$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e2030.roa File: 323630323a663939323a66633a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: P0Wxd7YHxu1Ww7VvfRSNOiu4DOsQueuhZO3fCro/WXE= Subject key identifier: 45:0F:EE:95:CC:B5:F3:02:FF:5C:45:B8:8D:EF:8B:8D:EB:DC:E4:C7 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 4788ACBB942147F173F0DADA4E04CCEA778D9894 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e2030.roa Signing time: Sat 15 Aug 2026 07:04:05 +0000 ROA not before: Sat 15 Aug 2026 06:59:05 +0000 ROA not after: Sat 14 Aug 2027 07:04:05 +0000 asID: 0 IP address blocks: 2602:f992:fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:88:ac:bb:94:21:47:f1:73:f0:da:da:4e:04:cc:ea:77:8d:98:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Aug 15 06:59:05 2026 GMT Not After : Aug 14 07:04:05 2027 GMT Subject: CN=450FEE95CCB5F302FF5C45B88DEF8B8DEBDCE4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:7b:69:2f:25:d9:68:9f:eb:39:e9:b7:af: e6:fc:73:32:e0:ed:23:b0:d9:1e:89:20:44:1c:11: c6:58:2a:8c:11:8a:68:61:04:71:9e:79:3a:56:d7: 85:11:1b:c5:f0:9d:be:d8:20:9f:1c:ec:d6:51:3e: 1d:b6:c9:69:29:63:47:24:a1:4f:31:e4:cd:aa:bc: 16:d1:61:b4:b5:d0:25:73:14:83:64:33:fc:f6:57: 73:a9:ae:ac:4d:51:9d:db:eb:90:aa:8c:2a:62:34: 3d:4b:be:cb:7b:f2:58:ee:01:47:50:82:6f:72:2f: c0:04:9b:b6:09:20:81:84:54:23:c5:e6:21:b0:e1: 59:8d:e1:7f:b5:cf:51:89:49:8f:88:92:d4:c3:97: 38:33:bb:c2:20:99:9e:95:18:15:69:60:56:d5:5d: e9:d3:a1:90:b1:19:e4:7a:11:d3:b8:b0:86:cc:cb: d5:7c:12:f7:2f:4c:98:4a:3f:7d:56:b6:55:81:f9: a6:3e:14:11:03:69:60:08:22:da:da:1f:e1:b6:38: 08:5a:8d:9d:aa:e5:18:5d:92:d5:43:9c:69:dc:7b: f2:87:58:af:40:e2:63:04:04:3e:0e:94:ac:67:a6: 22:83:2b:a5:79:30:77:e1:ec:39:b9:c9:19:81:94: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0F:EE:95:CC:B5:F3:02:FF:5C:45:B8:8D:EF:8B:8D:EB:DC:E4:C7 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:fc::/48 Signature Algorithm: sha256WithRSAEncryption 69:79:2d:71:db:9e:8a:ce:48:b7:c2:71:b5:73:8b:29:b3:48: 43:a8:22:ae:69:5e:78:04:6b:63:ec:41:21:bc:55:02:52:57: 8b:c9:ca:fe:77:32:5a:42:52:f5:5e:c4:f2:0e:1f:77:12:c3: fe:41:91:20:f8:b6:3b:ee:da:77:7d:13:94:21:f6:26:82:96: 6c:80:ed:61:bc:0d:4f:e7:46:a9:ca:da:98:7d:28:dc:04:1a: bd:8a:c2:4c:c4:19:d7:70:c3:4f:f8:e8:53:d4:3b:1e:ce:da: 14:84:4f:72:bb:8d:d2:8f:6a:c2:8d:2a:f1:b6:82:b4:fd:12: 0b:ea:06:10:39:2f:c7:7a:6e:4f:e4:f1:d6:e2:d2:a5:af:60: 85:5a:c6:6c:2a:29:8a:ba:1f:92:7e:9a:26:f9:e9:e5:80:57: 47:99:2d:ed:06:b3:ab:46:6b:98:bc:a9:19:d4:2b:9f:fa:9a: e6:2d:75:a5:04:2c:cf:e3:bc:56:58:d1:36:2c:52:5a:a1:82: b7:80:4c:cf:24:8e:48:8d:7a:18:f6:53:4b:c9:76:3e:e8:c6: 4a:57:d9:03:fb:90:72:0e:5c:6e:46:7c:16:26:93:d6:d2:64: 17:19:8f:14:4d:da:f1:04:bb:9c:3c:d1:2e:0b:41:6f:87:f9: 9a:77:62:a4 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUR4isu5QhR/Fz8NraTgTM6neNmJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwODE1MDY1OTA1WhcNMjcwODE0MDcwNDA1 WjAzMTEwLwYDVQQDEyg0NTBGRUU5NUNDQjVGMzAyRkY1QzQ1Qjg4REVGOEI4REVC RENFNEM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7J7aS8l2Wif 6znpt6/m/HMy4O0jsNkeiSBEHBHGWCqMEYpoYQRxnnk6VteFERvF8J2+2CCfHOzW UT4dtslpKWNHJKFPMeTNqrwW0WG0tdAlcxSDZDP89ldzqa6sTVGd2+uQqowqYjQ9 S77Le/JY7gFHUIJvci/ABJu2CSCBhFQjxeYhsOFZjeF/tc9RiUmPiJLUw5c4M7vC IJmelRgVaWBW1V3p06GQsRnkehHTuLCGzMvVfBL3L0yYSj99VrZVgfmmPhQRA2lg CCLa2h/htjgIWo2dquUYXZLVQ5xp3Hvyh1ivQOJjBAQ+DpSsZ6YigyuleTB34ew5 uckZgZQdZQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFEUP7pXMtfMC/1xFuI3vi43r 3OTHMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGpBggrBgEFBQcBCwSBnDCBmTCBlgYIKwYBBQUH MAuGgYlyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjY2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL5kgD8MA0GCSqGSIb3DQEBCwUAA4IBAQBpeS1x256Kzki3wnG1c4sp s0hDqCKuaV54BGtj7EEhvFUCUleLycr+dzJaQlL1XsTyDh93EsP+QZEg+LY77tp3 fROUIfYmgpZsgO1hvA1P50apytqYfSjcBBq9isJMxBnXcMNP+OhT1DseztoUhE9y u43Sj2rCjSrxtoK0/RIL6gYQOS/Hem5P5PHW4tKlr2CFWsZsKimKuh+Sfpom+enl gFdHmS3tBrOrRmuYvKkZ1Cuf+prmLXWlBCzP47xWWNE2LFJaoYK3gEzPJI5IjXoY 9lNLyXY+6MZKV9kD+5ByDlxuRnwWJpPW0mQXGY8UTdrxBLucPNEuC0Fvh/mad2Kk -----END CERTIFICATE-----Generated at Fri Aug 21 23:07:55 2026 by rpki-client