
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436313a3a2f34382d3438203d3e20313937383137.roa
File: 323630323a663932613a613436313a3a2f34382d3438203d3e20313937383137.roa (raw, json)
Hash identifier: 8yHxZaH5Q0N21WbDJPlWjSWDOY+G2P5cYuleWzY2r74=
Subject key identifier: 2A:3A:5C:65:B8:BF:F1:1A:00:3A:8F:F7:39:E0:E3:98:95:61:78:B5
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 1FD3452D59B803E0E38005ADCFAA1969CD6D6409
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436313a3a2f34382d3438203d3e20313937383137.roa
Signing time: Fri 15 May 2026 15:33:42 +0000
ROA not before: Fri 15 May 2026 15:28:42 +0000
ROA not after: Fri 14 May 2027 15:33:42 +0000
asID: 197817
IP address blocks: 2602:f92a:a461::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 28 May 2026 00:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d3:45:2d:59:b8:03:e0:e3:80:05:ad:cf:aa:19:69:cd:6d:64:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: May 15 15:28:42 2026 GMT
Not After : May 14 15:33:42 2027 GMT
Subject: CN=2A3A5C65B8BFF11A003A8FF739E0E398956178B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:b0:86:18:7b:20:b2:62:98:cf:32:e1:d2:
a0:32:bf:37:97:bf:0f:9c:b6:eb:58:90:3a:e6:10:
7c:11:e9:32:e2:c0:84:35:11:32:3f:8f:8d:3e:91:
38:98:38:00:21:16:71:22:63:6c:9b:72:1e:9a:7f:
7b:e7:27:0d:fe:f3:9c:34:d8:1f:86:ca:6a:ad:76:
5b:aa:69:26:3a:5e:04:a1:e1:80:96:0e:48:8f:6d:
48:6a:6a:2d:23:75:7d:c6:b1:bb:74:96:ab:e1:8e:
23:29:b4:16:14:82:56:65:f3:69:d5:5a:0c:17:d2:
14:f9:b9:fa:64:df:4d:a5:4b:e1:09:a5:e9:03:9d:
dc:4f:75:ca:a4:57:c4:54:23:11:f0:96:b6:c7:ad:
50:12:97:ba:85:af:c8:18:f5:66:96:29:de:87:61:
7b:13:2d:07:80:19:6c:b1:b6:8e:36:53:3c:88:58:
55:d7:00:ff:e7:90:ce:0d:e8:d7:5d:53:ad:e6:23:
10:c5:72:0f:f4:bd:00:34:5c:55:a4:64:d4:22:69:
23:16:11:27:32:0e:ce:ee:11:67:19:af:d4:18:70:
b1:1a:1a:3b:26:0a:e3:9c:b9:0e:55:d1:50:db:52:
0e:7f:c5:cf:05:1c:44:9f:c9:75:14:e4:6c:4b:96:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3A:5C:65:B8:BF:F1:1A:00:3A:8F:F7:39:E0:E3:98:95:61:78:B5
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436313a3a2f34382d3438203d3e20313937383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a461::/48
Signature Algorithm: sha256WithRSAEncryption
58:09:ed:c7:95:db:01:cb:60:90:6e:fa:51:63:67:b4:d3:47:
ad:ca:f5:44:a7:7d:c5:bb:52:b2:14:94:f2:19:22:c1:19:26:
4d:21:ec:f0:b2:9e:f7:d1:fe:ca:f1:5c:bc:33:1e:21:50:70:
12:43:2f:99:38:dc:29:3e:85:26:2c:13:05:bc:20:d7:ee:33:
94:7c:1f:4b:b0:9a:48:d4:fa:36:0d:e2:62:71:08:df:64:f7:
16:83:ab:f8:62:20:73:cc:97:9c:78:8c:fd:06:2f:43:62:8e:
24:0d:04:e8:38:a0:e2:fa:b9:0e:a0:75:92:56:07:9c:5f:d7:
a6:fe:86:1e:76:d1:8e:11:de:2b:cc:19:6a:ee:a3:8b:65:fd:
5d:aa:5d:98:64:42:df:5f:e0:77:de:06:e6:6f:40:76:ee:2a:
a9:e4:a8:db:4f:6f:94:ec:fa:d1:cb:92:df:9b:b4:75:7b:c1:
cf:38:18:06:d1:dd:20:45:9b:31:17:78:da:b3:ba:59:81:4f:
14:11:10:cd:2a:92:32:e6:0a:d3:ce:34:68:35:7b:d0:08:42:
37:f1:96:a1:c4:3b:51:33:82:0f:d1:50:0d:50:7e:71:cc:f4:
a5:be:ae:e8:0d:e3:4b:41:cb:44:42:76:bd:53:c8:4e:07:c3:
66:ee:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:12:02 2026 by rpki-client