$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa File: 323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (raw, json) Hash identifier: GWFj06chKZGucleScz0C7o3A8NGUthJ495skpWCH2b8= Subject key identifier: 8F:0F:61:3C:FB:79:09:71:F3:89:C2:38:A0:B4:8A:BE:B0:28:58:D8 Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Certificate serial: 595727339D5F1004DC24FEE902FB1E00B14E16F2 Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa Signing time: Fri 24 Oct 2025 17:12:48 +0000 ROA not before: Fri 24 Oct 2025 17:07:48 +0000 ROA not after: Fri 23 Oct 2026 17:12:48 +0000 asID: 211575 IP address blocks: 2602:f92a:a478::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 05:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:57:27:33:9d:5f:10:04:dc:24:fe:e9:02:fb:1e:00:b1:4e:16:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Validity Not Before: Oct 24 17:07:48 2025 GMT Not After : Oct 23 17:12:48 2026 GMT Subject: CN=8F0F613CFB790971F389C238A0B48ABEB02858D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:5c:4d:b7:d0:8a:76:72:78:88:13:bc:1e: a1:ac:da:93:df:03:d1:1e:f8:b1:34:e9:bf:a0:a6: a7:08:65:8b:79:02:6e:70:0a:c2:36:35:bf:32:2a: e6:9c:31:7b:c4:0d:8e:c0:80:fa:00:b0:c7:97:da: 6b:56:1b:ea:83:ab:20:f8:74:c1:58:e8:a7:e6:fa: 67:f2:74:1d:e2:e5:a7:17:94:27:2e:93:07:ad:93: f4:57:13:88:be:68:5c:6c:52:db:26:7b:f4:c6:56: 18:8d:b7:aa:b3:c3:02:af:95:22:aa:9e:66:ab:85: b2:8e:04:91:3b:9a:70:ae:8f:52:92:27:1b:d7:7b: af:24:05:b3:c2:ce:39:5e:8a:f9:98:38:14:cc:fc: f4:bc:e0:73:80:1d:9b:dc:71:2c:c6:8f:59:fb:74: d4:6f:64:fd:48:46:5f:e2:34:98:b2:bd:bb:e3:9f: 2c:c2:ea:3c:65:1f:55:d9:c9:21:fd:9f:69:45:58: c5:41:ea:35:a3:46:49:66:61:35:5d:22:dc:63:a4: 10:a2:d4:82:4f:da:85:8a:8d:ca:fb:fb:ed:e7:b2: dd:24:1b:a3:6f:46:85:b8:21:7b:94:15:c9:c4:af: 2d:97:e9:ef:aa:87:04:26:d9:9b:c3:61:29:61:e5: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0F:61:3C:FB:79:09:71:F3:89:C2:38:A0:B4:8A:BE:B0:28:58:D8 X509v3 Authority Key Identifier: keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a478::/48 Signature Algorithm: sha256WithRSAEncryption 4f:93:7d:be:78:b6:86:a2:2e:1c:7d:97:df:d1:cd:4b:b8:17: c6:bd:91:e5:65:b4:75:03:ef:b9:d1:3c:d6:96:1f:e7:26:1d: a9:e9:5f:47:2c:38:32:58:6c:86:d9:d0:6b:55:68:4c:86:b6: 5d:91:e3:03:b9:d0:1a:38:b0:90:b9:11:e2:d9:39:18:56:7b: d6:af:0c:07:54:00:be:c2:2a:6f:55:10:3e:56:f8:a5:28:01: 83:40:9a:cc:44:58:3c:1b:dc:ee:34:5f:1e:86:1c:a6:7f:1f: 12:fc:b8:91:58:96:40:9d:87:b7:91:bf:43:ce:0c:08:d6:30: 92:a6:3e:76:d7:78:96:59:19:ba:d9:82:af:91:9e:f5:a3:ed: 7e:81:aa:c1:a3:de:09:3f:7a:1b:5c:e1:33:70:b7:ff:3e:e7: 55:fd:31:22:04:65:57:e6:3a:92:c6:a1:dd:86:cf:55:07:73: 5e:cf:a6:39:74:39:61:8d:e6:ad:26:82:ee:5e:d1:c5:1d:5e: 0a:66:29:2f:bc:8c:e4:9b:92:47:7b:88:a1:aa:bf:dd:a5:00: d5:04:d8:aa:3f:57:59:d9:50:4a:2e:0c:e4:4c:25:0e:b0:fc: f8:59:92:24:dc:ec:e3:e7:db:78:a3:ae:3b:28:97:9f:25:eb: 45:6c:b8:73 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUWVcnM51fEATcJP7pAvseALFOFvIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2 MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwNzQ4WhcNMjYxMDIzMTcxMjQ4 WjAzMTEwLwYDVQQDEyg4RjBGNjEzQ0ZCNzkwOTcxRjM4OUMyMzhBMEI0OEFCRUIw Mjg1OEQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncxcTbfQinZy eIgTvB6hrNqT3wPRHvixNOm/oKanCGWLeQJucArCNjW/MirmnDF7xA2OwID6ALDH l9prVhvqg6sg+HTBWOin5vpn8nQd4uWnF5QnLpMHrZP0VxOIvmhcbFLbJnv0xlYY jbeqs8MCr5Uiqp5mq4WyjgSRO5pwro9Skicb13uvJAWzws45Xor5mDgUzPz0vOBz gB2b3HEsxo9Z+3TUb2T9SEZf4jSYsr27458swuo8ZR9V2ckh/Z9pRVjFQeo1o0ZJ ZmE1XSLcY6QQotSCT9qFio3K+/vt57LdJBujb0aFuCF7lBXJxK8tl+nvqocEJtmb w2EpYeUQ7wIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFI8PYTz7eQlx84nCOKC0ir6w KFjYMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4 LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx NzZmMTBlMjAxMGQyMmQuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjEzNDM3MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx MzEzNTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpHgwDQYJKoZIhvcNAQELBQADggEBAE+T fb54toaiLhx9l9/RzUu4F8a9keVltHUD77nRPNaWH+cmHanpX0csODJYbIbZ0GtV aEyGtl2R4wO50Bo4sJC5EeLZORhWe9avDAdUAL7CKm9VED5W+KUoAYNAmsxEWDwb 3O40Xx6GHKZ/HxL8uJFYlkCdh7eRv0PODAjWMJKmPnbXeJZZGbrZgq+RnvWj7X6B qsGj3gk/ehtc4TNwt/8+51X9MSIEZVfmOpLGod2Gz1UHc17Ppjl0OWGN5q0mgu5e 0cUdXgpmKS+8jOSbkkd7iKGqv92lANUE2Ko/V1nZUEouDORMJQ6w/PhZkiTc7OPn 23ijrjsol58l60VsuHM= -----END CERTIFICATE-----Generated at Sat Oct 25 11:58:09 2025 by rpki-client