$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa File: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (raw, json) Hash identifier: e0fhRMu+yRz12dIijmE9iRjZQQKxfzNFVogUT3jtPD0= Subject key identifier: 39:4A:34:4E:B1:48:EB:FD:8B:43:96:07:85:6D:CF:2A:DD:99:41:5E Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 5B5009E625B57AD1E367DABCB468F9823D783E5C Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa Signing time: Fri 06 Mar 2026 06:15:30 +0000 ROA not before: Fri 06 Mar 2026 06:10:30 +0000 ROA not after: Fri 05 Mar 2027 06:15:30 +0000 asID: 40676 IP address blocks: 2602:f992:fa::/48 maxlen: 49 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 04:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:50:09:e6:25:b5:7a:d1:e3:67:da:bc:b4:68:f9:82:3d:78:3e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Mar 6 06:10:30 2026 GMT Not After : Mar 5 06:15:30 2027 GMT Subject: CN=394A344EB148EBFD8B439607856DCF2ADD99415E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:eb:af:8a:98:2c:ef:2d:2f:77:cc:ff:e6: af:99:6c:65:31:cb:79:b2:4a:a8:d1:76:63:6c:df: e6:8b:89:86:cc:cd:d7:74:13:95:cd:fb:18:96:a7: ca:27:4d:91:5d:09:ed:4c:bd:bf:42:22:7c:71:37: 09:6f:69:e4:3d:37:18:16:61:dd:95:a8:d9:2a:32: d3:62:c0:f8:9f:86:ac:5e:f5:af:9e:3f:96:da:0c: 48:a3:0f:80:ca:12:a7:70:b5:5d:94:b6:8d:8c:2e: 38:d0:41:a5:fe:23:35:1b:cc:f9:35:e7:29:08:69: 95:73:bc:37:a3:ec:57:9d:d5:dd:5b:36:6e:f7:9c: 51:7c:4c:5b:23:c0:b0:65:9f:83:54:a8:45:bd:05: 72:e5:18:cc:0c:9c:f4:12:88:ec:36:d0:22:e2:cf: 7d:e3:91:7b:59:ac:d6:70:51:10:15:82:4f:c7:72: 44:ec:c0:74:0a:ca:aa:be:19:b5:63:9a:d2:18:aa: 53:51:b3:8d:2c:d7:ae:64:4a:d8:41:ae:c5:af:24: 81:ae:2f:c3:87:7f:4b:81:70:ad:d7:7d:4f:61:73: bb:0e:19:a6:a6:67:52:de:fd:90:20:e3:6c:94:ce: a2:5b:88:b3:73:db:22:71:d4:e4:cb:22:80:99:e0: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4A:34:4E:B1:48:EB:FD:8B:43:96:07:85:6D:CF:2A:DD:99:41:5E X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:fa::/48 Signature Algorithm: sha256WithRSAEncryption 06:cb:2a:05:34:01:d1:90:a5:f8:bc:b8:d2:0c:06:c5:5e:cb: ea:3c:ff:a2:f9:3a:4d:e2:46:3f:14:37:d7:a6:be:ab:b2:8f: 74:44:cc:e4:5f:cb:dc:1a:78:a2:d9:7f:98:38:c9:b2:e1:c1: b9:74:7e:09:6d:62:31:9d:cb:15:b9:ec:6b:4f:ad:47:a0:03: 6f:ca:ce:0d:a3:72:7a:52:37:fa:ae:73:0f:66:56:16:37:d0: b1:f5:a7:cd:a9:02:bc:d3:d4:63:1e:1b:8d:bb:e5:58:e5:4f: 16:fa:2b:cf:7d:cf:28:56:29:25:cb:32:23:ef:76:51:d7:64: 61:6e:e2:c0:73:b9:00:66:ca:ea:ba:0d:2e:64:ca:2f:0a:d5: 2e:49:c7:51:18:eb:34:44:72:b9:5b:fa:d8:e1:51:c0:86:31: 6a:fa:18:e8:ae:d8:df:d6:95:d8:86:09:e5:83:6e:47:27:30: 12:89:a6:78:67:4f:48:a4:d4:74:17:d1:20:8d:98:ef:a9:51: 60:f3:91:fb:d3:9f:8a:92:8e:c6:66:58:fd:30:99:8d:36:66: f6:02:dd:d4:39:c3:0f:17:a1:62:0f:e9:85:06:0a:4d:d5:9c: e9:79:51:fb:25:3e:c4:94:1f:96:d3:f7:55:0f:18:18:13:4e: 23:92:45:9a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUW1AJ5iW1etHjZ9q8tGj5gj14PlwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwMzA2MDYxMDMwWhcNMjcwMzA1MDYxNTMw WjAzMTEwLwYDVQQDEygzOTRBMzQ0RUIxNDhFQkZEOEI0Mzk2MDc4NTZEQ0YyQURE OTk0MTVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIfrr4qYLO8t L3fM/+avmWxlMct5skqo0XZjbN/mi4mGzM3XdBOVzfsYlqfKJ02RXQntTL2/QiJ8 cTcJb2nkPTcYFmHdlajZKjLTYsD4n4asXvWvnj+W2gxIow+AyhKncLVdlLaNjC44 0EGl/iM1G8z5NecpCGmVc7w3o+xXndXdWzZu95xRfExbI8CwZZ+DVKhFvQVy5RjM DJz0EojsNtAi4s9945F7WazWcFEQFYJPx3JE7MB0Csqqvhm1Y5rSGKpTUbONLNeu ZErYQa7FrySBri/Dh39LgXCt131PYXO7DhmmpmdS3v2QIONslM6iW4izc9sicdTk yyKAmeD0hQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFDlKNE6xSOv9i0OWB4Vtzyrd mUFeMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjY2MTNhM2EyZjM0MzgyZDM0MzkyMDNkM2UyMDM0MzAzNjM3 MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAmAvmSAPowDQYJKoZIhvcNAQELBQADggEBAAbLKgU0AdGQ pfi8uNIMBsVey+o8/6L5Ok3iRj8UN9emvquyj3REzORfy9waeKLZf5g4ybLhwbl0 fgltYjGdyxW57GtPrUegA2/Kzg2jcnpSN/qucw9mVhY30LH1p82pArzT1GMeG427 5VjlTxb6K899zyhWKSXLMiPvdlHXZGFu4sBzuQBmyuq6DS5kyi8K1S5Jx1EY6zRE crlb+tjhUcCGMWr6GOiu2N/WldiGCeWDbkcnMBKJpnhnT0ik1HQX0SCNmO+pUWDz kfvTn4qSjsZmWP0wmY02ZvYC3dQ5ww8XoWIP6YUGCk3VnOl5UfslPsSUH5bT91UP GBgTTiOSRZo= -----END CERTIFICATE-----Generated at Tue Mar 10 06:30:06 2026 by rpki-client