$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa File: 323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (raw, json) Hash identifier: S2I7MFxagpC/hWfkw5xbkk1THpqc1oHMahoIddI+A44= Subject key identifier: D7:5C:3A:53:BF:5A:72:E2:CE:5B:8E:D9:D1:16:F9:7C:A9:1E:47:A2 Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Certificate serial: 624476CA8014BC98835C52A3DFF48F4419298114 Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa Signing time: Fri 24 Oct 2025 17:13:20 +0000 ROA not before: Fri 24 Oct 2025 17:08:20 +0000 ROA not after: Fri 23 Oct 2026 17:13:20 +0000 asID: 213605 IP address blocks: 2602:f92a:dea0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 10:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:44:76:ca:80:14:bc:98:83:5c:52:a3:df:f4:8f:44:19:29:81:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Validity Not Before: Oct 24 17:08:20 2025 GMT Not After : Oct 23 17:13:20 2026 GMT Subject: CN=D75C3A53BF5A72E2CE5B8ED9D116F97CA91E47A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:b8:66:9e:54:a7:a4:5a:cd:8b:f6:af:51: af:f3:3a:b7:96:74:0f:d8:5c:12:16:01:5b:c7:a6: 11:08:b8:aa:c9:43:3a:9c:7e:6e:5f:9c:aa:c5:19: 8f:55:4b:43:25:e1:17:6a:72:55:a4:7e:2d:51:ae: 35:70:58:89:30:ef:e5:0d:6b:e9:28:4f:b2:5c:05: 07:51:c6:54:f2:8b:80:95:e3:72:f1:d0:9e:8d:bd: f3:5f:9c:7d:fb:56:9f:cd:fb:6b:fb:7e:d7:0d:5c: 9d:15:d1:48:e8:a9:5d:a1:ff:ca:c7:e7:9e:50:8b: 6b:7c:3e:7b:27:a7:47:47:94:e1:3b:f2:3d:d1:7d: 45:d9:1d:4f:58:b7:59:c9:58:48:12:e9:b5:d0:9c: 8f:42:3f:cc:f4:12:de:6b:3a:10:f7:da:87:9b:c1: 84:a5:1b:c0:1d:76:2b:45:7d:80:1b:04:53:e6:49: 61:d8:82:19:87:b6:70:6f:dc:d6:cd:b6:f9:35:e2: 3d:4b:7b:08:71:34:d2:6b:5a:4a:17:1d:58:28:1c: 2d:23:17:73:48:5b:10:4c:07:d0:1e:9d:0e:89:e6: e1:c9:74:9d:46:94:06:a9:3c:c8:99:14:2d:5a:1e: 8f:9f:6b:22:7e:07:59:c9:f8:d6:95:bd:39:6f:b3: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5C:3A:53:BF:5A:72:E2:CE:5B:8E:D9:D1:16:F9:7C:A9:1E:47:A2 X509v3 Authority Key Identifier: keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:dea0::/44 Signature Algorithm: sha256WithRSAEncryption 39:dd:0b:13:2f:ba:ea:cb:59:0d:c1:8c:d6:73:f9:b7:67:b0: 00:25:86:9f:cb:62:94:d8:33:ff:2b:38:b2:19:84:f9:54:7c: 6d:97:72:14:e2:a4:e6:1e:86:7c:75:c2:fc:6c:cc:12:0a:34: ee:ce:8f:3a:25:2b:33:54:eb:2f:cd:7e:8d:63:a8:8f:4c:6e: f8:b2:dd:13:d0:32:6c:99:1a:f2:5c:ee:16:16:ba:dd:5b:e2: 4c:de:68:db:3a:94:28:f0:8b:cb:64:0e:bc:ee:de:cd:56:23: 55:a4:a5:52:6a:ac:83:90:f3:71:ac:08:48:cd:f9:1a:df:51: 66:fc:ba:08:f4:50:14:04:ca:7c:48:92:b9:fb:37:18:81:66: f9:fd:6c:c2:47:75:d6:5c:bf:67:4f:f9:a3:61:0d:0b:07:03: d7:03:69:2a:8a:76:55:74:f2:1b:42:37:18:3a:ed:74:46:4b: 6b:7b:fa:5d:cd:27:08:4a:18:0f:fa:28:ca:fe:f4:78:4e:55: 94:99:68:a0:2f:e9:c7:51:bb:f6:77:2c:ce:27:04:01:af:8e: c1:c8:b2:7d:34:05:85:a5:29:b5:b3:12:d5:64:7b:e5:fa:21: 0c:41:d4:90:40:56:d9:19:12:f4:d5:ca:61:07:54:a7:c3:f6: 10:7b:99:b4 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUYkR2yoAUvJiDXFKj3/SPRBkpgRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2 MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwODIwWhcNMjYxMDIzMTcxMzIw WjAzMTEwLwYDVQQDEyhENzVDM0E1M0JGNUE3MkUyQ0U1QjhFRDlEMTE2Rjk3Q0E5 MUU0N0EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ii4Zp5Up6Ra zYv2r1Gv8zq3lnQP2FwSFgFbx6YRCLiqyUM6nH5uX5yqxRmPVUtDJeEXanJVpH4t Ua41cFiJMO/lDWvpKE+yXAUHUcZU8ouAleNy8dCejb3zX5x9+1afzftr+37XDVyd FdFI6Kldof/Kx+eeUItrfD57J6dHR5ThO/I90X1F2R1PWLdZyVhIEum10JyPQj/M 9BLeazoQ99qHm8GEpRvAHXYrRX2AGwRT5klh2IIZh7Zwb9zWzbb5NeI9S3sIcTTS a1pKFx1YKBwtIxdzSFsQTAfQHp0OiebhyXSdRpQGqTzImRQtWh6Pn2sifgdZyfjW lb05b7MhSQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFNdcOlO/WnLizluO2dEW+Xyp HkeiMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4 LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx NzZmMTBlMjAxMGQyMmQuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjQ2NTYxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMx MzMzNjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAvkq3qAwDQYJKoZIhvcNAQELBQADggEBADnd CxMvuurLWQ3BjNZz+bdnsAAlhp/LYpTYM/8rOLIZhPlUfG2XchTipOYehnx1wvxs zBIKNO7OjzolKzNU6y/Nfo1jqI9Mbviy3RPQMmyZGvJc7hYWut1b4kzeaNs6lCjw i8tkDrzu3s1WI1WkpVJqrIOQ83GsCEjN+RrfUWb8ugj0UBQEynxIkrn7NxiBZvn9 bMJHddZcv2dP+aNhDQsHA9cDaSqKdlV08htCNxg67XRGS2t7+l3NJwhKGA/6KMr+ 9HhOVZSZaKAv6cdRu/Z3LM4nBAGvjsHIsn00BYWlKbWzEtVke+X6IQxB1JBAVtkZ EvTVymEHVKfD9hB7mbQ= -----END CERTIFICATE-----Generated at Tue Oct 28 12:29:59 2025 by rpki-client