$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332303a3a2f34382d3438203d3e20323138363638.roa File: 323630323a663932613a313332303a3a2f34382d3438203d3e20323138363638.roa (raw, json) Hash identifier: b7gxS1NU/4pO9dfZfKDbIcfX5Dghk/xWNotxTD/8JFY= Subject key identifier: 8D:54:84:CF:91:E3:FB:48:BA:67:86:DC:35:0E:BE:F5:5C:DD:02:88 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 1818FED3269BC72AFDEC17815CB240C54F593282 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332303a3a2f34382d3438203d3e20323138363638.roa Signing time: Sun 11 Oct 2026 00:22:11 +0000 ROA not before: Sun 11 Oct 2026 00:17:11 +0000 ROA not after: Sun 10 Oct 2027 00:22:11 +0000 asID: 218668 IP address blocks: 2602:f92a:1320::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 04:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:18:fe:d3:26:9b:c7:2a:fd:ec:17:81:5c:b2:40:c5:4f:59:32:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Oct 11 00:17:11 2026 GMT Not After : Oct 10 00:22:11 2027 GMT Subject: CN=8D5484CF91E3FB48BA6786DC350EBEF55CDD0288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a9:63:4e:13:38:90:01:4e:7e:79:f5:d8:cc: f4:66:24:79:a8:78:5d:63:a8:ff:f8:08:23:2a:2b: be:54:73:31:cb:ae:89:c1:18:1b:f9:1e:af:8f:2a: 80:bb:4f:63:f9:9e:c2:10:29:ed:c1:ca:4c:87:02: a0:0a:63:ea:97:c0:22:ab:67:b1:6c:c1:ff:9a:2d: 4b:aa:24:6d:b2:58:b9:12:4c:47:64:eb:ef:78:ec: 6d:44:18:ce:6a:a6:e5:e2:a2:41:d8:77:93:22:d8: 7b:0e:df:f9:f9:d1:30:30:61:40:7a:2f:a7:92:18: c8:e6:e1:c0:15:6b:84:42:24:0b:58:02:62:3d:5c: 6b:e0:1a:3a:02:28:1a:fd:df:2e:01:45:15:02:1f: 55:57:18:ab:bb:05:c0:4d:a3:43:11:a6:b5:52:1e: 36:c6:d9:1d:97:cd:b1:77:7a:5f:89:cc:7e:2f:cf: 5b:8f:ba:f1:08:2d:55:ee:ec:56:52:94:c7:bf:b0: d4:55:e9:58:ff:a7:71:b2:08:8a:a7:85:7a:67:a0: fe:73:f6:a8:b8:e8:fd:cb:0a:92:02:f8:6d:db:f7: be:ab:1e:59:86:e4:79:27:ab:06:8a:36:b6:7f:bf: 02:7a:48:43:ea:71:6e:aa:2b:b4:11:de:26:88:de: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:84:CF:91:E3:FB:48:BA:67:86:DC:35:0E:BE:F5:5C:DD:02:88 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332303a3a2f34382d3438203d3e20323138363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1320::/48 Signature Algorithm: sha256WithRSAEncryption 53:6a:76:17:32:f0:72:79:4e:20:4a:67:55:91:07:f9:ec:5d: c3:52:d3:2c:4a:c4:ed:64:21:8b:03:c5:f3:4a:c4:28:2a:ac: e3:cb:3d:7c:85:c3:2c:e0:a3:27:f9:f7:d2:98:fc:2a:62:9a: 1d:3e:fa:17:df:ee:ed:ab:ee:3b:31:da:96:19:60:81:59:fb: 09:c6:ab:e6:59:69:56:1d:25:15:76:b1:34:35:3f:cb:d8:22: 4b:a8:7c:eb:84:12:44:00:57:e7:f4:5d:e7:15:69:94:d6:c9: c6:b1:c3:e2:89:e2:69:13:f0:1e:a6:34:bb:c0:82:04:90:cf: a2:13:a4:a3:0f:7a:62:92:b6:d3:36:0b:88:cd:9b:3f:0b:1f: 4b:72:6e:f6:d3:20:b8:1b:bf:b4:39:41:37:82:ad:d4:6d:5e: b9:2d:13:6c:8d:93:69:86:32:29:3d:4a:24:12:78:34:b8:03: 97:b4:8a:ad:88:37:11:fe:23:6f:6b:19:7e:15:cd:78:21:0a: 51:17:6d:24:08:00:fb:8c:df:38:18:11:ab:8c:46:7a:6a:9b: 9b:81:01:6a:78:7a:32:9b:bd:28:03:6e:7c:c3:fa:a7:9a:bc: a8:70:c4:0d:f1:c2:79:ef:27:4d:5e:d4:e4:1b:19:6e:16:29: 2c:e0:cb:87 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUGBj+0yabxyr97BeBXLJAxU9ZMoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYxMDExMDAxNzExWhcNMjcxMDEwMDAyMjEx WjAzMTEwLwYDVQQDEyg4RDU0ODRDRjkxRTNGQjQ4QkE2Nzg2REMzNTBFQkVGNTVD REQwMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKljThM4kAFO fnn12Mz0ZiR5qHhdY6j/+AgjKiu+VHMxy66JwRgb+R6vjyqAu09j+Z7CECntwcpM hwKgCmPql8Aiq2exbMH/mi1LqiRtsli5EkxHZOvveOxtRBjOaqbl4qJB2HeTIth7 Dt/5+dEwMGFAei+nkhjI5uHAFWuEQiQLWAJiPVxr4Bo6Aiga/d8uAUUVAh9VVxir uwXATaNDEaa1Uh42xtkdl82xd3pficx+L89bj7rxCC1V7uxWUpTHv7DUVelY/6dx sgiKp4V6Z6D+c/aouOj9ywqSAvht2/e+qx5ZhuR5J6sGija2f78CekhD6nFuqiu0 Ed4miN49vwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFI1UhM+R4/tIumeG3DUOvvVc 3QKIMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMyMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx MzgzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqEyAwDQYJKoZIhvcNAQELBQADggEBAFNq dhcy8HJ5TiBKZ1WRB/nsXcNS0yxKxO1kIYsDxfNKxCgqrOPLPXyFwyzgoyf599KY /Cpimh0++hff7u2r7jsx2pYZYIFZ+wnGq+ZZaVYdJRV2sTQ1P8vYIkuofOuEEkQA V+f0XecVaZTWycaxw+KJ4mkT8B6mNLvAggSQz6ITpKMPemKSttM2C4jNmz8LH0ty bvbTILgbv7Q5QTeCrdRtXrktE2yNk2mGMik9SiQSeDS4A5e0iq2INxH+I29rGX4V zXghClEXbSQIAPuM3zgYEauMRnpqm5uBAWp4ejKbvSgDbnzD+qeavKhwxA3xwnnv J01e1OQbGW4WKSzgy4c= -----END CERTIFICATE-----Generated at Thu Oct 22 04:23:03 2026 by rpki-client