$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa File: 323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa (raw, json) Hash identifier: NoijToevXH4AY1nT+bYQDk0tt1ICs6mheIm7a4+uBiw= Subject key identifier: A0:55:79:C7:A3:C8:CC:1E:D0:03:54:92:B0:A9:34:47:F8:29:FE:12 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 6A63E33221077ABA8DFAA5B7E9B3022805E11D82 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa Signing time: Tue 02 Jun 2026 12:17:49 +0000 ROA not before: Tue 02 Jun 2026 12:12:49 +0000 ROA not after: Tue 01 Jun 2027 12:17:49 +0000 asID: 211729 IP address blocks: 2602:f92a:a471::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 00:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:63:e3:32:21:07:7a:ba:8d:fa:a5:b7:e9:b3:02:28:05:e1:1d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Jun 2 12:12:49 2026 GMT Not After : Jun 1 12:17:49 2027 GMT Subject: CN=A05579C7A3C8CC1ED0035492B0A93447F829FE12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:b1:2d:33:40:37:f8:65:95:b2:9e:07:44: d6:fc:87:58:d9:83:7b:e4:c3:82:39:83:db:31:53: 5f:d4:0c:86:8c:ca:7a:64:a6:0a:44:09:ef:0a:b5: 97:86:6d:89:73:37:57:82:a4:ef:27:1e:dc:87:48: ac:f8:d7:9e:0a:da:2b:8a:9a:73:5d:f1:33:a9:5e: 28:cb:61:00:1b:e7:67:36:ab:3d:93:e7:7d:ce:41: 38:69:d5:3a:9d:aa:2f:50:21:8f:09:ab:ac:01:ac: df:8c:d7:36:d5:3c:e9:a0:d2:5a:a0:ef:17:18:77: c4:dc:98:74:36:0e:fb:19:46:b6:35:c6:e5:a5:c1: a3:28:37:a9:fb:63:f5:57:74:18:05:f7:ce:20:c6: b0:f8:fe:e7:b6:55:5f:7f:af:b6:e8:6e:e0:83:6e: 3b:90:39:47:74:e8:5e:ef:a6:af:04:10:a3:bc:e6: b2:3a:6e:3e:da:2c:15:21:5a:2d:8a:ba:84:00:5e: b0:59:a8:9c:9a:54:a3:7a:63:04:ab:bf:57:67:27: 0a:c0:d0:c8:e7:ae:33:97:10:a9:a5:02:78:90:b8: 2d:e8:c3:55:40:e7:3c:ec:e9:7b:3a:01:b1:90:01: 61:2c:68:04:db:c2:09:6c:ab:01:05:13:96:c6:2e: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:55:79:C7:A3:C8:CC:1E:D0:03:54:92:B0:A9:34:47:F8:29:FE:12 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a471::/48 Signature Algorithm: sha256WithRSAEncryption 57:5f:16:dc:aa:fd:1c:c2:d0:b5:13:1c:97:42:6b:01:ec:d3: 80:0e:43:f8:1f:31:14:3f:2e:f6:a1:dd:8d:93:48:9f:50:fe: 69:b9:69:52:77:df:42:bd:67:15:10:e5:3b:64:34:5f:ad:4a: 25:a3:e5:50:89:32:03:b0:7d:3d:d4:c4:de:6c:6d:ad:25:7b: 07:b4:1b:0c:fd:bb:3b:1d:c5:50:49:44:e9:3c:f9:e0:58:9f: 5b:f6:16:51:66:21:28:ca:35:48:e7:39:fa:97:91:6a:a3:ac: 58:fd:6f:cc:ad:81:83:85:ca:b1:2c:7c:6e:a0:95:82:e5:f9: 0e:c7:3e:83:4d:9f:aa:d4:82:72:77:e0:4f:b3:a6:96:11:47: ef:ea:fd:0b:be:b2:ea:b9:6b:f4:23:8a:64:72:36:c5:99:53: 58:0d:3d:73:5b:ae:5b:57:af:b3:02:d7:bf:4c:7c:60:be:ff: 13:6c:f1:e1:38:26:2f:4a:31:db:b2:74:3d:1b:f2:29:a0:ec: ef:21:27:95:e1:11:07:fb:d1:90:e6:a8:c6:d8:93:c0:72:d9: 95:4d:1f:e1:e8:4d:90:94:17:25:73:9d:05:cd:a6:fd:59:18: 5f:a9:f9:b4:59:88:c5:ae:b0:7d:5c:84:cc:ea:94:a2:1d:9c: 7e:cf:b9:59 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUamPjMiEHerqN+qW36bMCKAXhHYIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQ5WhcNMjcwNjAxMTIxNzQ5 WjAzMTEwLwYDVQQDEyhBMDU1NzlDN0EzQzhDQzFFRDAwMzU0OTJCMEE5MzQ0N0Y4 MjlGRTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GexLTNAN/hl lbKeB0TW/IdY2YN75MOCOYPbMVNf1AyGjMp6ZKYKRAnvCrWXhm2JczdXgqTvJx7c h0is+NeeCtorippzXfEzqV4oy2EAG+dnNqs9k+d9zkE4adU6naovUCGPCausAazf jNc21TzpoNJaoO8XGHfE3Jh0Ng77GUa2NcblpcGjKDep+2P1V3QYBffOIMaw+P7n tlVff6+26G7gg247kDlHdOhe76avBBCjvOayOm4+2iwVIVotirqEAF6wWaicmlSj emMEq79XZycKwNDI564zlxCppQJ4kLgt6MNVQOc87Ol7OgGxkAFhLGgE28IJbKsB BROWxi4U0wIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFKBVecejyMwe0ANUkrCpNEf4 Kf4SMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjEzNDM3MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx MzEzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpHEwDQYJKoZIhvcNAQELBQADggEBAFdf Ftyq/RzC0LUTHJdCawHs04AOQ/gfMRQ/Lvah3Y2TSJ9Q/mm5aVJ330K9ZxUQ5Ttk NF+tSiWj5VCJMgOwfT3UxN5sba0lewe0Gwz9uzsdxVBJROk8+eBYn1v2FlFmISjK NUjnOfqXkWqjrFj9b8ytgYOFyrEsfG6glYLl+Q7HPoNNn6rUgnJ34E+zppYRR+/q /Qu+suq5a/QjimRyNsWZU1gNPXNbrltXr7MC179MfGC+/xNs8eE4Ji9KMduydD0b 8img7O8hJ5XhEQf70ZDmqMbYk8By2ZVNH+HoTZCUFyVznQXNpv1ZGF+p+bRZiMWu sH1chMzqlKIdnH7PuVk= -----END CERTIFICATE-----Generated at Thu Jun 4 01:20:39 2026 by rpki-client