$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa File: 323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa (raw, json) Hash identifier: ZqVNXzi+RxnP2gAp/IhyHOF5/qmgOKGR7WPfV3jMwnQ= Subject key identifier: 5F:D7:2E:80:49:FA:79:A6:D0:8E:0D:AA:C1:00:A3:A4:66:42:1B:04 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 3CF7C8686F75AB3FBBF513A8BFCBCEFC392187DF Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa Signing time: Sun 26 Jul 2026 07:09:29 +0000 ROA not before: Sun 26 Jul 2026 07:04:29 +0000 ROA not after: Sun 25 Jul 2027 07:09:29 +0000 asID: 26286 IP address blocks: 2602:f992:f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Jul 2026 08:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f7:c8:68:6f:75:ab:3f:bb:f5:13:a8:bf:cb:ce:fc:39:21:87:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jul 26 07:04:29 2026 GMT Not After : Jul 25 07:09:29 2027 GMT Subject: CN=5FD72E8049FA79A6D08E0DAAC100A3A466421B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:4d:3e:e2:31:7d:c9:e7:53:f2:bd:da:a0: f7:a7:fc:8e:09:8f:dd:a6:a3:ff:98:3c:3c:66:75: a6:16:83:16:f3:dc:ed:38:80:9c:e1:77:c8:f0:7d: 4d:b9:44:5b:18:51:ca:c4:70:41:f9:2d:8e:52:4d: fb:e4:27:dc:ed:73:05:2a:c0:05:4b:6d:1b:19:f3: 9c:c4:3e:33:a8:ee:d7:e6:63:93:98:ef:c0:1c:97: c9:23:f6:d5:32:f7:73:b3:2b:32:c4:89:27:9f:a4: f8:b5:46:4f:d7:86:71:b2:81:c5:fb:fa:71:5e:94: 9f:42:a9:72:d0:e7:6e:ce:e4:27:63:4c:e8:d2:2d: c9:bb:c4:b3:65:81:95:54:78:3e:48:bb:90:0b:7e: f5:a9:9e:7e:30:73:7d:bf:a1:7d:b8:ca:81:a7:f7: ce:6e:a2:68:9e:40:20:c4:99:67:1d:c0:e9:7d:60: 33:d3:9b:db:e0:2c:cf:b3:62:4b:ab:9d:20:ac:87: af:64:76:ab:ea:45:1c:8c:ef:b3:5d:4c:82:95:da: 11:77:a1:93:d8:97:7e:48:b2:e1:1b:77:99:0f:5b: a4:2a:f2:6d:77:15:fe:fa:4e:d9:d6:58:54:22:3c: 9a:48:b1:a0:62:6d:22:ca:01:29:e6:8d:b8:49:4c: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D7:2E:80:49:FA:79:A6:D0:8E:0D:AA:C1:00:A3:A4:66:42:1B:04 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:f6::/48 Signature Algorithm: sha256WithRSAEncryption 64:09:fe:ac:ef:29:eb:96:db:67:8e:17:d1:71:87:35:a7:43: b4:0e:0a:f0:3a:2b:df:66:1f:d6:2e:80:dd:58:e6:a1:bf:5d: c3:2a:7d:82:dd:9f:bf:33:10:0c:56:0e:16:b2:78:b1:03:35: a6:a1:13:c9:31:f5:68:4f:5c:b0:f4:ba:56:fb:bb:99:d1:e5: 97:a1:c6:57:f2:52:ce:e8:28:f0:0d:c2:e5:73:24:04:c8:b0: 61:99:d2:a3:51:d9:4d:3e:2b:c5:b3:b6:84:1d:4e:ff:eb:b9: 51:eb:12:f0:f4:4c:85:47:4f:11:1c:b9:35:8e:96:cb:ae:2a: 31:31:2c:e8:20:bd:f4:cd:39:08:3b:fd:b5:3f:ce:5a:a9:48: 58:7b:ff:ca:8c:02:e5:66:15:62:59:86:21:a7:8e:00:4d:87: 29:85:28:3d:74:59:f3:aa:8f:69:7c:0d:fd:1e:ca:bf:76:e8: e2:58:18:8b:0b:0b:48:42:b2:f7:a5:09:2d:b4:12:5e:f8:24: df:fc:0d:09:48:cc:39:91:8d:0c:73:3f:63:d3:3a:dc:c7:ab: ea:ab:42:c7:7a:de:44:4e:e2:fb:b1:d1:79:f9:a9:56:16:0a: 8b:78:f4:0e:e6:32:15:b2:2a:48:82:45:3b:37:39:b3:2c:e2: f3:19:a6:d0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUPPfIaG91qz+79ROov8vO/Dkhh98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwNzI2MDcwNDI5WhcNMjcwNzI1MDcwOTI5 WjAzMTEwLwYDVQQDEyg1RkQ3MkU4MDQ5RkE3OUE2RDA4RTBEQUFDMTAwQTNBNDY2 NDIxQjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzclNPuIxfcnn U/K92qD3p/yOCY/dpqP/mDw8ZnWmFoMW89ztOICc4XfI8H1NuURbGFHKxHBB+S2O Uk375Cfc7XMFKsAFS20bGfOcxD4zqO7X5mOTmO/AHJfJI/bVMvdzsysyxIknn6T4 tUZP14ZxsoHF+/pxXpSfQqly0OduzuQnY0zo0i3Ju8SzZYGVVHg+SLuQC371qZ5+ MHN9v6F9uMqBp/fObqJonkAgxJlnHcDpfWAz05vb4CzPs2JLq50grIevZHar6kUc jO+zXUyCldoRd6GT2Jd+SLLhG3eZD1ukKvJtdxX++k7Z1lhUIjyaSLGgYm0iygEp 5o24SUy+fwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFF/XLoBJ+nmm0I4NqsEAo6Rm QhsEMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjYzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMjM4 MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAmAvmSAPYwDQYJKoZIhvcNAQELBQADggEBAGQJ/qzvKeuW 22eOF9FxhzWnQ7QOCvA6K99mH9YugN1Y5qG/XcMqfYLdn78zEAxWDhayeLEDNaah E8kx9WhPXLD0ulb7u5nR5ZehxlfyUs7oKPANwuVzJATIsGGZ0qNR2U0+K8WztoQd Tv/ruVHrEvD0TIVHTxEcuTWOlsuuKjExLOggvfTNOQg7/bU/zlqpSFh7/8qMAuVm FWJZhiGnjgBNhymFKD10WfOqj2l8Df0eyr926OJYGIsLC0hCsvelCS20El74JN/8 DQlIzDmRjQxzP2PTOtzHq+qrQsd63kRO4vux0Xn5qVYWCot49A7mMhWyKkiCRTs3 ObMs4vMZptA= -----END CERTIFICATE-----Generated at Mon Jul 27 08:31:39 2026 by rpki-client