$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/323630323a663431313a3a2f34302d3430203d3e20333936303634.roa File: 323630323a663431313a3a2f34302d3430203d3e20333936303634.roa (raw, json) Hash identifier: KmCDZIJXG0PHtpQamYaUdVuOBPL5Lf7mclfmg/J6SQI= Subject key identifier: B0:4A:04:FB:EE:93:CA:C7:C7:7B:54:06:09:A2:10:AE:AC:63:EE:CF Certificate issuer: /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Certificate serial: 5527EF57CF550385EEBA4EEBE9CA901674353798 Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/323630323a663431313a3a2f34302d3430203d3e20333936303634.roa Signing time: Sat 03 Oct 2026 10:46:42 +0000 ROA not before: Sat 03 Oct 2026 10:41:42 +0000 ROA not after: Sat 02 Oct 2027 10:46:42 +0000 asID: 396064 IP address blocks: 2602:f411::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 12:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:27:ef:57:cf:55:03:85:ee:ba:4e:eb:e9:ca:90:16:74:35:37:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Validity Not Before: Oct 3 10:41:42 2026 GMT Not After : Oct 2 10:46:42 2027 GMT Subject: CN=B04A04FBEE93CAC7C77B540609A210AEAC63EECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0a:f0:d2:0c:42:2f:7e:cd:60:0b:9f:f7:a6: 44:6c:03:b2:a6:50:f7:41:9e:fb:e8:74:87:c4:1d: 19:98:02:66:da:74:1c:80:49:08:f1:f5:2a:cc:36: a9:b8:9a:7b:ba:d4:6b:94:4e:dd:57:19:a5:0a:f9: 5f:5d:05:24:3a:da:cd:93:49:12:d4:a6:37:67:d5: 97:00:ac:5e:8e:87:1c:5f:69:28:75:4d:e9:47:e1: 8c:4e:87:1c:0e:5f:48:15:38:97:1e:79:17:0b:92: e5:0e:33:ec:71:4f:1c:48:e6:8c:ab:ce:25:79:ce: 07:37:eb:2d:66:32:56:cc:57:72:4d:2e:8e:99:f2: c0:20:65:bb:47:61:f2:ad:55:f5:20:4a:48:bf:57: 63:d3:0c:b9:28:5e:ae:54:78:ef:6a:79:c3:80:88: 4d:e8:12:75:7c:3c:c8:84:51:86:2e:06:2e:f8:ac: 7d:59:81:ab:70:d8:cc:7b:09:50:11:6c:e1:c5:28: 23:32:74:ed:45:07:f5:55:b1:1f:14:6c:1a:e9:50: d1:9b:4b:a6:d0:e8:1f:67:09:72:d5:bd:51:f6:60: 05:f8:d3:12:71:77:b2:1d:1e:e8:51:5d:2d:a9:52: 96:38:93:23:d9:1d:c8:de:ce:e0:aa:f6:ed:53:b6: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:04:FB:EE:93:CA:C7:C7:7B:54:06:09:A2:10:AE:AC:63:EE:CF X509v3 Authority Key Identifier: keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/323630323a663431313a3a2f34302d3430203d3e20333936303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f411::/40 Signature Algorithm: sha256WithRSAEncryption 22:3a:fb:f3:2f:0d:85:01:24:50:a5:1f:44:65:47:76:0f:7b: 26:b0:c0:ad:e1:46:be:a6:2d:c6:3b:94:57:37:67:cc:30:96: e4:e0:f0:6b:26:75:8c:3c:60:3b:be:31:75:b3:43:41:93:a2: c2:fb:a9:38:fc:f0:88:c3:26:ba:cc:af:7b:8c:61:6c:c7:69: ec:00:5e:e5:71:42:c4:14:f7:70:b9:6b:82:2d:cf:37:8a:47: 1e:80:ff:54:a0:7e:8d:ae:05:74:3d:89:1e:11:48:53:aa:6c: cc:63:d7:b4:e4:4e:10:2e:3b:84:84:b7:dd:6b:b9:c3:57:f5: 2b:46:0d:bc:50:e0:7b:d1:1c:b1:b4:50:ab:5f:88:6f:e5:b2: 1f:4d:a2:19:20:62:83:d0:31:03:81:21:3b:8f:c9:d5:10:52: 6d:e4:0f:62:9d:f4:c2:06:04:12:4f:ee:f8:9f:72:24:68:90: 6a:8c:57:63:9a:4f:b4:be:a4:36:d9:d6:3a:84:b8:49:05:8d: db:be:2b:d2:c8:5a:5c:3c:05:6f:ee:75:95:75:b4:f9:93:77: 8f:ad:1c:c6:b2:d2:b8:2e:e4:3e:89:d2:29:8b:31:7c:9c:65: 95:13:37:b0:83:a7:47:01:64:cd:92:cc:89:62:ec:bb:5d:52: cb:8c:d3:57 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIUVSfvV89VA4Xuuk7r6cqQFnQ1N5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFk N2JkOTU1MmMzMGNlZTBiOWMwHhcNMjYxMDAzMTA0MTQyWhcNMjcxMDAyMTA0NjQy WjAzMTEwLwYDVQQDEyhCMDRBMDRGQkVFOTNDQUM3Qzc3QjU0MDYwOUEyMTBBRUFD NjNFRUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wrw0gxCL37N YAuf96ZEbAOyplD3QZ776HSHxB0ZmAJm2nQcgEkI8fUqzDapuJp7utRrlE7dVxml CvlfXQUkOtrNk0kS1KY3Z9WXAKxejoccX2kodU3pR+GMToccDl9IFTiXHnkXC5Ll DjPscU8cSOaMq84lec4HN+stZjJWzFdyTS6OmfLAIGW7R2HyrVX1IEpIv1dj0wy5 KF6uVHjvannDgIhN6BJ1fDzIhFGGLgYu+Kx9WYGrcNjMewlQEWzhxSgjMnTtRQf1 VbEfFGwa6VDRm0um0OgfZwly1b1R9mAF+NMScXeyHR7oUV0tqVKWOJMj2R3I3s7g qvbtU7bhEwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFLBKBPvuk8rHx3tUBgmiEK6s Y+7PMB8GA1UdIwQYMBaAFHr6IjtiOLDMY3T3/omUNk+/j1TeMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8yLzdBRkEyMjNCNjIzOEIwQ0M2Mzc0RjdGRTg5OTQzNjRG QkY4RjU0REUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUt NGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80NjU1M2FkMC1mYzE5LTRmMjgtOGVlMi1i NWNmZmQ0MzAzMDAvNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFkN2Jk OTU1MmMzMGNlZTBiOWMuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0LTU4MGQxMzY5YjdjNC8yLzMyMzYzMDMy M2E2NjM0MzEzMTNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMzMzkzNjMwMzYzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACYC9BEAMA0GCSqGSIb3DQEBCwUAA4IBAQAiOvvzLw2FASRQpR9E ZUd2D3smsMCt4Ua+pi3GO5RXN2fMMJbk4PBrJnWMPGA7vjF1s0NBk6LC+6k4/PCI wya6zK97jGFsx2nsAF7lcULEFPdwuWuCLc83ikcegP9UoH6NrgV0PYkeEUhTqmzM Y9e05E4QLjuEhLfda7nDV/UrRg28UOB70RyxtFCrX4hv5bIfTaIZIGKD0DEDgSE7 j8nVEFJt5A9infTCBgQST+74n3IkaJBqjFdjmk+0vqQ22dY6hLhJBY3bvivSyFpc PAVv7nWVdbT5k3ePrRzGstK4LuQ+idIpizF8nGWVEzewg6dHAWTNksyJYuy7XVLL jNNX -----END CERTIFICATE-----Generated at Mon Oct 19 02:29:22 2026 by rpki-client