 3Kep2S+wEY538rL0eVykjN0tth+Hft9UmJTgx5W9v1ZKpzx9RWdxNBc/jixJ0qHk dIeCXVNdj+NaQKZeP5aOz5GpyNx+tv3Oj0r650jFbcx8VeX1/EVUsLqIaFunAk9j NkSIZT+yFGTkbChOljz8NQ+78nGbMC/P0Sc/0kHcjypiiphTi13/aZg/sFunkfAn -----END CERTIFICATE-----Generated at Fri Aug 21 23:07:54 2026 by rpki-client