$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a3a2f33322d3438203d3e203434333234.roa File: 323630323a663932613a3a2f33322d3438203d3e203434333234.roa (raw, json) Hash identifier: +g87OL7mBHefhhIVtjINnfTm14kwSq7vGe+3QRDc7pc= Subject key identifier: 96:33:67:51:7A:88:9A:B0:CA:19:27:9F:EC:EC:2F:B2:E0:9F:64:E2 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 246C2152CE832CF8B788AD936068094C9E60942D Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a3a2f33322d3438203d3e203434333234.roa Signing time: Tue 02 Jun 2026 12:17:42 +0000 ROA not before: Tue 02 Jun 2026 12:12:42 +0000 ROA not after: Tue 01 Jun 2027 12:17:42 +0000 asID: 44324 IP address blocks: 2602:f92a::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 00:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6c:21:52:ce:83:2c:f8:b7:88:ad:93:60:68:09:4c:9e:60:94:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Jun 2 12:12:42 2026 GMT Not After : Jun 1 12:17:42 2027 GMT Subject: CN=963367517A889AB0CA19279FECEC2FB2E09F64E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:3a:7e:09:98:68:56:28:aa:72:dd:a4:cc: 7d:c3:aa:2f:ed:83:a2:ec:5c:72:d8:cd:30:c3:03: e5:b5:fa:db:10:a6:4d:a1:8b:6e:23:19:d8:65:2d: b5:29:62:a9:40:5d:bc:82:d8:4f:b3:f5:63:27:9c: 67:65:5b:71:b0:eb:41:ce:93:b2:e4:0f:f5:1d:b2: 73:70:ea:10:1f:4b:c7:35:1e:2d:9f:29:fb:00:89: 42:2a:f9:d4:be:42:e1:60:c8:18:61:e8:b6:b3:76: 51:39:4c:8b:5f:26:44:73:69:4e:ed:54:93:85:2a: e9:d3:b2:e3:f4:bc:0f:36:ce:6e:87:27:c8:43:92: 36:1d:cb:e3:1e:6c:19:c6:1e:5b:36:83:82:95:93: f7:d6:06:f8:e4:95:b0:ad:78:dc:1e:08:12:dd:2f: bc:48:67:fc:98:a2:5f:05:6c:83:87:c2:e8:95:87: 53:22:9b:01:b0:cc:db:96:c8:62:f6:66:80:79:a4: d2:fb:4b:e0:b3:01:a1:3c:72:5b:47:51:f1:0e:bf: 1b:3b:1c:40:5d:e5:62:f1:c2:36:50:11:58:a1:ff: 4c:c6:9b:85:31:86:cd:a9:ff:8a:c2:fc:c4:8e:f3: 40:25:2f:d7:c4:4b:cc:92:9a:a1:f9:49:f4:d6:97: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:33:67:51:7A:88:9A:B0:CA:19:27:9F:EC:EC:2F:B2:E0:9F:64:E2 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a3a2f33322d3438203d3e203434333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a::/32 Signature Algorithm: sha256WithRSAEncryption a3:fa:7a:d3:6e:7a:c0:b2:82:cb:8b:0f:be:6d:80:55:c1:b9: 55:bb:8e:09:56:d2:3e:ed:a9:c6:25:45:71:99:b3:01:24:fa: e7:30:af:76:46:5a:2e:ab:da:81:cf:1c:00:c1:d3:7e:93:eb: 73:52:ad:d2:d9:ac:bf:9a:17:b4:d1:9b:ca:7e:68:e4:ef:fc: 9a:bb:76:d1:27:50:cc:bc:34:a2:63:c9:73:70:a7:96:be:72: db:d3:75:d5:f6:e2:e5:45:22:4f:32:9d:cd:be:1f:78:0c:52: ab:30:49:29:39:35:47:66:f5:7a:bb:6c:a7:f9:46:da:24:1c: 6b:ec:47:50:98:51:9b:24:7e:be:ec:7c:19:3e:ff:17:3f:bb: 6b:77:cd:d3:7d:5d:bb:20:11:d5:90:6c:28:c1:a1:18:25:46: 9e:71:32:83:92:3a:67:ce:0c:81:3e:9d:fc:4b:6e:04:41:86: 32:39:6c:d9:b7:f2:7b:a5:fb:20:08:58:e7:a8:09:60:47:8c: d5:1b:6f:8f:03:98:12:8e:b4:e0:20:33:93:f2:9f:c1:41:93: 54:d9:09:a7:ff:5c:cb:97:86:bb:76:35:c4:ed:c1:b0:5b:ae: e4:25:04:00:d7:92:4b:7e:ed:72:4d:f2:99:97:33:ec:4a:b5: 0d:e5:17:62 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUJGwhUs6DLPi3iK2TYGgJTJ5glC0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQyWhcNMjcwNjAxMTIxNzQy WjAzMTEwLwYDVQQDEyg5NjMzNjc1MTdBODg5QUIwQ0ExOTI3OUZFQ0VDMkZCMkUw OUY2NEUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeU6fgmYaFYo qnLdpMx9w6ov7YOi7Fxy2M0wwwPltfrbEKZNoYtuIxnYZS21KWKpQF28gthPs/Vj J5xnZVtxsOtBzpOy5A/1HbJzcOoQH0vHNR4tnyn7AIlCKvnUvkLhYMgYYei2s3ZR OUyLXyZEc2lO7VSThSrp07Lj9LwPNs5uhyfIQ5I2HcvjHmwZxh5bNoOClZP31gb4 5JWwrXjcHggS3S+8SGf8mKJfBWyDh8LolYdTIpsBsMzblshi9maAeaTS+0vgswGh PHJbR1HxDr8bOxxAXeVi8cI2UBFYof9MxpuFMYbNqf+KwvzEjvNAJS/XxEvMkpqh +Un01pci/QIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFJYzZ1F6iJqwyhknn+zsL7Lg n2TiMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM0MzQzMzMyMzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAmAvkqMA0GCSqGSIb3DQEBCwUAA4IBAQCj+nrTbnrAsoLLiw++bYBV wblVu44JVtI+7anGJUVxmbMBJPrnMK92Rlouq9qBzxwAwdN+k+tzUq3S2ay/mhe0 0ZvKfmjk7/yau3bRJ1DMvDSiY8lzcKeWvnLb03XV9uLlRSJPMp3Nvh94DFKrMEkp OTVHZvV6u2yn+UbaJBxr7EdQmFGbJH6+7HwZPv8XP7trd83TfV27IBHVkGwowaEY JUaecTKDkjpnzgyBPp38S24EQYYyOWzZt/J7pfsgCFjnqAlgR4zVG2+PA5gSjrTg IDOT8p/BQZNU2Qmn/1zLl4a7djXE7cGwW67kJQQA15JLfu1yTfKZlzPsSrUN5Rdi -----END CERTIFICATE-----Generated at Thu Jun 4 01:20:38 2026 by rpki-client