$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331333a3a2f34382d3438203d3e20313938363831.roa File: 323630323a663932613a313331333a3a2f34382d3438203d3e20313938363831.roa (raw, json) Hash identifier: fozvMi628nYr6tD9A86xzDL1Brp3AXgLjhYV4CbPj5s= Subject key identifier: CB:8D:44:AE:5C:91:41:A2:16:CF:A8:94:61:4B:D8:C0:8C:B1:6C:34 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 7B0BE2B610230D1AB6F767F399C344D2B6CC7DB0 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331333a3a2f34382d3438203d3e20313938363831.roa Signing time: Mon 28 Sep 2026 14:35:43 +0000 ROA not before: Mon 28 Sep 2026 14:30:43 +0000 ROA not after: Mon 27 Sep 2027 14:35:43 +0000 asID: 198681 IP address blocks: 2602:f92a:1313::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 13:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0b:e2:b6:10:23:0d:1a:b6:f7:67:f3:99:c3:44:d2:b6:cc:7d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Sep 28 14:30:43 2026 GMT Not After : Sep 27 14:35:43 2027 GMT Subject: CN=CB8D44AE5C9141A216CFA894614BD8C08CB16C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:81:8f:e3:93:4f:40:50:4b:39:cc:08:ef: f0:e0:b1:35:96:37:03:6f:a4:7e:14:ac:1c:52:05: 12:04:94:94:e5:d0:7e:41:79:d0:d9:22:88:09:47: d1:ec:68:26:3a:64:c9:b7:e4:45:fa:83:b1:aa:f1: ce:c6:84:ea:0b:34:91:c3:18:b2:20:91:68:88:88: bf:1b:b0:f6:0d:f2:98:a0:c8:ad:5c:3d:3b:ec:7e: a7:a2:32:46:69:f9:6b:10:f1:dc:41:2c:9d:1a:2c: ef:de:39:ad:3a:e9:d6:f1:7a:cc:69:28:8a:db:58: 2e:dc:6b:5f:88:1c:14:59:81:e0:f8:c3:e6:27:58: b2:0b:01:8d:22:23:27:b2:52:aa:01:9f:8f:59:96: f1:3d:d8:39:a5:37:61:52:e9:14:df:aa:27:90:3c: df:51:cb:86:60:04:09:11:5d:22:f3:80:97:bc:a6: 15:34:d9:e2:23:46:67:03:ec:6b:2d:8b:d2:e4:ce: c8:82:57:90:c6:d0:19:69:b1:b9:f3:7f:5d:f6:2d: 4b:ca:60:61:83:e1:cd:7c:f4:08:f9:dc:5a:05:76: 53:ec:3c:b2:76:88:90:4e:ed:5b:47:6e:22:d3:6e: 2c:1a:60:0a:1d:69:de:fc:73:90:f3:03:7a:36:07: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8D:44:AE:5C:91:41:A2:16:CF:A8:94:61:4B:D8:C0:8C:B1:6C:34 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331333a3a2f34382d3438203d3e20313938363831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1313::/48 Signature Algorithm: sha256WithRSAEncryption 6f:f2:77:8b:5c:36:b1:99:1c:32:36:58:9c:91:bf:29:ec:b9: ef:43:e4:3e:16:6e:13:4a:04:b5:60:ac:be:91:15:4c:88:a7: 89:42:19:db:3a:89:08:0c:5e:3c:c4:03:30:95:8d:2f:26:eb: 89:7f:a7:0a:1e:95:51:3b:df:22:83:28:99:a7:2d:97:da:2c: 94:01:54:a4:c3:45:4c:73:96:50:f6:db:8f:04:98:8c:0d:87: 48:64:3a:ec:b1:7d:fa:87:a7:cc:65:ea:04:3b:56:d4:3a:7d: 13:e9:86:e7:eb:a1:50:56:12:b7:3b:95:02:a3:06:90:94:64: 26:c9:d3:a6:7a:bd:0b:85:10:94:6e:30:3a:c8:0b:b8:0e:85: 16:f6:34:4b:1e:73:5d:89:cc:c7:ba:33:d1:92:db:31:15:42: 04:62:09:ad:c2:7e:eb:fa:e5:c4:ac:6f:c0:e6:04:bf:9c:77: 36:e1:4a:ca:b3:50:00:20:e5:be:f2:14:4c:8a:39:ab:5f:11: af:99:80:a0:fe:05:a8:43:9e:db:70:76:9e:b0:fa:55:4d:1b: 50:ea:88:3a:d1:f6:f6:c2:c2:08:d4:d3:98:ee:15:19:74:02: d9:64:ec:98:33:32:7a:05:aa:c6:6b:ef:03:1f:4e:bb:3f:42: de:3f:43:6f -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUewvithAjDRq292fzmcNE0rbMfbAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwOTI4MTQzMDQzWhcNMjcwOTI3MTQzNTQz WjAzMTEwLwYDVQQDEyhDQjhENDRBRTVDOTE0MUEyMTZDRkE4OTQ2MTRCRDhDMDhD QjE2QzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT+Bj+OTT0BQ SznMCO/w4LE1ljcDb6R+FKwcUgUSBJSU5dB+QXnQ2SKICUfR7GgmOmTJt+RF+oOx qvHOxoTqCzSRwxiyIJFoiIi/G7D2DfKYoMitXD077H6nojJGaflrEPHcQSydGizv 3jmtOunW8XrMaSiK21gu3GtfiBwUWYHg+MPmJ1iyCwGNIiMnslKqAZ+PWZbxPdg5 pTdhUukU36onkDzfUcuGYAQJEV0i84CXvKYVNNniI0ZnA+xrLYvS5M7IgleQxtAZ abG5839d9i1LymBhg+HNfPQI+dxaBXZT7DyydoiQTu1bR24i024sGmAKHWne/HOQ 8wN6Nge5/wIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFMuNRK5ckUGiFs+olGFL2MCM sWw0MB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMxMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM5 MzgzNjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqExMwDQYJKoZIhvcNAQELBQADggEBAG/y d4tcNrGZHDI2WJyRvynsue9D5D4WbhNKBLVgrL6RFUyIp4lCGds6iQgMXjzEAzCV jS8m64l/pwoelVE73yKDKJmnLZfaLJQBVKTDRUxzllD2248EmIwNh0hkOuyxffqH p8xl6gQ7VtQ6fRPphufroVBWErc7lQKjBpCUZCbJ06Z6vQuFEJRuMDrIC7gOhRb2 NEsec12JzMe6M9GS2zEVQgRiCa3Cfuv65cSsb8DmBL+cdzbhSsqzUAAg5b7yFEyK OatfEa+ZgKD+BahDnttwdp6w+lVNG1DqiDrR9vbCwgjU05juFRl0Atlk7JgzMnoF qsZr7wMfTrs/Qt4/Q28= -----END CERTIFICATE-----Generated at Wed Oct 21 17:43:35 2026 by rpki-client