$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203332303937.roa File: 323630323a663939323a66363a3a2f34382d3438203d3e203332303937.roa (raw, json) Hash identifier: kE1kpmMDp8GjruAgtywhyzaN8hi23zrLAMHpXdRpJq4= Subject key identifier: C9:C3:5D:93:85:0B:93:C6:54:94:59:9B:4B:05:CA:F0:2B:8E:8B:6F Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 1CFC4DE7FF5E71561DD379A0F770215092C7D8FA Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203332303937.roa Signing time: Wed 03 Jun 2026 15:31:36 +0000 ROA not before: Wed 03 Jun 2026 15:26:36 +0000 ROA not after: Wed 02 Jun 2027 15:31:36 +0000 asID: 32097 IP address blocks: 2602:f992:f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fc:4d:e7:ff:5e:71:56:1d:d3:79:a0:f7:70:21:50:92:c7:d8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jun 3 15:26:36 2026 GMT Not After : Jun 2 15:31:36 2027 GMT Subject: CN=C9C35D93850B93C65494599B4B05CAF02B8E8B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:d2:e9:8c:a6:7f:8e:f0:bd:0c:c8:b0:ba: d3:69:b4:f4:06:33:c3:24:c0:ce:c8:ef:b2:83:7e: 08:fc:aa:77:34:91:23:10:ea:29:91:d1:30:9b:12: 56:4b:68:16:65:34:17:11:1f:76:22:64:76:e4:b3: fe:4c:cd:85:a3:7f:fd:72:06:0f:98:8a:85:70:c5: 27:47:26:e2:ca:95:d7:c5:d1:5d:6e:3a:85:a4:92: 2c:cd:57:cf:32:71:32:42:02:b9:4f:cc:32:85:9f: b9:d2:49:5f:2c:25:c2:d6:cb:1a:92:81:16:f0:92: fa:c2:6f:45:a2:95:0c:71:f0:39:3d:c6:4a:c5:55: 84:53:6b:04:14:cc:b8:d3:2a:59:ab:39:6d:8f:31: a3:ea:07:d4:35:71:95:e2:06:e2:46:24:fe:d8:c7: 48:eb:a0:87:b5:5b:5e:09:0f:c1:5f:99:ac:03:b0: 5f:10:e5:31:89:13:4c:5b:0a:b2:d6:51:57:0f:ae: a9:25:5c:53:2a:ff:79:66:4f:ce:a1:aa:ef:c8:43: 04:c9:52:00:fd:60:63:70:06:36:5b:a9:27:8d:8d: 8e:e1:a8:e5:b8:46:49:c0:a9:bc:fd:2d:3f:df:0c: 9d:c8:40:b9:9f:55:f7:f1:3a:38:8a:40:9e:36:e6: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C3:5D:93:85:0B:93:C6:54:94:59:9B:4B:05:CA:F0:2B:8E:8B:6F X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203332303937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:f6::/48 Signature Algorithm: sha256WithRSAEncryption 7c:f2:ab:84:ae:7f:00:85:c8:e8:6b:12:bb:53:ab:5d:a4:4e: ee:8c:23:32:fd:39:d3:39:08:78:ba:c2:9e:65:89:dd:3a:24: e0:6b:e3:ef:9f:a6:e3:0d:2b:fa:21:f2:e7:72:f3:6f:a8:45: 8e:3f:07:3d:63:ed:f5:c5:29:16:82:76:f6:cb:1c:8f:26:ea: 72:2d:0c:0b:f2:b6:13:4a:f3:0c:0a:c1:ec:69:85:5c:8f:a3: fb:ae:39:42:dd:d4:f4:01:3d:d1:66:cc:66:a8:09:ca:f4:cb: f2:53:30:f3:e1:c1:8c:aa:33:6d:60:b2:81:98:c6:16:f5:9d: 09:fd:6a:60:ff:7d:e0:2f:e7:de:c3:3f:36:e2:6c:03:37:bf: b0:c8:e8:1c:53:6b:62:9d:60:7a:d5:f9:7f:9f:1e:b4:53:c1: 84:43:ee:0f:be:8c:50:82:7c:a8:19:31:bb:65:ae:ec:45:23: a1:39:47:16:5e:06:24:4c:31:dd:6e:15:0a:2e:61:92:d9:b6: 91:c6:81:b2:90:29:b2:f8:a4:84:d2:31:d6:8e:17:e0:60:01: a9:bf:03:78:64:dc:7e:90:f5:e3:15:65:16:ba:61:74:e2:77: 52:08:fa:b1:c1:a3:80:40:23:5c:f7:a5:15:08:0e:b9:36:d2: 11:82:53:3b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUHPxN5/9ecVYd03mg93AhUJLH2PowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwNjAzMTUyNjM2WhcNMjcwNjAyMTUzMTM2 WjAzMTEwLwYDVQQDEyhDOUMzNUQ5Mzg1MEI5M0M2NTQ5NDU5OUI0QjA1Q0FGMDJC OEU4QjZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMfS6Yymf47w vQzIsLrTabT0BjPDJMDOyO+yg34I/Kp3NJEjEOopkdEwmxJWS2gWZTQXER92ImR2 5LP+TM2Fo3/9cgYPmIqFcMUnRybiypXXxdFdbjqFpJIszVfPMnEyQgK5T8wyhZ+5 0klfLCXC1ssakoEW8JL6wm9FopUMcfA5PcZKxVWEU2sEFMy40ypZqzltjzGj6gfU NXGV4gbiRiT+2MdI66CHtVteCQ/BX5msA7BfEOUxiRNMWwqy1lFXD66pJVxTKv95 Zk/OoarvyEMEyVIA/WBjcAY2W6knjY2O4ajluEZJwKm8/S0/3wydyEC5n1X38To4 ikCeNubAZwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFMnDXZOFC5PGVJRZm0sFyvAr jotvMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjYzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzIzMDM5 Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAmAvmSAPYwDQYJKoZIhvcNAQELBQADggEBAHzyq4SufwCF yOhrErtTq12kTu6MIzL9OdM5CHi6wp5lid06JOBr4++fpuMNK/oh8udy82+oRY4/ Bz1j7fXFKRaCdvbLHI8m6nItDAvythNK8wwKwexphVyPo/uuOULd1PQBPdFmzGao Ccr0y/JTMPPhwYyqM21gsoGYxhb1nQn9amD/feAv597DPzbibAM3v7DI6BxTa2Kd YHrV+X+fHrRTwYRD7g++jFCCfKgZMbtlruxFI6E5RxZeBiRMMd1uFQouYZLZtpHG gbKQKbL4pITSMdaOF+BgAam/A3hk3H6Q9eMVZRa6YXTid1II+rHBo4BAI1z3pRUI Drk20hGCUzs= -----END CERTIFICATE-----Generated at Fri Jun 12 00:26:04 2026 by rpki-client