$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332333a3a2f34382d3438203d3e20323138363638.roa File: 323630323a663932613a313332333a3a2f34382d3438203d3e20323138363638.roa (raw, json) Hash identifier: Gb4VuqODWmDipvFrtjC6Yd8aslkf13N1EJEUoiuqBEY= Subject key identifier: F5:DF:43:E2:0E:ED:7B:0B:42:7A:6C:54:20:6A:A3:F5:23:95:18:2F Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 417320267AF035AB60225C4D95F91173250D8BEF Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332333a3a2f34382d3438203d3e20323138363638.roa Signing time: Fri 23 Oct 2026 00:11:05 +0000 ROA not before: Fri 23 Oct 2026 00:06:05 +0000 ROA not after: Fri 22 Oct 2027 00:11:05 +0000 asID: 218668 IP address blocks: 2602:f92a:1323::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 14:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:73:20:26:7a:f0:35:ab:60:22:5c:4d:95:f9:11:73:25:0d:8b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Oct 23 00:06:05 2026 GMT Not After : Oct 22 00:11:05 2027 GMT Subject: CN=F5DF43E20EED7B0B427A6C54206AA3F52395182F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:51:32:40:9a:af:13:d1:ed:fd:f0:86:3b: 7b:d6:77:fb:e2:c1:b8:41:4d:9f:3b:ca:dd:c3:3c: ac:10:b2:ed:be:e4:1c:63:bb:36:54:5e:7a:dc:b8: 9a:f4:6e:3d:30:18:21:80:23:98:80:d0:b6:2d:47: cd:39:de:d7:62:ce:72:53:fa:d7:66:77:d4:fb:b2: b8:c3:d0:04:1f:27:23:8a:e0:3a:4e:d2:96:5d:75: cb:e0:86:09:49:53:65:1c:fb:8d:18:21:cf:65:41: 21:18:94:83:89:c3:9f:36:40:5f:e8:88:57:20:91: 2d:fa:48:29:49:a0:6b:d9:94:30:2e:b2:08:21:1b: 73:f0:9a:2c:b5:e6:cc:a7:a1:1d:10:ce:93:75:2b: b8:4f:ea:b0:89:9e:39:71:e1:69:8a:2a:34:46:dc: 6e:f6:90:14:aa:a0:fc:a3:9e:83:b2:b8:f2:cc:36: 1c:56:2d:1e:5d:2e:6b:06:37:6e:cb:fa:0d:53:4d: 69:89:21:01:35:60:a5:2c:33:43:83:b2:18:4f:2b: e3:be:51:4c:4c:1b:93:24:76:22:29:b3:6d:de:ab: a2:08:d4:e8:69:f6:b9:de:aa:69:6f:7e:8e:4a:84: e7:28:b6:03:9d:0b:80:16:cd:84:44:60:20:1e:31: 33:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DF:43:E2:0E:ED:7B:0B:42:7A:6C:54:20:6A:A3:F5:23:95:18:2F X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332333a3a2f34382d3438203d3e20323138363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1323::/48 Signature Algorithm: sha256WithRSAEncryption 79:04:ab:c0:d8:57:60:df:5b:97:eb:28:c7:f2:a4:f6:b4:09: c4:96:22:b6:e6:df:ab:67:16:25:50:93:96:8c:2c:d7:a0:54: 27:71:ca:75:9f:30:ef:b8:6e:af:1e:81:5a:cd:ff:54:cd:ee: 0b:65:07:87:aa:ee:df:9a:d4:6a:6f:60:46:b6:d2:4d:73:9b: d5:b1:85:7c:92:b6:76:c6:ce:81:a1:4a:3e:d1:e9:07:68:03: 5d:8f:9f:03:3d:77:e2:38:53:32:65:5a:57:ef:34:5f:d2:68: e9:5c:4b:db:d3:fe:ff:56:e8:61:39:9f:79:96:9e:59:4e:4c: 5d:33:79:e9:3c:41:10:09:b3:e3:ff:b3:7c:54:46:01:e7:67: bb:cc:fa:e2:2a:5f:9a:a9:3f:60:8f:aa:82:0f:41:72:ed:49: 16:53:94:b5:6b:ce:47:10:30:4e:5b:42:2e:c9:b7:9f:ae:10: a9:d1:a1:23:b7:70:d0:4e:68:9a:13:f9:90:71:3d:4d:2c:a3: 0e:ff:7c:eb:3d:31:fc:b4:8e:4e:21:67:b1:d3:5a:ac:26:49: 57:4f:37:9a:85:b8:f6:d7:d9:ff:c1:6f:78:5d:e5:0f:17:4d: 1d:56:58:ff:3d:ae:a1:b9:c7:2e:df:a7:bd:3b:6d:7a:02:b9: cc:98:2b:03 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUQXMgJnrwNatgIlxNlfkRcyUNi+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYxMDIzMDAwNjA1WhcNMjcxMDIyMDAxMTA1 WjAzMTEwLwYDVQQDEyhGNURGNDNFMjBFRUQ3QjBCNDI3QTZDNTQyMDZBQTNGNTIz OTUxODJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXBRMkCarxPR 7f3whjt71nf74sG4QU2fO8rdwzysELLtvuQcY7s2VF563Lia9G49MBghgCOYgNC2 LUfNOd7XYs5yU/rXZnfU+7K4w9AEHycjiuA6TtKWXXXL4IYJSVNlHPuNGCHPZUEh GJSDicOfNkBf6IhXIJEt+kgpSaBr2ZQwLrIIIRtz8JostebMp6EdEM6TdSu4T+qw iZ45ceFpiio0Rtxu9pAUqqD8o56DsrjyzDYcVi0eXS5rBjduy/oNU01piSEBNWCl LDNDg7IYTyvjvlFMTBuTJHYiKbNt3quiCNToafa53qppb36OSoTnKLYDnQuAFs2E RGAgHjEzyQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFPXfQ+IO7XsLQnpsVCBqo/Uj lRgvMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMyMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx MzgzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqEyMwDQYJKoZIhvcNAQELBQADggEBAHkE q8DYV2DfW5frKMfypPa0CcSWIrbm36tnFiVQk5aMLNegVCdxynWfMO+4bq8egVrN /1TN7gtlB4eq7t+a1GpvYEa20k1zm9WxhXyStnbGzoGhSj7R6QdoA12PnwM9d+I4 UzJlWlfvNF/SaOlcS9vT/v9W6GE5n3mWnllOTF0zeek8QRAJs+P/s3xURgHnZ7vM +uIqX5qpP2CPqoIPQXLtSRZTlLVrzkcQME5bQi7Jt5+uEKnRoSO3cNBOaJoT+ZBx PU0sow7/fOs9Mfy0jk4hZ7HTWqwmSVdPN5qFuPbX2f/Bb3hd5Q8XTR1WWP89rqG5 xy7fp707bXoCucyYKwM= -----END CERTIFICATE-----Generated at Sun Oct 25 03:21:36 2026 by rpki-client