$ rpki-client -vvf rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa File: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (raw, json) Hash identifier: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU= Subject key identifier: C3:BC:80:71:A6:21:39:7A:63:86:A2:73:B5:4D:78:5E:95:78:A4:43 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 1DCEFA8A0149FBF1B608699BC81D558D1A3E4F38 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa Signing time: Sun 05 Oct 2025 22:31:11 +0000 ROA not before: Sun 05 Oct 2025 22:26:11 +0000 ROA not after: Sun 04 Oct 2026 22:31:11 +0000 asID: 1001 IP address blocks: 2602:fb55::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 01:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ce:fa:8a:01:49:fb:f1:b6:08:69:9b:c8:1d:55:8d:1a:3e:4f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Oct 5 22:26:11 2025 GMT Not After : Oct 4 22:31:11 2026 GMT Subject: CN=C3BC8071A621397A6386A273B54D785E9578A443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:50:ed:8d:98:3e:9b:44:37:b9:c7:a8:d5: 8d:75:13:4f:95:f3:7a:ec:d6:75:4e:ee:8c:90:86: 36:50:20:2e:db:4e:34:ae:f1:36:7b:c9:a1:61:45: 7e:cb:1c:61:2f:0a:f8:94:0d:ca:49:d1:92:50:46: d0:1b:f8:05:2a:8d:51:19:b3:0a:1a:d3:5e:85:b8: d9:35:c5:88:cc:88:ef:91:91:77:8b:a2:40:c8:3f: 28:41:3d:5f:54:62:37:d1:0d:b1:02:b5:33:d9:de: d7:6d:da:65:31:63:d2:0b:7b:a0:f5:91:12:c4:b0: 6f:19:87:e4:a2:cc:6d:82:28:c5:61:28:96:55:7f: 99:0d:87:e6:a9:df:07:07:66:ce:02:22:24:98:bd: ce:0e:c9:7f:72:50:0e:03:df:c0:1e:88:3c:19:c1: 18:a1:2c:b2:1e:cb:66:27:87:8b:69:62:78:b4:10: ac:57:f7:b4:1d:7d:ab:5b:30:72:04:dc:88:75:c3: c7:14:17:98:3b:17:67:0f:ba:ac:50:5e:51:2c:5f: 10:80:e8:c9:21:80:c1:fd:3e:80:09:3a:f5:39:2b: 9f:b5:53:56:90:bd:1c:05:f6:a2:af:31:2b:88:0b: ff:0f:d4:62:83:71:50:35:dd:d7:b6:4e:28:8f:85: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BC:80:71:A6:21:39:7A:63:86:A2:73:B5:4D:78:5E:95:78:A4:43 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fb55::/36 Signature Algorithm: sha256WithRSAEncryption ae:bc:e4:57:63:fe:95:b3:d5:e5:ea:b1:1a:e9:5a:94:25:21: 9d:6f:83:39:af:51:a0:b8:43:64:a0:ef:44:0d:f4:53:e7:03: 8d:b0:6b:60:cf:7f:25:0a:27:1b:7a:fd:83:56:2c:b1:6f:a7: 4e:a2:f3:e2:00:13:0c:92:fe:e0:13:ff:84:78:53:e2:23:c2: 02:07:61:cb:9d:98:f5:3a:b2:5c:93:29:d0:50:0a:f1:ae:d6: c0:60:d9:20:d2:1f:99:c2:6c:85:48:1f:09:96:4b:48:38:a7: 92:e6:0c:7f:0a:cb:fe:fd:33:2f:c4:ce:78:3d:f9:f4:d6:3a: 66:28:d5:eb:98:80:86:2a:9c:8a:f7:8f:37:29:3e:b9:11:f3: af:b2:cb:09:3c:cc:1b:c3:c5:81:f1:43:d2:40:c9:0c:25:b4: 19:c5:5c:5d:47:02:b9:7f:c9:a4:6e:15:c7:49:72:57:f0:3e: 1f:4f:80:46:15:53:3d:2a:62:aa:a2:bb:a4:4f:6c:58:20:51: b0:ff:91:14:2c:17:09:55:d8:e8:b7:ef:d0:13:f5:d5:eb:0b: cc:e1:d0:9e:75:5f:e3:09:5f:5f:e4:2a:2a:ea:82:45:a2:2d: d8:27:27:0b:a1:a1:58:8e:dc:5b:7c:10:fa:f5:0d:0f:b7:2e: 43:67:31:35 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUHc76igFJ+/G2CGmbyB1VjRo+TzgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUxMDA1MjIyNjExWhcNMjYxMDA0MjIzMTEx WjAzMTEwLwYDVQQDEyhDM0JDODA3MUE2MjEzOTdBNjM4NkEyNzNCNTRENzg1RTk1 NzhBNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ClQ7Y2YPptE N7nHqNWNdRNPlfN67NZ1Tu6MkIY2UCAu2040rvE2e8mhYUV+yxxhLwr4lA3KSdGS UEbQG/gFKo1RGbMKGtNehbjZNcWIzIjvkZF3i6JAyD8oQT1fVGI30Q2xArUz2d7X bdplMWPSC3ug9ZESxLBvGYfkosxtgijFYSiWVX+ZDYfmqd8HB2bOAiIkmL3ODsl/ clAOA9/AHog8GcEYoSyyHstmJ4eLaWJ4tBCsV/e0HX2rWzByBNyIdcPHFBeYOxdn D7qsUF5RLF8QgOjJIYDB/T6ACTr1OSuftVNWkL0cBfairzEriAv/D9Rig3FQNd3X tk4oj4XCBQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFMO8gHGmITl6Y4aic7VNeF6V eKRDMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwcQYIKwYBBQUHAQsEZTBjMGEGCCsGAQUFBzALhlVyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMzIzNjMwMzIzYTY2NjIzNTM1M2EzYTJmMzMz NjJkMzQzODIwM2QzZTIwMzEzMDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQmAvtVADANBgkqhkiG 9w0BAQsFAAOCAQEArrzkV2P+lbPV5eqxGulalCUhnW+DOa9RoLhDZKDvRA30U+cD jbBrYM9/JQonG3r9g1YssW+nTqLz4gATDJL+4BP/hHhT4iPCAgdhy52Y9TqyXJMp 0FAK8a7WwGDZINIfmcJshUgfCZZLSDinkuYMfwrL/v0zL8TOeD359NY6ZijV65iA hiqcivePNyk+uRHzr7LLCTzMG8PFgfFD0kDJDCW0GcVcXUcCuX/JpG4Vx0lyV/A+ H0+ARhVTPSpiqqK7pE9sWCBRsP+RFCwXCVXY6Lfv0BP11esLzOHQnnVf4wlfX+Qq KuqCRaIt2CcnC6GhWI7cW3wQ+vUND7cuQ2cxNQ== -----END CERTIFICATE-----Generated at Tue Oct 14 06:08:08 2025 by rpki-client