$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa File: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (raw, json) Hash identifier: D8QH0PMIynoxTs8aMoWKgd+hJBRAwAzuEw8cgtapOeg= Subject key identifier: 6A:6C:55:A4:8D:69:C8:52:D8:1A:BE:D5:D1:F4:1D:BB:3F:40:B2:90 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 57F9DFD63FCAC59180868D8EBD6A6CF9D843139C Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa Signing time: Tue 02 Jun 2026 12:17:47 +0000 ROA not before: Tue 02 Jun 2026 12:12:47 +0000 ROA not after: Tue 01 Jun 2027 12:17:47 +0000 asID: 49304 IP address blocks: 206.251.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 00:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f9:df:d6:3f:ca:c5:91:80:86:8d:8e:bd:6a:6c:f9:d8:43:13:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Jun 2 12:12:47 2026 GMT Not After : Jun 1 12:17:47 2027 GMT Subject: CN=6A6C55A48D69C852D81ABED5D1F41DBB3F40B290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:42:66:af:d6:9c:ff:96:8f:e4:2b:d0:d6: 21:f9:ff:3c:f9:7c:c1:7a:ba:54:67:52:bd:62:7b: d4:be:52:c9:a0:c1:49:d9:84:02:11:dc:e1:d8:56: c6:7a:6e:08:3e:ea:a5:62:19:26:01:b8:f0:c0:39: 4a:62:0b:8e:be:b8:f8:51:4d:00:30:2d:0d:7b:b9: 11:94:27:ea:60:0d:bc:03:7f:45:02:89:36:17:e4: aa:f1:9d:05:3f:f4:56:5d:7f:93:00:91:6e:b1:0d: c3:94:60:23:33:df:4e:94:c7:96:22:ab:d6:72:a9: fa:7e:5f:e6:c8:60:e5:57:8b:3b:df:ef:16:f0:77: 14:21:f8:5e:93:39:9f:b2:4d:b0:5c:0c:36:ea:5b: 1b:ce:53:67:f0:70:2e:ed:a8:0a:23:f6:6d:7a:00: bd:6d:83:01:b5:99:1e:0c:e9:3f:09:c5:46:6c:e0: 31:72:10:06:64:bd:71:5d:8c:6e:1d:0d:cd:08:27: 04:4e:f2:dc:27:5b:d0:36:7d:e9:e2:f3:f7:26:35: fc:4a:6a:6e:2a:c4:1a:ad:78:d5:7b:9a:4f:df:2a: d7:2f:c2:d6:83:f4:fa:5c:0b:88:27:94:53:5b:ca: b2:a6:d3:2b:94:01:5b:7f:6c:05:12:e4:e1:46:8b: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6C:55:A4:8D:69:C8:52:D8:1A:BE:D5:D1:F4:1D:BB:3F:40:B2:90 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.251.52.0/22 Signature Algorithm: sha256WithRSAEncryption c7:b5:df:c9:29:d1:9e:56:1d:82:d2:9c:e8:47:04:a1:23:64: 8d:f3:4c:30:16:67:da:42:8c:f3:3b:2b:5d:fc:41:98:e1:29: 46:00:ce:c6:3f:bb:ee:d4:20:49:9d:fb:68:86:ae:df:87:26: 52:c1:23:26:98:f1:9f:0f:6b:25:96:3d:10:11:d8:ce:2b:7a: 15:95:06:5a:e4:c5:af:f0:c1:24:94:38:a1:e2:b2:e1:43:67: e7:c7:e6:94:5f:93:87:1d:f3:e2:1d:86:f1:74:eb:20:da:a8: a2:f6:d1:8e:cd:7f:3a:6d:e5:82:95:21:05:d1:5f:bc:fa:a0: 31:07:b5:65:03:e7:22:0d:5c:47:62:2e:c5:a5:07:72:b9:d9: 11:80:da:72:58:05:7f:c1:e2:f6:cc:f6:e7:c9:66:f9:13:c0: fe:ea:03:31:12:0d:a7:68:99:28:b5:6f:51:86:8e:7c:36:27: 57:c8:dd:5b:5b:0c:30:5b:16:a9:8d:f1:36:ca:af:2d:89:53: 01:d3:ef:a6:0c:dc:e0:e3:a8:dd:bf:62:d5:34:80:a4:8d:b3: 5d:c1:96:69:f3:96:36:f8:89:14:30:e1:0e:0a:87:9d:2a:40: 3b:8e:37:b0:01:a2:7b:21:b0:21:52:99:41:bb:e7:8b:66:cc: 83:fa:09:a7 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUV/nf1j/KxZGAho2OvWps+dhDE5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQ3WhcNMjcwNjAxMTIxNzQ3 WjAzMTEwLwYDVQQDEyg2QTZDNTVBNDhENjlDODUyRDgxQUJFRDVEMUY0MURCQjNG NDBCMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujtCZq/WnP+W j+Qr0NYh+f88+XzBerpUZ1K9YnvUvlLJoMFJ2YQCEdzh2FbGem4IPuqlYhkmAbjw wDlKYguOvrj4UU0AMC0Ne7kRlCfqYA28A39FAok2F+Sq8Z0FP/RWXX+TAJFusQ3D lGAjM99OlMeWIqvWcqn6fl/myGDlV4s73+8W8HcUIfhekzmfsk2wXAw26lsbzlNn 8HAu7agKI/ZtegC9bYMBtZkeDOk/CcVGbOAxchAGZL1xXYxuHQ3NCCcETvLcJ1vQ Nn3p4vP3JjX8SmpuKsQarXjVe5pP3yrXL8LWg/T6XAuIJ5RTW8qyptMrlAFbf2wF EuThRotOTQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFGpsVaSNachS2Bq+1dH0Hbs/ QLKQMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzAzNjJl MzIzNTMxMmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzOTMzMzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAs77NDANBgkqhkiG9w0BAQsFAAOCAQEAx7XfySnRnlYdgtKc6EcE oSNkjfNMMBZn2kKM8zsrXfxBmOEpRgDOxj+77tQgSZ37aIau34cmUsEjJpjxnw9r JZY9EBHYzit6FZUGWuTFr/DBJJQ4oeKy4UNn58fmlF+Thx3z4h2G8XTrINqoovbR js1/Om3lgpUhBdFfvPqgMQe1ZQPnIg1cR2IuxaUHcrnZEYDaclgFf8Hi9sz258lm +RPA/uoDMRINp2iZKLVvUYaOfDYnV8jdW1sMMFsWqY3xNsqvLYlTAdPvpgzc4OOo 3b9i1TSApI2zXcGWafOWNviJFDDhDgqHnSpAO443sAGieyGwIVKZQbvni2bMg/oJ pw== -----END CERTIFICATE-----Generated at Thu Jun 4 01:20:45 2026 by rpki-client