$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa File: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (raw, json) Hash identifier: IBkuk87LMV+FnqYEF6hfLVWmE1OPlroVpgH2GTCd25A= Subject key identifier: 65:4D:99:D0:EE:59:31:C4:55:79:01:CB:6A:C7:18:63:68:8E:0D:6F Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Certificate serial: 4A1B9DA55C0E65545AE44E129DBE1593EA5401ED Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa Signing time: Fri 24 Oct 2025 17:11:12 +0000 ROA not before: Fri 24 Oct 2025 17:06:12 +0000 ROA not after: Fri 23 Oct 2026 17:11:12 +0000 asID: 203236 IP address blocks: 2602:f92a:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1b:9d:a5:5c:0e:65:54:5a:e4:4e:12:9d:be:15:93:ea:54:01:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d Validity Not Before: Oct 24 17:06:12 2025 GMT Not After : Oct 23 17:11:12 2026 GMT Subject: CN=654D99D0EE5931C4557901CB6AC71863688E0D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:7a:87:e7:78:b9:d6:14:85:cc:6f:4b:fc: 41:bd:ce:35:f4:b8:91:94:ea:cd:54:43:e6:91:17: b9:c8:1a:aa:38:c0:14:73:36:00:d8:d2:eb:2b:df: 92:80:8e:19:07:25:ec:2d:5b:10:17:78:c6:46:80: a1:1e:9a:b8:18:68:52:6c:45:07:de:5a:42:10:3a: 8e:74:69:02:cd:07:9c:c9:1c:64:b6:f7:af:55:8e: dd:05:08:4c:5d:33:f0:d3:77:96:17:3d:53:8b:8f: ea:f1:98:1b:2b:b3:28:b0:90:2b:fc:c8:0f:14:ee: 4a:d3:71:b7:cb:2b:1d:09:f3:c8:f0:0f:91:c0:65: f5:b9:4a:9a:96:b1:f3:a2:19:d9:92:03:5f:76:f8: 08:75:aa:b1:8e:90:43:e4:ec:13:4c:e0:32:e5:a9: a3:09:f7:80:04:ac:9b:f8:17:4b:61:e4:5c:7f:c5: 6d:21:09:78:a7:b9:62:83:d4:c8:a0:75:8c:4e:7d: da:05:17:59:cf:24:19:17:05:ea:89:3d:5c:f0:7e: 0d:d0:2d:07:a6:91:fb:35:27:9e:df:4e:af:af:b5: 9b:3c:9a:17:9a:f1:51:22:6c:b8:c6:0d:b1:d6:a2: 7a:b7:6d:cc:61:66:e1:48:92:9e:a3:fb:32:54:d5: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4D:99:D0:EE:59:31:C4:55:79:01:CB:6A:C7:18:63:68:8E:0D:6F X509v3 Authority Key Identifier: keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:e000::/40 Signature Algorithm: sha256WithRSAEncryption 16:a4:89:83:c2:0f:97:60:0c:ec:e1:bb:c4:81:75:02:1b:94: 78:ef:2d:10:d1:05:a9:42:50:bb:ee:00:36:89:c3:f4:7a:ae: e6:5b:c4:65:b4:12:16:b1:54:40:f8:f9:f9:00:81:fd:9f:59: 2b:cf:b8:99:3a:40:b5:cf:a8:af:94:5f:5c:9c:d4:3f:57:e4: 26:4d:a0:bf:ef:0e:76:d9:95:a3:db:88:9b:7f:1d:69:9d:2e: 14:8d:a0:d2:29:3e:fd:18:42:3d:f9:24:e2:07:18:3d:bb:40: b6:2e:c6:82:32:ec:cd:b2:87:bb:19:23:96:52:f1:d8:69:61: ff:84:00:23:dd:8c:29:66:f0:95:a2:71:38:23:af:2d:41:1d: 50:40:83:27:37:e5:95:ee:fe:a5:20:b2:ec:41:e4:e3:67:36: 54:c3:47:47:91:70:dc:0f:06:a0:a2:9d:dc:e2:a6:7e:39:e6: f5:99:e0:40:c5:51:d7:67:29:4c:2b:b4:f3:2e:d1:bf:d5:50: 2b:1f:b1:a5:f3:a8:36:d7:80:4f:cc:3f:f0:8f:59:eb:0b:39: 7c:b7:1a:8e:3d:03:34:a8:7f:9f:42:59:61:f8:0f:b6:70:3f: 04:37:97:52:e0:94:28:01:85:28:21:2e:dd:34:4e:96:00:8f: f6:2f:2d:66 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUShudpVwOZVRa5E4Snb4Vk+pUAe0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2 MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDI0MTcwNjEyWhcNMjYxMDIzMTcxMTEy WjAzMTEwLwYDVQQDEyg2NTREOTlEMEVFNTkzMUM0NTU3OTAxQ0I2QUM3MTg2MzY4 OEUwRDZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J96h+d4udYU hcxvS/xBvc419LiRlOrNVEPmkRe5yBqqOMAUczYA2NLrK9+SgI4ZByXsLVsQF3jG RoChHpq4GGhSbEUH3lpCEDqOdGkCzQecyRxktvevVY7dBQhMXTPw03eWFz1Ti4/q 8ZgbK7MosJAr/MgPFO5K03G3yysdCfPI8A+RwGX1uUqalrHzohnZkgNfdvgIdaqx jpBD5OwTTOAy5amjCfeABKyb+BdLYeRcf8VtIQl4p7lig9TIoHWMTn3aBRdZzyQZ FwXqiT1c8H4N0C0HppH7NSee306vr7WbPJoXmvFRImy4xg2x1qJ6t23MYWbhSJKe o/syVNWzfwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFGVNmdDuWTHEVXkBy2rHGGNo jg1vMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4 LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx NzZmMTBlMjAxMGQyMmQuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhNjUzMDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMw MzMzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvkq4DANBgkqhkiG9w0BAQsFAAOCAQEAFqSJ g8IPl2AM7OG7xIF1AhuUeO8tENEFqUJQu+4ANonD9Hqu5lvEZbQSFrFUQPj5+QCB /Z9ZK8+4mTpAtc+or5RfXJzUP1fkJk2gv+8OdtmVo9uIm38daZ0uFI2g0ik+/RhC Pfkk4gcYPbtAti7GgjLszbKHuxkjllLx2Glh/4QAI92MKWbwlaJxOCOvLUEdUECD Jzflle7+pSCy7EHk42c2VMNHR5Fw3A8GoKKd3OKmfjnm9ZngQMVR12cpTCu08y7R v9VQKx+xpfOoNteAT8w/8I9Z6ws5fLcajj0DNKh/n0JZYfgPtnA/BDeXUuCUKAGF KCEu3TROlgCP9i8tZg== -----END CERTIFICATE-----Generated at Sun Oct 26 16:20:32 2025 by rpki-client