$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a35303a3a2f34342d3434203d3e20333937373330.roa File: 323630323a663736313a35303a3a2f34342d3434203d3e20333937373330.roa (raw, json) Hash identifier: /n6hQb1akGQ1jd0Nes6gts1zO6rSnjyJmlFuVu6gPJc= Subject key identifier: 2C:A4:63:BF:E1:E0:22:91:F3:31:87:DE:1C:D7:88:BA:4F:65:51:AD Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 561C34D3C389A78F5CC6AC2F2565D7A7E55F9FBC Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a35303a3a2f34342d3434203d3e20333937373330.roa Signing time: Tue 17 Jun 2025 22:17:27 +0000 ROA not before: Tue 17 Jun 2025 22:12:27 +0000 ROA not after: Tue 16 Jun 2026 22:17:27 +0000 asID: 397730 IP address blocks: 2602:f761:50::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1c:34:d3:c3:89:a7:8f:5c:c6:ac:2f:25:65:d7:a7:e5:5f:9f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: Jun 17 22:12:27 2025 GMT Not After : Jun 16 22:17:27 2026 GMT Subject: CN=2CA463BFE1E02291F33187DE1CD788BA4F6551AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:8d:f2:7b:9c:00:70:d6:66:7e:82:90:44: f5:ae:aa:2e:4f:1f:3e:13:6c:ab:e7:42:83:47:91: 0b:2c:6a:37:1e:7c:1f:99:9e:0e:9f:51:0b:e6:1c: 56:11:07:54:0d:90:05:c7:3f:30:bf:35:42:cb:05: 3e:6a:b1:de:6c:12:89:f8:b6:37:25:fb:e0:2a:12: 95:f4:1a:0d:14:19:6b:47:3e:e9:d8:68:3e:7a:49: 0d:44:63:b1:ba:cb:6e:0a:90:80:5e:62:1e:da:19: 30:5d:43:a2:3f:b3:8c:ff:1d:b6:22:e9:40:df:15: b4:e9:97:c0:5f:04:c8:d1:92:6d:e3:80:89:26:bc: 45:a1:fb:10:af:9a:af:0c:82:64:9e:ac:c8:b6:2b: 28:3b:fb:f9:b9:9b:da:1b:94:7c:3c:0f:81:e0:ca: 1d:58:db:5a:1e:26:60:f5:62:e9:f4:f0:f7:e2:60: 38:a6:23:48:c5:1c:28:c2:c2:f0:26:74:ee:e3:d5: 8b:29:9b:a7:f3:9b:5b:34:6e:b1:6f:b4:3d:7d:4c: ee:cd:9a:9c:d8:d5:60:98:99:f0:54:ef:4f:e3:93: c9:3f:5a:48:db:57:3b:a9:9f:c5:ed:94:0d:02:4a: bc:70:69:2e:76:94:0a:a9:77:27:71:d8:b1:84:e8: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:63:BF:E1:E0:22:91:F3:31:87:DE:1C:D7:88:BA:4F:65:51:AD X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a35303a3a2f34342d3434203d3e20333937373330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f761:50::/44 Signature Algorithm: sha256WithRSAEncryption 2f:84:48:d0:9e:16:02:15:ea:b6:4c:48:d6:c4:fc:c7:92:58: 69:43:26:f5:87:83:40:35:9e:89:cb:2a:77:0e:4f:dc:04:4f: e0:03:84:82:2e:76:40:5a:bc:27:37:da:8f:30:c1:54:e5:c0: 8d:a7:f5:04:c9:03:c6:8b:3a:01:b5:ff:cf:c0:55:ae:c0:74: db:d1:da:d4:29:7e:e1:c9:b6:d3:df:36:37:62:d6:27:03:97: a1:22:b1:c5:d2:38:1f:53:ad:e5:5a:56:91:c7:04:f7:f9:c5: 6c:0a:d3:d0:41:4c:c8:a7:bc:e7:41:69:b2:06:02:17:ca:73: 5d:a0:54:68:fb:f3:09:bc:4d:74:19:4b:cc:e0:43:da:69:bc: ab:87:5a:3a:40:4e:09:03:f3:94:14:f7:54:18:f0:da:03:fb: f2:fb:f6:a3:cd:c9:6e:85:b6:89:73:0c:da:59:7c:17:3b:b0: 98:59:9e:b3:da:14:a8:20:15:93:c1:90:90:25:5e:63:63:94: d1:87:5b:79:9a:92:90:02:47:83:e4:1a:5a:0e:e8:13:50:e9: 0b:5f:7b:88:2f:77:3f:75:66:56:86:c0:af:38:a0:23:f0:83: 4f:f8:2d:3a:41:26:49:e1:86:20:dc:a2:b4:c3:2a:a6:fc:a8: 3b:09:74:64 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUVhw008OJp49cxqwvJWXXp+Vfn7wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwNjE3MjIxMjI3WhcNMjYwNjE2MjIxNzI3 WjAzMTEwLwYDVQQDEygyQ0E0NjNCRkUxRTAyMjkxRjMzMTg3REUxQ0Q3ODhCQTRG NjU1MUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkICN8nucAHDW Zn6CkET1rqouTx8+E2yr50KDR5ELLGo3HnwfmZ4On1EL5hxWEQdUDZAFxz8wvzVC ywU+arHebBKJ+LY3JfvgKhKV9BoNFBlrRz7p2Gg+ekkNRGOxustuCpCAXmIe2hkw XUOiP7OM/x22IulA3xW06ZfAXwTI0ZJt44CJJrxFofsQr5qvDIJknqzItisoO/v5 uZvaG5R8PA+B4ModWNtaHiZg9WLp9PD34mA4piNIxRwowsLwJnTu49WLKZun85tb NG6xb7Q9fUzuzZqc2NVgmJnwVO9P45PJP1pI21c7qZ/F7ZQNAkq8cGkudpQKqXcn cdixhOg86QIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFCykY7/h4CKR8zGH3hzXiLpP ZVGtMB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYzLTBmMzJiOGU3ZmU3OS8zLzMyMzYzMDMy M2E2NjM3MzYzMTNhMzUzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMzMzkzNzM3 MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHBCYC92EAUDANBgkqhkiG9w0BAQsFAAOCAQEAL4RI0J4W AhXqtkxI1sT8x5JYaUMm9YeDQDWeicsqdw5P3ARP4AOEgi52QFq8JzfajzDBVOXA jaf1BMkDxos6AbX/z8BVrsB029Ha1Cl+4cm20982N2LWJwOXoSKxxdI4H1Ot5VpW kccE9/nFbArT0EFMyKe850FpsgYCF8pzXaBUaPvzCbxNdBlLzOBD2mm8q4daOkBO CQPzlBT3VBjw2gP78vv2o83JboW2iXMM2ll8FzuwmFmes9oUqCAVk8GQkCVeY2OU 0YdbeZqSkAJHg+QaWg7oE1DpC197iC93P3VmVobArzigI/CDT/gtOkEmSeGGINyi tMMqpvyoOwl0ZA== -----END CERTIFICATE-----Generated at Tue Jul 1 01:52:28 2025 by rpki-client