
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436333a3a2f34382d3438203d3e20323138383833.roa
File: 323630323a663932613a613436333a3a2f34382d3438203d3e20323138383833.roa (raw, json)
Hash identifier: 9Jffy/JAMuk+1sIPKBtK3oXy2M+BCke3xxpiJIBOkmM=
Subject key identifier: BE:7A:35:75:D3:C1:F0:2E:89:A2:59:4F:2D:A3:49:B2:43:C2:3E:FD
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 67D9867EFCC600F0DFCCA4AC5FF57A49FF742843
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436333a3a2f34382d3438203d3e20323138383833.roa
Signing time: Mon 31 Aug 2026 00:35:08 +0000
ROA not before: Mon 31 Aug 2026 00:30:08 +0000
ROA not after: Mon 30 Aug 2027 00:35:08 +0000
asID: 218883
IP address blocks: 2602:f92a:a463::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 18:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d9:86:7e:fc:c6:00:f0:df:cc:a4:ac:5f:f5:7a:49:ff:74:28:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Aug 31 00:30:08 2026 GMT
Not After : Aug 30 00:35:08 2027 GMT
Subject: CN=BE7A3575D3C1F02E89A2594F2DA349B243C23EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:fd:79:f7:cf:46:b4:17:b9:65:85:af:d2:
a8:2a:85:67:80:7b:73:45:85:c2:81:80:f8:81:14:
e6:43:29:00:3f:93:d3:d4:6e:b9:bd:39:b0:2f:56:
fe:fc:09:59:fa:ce:6d:af:a3:3d:6a:51:31:89:60:
8c:df:35:15:96:31:b2:ab:64:4d:4a:2f:ef:ff:f1:
72:fd:89:de:17:88:c1:9f:bf:28:d4:8a:a2:05:8c:
fb:58:49:76:0d:47:b8:a8:96:ef:5d:78:d3:01:67:
92:3d:7d:0e:27:01:3c:3a:b8:ff:6d:d4:c1:22:d4:
28:72:1b:98:99:19:cc:a2:fc:36:fc:1b:19:67:c2:
81:ee:b0:70:69:5c:bc:56:65:26:0c:e9:59:c5:a6:
8a:c8:2c:92:de:da:d4:8a:4d:df:8e:ca:26:44:54:
77:55:5f:e9:53:78:2b:54:16:86:70:e9:36:5a:b1:
70:60:55:ab:2c:35:8e:40:3d:0a:76:ab:4d:7f:a1:
0a:e1:e2:3d:af:8d:aa:9d:24:4b:d9:34:1b:90:e9:
9a:64:8a:93:a3:82:aa:46:e5:b5:86:3b:74:11:72:
69:1a:07:1e:3a:9d:63:26:f0:53:22:d6:76:1c:07:
e4:77:35:72:ce:3d:19:07:61:bd:38:55:d4:74:e8:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7A:35:75:D3:C1:F0:2E:89:A2:59:4F:2D:A3:49:B2:43:C2:3E:FD
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436333a3a2f34382d3438203d3e20323138383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a463::/48
Signature Algorithm: sha256WithRSAEncryption
ce:68:52:ed:bd:a6:6d:6f:51:88:70:4f:4b:1e:09:54:0b:37:
08:48:74:5b:f7:9a:d2:40:be:e7:3a:24:86:c1:6c:cc:d3:5b:
ee:a0:8e:11:c2:a5:48:1b:49:fe:e7:64:d7:9a:4e:31:fa:90:
5b:d1:a1:17:48:46:50:45:7d:d5:82:b0:db:c1:0f:80:70:4c:
7f:c1:33:a6:c6:ba:79:df:a9:8b:d4:18:28:b4:16:98:a2:62:
3d:b2:3c:d8:4b:53:d2:4a:7e:32:56:3f:b0:4e:d6:af:d1:9b:
87:0b:bb:aa:4d:a7:e7:18:07:75:aa:62:83:f0:89:57:d4:5a:
a2:21:df:13:0d:a0:34:91:bc:4b:da:e2:63:dc:e7:38:f8:18:
52:92:73:27:53:52:53:98:dd:30:06:ae:2a:81:a9:8c:d7:76:
c4:03:db:cf:00:a3:30:90:b9:be:34:1e:c5:97:97:f9:16:30:
64:f8:12:5c:66:33:39:e9:8a:b3:33:fb:90:99:31:c0:a3:18:
18:ac:64:11:57:26:2e:36:b6:6d:d3:20:60:b2:18:5c:77:80:
79:5f:46:7b:95:3b:bd:3b:72:1c:86:87:74:5f:15:54:44:cf:
e9:e2:7e:20:59:ed:10:8e:85:f8:a9:33:ad:32:09:75:1a:6b:
f5:84:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:52 2026 by rpki-client