$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa File: 323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa (raw, json) Hash identifier: MAJMDKGWvJl1ohhE1ISTwRQvjnLd49BB8Vi6G3x8R1k= Subject key identifier: 81:42:5D:E7:F4:A9:F2:1A:B0:AD:E8:60:57:71:21:CF:AA:9E:02:FA Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 600721EF0FAB22C9040FA9DCABA2F6F0109AD510 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa Signing time: Tue 02 Jun 2026 12:17:40 +0000 ROA not before: Tue 02 Jun 2026 12:12:40 +0000 ROA not after: Tue 01 Jun 2027 12:17:40 +0000 asID: 153376 IP address blocks: 2602:f92a:a468::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 00:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:07:21:ef:0f:ab:22:c9:04:0f:a9:dc:ab:a2:f6:f0:10:9a:d5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Jun 2 12:12:40 2026 GMT Not After : Jun 1 12:17:40 2027 GMT Subject: CN=81425DE7F4A9F21AB0ADE860577121CFAA9E02FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:02:59:06:80:b8:fd:3f:6e:89:48:37:5d: b9:fe:61:03:72:5b:6b:80:d9:df:16:73:9b:93:b1: 0a:6b:9d:0e:a1:50:25:30:fd:f8:f2:1c:88:41:c3: ba:56:98:a2:7f:1d:e3:b8:b9:90:50:04:be:e8:99: 0a:c6:13:3a:64:62:ec:b9:5b:06:f4:97:9a:42:15: 50:46:9e:82:02:44:18:9d:a0:38:bc:5d:04:1e:c1: 75:4b:25:2f:13:80:bf:6f:29:98:a3:ba:7c:93:a9: 9b:42:d3:b8:1b:1b:05:3c:ff:1a:d0:41:c6:1d:dc: f1:c0:cf:a5:11:5c:d1:8a:7a:02:a7:31:17:19:5c: 78:c7:6b:a8:de:6b:cd:88:d1:ef:f9:88:ec:d4:2f: 15:55:2e:18:e2:29:17:0f:e1:e7:c5:7f:7a:df:b2: 69:94:7d:a4:33:64:1e:1a:b0:6c:af:f3:08:63:1c: 64:9e:3c:87:48:f9:7a:45:1e:b4:30:18:06:ca:8e: 9a:47:4c:c7:03:e0:04:cc:62:34:ad:09:c4:fc:1c: 75:20:a3:cd:d7:3d:9b:f9:cf:a1:76:cd:6d:9d:24: 80:c5:ec:05:d7:41:11:50:db:7e:63:b2:35:15:22: 06:0b:db:72:16:02:92:96:b3:77:04:a5:9e:cd:c9: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:42:5D:E7:F4:A9:F2:1A:B0:AD:E8:60:57:71:21:CF:AA:9E:02:FA X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a468::/48 Signature Algorithm: sha256WithRSAEncryption 64:81:4f:ba:0d:b7:87:1c:08:46:08:e6:b3:79:d6:b1:36:c6: 52:65:df:2c:4d:45:bd:0f:76:52:0e:74:e1:e5:e2:e2:da:e0: 66:45:8a:6e:5e:34:90:d2:7d:16:11:0b:8b:14:b3:08:2c:15: ee:e8:dc:34:89:88:22:63:01:44:be:8c:5b:50:68:70:5b:bb: 73:ce:80:aa:4b:64:df:8d:30:80:b7:9c:9b:93:2e:83:e7:01: 59:fc:5b:96:e9:07:4c:05:39:f9:2f:6b:ae:09:e8:c5:4a:f0: 4b:c3:45:ff:11:dd:bd:f9:46:01:78:0e:d5:87:90:c6:59:00: cc:10:e0:03:69:12:55:8c:56:53:cf:bc:e2:14:86:ca:bf:20: 18:1c:ba:fa:0d:93:37:13:ae:79:70:a8:27:47:8a:f9:92:48: 20:54:0e:0c:c4:c9:43:e1:f5:ab:62:6b:89:ae:a4:0c:a1:04: ed:df:26:75:de:bb:73:fb:46:81:4a:f3:af:84:68:62:b6:c7: f0:c8:63:b7:2f:f8:f1:bf:91:8e:66:fd:5e:69:ce:2b:92:ee: 17:fc:eb:b0:98:e2:90:f3:cb:90:22:3f:76:91:09:1d:79:05: 05:ee:16:3f:e6:57:71:42:61:77:85:4e:b9:2e:35:2d:db:e9: b9:66:7a:11 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUYAch7w+rIskED6ncq6L28BCa1RAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQwWhcNMjcwNjAxMTIxNzQw WjAzMTEwLwYDVQQDEyg4MTQyNURFN0Y0QTlGMjFBQjBBREU4NjA1NzcxMjFDRkFB OUUwMkZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8oCWQaAuP0/ bolIN125/mEDcltrgNnfFnObk7EKa50OoVAlMP348hyIQcO6Vpiifx3juLmQUAS+ 6JkKxhM6ZGLsuVsG9JeaQhVQRp6CAkQYnaA4vF0EHsF1SyUvE4C/bymYo7p8k6mb QtO4GxsFPP8a0EHGHdzxwM+lEVzRinoCpzEXGVx4x2uo3mvNiNHv+Yjs1C8VVS4Y 4ikXD+HnxX9637JplH2kM2QeGrBsr/MIYxxknjyHSPl6RR60MBgGyo6aR0zHA+AE zGI0rQnE/Bx1IKPN1z2b+c+hds1tnSSAxewF10ERUNt+Y7I1FSIGC9tyFgKSlrN3 BKWezcl5eQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFIFCXef0qfIasK3oYFdxIc+q ngL6MB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjEzNDM2MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1 MzMzMzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpGgwDQYJKoZIhvcNAQELBQADggEBAGSB T7oNt4ccCEYI5rN51rE2xlJl3yxNRb0PdlIOdOHl4uLa4GZFim5eNJDSfRYRC4sU swgsFe7o3DSJiCJjAUS+jFtQaHBbu3POgKpLZN+NMIC3nJuTLoPnAVn8W5bpB0wF Ofkva64J6MVK8EvDRf8R3b35RgF4DtWHkMZZAMwQ4ANpElWMVlPPvOIUhsq/IBgc uvoNkzcTrnlwqCdHivmSSCBUDgzEyUPh9atia4mupAyhBO3fJnXeu3P7RoFK86+E aGK2x/DIY7cv+PG/kY5m/V5pziuS7hf867CY4pDzy5AiP3aRCR15BQXuFj/mV3FC YXeFTrkuNS3b6blmehE= -----END CERTIFICATE-----Generated at Thu Jun 4 01:15:47 2026 by rpki-client