$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa File: 323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa (raw, json) Hash identifier: eG4nuJ7Rc6fN/SaxaU19ncFMJe+gOPIKVSuxCdkwjVU= Subject key identifier: 88:4F:11:BD:28:28:19:07:4F:B8:52:09:08:53:11:2F:D5:30:89:CE Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 344E9BB94EE24C63C43D016F0E91783A6A36727A Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa Signing time: Tue 02 Jun 2026 12:17:44 +0000 ROA not before: Tue 02 Jun 2026 12:12:44 +0000 ROA not after: Tue 01 Jun 2027 12:17:44 +0000 asID: 204539 IP address blocks: 2602:f92a:a46b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 01:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4e:9b:b9:4e:e2:4c:63:c4:3d:01:6f:0e:91:78:3a:6a:36:72:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Jun 2 12:12:44 2026 GMT Not After : Jun 1 12:17:44 2027 GMT Subject: CN=884F11BD282819074FB852090853112FD53089CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:a7:35:30:f1:17:4b:4b:ff:a1:1a:72:8c: ea:65:26:fe:b5:63:32:fc:35:74:67:ac:36:0d:3d: 38:00:8d:a2:40:27:d0:0f:48:62:de:4e:6b:54:82: 9f:d5:ba:22:48:11:f3:91:b1:5a:f3:59:8f:b4:f6: f0:72:91:f3:a9:a6:81:d1:f5:fe:0e:2a:6a:f6:08: 3d:fc:2e:c0:cd:de:04:e1:46:cf:2e:d0:fe:6a:ab: 93:36:d5:2a:0d:1c:21:ae:a8:5e:c0:db:b7:7d:ff: 99:0f:e8:37:c0:18:82:d0:b3:95:99:eb:aa:2d:15: f4:bf:3e:88:20:7b:21:e6:95:b3:05:b5:57:f5:ee: 0c:f7:7a:46:5e:19:fc:22:1d:4b:e9:97:cf:cf:8c: d6:0e:82:2b:c5:2f:ab:b2:1d:03:c4:e4:93:52:cd: 14:9f:51:82:2f:65:46:62:1d:41:09:bb:b7:09:90: 3e:24:ea:41:76:3c:d6:66:47:cb:dd:88:64:74:75: d2:ef:0e:35:a1:b6:13:b8:d8:79:1d:68:04:db:16: a9:a5:e4:eb:b9:ae:44:d7:fb:89:04:8d:11:6e:d5: 03:22:af:2f:06:cd:de:98:ad:4f:ea:ea:96:65:9d: ad:39:92:93:8f:2b:f9:eb:45:30:a0:07:5b:90:9a: a5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4F:11:BD:28:28:19:07:4F:B8:52:09:08:53:11:2F:D5:30:89:CE X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a46b::/48 Signature Algorithm: sha256WithRSAEncryption 8d:bb:43:c7:42:55:a7:c3:94:0c:7b:9d:bf:03:9c:d0:a9:4f: 0a:f9:c3:f8:3b:eb:7a:f5:ee:6b:24:9b:7e:ba:0b:dd:19:14: 2e:7f:40:6a:60:b7:a8:f0:fa:5d:94:a0:67:11:14:f5:c7:d4: 59:7a:7d:ab:21:d0:73:3d:a3:75:69:50:d2:c8:ea:a9:c3:78: 24:fc:af:34:a9:37:69:a5:7b:91:9c:7b:c9:90:87:02:b9:1f: f4:5a:71:cc:7e:ac:7e:8f:34:6d:e7:b0:46:63:16:76:5d:d7: 36:72:03:1e:6e:68:d0:6d:3a:29:24:62:f5:15:3f:ec:74:dd: 17:ad:e6:c2:10:79:1c:87:d6:0e:88:d7:d5:0b:47:1b:59:76: 70:6e:e9:7d:40:56:aa:1e:1a:cc:c6:e0:1b:21:87:bf:20:60: b7:71:0c:a7:66:3e:a3:6c:98:2c:5e:ab:05:3f:19:9c:70:94: 86:e2:8e:3f:88:ae:86:ed:85:cd:f5:44:f3:57:8d:9f:76:8d: 24:30:6c:69:e7:ac:56:92:97:ed:1c:11:75:d2:a1:f6:c8:7c: 44:ff:71:82:20:9f:9c:d6:a1:a5:8e:de:60:14:2a:db:9f:2c: e1:85:e2:86:a9:5b:09:2b:49:d7:39:d1:7e:9a:19:8e:0a:32: d6:02:57:2b -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUNE6buU7iTGPEPQFvDpF4Omo2cnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQ0WhcNMjcwNjAxMTIxNzQ0 WjAzMTEwLwYDVQQDEyg4ODRGMTFCRDI4MjgxOTA3NEZCODUyMDkwODUzMTEyRkQ1 MzA4OUNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOGnNTDxF0tL /6EacozqZSb+tWMy/DV0Z6w2DT04AI2iQCfQD0hi3k5rVIKf1boiSBHzkbFa81mP tPbwcpHzqaaB0fX+Dipq9gg9/C7Azd4E4UbPLtD+aquTNtUqDRwhrqhewNu3ff+Z D+g3wBiC0LOVmeuqLRX0vz6IIHsh5pWzBbVX9e4M93pGXhn8Ih1L6ZfPz4zWDoIr xS+rsh0DxOSTUs0Un1GCL2VGYh1BCbu3CZA+JOpBdjzWZkfL3YhkdHXS7w41obYT uNh5HWgE2xappeTrua5E1/uJBI0RbtUDIq8vBs3emK1P6uqWZZ2tOZKTjyv560Uw oAdbkJqlOwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFIhPEb0oKBkHT7hSCQhTES/V MInOMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjEzNDM2NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMw MzQzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpGswDQYJKoZIhvcNAQELBQADggEBAI27 Q8dCVafDlAx7nb8DnNCpTwr5w/g763r17mskm366C90ZFC5/QGpgt6jw+l2UoGcR FPXH1Fl6fash0HM9o3VpUNLI6qnDeCT8rzSpN2mle5Gce8mQhwK5H/Raccx+rH6P NG3nsEZjFnZd1zZyAx5uaNBtOikkYvUVP+x03Ret5sIQeRyH1g6I19ULRxtZdnBu 6X1AVqoeGszG4Bshh78gYLdxDKdmPqNsmCxeqwU/GZxwlIbijj+Irobthc31RPNX jZ92jSQwbGnnrFaSl+0cEXXSofbIfET/cYIgn5zWoaWO3mAUKtufLOGF4oapWwkr Sdc50X6aGY4KMtYCVys= -----END CERTIFICATE-----Generated at Thu Jun 4 01:20:08 2026 by rpki-client