$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332313a3a2f34382d3438203d3e20323138363638.roa File: 323630323a663932613a313332313a3a2f34382d3438203d3e20323138363638.roa (raw, json) Hash identifier: IKbbFx1kiYjqLMK9IxPXSBbWlCtqMGTkHU2ZL4yP86U= Subject key identifier: C4:98:8E:2B:55:B1:CB:94:08:FA:5E:F3:C0:F9:E7:40:69:FD:E7:D5 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 149B01D58715CCC0C53510D7255566403EC11346 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332313a3a2f34382d3438203d3e20323138363638.roa Signing time: Sun 11 Oct 2026 00:14:01 +0000 ROA not before: Sun 11 Oct 2026 00:09:01 +0000 ROA not after: Sun 10 Oct 2027 00:14:01 +0000 asID: 218668 IP address blocks: 2602:f92a:1321::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 04:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9b:01:d5:87:15:cc:c0:c5:35:10:d7:25:55:66:40:3e:c1:13:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Oct 11 00:09:01 2026 GMT Not After : Oct 10 00:14:01 2027 GMT Subject: CN=C4988E2B55B1CB9408FA5EF3C0F9E74069FDE7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:8e:4e:8b:f0:fe:e2:86:39:4c:22:ea:e2: 7d:99:73:90:8c:2f:48:9b:53:4a:70:31:f1:f2:21: 36:0e:98:7e:6a:ee:59:ca:7d:4e:54:e0:5f:24:c4: b4:26:23:be:62:b3:c2:be:36:ff:32:b1:c7:cd:e6: 9f:2d:6d:fc:fa:51:87:ab:34:a2:32:b9:74:56:0e: 30:64:78:a7:f9:5a:6f:e8:90:02:38:6b:38:5e:59: a9:2c:a7:6f:b8:34:32:94:cf:fc:15:5d:f7:f4:1f: b1:f0:df:b0:7b:f5:31:a6:fe:7b:a3:04:82:45:8e: 4d:72:6a:83:1e:74:80:4b:dd:80:4a:bc:83:2c:a1: e2:3c:ec:84:e8:4d:f7:e2:4e:f6:06:d5:22:a5:2e: 68:0a:af:6f:a8:c6:91:09:86:ff:a8:1e:8d:be:6e: 21:bd:0e:ac:68:77:0d:29:83:a7:f5:4e:83:a8:2d: 01:34:ef:a4:7d:9b:0e:7f:01:82:54:3b:a8:85:43: 6a:e9:33:61:af:81:24:d3:6b:de:93:6e:f6:5f:a4: b8:f4:b7:2c:f4:50:ea:75:a8:8a:6f:a7:d4:e7:08: 3c:29:a8:0b:44:2a:db:b8:59:d0:0a:cc:51:43:72: 79:29:6d:b7:a8:56:e0:d3:77:2a:c5:36:3a:22:cd: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:98:8E:2B:55:B1:CB:94:08:FA:5E:F3:C0:F9:E7:40:69:FD:E7:D5 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332313a3a2f34382d3438203d3e20323138363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1321::/48 Signature Algorithm: sha256WithRSAEncryption 14:e2:15:64:f0:37:53:dc:f9:3f:54:7b:07:8d:5b:8d:e7:4a: 98:a4:81:11:10:cd:d6:2c:b3:2e:a2:59:9c:ca:f5:68:6d:4e: 44:00:0b:ba:9f:ea:57:3e:94:b0:38:16:94:c2:e0:f0:1c:f7: 2f:0f:78:e2:fd:bd:ef:f8:03:66:12:97:15:1f:4b:53:11:20: 66:7a:9f:73:cc:2d:32:99:43:77:de:d7:cb:cb:83:21:46:dc: 3d:1c:34:93:30:f8:02:78:97:4e:b2:d4:fa:79:2a:82:d9:1f: a4:b2:5b:83:61:32:8f:e5:14:4b:6b:77:49:20:de:ba:5d:c7: fb:03:19:e9:b5:de:29:2e:c2:80:b6:b4:2c:73:a2:5a:e0:34: 7f:fc:f9:45:8f:11:42:88:f5:9c:83:ba:07:19:01:2d:49:94: 10:83:ed:01:28:40:f1:dd:9c:b1:ea:ca:2a:0f:c9:5d:58:23: e3:eb:1c:39:de:a3:f7:1d:35:82:21:43:33:25:48:17:b9:9f: 30:76:53:1c:6b:e9:d6:81:6f:a6:b4:c2:bb:75:cb:a9:d7:00: 8a:d1:d5:1e:88:45:49:3d:4e:57:a1:e1:8e:ac:10:7a:33:5b: d3:be:97:82:17:05:37:0a:2a:47:a4:6f:a2:ee:5b:44:c2:61: 3f:4f:93:14 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUFJsB1YcVzMDFNRDXJVVmQD7BE0YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYxMDExMDAwOTAxWhcNMjcxMDEwMDAxNDAx WjAzMTEwLwYDVQQDEyhDNDk4OEUyQjU1QjFDQjk0MDhGQTVFRjNDMEY5RTc0MDY5 RkRFN0Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXeOTovw/uKG OUwi6uJ9mXOQjC9Im1NKcDHx8iE2Dph+au5Zyn1OVOBfJMS0JiO+YrPCvjb/MrHH zeafLW38+lGHqzSiMrl0Vg4wZHin+Vpv6JACOGs4XlmpLKdvuDQylM/8FV339B+x 8N+we/Uxpv57owSCRY5NcmqDHnSAS92ASryDLKHiPOyE6E334k72BtUipS5oCq9v qMaRCYb/qB6Nvm4hvQ6saHcNKYOn9U6DqC0BNO+kfZsOfwGCVDuohUNq6TNhr4Ek 02vek272X6S49Lcs9FDqdaiKb6fU5wg8KagLRCrbuFnQCsxRQ3J5KW23qFbg03cq xTY6Is0p/wIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFMSYjitVscuUCPpe88D550Bp /efVMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMyMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx MzgzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqEyEwDQYJKoZIhvcNAQELBQADggEBABTi FWTwN1Pc+T9UeweNW43nSpikgREQzdYssy6iWZzK9WhtTkQAC7qf6lc+lLA4FpTC 4PAc9y8PeOL9ve/4A2YSlxUfS1MRIGZ6n3PMLTKZQ3fe18vLgyFG3D0cNJMw+AJ4 l06y1Pp5KoLZH6SyW4NhMo/lFEtrd0kg3rpdx/sDGem13ikuwoC2tCxzolrgNH/8 +UWPEUKI9ZyDugcZAS1JlBCD7QEoQPHdnLHqyioPyV1YI+PrHDneo/cdNYIhQzMl SBe5nzB2Uxxr6daBb6a0wrt1y6nXAIrR1R6IRUk9Tleh4Y6sEHozW9O+l4IXBTcK Kkekb6LuW0TCYT9PkxQ= -----END CERTIFICATE-----Generated at Thu Oct 22 11:53:42 2026 by rpki-client