$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613030303a3a2f34302d3430203d3e20313938333034.roa File: 323630323a663932613a613030303a3a2f34302d3430203d3e20313938333034.roa (raw, json) Hash identifier: G93qa6Y+hRx4tNmXGX4eZXTceQk0/hSdKnJa943f1F8= Subject key identifier: 68:1F:B3:CF:92:A9:D8:93:37:5B:64:56:D1:79:F4:03:85:D1:F0:CF Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 72F25E8A1353684FDF8CD38DA83E617B270786A5 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613030303a3a2f34302d3430203d3e20313938333034.roa Signing time: Wed 30 Sep 2026 00:31:08 +0000 ROA not before: Wed 30 Sep 2026 00:26:08 +0000 ROA not after: Wed 29 Sep 2027 00:31:08 +0000 asID: 198304 IP address blocks: 2602:f92a:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 11:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f2:5e:8a:13:53:68:4f:df:8c:d3:8d:a8:3e:61:7b:27:07:86:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Sep 30 00:26:08 2026 GMT Not After : Sep 29 00:31:08 2027 GMT Subject: CN=681FB3CF92A9D893375B6456D179F40385D1F0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:80:2d:87:5f:8d:f4:c7:bf:e5:26:d8:1e: 30:80:47:a5:23:f5:a4:59:8a:ad:d4:e2:8e:55:c4: 31:61:f1:ef:8a:f8:57:2c:1f:ca:b7:0a:c8:a7:4b: ac:a9:08:e0:ba:67:fb:d7:67:8c:50:e1:67:7e:c6: dc:7a:b8:e0:c0:ff:6d:2e:10:49:3c:d8:73:ee:e5: ab:03:c6:9d:fe:b9:20:f2:88:ed:16:05:9f:8f:47: e5:be:06:c1:3a:b3:79:7b:5e:80:b4:9f:d2:01:df: f4:72:0b:43:1e:b6:3a:e1:9c:29:c6:38:47:a3:c9: 41:ba:3d:25:cd:03:0d:48:11:c5:43:b6:d8:9a:00: 25:b1:dd:85:6a:19:87:3e:e1:34:cf:f3:8c:4d:a8: 69:e9:e3:a5:5d:07:76:ad:a7:e7:4a:f1:14:b2:3d: be:5d:de:8a:f2:b0:5d:90:58:b8:52:11:0a:2b:ee: d0:8e:28:a8:94:71:62:76:c6:c3:5f:b0:a1:4e:1b: 76:ab:b7:3d:c5:55:b4:8a:e3:a7:2d:95:04:69:65: 8f:2e:fd:04:b7:6a:96:15:bf:96:f0:5a:95:be:58: da:4d:49:86:fe:06:56:46:07:55:19:5c:52:bc:d9: 9d:29:7d:a8:0d:01:e1:34:40:34:27:17:11:41:8c: 6b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1F:B3:CF:92:A9:D8:93:37:5B:64:56:D1:79:F4:03:85:D1:F0:CF X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613030303a3a2f34302d3430203d3e20313938333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a000::/40 Signature Algorithm: sha256WithRSAEncryption 84:20:12:e7:77:9c:3e:ff:b6:b0:4e:1b:25:f0:19:f3:fb:69: 48:b1:cd:cc:c7:e8:55:a5:2c:17:65:26:62:42:7c:8e:a3:04: d5:d4:17:4b:7f:0d:33:75:41:bd:6e:40:8b:58:4b:5f:8c:a7: fb:fa:5b:86:22:5c:a6:8e:55:23:9c:e6:59:3c:46:f1:5a:06: 8d:09:a6:42:50:87:a0:4c:b6:25:d0:52:48:d7:bd:5d:a2:88: 1f:ac:54:99:89:8a:15:ad:85:fd:fc:5b:91:14:c3:75:90:15: 22:68:9f:b1:2e:6a:f3:e9:31:72:5d:00:39:fe:15:11:29:82: a4:13:55:05:0a:fe:d4:a3:81:bc:3c:fc:a4:22:ee:7c:68:d1: ea:99:e3:26:e3:48:2e:b8:b1:68:29:6b:13:f9:6b:4a:53:c8: 47:fc:59:5f:e5:e0:37:25:41:98:f0:dc:2e:b2:d4:16:e1:75: 85:26:76:0b:19:8a:6c:30:88:e8:3c:26:fc:35:d9:33:77:33: 67:40:e5:0d:4d:66:1a:b6:1e:3b:0f:73:17:fe:e5:c1:b9:94: 20:79:e5:ac:1f:02:51:3f:bb:37:16:39:24:28:3f:c3:8c:30: 35:c3:4d:86:fd:0b:24:3b:36:01:59:16:3e:c6:e4:54:1c:0c: f2:ed:a9:5f -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUcvJeihNTaE/fjNONqD5heycHhqUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwOTMwMDAyNjA4WhcNMjcwOTI5MDAzMTA4 WjAzMTEwLwYDVQQDEyg2ODFGQjNDRjkyQTlEODkzMzc1QjY0NTZEMTc5RjQwMzg1 RDFGMENGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2WALYdfjfTH v+Um2B4wgEelI/WkWYqt1OKOVcQxYfHvivhXLB/KtwrIp0usqQjgumf712eMUOFn fsbcerjgwP9tLhBJPNhz7uWrA8ad/rkg8ojtFgWfj0flvgbBOrN5e16AtJ/SAd/0 cgtDHrY64ZwpxjhHo8lBuj0lzQMNSBHFQ7bYmgAlsd2FahmHPuE0z/OMTahp6eOl XQd2rafnSvEUsj2+Xd6K8rBdkFi4UhEKK+7QjiiolHFidsbDX7ChTht2q7c9xVW0 iuOnLZUEaWWPLv0Et2qWFb+W8FqVvljaTUmG/gZWRgdVGVxSvNmdKX2oDQHhNEA0 JxcRQYxrwwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFGgfs8+SqdiTN1tkVtF59AOF 0fDPMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjEzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMTM5 MzgzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvkqoDANBgkqhkiG9w0BAQsFAAOCAQEAhCAS 53ecPv+2sE4bJfAZ8/tpSLHNzMfoVaUsF2UmYkJ8jqME1dQXS38NM3VBvW5Ai1hL X4yn+/pbhiJcpo5VI5zmWTxG8VoGjQmmQlCHoEy2JdBSSNe9XaKIH6xUmYmKFa2F /fxbkRTDdZAVImifsS5q8+kxcl0AOf4VESmCpBNVBQr+1KOBvDz8pCLufGjR6pnj JuNILrixaClrE/lrSlPIR/xZX+XgNyVBmPDcLrLUFuF1hSZ2CxmKbDCI6Dwm/DXZ M3czZ0DlDU1mGrYeOw9zF/7lwbmUIHnlrB8CUT+7NxY5JCg/w4wwNcNNhv0LJDs2 AVkWPsbkVBwM8u2pXw== -----END CERTIFICATE-----Generated at Tue Oct 13 12:42:35 2026 by rpki-client