$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34302d3438203d3e203539393933.roa File: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (raw, json) Hash identifier: WmNq9R5LoI7SG6SSOk18g3sMb3zAOCvlOU5kIbj6SGM= Subject key identifier: 27:40:38:7A:25:80:CD:02:8A:8D:CF:D4:8C:A2:17:AD:EB:9F:5D:63 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 362A2F1A319987478C9F26EF708EC45F27DB2C5C Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34302d3438203d3e203539393933.roa Signing time: Thu 08 Oct 2026 00:29:21 +0000 ROA not before: Thu 08 Oct 2026 00:24:21 +0000 ROA not after: Thu 07 Oct 2027 00:29:21 +0000 asID: 59993 IP address blocks: 2602:fa7a::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 06:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2a:2f:1a:31:99:87:47:8c:9f:26:ef:70:8e:c4:5f:27:db:2c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Oct 8 00:24:21 2026 GMT Not After : Oct 7 00:29:21 2027 GMT Subject: CN=2740387A2580CD028A8DCFD48CA217ADEB9F5D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:c5:9b:33:b7:23:b6:6f:20:97:9f:61:38: 0b:a8:53:c9:31:8d:65:8d:93:06:50:c8:fa:e7:34: 0b:80:2a:3c:bb:15:21:82:53:92:d6:6c:cc:71:dd: 1e:f4:03:34:af:d7:5f:40:72:2d:dc:a7:0e:89:20: 62:12:b5:2f:a8:d1:15:fb:05:49:bc:0e:78:b6:b6: cd:de:a6:1a:c3:8e:ff:25:36:63:50:d3:b6:ac:bb: 75:ab:23:21:5f:55:09:b0:ef:02:e0:90:00:b8:a2: 80:4b:da:88:0e:b8:7b:b2:8f:ee:b9:b0:bd:ca:73: e5:42:17:4a:ce:07:8d:de:d4:ff:0c:7b:39:d2:7e: 5d:ad:ae:eb:de:88:e6:e2:d9:e6:2a:b7:85:a6:ca: e0:33:e5:b5:b3:6b:cb:35:bc:d8:c4:29:41:93:b4: bd:13:a5:c4:38:1f:6a:cb:98:69:41:27:f5:a8:55: 08:ba:e8:28:84:33:15:c2:40:a3:f3:48:02:22:1c: d7:7e:09:63:46:5a:69:30:77:be:65:24:04:97:0a: 2d:4a:23:01:c9:85:8b:9a:c7:52:1e:bc:01:5b:fa: c3:91:b4:42:90:58:da:52:82:99:d1:c7:3e:2a:c8: fc:72:09:de:68:f1:1b:3a:80:cb:ff:55:3b:b3:35: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:40:38:7A:25:80:CD:02:8A:8D:CF:D4:8C:A2:17:AD:EB:9F:5D:63 X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34302d3438203d3e203539393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fa7a::/40 Signature Algorithm: sha256WithRSAEncryption a3:86:71:75:f0:f0:7c:87:a3:36:21:c4:c3:7f:81:2b:80:18: 24:05:4c:1c:68:91:21:47:eb:e6:74:f0:f8:91:4d:06:36:db: 1c:e9:28:11:1a:93:7b:12:5e:a7:c0:a7:13:96:fc:67:01:b1: 32:ea:a6:92:46:f7:8a:3f:44:5f:37:b1:8f:d5:f9:eb:76:6d: a8:e3:2f:86:1e:ce:28:44:f7:e0:01:3f:35:b1:d9:95:22:d9: 23:3d:29:10:8f:10:fd:43:e2:13:0d:09:3a:2a:9c:8d:71:ee: a7:f9:05:c7:84:31:ef:b5:d5:ad:d9:55:e8:ea:e7:18:1f:b6: 00:46:db:c6:db:bb:d0:6f:82:d5:b0:ec:22:86:9e:4b:86:2c: a8:74:a8:3e:7c:87:a1:36:75:bf:35:fa:55:a8:7a:52:9b:6e: ea:10:66:29:0b:ae:57:d8:48:89:a9:1e:24:4e:df:ca:85:49: 9a:3b:d4:18:f9:7d:1e:d1:1a:ff:9e:ff:6d:9b:c3:b3:c3:d5: d7:19:fa:be:ec:7b:c7:1a:b8:65:b3:28:88:95:6e:f8:17:4a: 57:b0:79:44:1c:71:79:91:51:13:d3:35:37:69:02:10:11:84: 04:7b:1f:73:63:ce:7b:0f:28:b1:62:09:90:4c:d4:96:a5:ab: 69:30:7e:4c -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUNiovGjGZh0eMnybvcI7EXyfbLFwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjYxMDA4MDAyNDIxWhcNMjcxMDA3MDAyOTIx WjAzMTEwLwYDVQQDEygyNzQwMzg3QTI1ODBDRDAyOEE4RENGRDQ4Q0EyMTdBREVC OUY1RDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LnFmzO3I7Zv IJefYTgLqFPJMY1ljZMGUMj65zQLgCo8uxUhglOS1mzMcd0e9AM0r9dfQHIt3KcO iSBiErUvqNEV+wVJvA54trbN3qYaw47/JTZjUNO2rLt1qyMhX1UJsO8C4JAAuKKA S9qIDrh7so/uubC9ynPlQhdKzgeN3tT/DHs50n5dra7r3ojm4tnmKreFpsrgM+W1 s2vLNbzYxClBk7S9E6XEOB9qy5hpQSf1qFUIuugohDMVwkCj80gCIhzXfgljRlpp MHe+ZSQElwotSiMByYWLmsdSHrwBW/rDkbRCkFjaUoKZ0cc+Ksj8cgneaPEbOoDL /1U7szWpKwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFCdAOHolgM0Cio3P1IyiF63r n11jMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi83LzMyMzYzMDMy M2E2NjYxMzc2MTNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM1MzkzOTM5MzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAmAvp6ADANBgkqhkiG9w0BAQsFAAOCAQEAo4ZxdfDwfIejNiHEw3+B K4AYJAVMHGiRIUfr5nTw+JFNBjbbHOkoERqTexJep8CnE5b8ZwGxMuqmkkb3ij9E Xzexj9X563ZtqOMvhh7OKET34AE/NbHZlSLZIz0pEI8Q/UPiEw0JOiqcjXHup/kF x4Qx77XVrdlV6OrnGB+2AEbbxtu70G+C1bDsIoaeS4YsqHSoPnyHoTZ1vzX6Vah6 Uptu6hBmKQuuV9hIiakeJE7fyoVJmjvUGPl9HtEa/57/bZvDs8PV1xn6vux7xxq4 ZbMoiJVu+BdKV7B5RBxxeZFRE9M1N2kCEBGEBHsfc2POew8osWIJkEzUlqWraTB+ TA== -----END CERTIFICATE-----Generated at Sun Oct 25 18:03:10 2026 by rpki-client