$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e2030.roa File: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (raw, json) Hash identifier: aPsopjlXsO9PjZXI0aAo9bHjjiesxBjYYeoVF6XSASU= Subject key identifier: 67:BA:C1:0D:5F:87:7B:FA:A2:76:0E:7F:2D:9F:18:B7:3E:9B:98:00 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 3AABF9110548198BCB058A6DAE675ABA6AFDA531 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e2030.roa Signing time: Fri 10 Jul 2026 09:27:22 +0000 ROA not before: Fri 10 Jul 2026 09:22:22 +0000 ROA not after: Fri 09 Jul 2027 09:27:22 +0000 asID: 0 IP address blocks: 2602:f992:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 18:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ab:f9:11:05:48:19:8b:cb:05:8a:6d:ae:67:5a:ba:6a:fd:a5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jul 10 09:22:22 2026 GMT Not After : Jul 9 09:27:22 2027 GMT Subject: CN=67BAC10D5F877BFAA2760E7F2D9F18B73E9B9800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:87:83:ac:cf:33:d6:d7:a0:d2:b5:e2:35: e4:ff:86:3e:ab:d6:dd:53:e3:c2:5e:1a:7f:2f:14: a4:8c:2c:ef:bb:ab:7e:27:23:f4:77:0a:08:ff:29: 6a:75:10:a5:c8:00:e1:16:ca:29:9a:3b:c3:75:cf: db:90:08:51:d4:d7:62:87:2f:8b:32:67:7a:45:f3: f9:93:c3:c0:20:61:1e:5a:a0:1a:8a:b5:3e:67:a8: e0:af:9c:e1:6d:cb:d1:3d:c1:cf:fe:da:62:06:12: 2d:57:6e:74:9a:86:80:8a:44:c4:ff:dd:d8:ec:b9: c7:3f:f4:75:2a:0e:a1:d1:97:fd:bb:3f:20:c2:49: 3b:a7:8c:6d:8b:ec:d4:96:13:61:11:e7:17:b7:36: 6e:af:be:7b:77:ef:24:9a:e2:5a:cc:37:cf:b8:f6: e7:be:65:4b:e8:c5:5c:9b:9b:bd:c9:f5:f2:81:ce: 60:07:8f:ab:c7:3a:61:50:00:d0:4d:ca:a1:45:fe: 17:35:80:9f:6b:d1:b8:09:2d:26:c8:73:29:32:8d: e5:13:76:07:a6:9f:77:35:81:b2:92:5b:5e:b0:b1: 4a:e2:81:29:64:bc:0c:fb:f3:0e:ba:b2:00:a4:78: c7:01:ff:11:16:4e:52:3a:94:64:17:90:9a:60:af: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BA:C1:0D:5F:87:7B:FA:A2:76:0E:7F:2D:9F:18:B7:3E:9B:98:00 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:90::/44 Signature Algorithm: sha256WithRSAEncryption 9e:fd:78:77:d7:8c:30:6c:73:12:74:96:3b:b6:39:97:77:1e: e9:ad:fb:18:50:9f:a6:ee:d7:40:ce:ab:e6:18:d3:22:82:c0: de:de:e7:d2:5b:0c:a7:2d:b9:f3:60:8a:ad:96:36:71:9b:d6: ca:3b:43:1c:0d:6a:3e:b5:6b:df:c2:d5:27:f1:a0:97:2c:92: df:59:4e:59:9a:77:24:4f:6d:aa:48:5c:0f:ef:fe:72:25:93: 94:e4:56:5f:38:de:c4:e4:82:4a:3f:6b:06:8d:88:47:10:68: 8b:6c:05:37:34:7e:23:3e:31:73:25:52:2a:62:79:e7:11:57: cd:10:22:fb:d2:24:18:fe:52:af:66:7b:cd:72:00:ef:42:b1: da:33:3e:64:60:f4:b3:2e:70:4e:04:69:8b:04:9b:c5:7c:81: f3:21:df:e4:b4:f8:c1:e4:78:da:ee:28:42:06:54:96:55:64: 4a:59:22:2b:51:32:d4:71:9b:78:ad:0a:66:55:b7:94:f5:bf: 8d:86:9d:a9:42:05:17:d3:d5:b5:f9:3e:de:d2:cc:43:e8:c3: 54:9e:51:2e:85:9f:9d:78:f5:43:12:f4:e1:85:b2:7c:7a:27: ca:35:3e:a2:9a:89:9d:45:d8:57:7d:55:75:e0:fd:ca:15:4f: d3:83:65:37 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUOqv5EQVIGYvLBYptrmdaumr9pTEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwNzEwMDkyMjIyWhcNMjcwNzA5MDkyNzIy WjAzMTEwLwYDVQQDEyg2N0JBQzEwRDVGODc3QkZBQTI3NjBFN0YyRDlGMThCNzNF OUI5ODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEiHg6zPM9bX oNK14jXk/4Y+q9bdU+PCXhp/LxSkjCzvu6t+JyP0dwoI/ylqdRClyADhFsopmjvD dc/bkAhR1Ndihy+LMmd6RfP5k8PAIGEeWqAairU+Z6jgr5zhbcvRPcHP/tpiBhIt V250moaAikTE/93Y7LnHP/R1Kg6h0Zf9uz8gwkk7p4xti+zUlhNhEecXtzZur757 d+8kmuJazDfPuPbnvmVL6MVcm5u9yfXygc5gB4+rxzphUADQTcqhRf4XNYCfa9G4 CS0myHMpMo3lE3YHpp93NYGykltesLFK4oEpZLwM+/MOurIApHjHAf8RFk5SOpRk F5CaYK8LXQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFGe6wQ1fh3v6onYOfy2fGLc+ m5gAMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGpBggrBgEFBQcBCwSBnDCBmTCBlgYIKwYBBQUH MAuGgYlyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhMzkzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL5kgCQMA0GCSqGSIb3DQEBCwUAA4IBAQCe/Xh314wwbHMSdJY7tjmX dx7prfsYUJ+m7tdAzqvmGNMigsDe3ufSWwynLbnzYIqtljZxm9bKO0McDWo+tWvf wtUn8aCXLJLfWU5ZmnckT22qSFwP7/5yJZOU5FZfON7E5IJKP2sGjYhHEGiLbAU3 NH4jPjFzJVIqYnnnEVfNECL70iQY/lKvZnvNcgDvQrHaMz5kYPSzLnBOBGmLBJvF fIHzId/ktPjB5Hja7ihCBlSWVWRKWSIrUTLUcZt4rQpmVbeU9b+Nhp2pQgUX09W1 +T7e0sxD6MNUnlEuhZ+dePVDEvThhbJ8eifKNT6imomdRdhXfVV14P3KFU/Tg2U3 -----END CERTIFICATE-----Generated at Thu Jul 23 21:49:30 2026 by rpki-client