$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa File: 323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa (raw, json) Hash identifier: M7868WXtqAKmg/2GcYPXHlqzGv673y1NrEBWzHOAn8s= Subject key identifier: 2D:0E:7D:73:06:4A:91:24:72:B4:3E:41:E2:FB:9B:9E:FE:12:27:FF Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 6A51803D022134BDC6B73AF0775FFE77B8E6F6FA Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa Signing time: Fri 08 Aug 2025 12:07:02 +0000 ROA not before: Fri 08 Aug 2025 12:02:02 +0000 ROA not after: Fri 07 Aug 2026 12:07:02 +0000 asID: 209874 IP address blocks: 2602:f992:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:51:80:3d:02:21:34:bd:c6:b7:3a:f0:77:5f:fe:77:b8:e6:f6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Aug 8 12:02:02 2025 GMT Not After : Aug 7 12:07:02 2026 GMT Subject: CN=2D0E7D73064A912472B43E41E2FB9B9EFE1227FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:1f:31:04:28:22:52:ea:22:51:72:02:fe: 93:96:bf:b7:05:d4:b3:3b:cf:38:5a:33:39:69:df: d9:0e:bd:c8:73:24:be:8b:09:19:f3:31:eb:97:7a: 36:8f:5e:a5:66:a3:af:a1:b6:6b:3c:77:25:ed:2e: 08:21:1d:53:c0:25:83:30:aa:60:dc:17:bf:20:dd: 10:cd:5e:54:5f:51:c8:89:41:be:55:fa:11:a0:fa: 61:2c:6c:5b:34:a1:8f:39:8a:8b:f4:a0:25:27:20: 6e:33:5b:c1:b7:b6:d1:24:90:a7:3a:87:c5:f6:43: a1:f1:fc:b5:18:a7:36:88:7c:89:5c:6a:80:e0:b1: 46:84:ed:3c:4a:9e:1b:0d:63:4a:e2:a8:f2:46:3f: e6:45:e6:39:51:41:65:2a:35:66:77:51:82:9f:71: 29:e5:0a:bb:c4:de:1d:de:4d:56:14:43:83:13:07: f5:a4:07:91:ce:75:82:62:84:d2:35:3f:4b:a4:27: ee:87:5d:57:bc:92:bb:e1:24:b8:eb:4f:70:df:9d: 87:63:ef:85:98:1e:b6:0a:52:15:83:30:e1:59:60: 82:e2:fc:33:78:9c:af:b8:fb:07:39:68:a9:bc:fd: f7:ef:f9:f8:00:94:63:d4:3b:9c:de:6c:ba:6f:05: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0E:7D:73:06:4A:91:24:72:B4:3E:41:E2:FB:9B:9E:FE:12:27:FF X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:b0::/44 Signature Algorithm: sha256WithRSAEncryption 87:c5:56:69:1f:56:f3:c3:a4:20:90:d6:8d:7c:33:0e:ba:62: 60:70:d6:7b:72:ab:b3:a3:19:1a:24:9d:0b:8d:0a:41:73:dd: 13:2e:3c:83:53:ae:c3:72:4e:f3:c3:68:e3:2e:82:0e:d9:d7: 66:fe:8d:a9:3c:f0:81:70:05:5e:69:a4:75:30:f5:d0:16:96: 37:0a:d9:90:f1:24:98:c6:52:40:b7:58:36:45:70:6b:0b:04: dd:71:27:9f:cc:08:17:b7:7c:b5:2b:a6:74:1a:64:ac:24:11: 6f:fb:63:0a:55:fb:4d:71:0d:dc:e9:04:7b:1f:b7:2f:8a:90: b9:fe:0e:d7:96:7a:e7:fa:ed:5c:84:23:2d:a8:6a:46:ab:1e: a8:a5:00:6b:3c:79:1a:c6:72:f8:82:80:0e:fc:fa:91:f6:08: 0a:b1:2d:5c:a5:8e:33:e5:e7:8f:0b:e7:d3:93:86:e1:3e:fb: 4b:28:6e:c2:17:6c:30:63:ab:45:02:d2:77:47:0e:3a:26:df: 89:21:9c:af:ad:d4:a9:6b:df:b5:8e:ff:05:a7:4d:eb:76:aa: 30:43:0a:6e:2c:2f:85:b3:e7:16:63:69:20:e9:b6:f4:da:29: 7f:0f:00:93:45:29:f3:22:37:57:35:f8:aa:a0:7d:8e:51:26: 51:05:16:c5 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUalGAPQIhNL3Gtzrwd1/+d7jm9vowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwODA4MTIwMjAyWhcNMjYwODA3MTIwNzAy WjAzMTEwLwYDVQQDEygyRDBFN0Q3MzA2NEE5MTI0NzJCNDNFNDFFMkZCOUI5RUZF MTIyN0ZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspYfMQQoIlLq IlFyAv6Tlr+3BdSzO884WjM5ad/ZDr3IcyS+iwkZ8zHrl3o2j16lZqOvobZrPHcl 7S4IIR1TwCWDMKpg3Be/IN0QzV5UX1HIiUG+VfoRoPphLGxbNKGPOYqL9KAlJyBu M1vBt7bRJJCnOofF9kOh8fy1GKc2iHyJXGqA4LFGhO08Sp4bDWNK4qjyRj/mReY5 UUFlKjVmd1GCn3Ep5Qq7xN4d3k1WFEODEwf1pAeRznWCYoTSNT9LpCfuh11XvJK7 4SS4609w352HY++FmB62ClIVgzDhWWCC4vwzeJyvuPsHOWipvP337/n4AJRj1Duc 3my6bwUMLwIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFC0OfXMGSpEkcrQ+QeL7m57+ Eif/MB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAzOTM4 MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHBCYC+ZIAsDANBgkqhkiG9w0BAQsFAAOCAQEAh8VWaR9W 88OkIJDWjXwzDrpiYHDWe3Krs6MZGiSdC40KQXPdEy48g1Ouw3JO88No4y6CDtnX Zv6NqTzwgXAFXmmkdTD10BaWNwrZkPEkmMZSQLdYNkVwawsE3XEnn8wIF7d8tSum dBpkrCQRb/tjClX7TXEN3OkEex+3L4qQuf4O15Z65/rtXIQjLahqRqseqKUAazx5 GsZy+IKADvz6kfYICrEtXKWOM+Xnjwvn05OG4T77SyhuwhdsMGOrRQLSd0cOOibf iSGcr63UqWvftY7/BadN63aqMEMKbiwvhbPnFmNpIOm29Nopfw8Ak0Up8yI3VzX4 qqB9jlEmUQUWxQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:52:07 2025 by rpki-client