
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332343a3a2f34382d3438203d3e20323138363638.roa
File: 323630323a663932613a313332343a3a2f34382d3438203d3e20323138363638.roa (raw, json)
Hash identifier: N8Np/7XPS1aC69ny43I9boVOOqUq9WcEww3ZEZHUsEM=
Subject key identifier: B1:4C:95:B3:99:3F:AF:7F:19:3D:67:EC:8A:F5:86:4F:E8:20:6E:51
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 13DFDFBF361044454DCE2F67D82C724573956145
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332343a3a2f34382d3438203d3e20323138363638.roa
Signing time: Fri 23 Oct 2026 00:11:25 +0000
ROA not before: Fri 23 Oct 2026 00:06:25 +0000
ROA not after: Fri 22 Oct 2027 00:11:25 +0000
asID: 218668
IP address blocks: 2602:f92a:1324::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 04:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:df:df:bf:36:10:44:45:4d:ce:2f:67:d8:2c:72:45:73:95:61:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Oct 23 00:06:25 2026 GMT
Not After : Oct 22 00:11:25 2027 GMT
Subject: CN=B14C95B3993FAF7F193D67EC8AF5864FE8206E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:24:69:36:0f:03:c5:01:6e:3c:ad:90:8f:
63:de:67:5c:af:24:84:4e:6b:02:05:c1:88:db:17:
63:c3:0a:82:25:dd:b0:55:69:a0:3a:71:7f:da:4f:
ae:4b:2b:b1:c4:49:3c:67:1f:dc:12:10:dd:79:60:
47:58:0b:a9:5c:43:a1:1e:a7:f3:25:b5:fd:b4:f3:
c9:bd:c1:99:92:f8:9c:17:91:21:ea:ab:49:b6:3e:
fc:f4:c2:87:8b:e9:8a:88:66:24:a3:dc:d6:fc:0d:
2b:08:db:2d:8f:21:64:44:78:33:16:37:ee:81:7a:
76:dd:d2:0d:d2:bc:19:41:66:2b:8f:91:99:a8:7f:
8f:8a:5c:45:c2:9d:b4:1a:79:db:6c:fc:eb:9a:81:
bf:8b:3e:38:d6:b1:1f:bc:b3:88:31:92:77:ce:98:
5e:ff:66:72:5d:99:c0:37:e9:45:b4:67:a1:91:87:
b1:7f:89:e5:2d:ee:e2:ae:90:2e:18:d0:11:eb:a3:
c3:e4:eb:de:51:94:5e:8b:2f:02:95:ea:df:b3:3a:
28:31:1a:2e:bb:24:5e:d9:28:18:fa:8a:08:c7:50:
7d:29:2f:be:a9:b6:5e:12:39:5e:c0:7f:29:44:cb:
97:a1:67:93:f0:3e:fc:ef:8d:f1:66:cb:89:30:e5:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4C:95:B3:99:3F:AF:7F:19:3D:67:EC:8A:F5:86:4F:E8:20:6E:51
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332343a3a2f34382d3438203d3e20323138363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:1324::/48
Signature Algorithm: sha256WithRSAEncryption
ad:2b:de:85:96:86:46:69:e5:b4:64:93:e6:0d:12:ba:31:02:
cf:57:ce:9c:76:c0:18:56:97:33:fb:12:54:c5:aa:ac:a8:11:
75:18:0b:09:25:0d:c7:b8:00:be:8b:aa:4a:d5:fe:a6:b2:07:
61:b7:75:1d:7c:3e:41:98:1a:27:a1:e4:8e:18:f3:77:65:a2:
70:d2:e2:0c:f4:47:c5:b7:0e:5f:24:fe:a2:06:94:dd:7c:f8:
56:1d:8b:c5:1e:3c:8a:9c:fd:92:7e:99:e5:a9:7e:8f:6a:48:
0d:f3:ff:31:8b:24:66:8e:31:14:b0:a5:e5:54:32:3f:be:e2:
14:22:1b:1b:79:0e:7f:de:07:60:7c:13:81:38:ca:4f:fa:c3:
11:1b:5e:1a:5b:c5:73:fd:8d:8b:08:3c:db:12:9d:d7:7f:32:
57:a8:f2:36:49:21:de:24:0b:be:e4:26:e5:57:ff:b1:9e:68:
f8:57:f1:f9:6e:4c:85:dd:f3:c7:de:69:59:09:3c:7e:09:86:
66:b5:6d:d1:9a:db:f5:e7:47:4e:d6:3a:10:6e:e4:d8:81:43:
21:21:0e:5d:18:74:0e:aa:b8:92:d5:3e:a2:a6:ec:26:fe:b9:
a5:94:11:3f:2a:08:ea:08:98:60:9c:ff:c0:87:6e:93:6e:b7:
62:dd:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:24 2026 by rpki-client