$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa File: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (raw, json) Hash identifier: Fgcu73F4DxRvaLksBuPTG0jHcKxfTvgmmVGQl4chyzs= Subject key identifier: F2:80:BE:D7:31:49:9D:AC:5A:4B:71:71:AC:1B:A1:40:A1:D8:C9:EC Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 7FFE065FC636EC068EF1A3F7A3E000FDA26BA144 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa Signing time: Fri 08 Aug 2025 15:33:53 +0000 ROA not before: Fri 08 Aug 2025 15:28:53 +0000 ROA not after: Fri 07 Aug 2026 15:33:53 +0000 asID: 26042 IP address blocks: 2602:f992:c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fe:06:5f:c6:36:ec:06:8e:f1:a3:f7:a3:e0:00:fd:a2:6b:a1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Aug 8 15:28:53 2025 GMT Not After : Aug 7 15:33:53 2026 GMT Subject: CN=F280BED731499DAC5A4B7171AC1BA140A1D8C9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:06:49:85:e9:b2:6c:77:55:12:37:e0:f2: 2d:9b:27:38:bf:0b:74:2a:07:3a:d8:9a:4f:b4:83: f5:b8:8b:09:44:09:65:78:dc:22:19:64:5c:7f:63: b3:71:5e:04:44:f3:b4:8f:25:7e:7f:19:36:c1:dd: 8a:bc:12:5f:7b:d8:c5:23:bc:e9:1e:93:9d:13:a6: 56:a3:16:d9:d5:d8:bf:64:f5:3f:5d:69:5b:f8:24: 90:6a:bf:17:cf:ba:50:1e:c1:15:08:67:dc:96:a7: 7c:da:f4:bd:59:35:cc:9c:76:6c:70:5f:a1:e8:08: ef:24:92:eb:83:6e:bf:45:f2:06:c4:d8:db:f7:a8: e8:13:fa:48:6c:98:bc:39:30:d1:7f:f2:6b:52:21: f6:52:9f:4c:64:79:99:fb:f9:8f:b0:85:4b:b0:a8: d1:34:7d:4e:37:0c:b8:77:75:d4:27:2f:5a:05:42: ee:84:37:98:4a:6a:c7:2a:1b:bd:1f:dc:12:5c:da: 1f:b2:f0:a5:2d:ac:77:f1:9a:19:33:80:10:de:fe: aa:28:ae:99:4b:54:fe:58:84:34:25:19:96:01:52: 88:9c:b3:91:48:c8:25:45:16:6c:97:2f:6f:92:46: b0:72:e4:4b:35:8b:3b:e8:c8:b5:ac:5d:f6:10:4b: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:80:BE:D7:31:49:9D:AC:5A:4B:71:71:AC:1B:A1:40:A1:D8:C9:EC X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:c0::/44 Signature Algorithm: sha256WithRSAEncryption 7a:5d:55:e8:7f:2b:7f:34:31:aa:cd:35:29:49:db:5c:ba:24: a0:1a:48:05:a3:a6:fe:93:e6:ee:91:48:3d:e6:f9:c8:83:30: 54:56:78:42:db:58:96:b0:ea:02:7e:2d:33:63:e0:94:46:4f: a3:10:ec:dc:34:34:ee:76:e3:e8:2f:6a:51:3d:ca:7e:2c:b4: 72:a9:8b:75:59:72:2c:6a:bc:4b:d7:03:e4:14:63:41:7a:0b: 65:ea:92:50:24:82:e4:78:c3:32:03:4b:8a:00:15:a6:b3:05: a2:d9:10:11:e6:2b:69:4a:c2:44:df:d6:fe:0c:c2:bf:0c:31: 98:15:9c:10:00:88:df:7e:b6:9a:9f:cf:42:d6:ae:8d:04:d6: 17:9f:c7:22:22:02:08:cb:f0:2a:b1:30:1b:3b:a2:02:c9:21: 0c:83:8d:74:59:10:e5:bc:b2:af:5d:f2:77:b0:c0:5b:d1:55: 10:ee:3f:e1:9e:48:4a:3b:9a:64:9d:c6:7d:fd:10:36:3b:d7: 65:a2:71:11:38:94:c4:05:46:ca:e5:97:6d:a7:e4:a1:ad:6f: 9d:63:8f:f1:b2:92:9d:46:f6:39:0b:63:ef:1d:cc:c2:d1:eb: 42:89:69:38:70:f6:68:fb:de:fc:b7:64:a1:bc:9d:e3:02:6a: 57:7a:c2:95 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUf/4GX8Y27AaO8aP3o+AA/aJroUQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwODA4MTUyODUzWhcNMjYwODA3MTUzMzUz WjAzMTEwLwYDVQQDEyhGMjgwQkVENzMxNDk5REFDNUE0QjcxNzFBQzFCQTE0MEEx RDhDOUVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubUGSYXpsmx3 VRI34PItmyc4vwt0Kgc62JpPtIP1uIsJRAlleNwiGWRcf2OzcV4ERPO0jyV+fxk2 wd2KvBJfe9jFI7zpHpOdE6ZWoxbZ1di/ZPU/XWlb+CSQar8Xz7pQHsEVCGfclqd8 2vS9WTXMnHZscF+h6AjvJJLrg26/RfIGxNjb96joE/pIbJi8OTDRf/JrUiH2Up9M ZHmZ+/mPsIVLsKjRNH1ONwy4d3XUJy9aBULuhDeYSmrHKhu9H9wSXNofsvClLax3 8ZoZM4AQ3v6qKK6ZS1T+WIQ0JRmWAVKInLORSMglRRZsly9vkkawcuRLNYs76Mi1 rF32EEtzZQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFPKAvtcxSZ2sWktxcawboUCh 2MnsMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjMzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzYzMDM0 MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQmAvmSAMAwDQYJKoZIhvcNAQELBQADggEBAHpdVeh/K380 MarNNSlJ21y6JKAaSAWjpv6T5u6RSD3m+ciDMFRWeELbWJaw6gJ+LTNj4JRGT6MQ 7Nw0NO524+gvalE9yn4stHKpi3VZcixqvEvXA+QUY0F6C2XqklAkguR4wzIDS4oA FaazBaLZEBHmK2lKwkTf1v4Mwr8MMZgVnBAAiN9+tpqfz0LWro0E1hefxyIiAgjL 8CqxMBs7ogLJIQyDjXRZEOW8sq9d8newwFvRVRDuP+GeSEo7mmSdxn39EDY712Wi cRE4lMQFRsrll22n5KGtb51jj/Gykp1G9jkLY+8dzMLR60KJaThw9mj73vy3ZKG8 neMCald6wpU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:40:37 2025 by rpki-client