$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa File: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (raw, json) Hash identifier: h8Tz+ELaXxt09YYshjNcMlDlGlamWEQcU/Xd5fYwuZk= Subject key identifier: 4A:E7:95:7A:A0:87:5A:F2:7D:5B:4F:82:93:18:59:7B:F4:C0:1C:14 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 51E61C852C1ECF1142BB6DF2857071EBB2195459 Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa Signing time: Tue 02 Jun 2026 12:17:50 +0000 ROA not before: Tue 02 Jun 2026 12:12:50 +0000 ROA not after: Tue 01 Jun 2027 12:17:50 +0000 asID: 151194 IP address blocks: 2602:f92a:a47b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 01:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e6:1c:85:2c:1e:cf:11:42:bb:6d:f2:85:70:71:eb:b2:19:54:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Jun 2 12:12:50 2026 GMT Not After : Jun 1 12:17:50 2027 GMT Subject: CN=4AE7957AA0875AF27D5B4F829318597BF4C01C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:37:c8:6a:40:5a:52:8b:1b:db:9a:f8:eb: cc:9b:a5:c1:f2:f0:39:ae:c0:7e:8a:eb:f9:de:72: 37:89:a3:23:ce:27:52:c3:d3:0c:9c:e1:14:2b:b9: 4e:ff:00:4e:e5:f1:23:b3:ba:22:e0:08:73:2b:04: 76:3a:ac:eb:28:cb:df:d8:28:a6:8e:92:59:53:30: 4f:5f:9d:82:7d:42:d5:5c:46:22:b1:f9:e7:d7:25: 3a:a2:e8:a7:39:59:74:f9:06:e5:5a:96:41:c2:19: 33:6e:54:ad:c3:51:cd:24:ed:0a:7e:f7:45:a7:da: a0:93:14:a4:81:08:73:62:2a:9e:db:fe:a0:f2:c4: de:d3:18:79:d8:81:1a:14:02:5f:bc:ea:a8:31:4c: 63:0f:0d:34:e3:be:19:f9:c3:5e:6f:b2:79:93:81: ba:f8:a3:dc:b3:bc:18:15:8b:e1:21:0d:42:a6:66: b8:a2:95:34:d4:65:df:bd:fa:15:e7:dc:b8:e9:f0: 2a:c4:59:da:b2:79:65:6b:68:94:22:83:00:9a:dc: a1:7c:22:8b:8c:7e:10:68:7f:3e:de:18:2b:9d:37: 25:36:a3:5c:86:5d:ac:22:b8:5b:c2:87:1e:02:20: 7d:71:42:c9:b0:35:ec:33:0f:28:75:f8:47:22:4e: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E7:95:7A:A0:87:5A:F2:7D:5B:4F:82:93:18:59:7B:F4:C0:1C:14 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a47b::/48 Signature Algorithm: sha256WithRSAEncryption 21:44:27:82:00:f9:32:3d:ec:7f:b6:d9:2c:2e:dd:ec:f5:ad: 18:ae:20:d0:02:9b:d6:98:f2:86:0b:4d:ab:b1:a4:df:20:54: fb:86:c6:81:f7:eb:92:08:ba:12:1b:e7:4d:64:c1:61:22:6a: 7e:3f:b7:11:00:bc:67:5b:f3:0e:33:e5:5c:62:b4:b6:4e:14: ee:9a:c5:7c:7f:4b:e5:df:1c:b9:d4:53:8e:5b:f5:31:87:ec: 8d:28:14:80:8e:c2:98:df:78:28:8b:1b:b5:d9:ea:6a:79:e2: fc:fc:87:bc:29:aa:7b:f9:b0:41:ae:2a:18:95:32:6d:c7:ab: 6b:ca:ec:8e:6b:1c:af:e8:67:1c:65:ba:67:85:4b:27:d0:ce: 83:88:cc:a8:67:d1:8a:eb:c2:47:bd:4b:01:e6:81:af:74:94: bc:bd:5d:58:8d:d4:c6:6f:69:dd:95:55:37:80:a0:84:d4:3c: 70:99:3a:a3:f7:29:0e:0a:0c:72:f6:94:9b:ed:d0:3f:0f:c9: c2:1e:98:e3:8d:84:d7:df:37:1b:21:fe:93:97:3f:a5:cd:63: da:31:95:ae:bc:da:73:5c:c7:7b:c4:46:9f:1e:e6:03:35:9e: 44:ac:e8:a4:4a:fa:d1:9f:bb:42:11:e2:da:ae:6c:9e:00:fb: 1b:af:77:54 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUUeYchSwezxFCu23yhXBx67IZVFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjUwWhcNMjcwNjAxMTIxNzUw WjAzMTEwLwYDVQQDEyg0QUU3OTU3QUEwODc1QUYyN0Q1QjRGODI5MzE4NTk3QkY0 QzAxQzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZo3yGpAWlKL G9ua+OvMm6XB8vA5rsB+iuv53nI3iaMjzidSw9MMnOEUK7lO/wBO5fEjs7oi4Ahz KwR2OqzrKMvf2CimjpJZUzBPX52CfULVXEYisfnn1yU6ouinOVl0+QblWpZBwhkz blStw1HNJO0KfvdFp9qgkxSkgQhzYiqe2/6g8sTe0xh52IEaFAJfvOqoMUxjDw00 474Z+cNeb7J5k4G6+KPcs7wYFYvhIQ1Cpma4opU01GXfvfoV59y46fAqxFnasnll a2iUIoMAmtyhfCKLjH4QaH8+3hgrnTclNqNchl2sIrhbwoceAiB9cULJsDXsMw8o dfhHIk5xaQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFErnlXqgh1ryfVtPgpMYWXv0 wBwUMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjEzNDM3NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1 MzEzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpHswDQYJKoZIhvcNAQELBQADggEBACFE J4IA+TI97H+22Swu3ez1rRiuINACm9aY8oYLTauxpN8gVPuGxoH365IIuhIb501k wWEian4/txEAvGdb8w4z5VxitLZOFO6axXx/S+XfHLnUU45b9TGH7I0oFICOwpjf eCiLG7XZ6mp54vz8h7wpqnv5sEGuKhiVMm3Hq2vK7I5rHK/oZxxlumeFSyfQzoOI zKhn0Yrrwke9SwHmga90lLy9XViN1MZvad2VVTeAoITUPHCZOqP3KQ4KDHL2lJvt 0D8PycIemOONhNffNxsh/pOXP6XNY9oxla682nNcx3vERp8e5gM1nkSs6KRK+tGf u0IR4tqubJ4A+xuvd1Q= -----END CERTIFICATE-----Generated at Thu Jun 4 01:20:37 2026 by rpki-client