$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66643a3a2f34382d3438203d3e2030.roa File: 323630323a663939323a66643a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: l9MHeHwPWDpfcYYZeuJdPzAITqqbSJxHyHz6Xc6Iztc= Subject key identifier: 8E:A4:F8:D2:4A:9A:3E:88:85:BA:0E:DD:CD:0F:61:72:71:CB:49:29 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 5259901B3F96C16BE27C4975DC5D7258805590E3 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66643a3a2f34382d3438203d3e2030.roa Signing time: Sat 15 Aug 2026 07:04:19 +0000 ROA not before: Sat 15 Aug 2026 06:59:19 +0000 ROA not after: Sat 14 Aug 2027 07:04:19 +0000 asID: 0 IP address blocks: 2602:f992:fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 23:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:59:90:1b:3f:96:c1:6b:e2:7c:49:75:dc:5d:72:58:80:55:90:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Aug 15 06:59:19 2026 GMT Not After : Aug 14 07:04:19 2027 GMT Subject: CN=8EA4F8D24A9A3E8885BA0EDDCD0F617271CB4929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:cb:47:e0:d1:9b:e7:f6:77:91:11:eb:bf: b2:5d:34:a9:d5:86:93:ee:ca:f2:23:73:ae:06:3f: 13:b6:29:e0:40:54:f5:39:d4:c7:42:ff:91:e5:b4: 24:a8:81:f7:65:19:a8:c0:db:0b:11:0e:c2:54:8a: 86:c6:2e:35:c2:8a:41:d6:cc:95:98:63:e6:50:43: 91:5c:24:bc:36:4d:60:c7:79:50:89:85:b6:20:79: 26:d8:44:82:de:99:da:7f:d8:a4:30:4c:7d:2b:52: 5a:e4:fd:0f:0d:b3:25:14:50:5d:0a:06:36:3f:15: e3:90:bf:d2:95:d4:55:83:b4:be:9a:94:b7:74:fa: 3b:6f:59:8a:af:10:5a:d2:e5:81:ba:6d:e7:3b:25: 62:c7:33:c7:19:a7:74:29:d8:61:66:73:86:dd:90: 03:81:36:e1:1b:49:83:7e:dc:3f:e5:5d:55:31:8a: a4:be:03:a3:d3:13:34:e7:5b:a1:db:66:73:58:db: fc:51:36:20:d7:62:a1:52:c6:53:82:ac:e9:b2:cc: dc:65:ea:a4:81:2c:c1:91:78:bb:fb:0f:db:03:bf: d2:b2:7d:16:b3:9f:eb:b9:0b:e4:53:b5:d3:69:05: 3e:03:e2:9f:62:89:c3:38:02:72:27:e8:22:17:fb: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A4:F8:D2:4A:9A:3E:88:85:BA:0E:DD:CD:0F:61:72:71:CB:49:29 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66643a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:fd::/48 Signature Algorithm: sha256WithRSAEncryption 0a:68:e1:1b:09:58:5b:b7:8c:2d:6b:1c:32:4c:a8:f0:79:6c: 79:84:ee:b6:2b:43:8c:75:87:76:f6:8c:2d:c4:aa:36:8a:49: 21:00:ec:c4:0d:30:5e:b6:d5:a8:c5:ee:c3:f2:e3:3a:59:b5: a9:1e:ea:17:d2:d9:0c:25:53:e1:14:58:4c:c7:86:32:f7:bc: b2:10:5f:30:3b:24:0a:78:4d:1a:42:41:19:d7:dc:9f:98:e8: 05:86:45:9a:a5:46:27:33:6c:ba:67:72:e5:d6:f4:28:df:be: a5:d1:26:ef:22:a8:26:df:38:d9:c9:4f:45:14:94:57:dd:bb: 6a:f5:1c:a5:78:2f:a0:00:12:5f:d6:27:33:51:af:e6:40:45: 63:67:5d:06:74:bf:45:7d:74:03:ea:99:7f:bc:8f:03:dd:62: 00:d7:3c:e3:13:e2:fe:b4:19:5e:39:23:23:0a:e8:99:36:87: bc:3f:04:c8:c7:88:5e:6b:b4:99:6f:1b:ee:c3:5c:ce:c0:f3: e9:cd:64:a8:99:92:0d:3b:13:20:0a:90:4d:df:f3:42:f6:35: 2e:20:90:cb:d3:4f:47:e9:77:ad:6f:0e:0b:dd:8c:67:6c:22: da:79:e0:f5:14:2a:ed:8e:20:ce:e7:c6:ae:f3:8c:7a:31:4a: d1:2c:1e:9c -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUUlmQGz+WwWvifEl13F1yWIBVkOMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwODE1MDY1OTE5WhcNMjcwODE0MDcwNDE5 WjAzMTEwLwYDVQQDEyg4RUE0RjhEMjRBOUEzRTg4ODVCQTBFRERDRDBGNjE3Mjcx Q0I0OTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1rLR+DRm+f2 d5ER67+yXTSp1YaT7sryI3OuBj8TtingQFT1OdTHQv+R5bQkqIH3ZRmowNsLEQ7C VIqGxi41wopB1syVmGPmUEORXCS8Nk1gx3lQiYW2IHkm2ESC3pnaf9ikMEx9K1Ja 5P0PDbMlFFBdCgY2PxXjkL/SldRVg7S+mpS3dPo7b1mKrxBa0uWBum3nOyVixzPH Gad0KdhhZnOG3ZADgTbhG0mDftw/5V1VMYqkvgOj0xM051uh22ZzWNv8UTYg12Kh UsZTgqzpsszcZeqkgSzBkXi7+w/bA7/Ssn0Ws5/ruQvkU7XTaQU+A+KfYonDOAJy J+giF/t/DwIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFI6k+NJKmj6IhboO3c0PYXJx y0kpMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGpBggrBgEFBQcBCwSBnDCBmTCBlgYIKwYBBQUH MAuGgYlyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL5kgD9MA0GCSqGSIb3DQEBCwUAA4IBAQAKaOEbCVhbt4wtaxwyTKjw eWx5hO62K0OMdYd29owtxKo2ikkhAOzEDTBettWoxe7D8uM6WbWpHuoX0tkMJVPh FFhMx4Yy97yyEF8wOyQKeE0aQkEZ19yfmOgFhkWapUYnM2y6Z3Ll1vQo376l0Sbv Iqgm3zjZyU9FFJRX3btq9RyleC+gABJf1iczUa/mQEVjZ10GdL9FfXQD6pl/vI8D 3WIA1zzjE+L+tBleOSMjCuiZNoe8PwTIx4hea7SZbxvuw1zOwPPpzWSomZINOxMg CpBN3/NC9jUuIJDL009H6Xetbw4L3YxnbCLaeeD1FCrtjiDO58au84x6MUrRLB6c -----END CERTIFICATE-----Generated at Fri Aug 21 23:07:56 2026 by rpki-client