$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa File: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (raw, json) Hash identifier: YcD6OJ+CkZWZoPFilNIvkHcy621Zn+qrN1B3xkNtwQc= Subject key identifier: 27:A8:2A:0C:51:F4:6B:55:F0:B7:2D:05:F0:6E:20:B5:5C:55:63:79 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 3E227642C0FE9F8DB1DB0424D30A30725F5307B3 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa Signing time: Fri 10 Jul 2026 16:27:22 +0000 ROA not before: Fri 10 Jul 2026 16:22:22 +0000 ROA not after: Fri 09 Jul 2027 16:27:22 +0000 asID: 26042 IP address blocks: 2602:f992:c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 18:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:22:76:42:c0:fe:9f:8d:b1:db:04:24:d3:0a:30:72:5f:53:07:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jul 10 16:22:22 2026 GMT Not After : Jul 9 16:27:22 2027 GMT Subject: CN=27A82A0C51F46B55F0B72D05F06E20B55C556379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:3d:95:3f:a6:48:69:43:a2:b3:0a:e2:db: 30:4f:01:29:e3:81:11:d0:0a:36:4d:71:7a:73:dd: 62:dd:ca:e2:7e:20:8d:c9:c9:18:2a:29:8f:8d:57: f4:17:c7:93:16:d7:c5:88:52:dc:19:84:56:7a:a5: 49:19:da:27:6e:00:15:ed:c4:04:e0:19:95:2b:34: 23:dd:9a:79:26:02:45:d3:0f:46:11:d7:35:e3:39: 2c:43:26:40:93:dd:41:df:af:26:dd:9f:93:7e:26: 78:0b:1e:c2:1c:9d:69:5f:c7:4b:56:e2:4b:15:b8: 5f:9c:01:85:fd:89:b1:a2:76:ca:fd:c9:fa:fe:a5: b2:45:29:61:a2:97:35:63:99:2c:1a:22:ba:1d:c8: 69:d5:37:68:8f:23:04:2e:a5:95:6d:b4:bb:ec:a6: 90:09:ef:b4:d3:93:a5:c4:85:cb:89:8a:cf:2f:0d: 2e:a2:53:86:47:95:72:b4:22:3f:d8:b2:cc:7d:e7: af:65:9e:63:3b:90:e4:27:fd:b1:93:7e:6a:cb:7c: 2f:e7:92:dd:50:d1:7f:b0:7a:4d:a7:b1:7b:d1:97: eb:9a:df:83:e9:7f:f8:1a:27:dc:e4:92:44:0d:5e: 6c:0b:1a:e1:5f:74:f7:9b:fd:ea:6d:24:2a:c6:22: 8f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A8:2A:0C:51:F4:6B:55:F0:B7:2D:05:F0:6E:20:B5:5C:55:63:79 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:c0::/44 Signature Algorithm: sha256WithRSAEncryption 5d:49:85:52:c6:d9:a2:c8:00:69:03:f9:5e:69:db:66:a3:00: 0b:16:7f:0b:dd:d8:ef:57:82:78:eb:80:53:67:09:09:85:ed: 4c:60:cc:c8:01:71:80:69:51:3c:8f:c7:2c:66:c4:88:46:58: 12:9e:44:43:dd:15:a2:71:63:ba:36:78:d5:bd:17:eb:37:be: 99:30:22:63:e1:68:62:b6:03:2f:5b:bb:34:8b:81:66:30:b0: 9d:cd:0d:b8:1e:e0:dc:d4:63:1a:5c:86:fe:77:0a:d7:49:cb: 64:f7:b5:b5:e4:f3:d1:5d:26:05:89:55:c4:bf:3b:7f:5c:b9: b5:c8:f6:dd:fa:92:cd:1c:d8:97:6d:7d:9b:c6:13:eb:61:a3: 49:0e:13:59:3d:53:af:83:9c:b7:7c:a7:db:8b:50:a1:41:86: e0:a5:3e:7f:3d:62:44:58:dc:36:7c:35:ae:9a:af:28:86:d3: 99:40:cc:38:1d:d2:94:80:13:bc:87:8d:53:7b:62:4c:42:83: 07:f7:26:7a:96:70:24:24:89:a6:12:a3:22:30:15:73:17:59: 80:4b:85:e1:7b:29:d4:9c:8d:8e:c3:e2:00:a2:f6:e1:38:c0: e6:b8:00:27:e5:fa:36:ff:33:63:42:a7:b8:82:fc:d8:04:f5: 9a:e7:65:e9 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUPiJ2QsD+n42x2wQk0wowcl9TB7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwNzEwMTYyMjIyWhcNMjcwNzA5MTYyNzIy WjAzMTEwLwYDVQQDEygyN0E4MkEwQzUxRjQ2QjU1RjBCNzJEMDVGMDZFMjBCNTVD NTU2Mzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu849lT+mSGlD orMK4tswTwEp44ER0Ao2TXF6c91i3crifiCNyckYKimPjVf0F8eTFtfFiFLcGYRW eqVJGdonbgAV7cQE4BmVKzQj3Zp5JgJF0w9GEdc14zksQyZAk91B368m3Z+TfiZ4 Cx7CHJ1pX8dLVuJLFbhfnAGF/YmxonbK/cn6/qWyRSlhopc1Y5ksGiK6Hchp1Tdo jyMELqWVbbS77KaQCe+005OlxIXLiYrPLw0uolOGR5VytCI/2LLMfeevZZ5jO5Dk J/2xk35qy3wv55LdUNF/sHpNp7F70Zfrmt+D6X/4Gifc5JJEDV5sCxrhX3T3m/3q bSQqxiKPYwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFCeoKgxR9GtV8LctBfBuILVc VWN5MB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjMzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzYzMDM0 MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQmAvmSAMAwDQYJKoZIhvcNAQELBQADggEBAF1JhVLG2aLI AGkD+V5p22ajAAsWfwvd2O9XgnjrgFNnCQmF7UxgzMgBcYBpUTyPxyxmxIhGWBKe REPdFaJxY7o2eNW9F+s3vpkwImPhaGK2Ay9buzSLgWYwsJ3NDbge4NzUYxpchv53 CtdJy2T3tbXk89FdJgWJVcS/O39cubXI9t36ks0c2JdtfZvGE+tho0kOE1k9U6+D nLd8p9uLUKFBhuClPn89YkRY3DZ8Na6aryiG05lAzDgd0pSAE7yHjVN7YkxCgwf3 JnqWcCQkiaYSoyIwFXMXWYBLheF7KdScjY7D4gCi9uE4wOa4ACfl+jb/M2NCp7iC /NgE9ZrnZek= -----END CERTIFICATE-----Generated at Thu Jul 23 21:58:07 2026 by rpki-client