$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa File: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (raw, json) Hash identifier: iEqw6oJFOmidQ4uO2TC0uMGKQbiMPYv6XpkzxfqW6/I= Subject key identifier: EC:0A:F1:B8:C8:A9:1E:CC:E8:35:DA:D6:70:45:DD:99:3B:58:76:5A Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 512DAFB1D0C59E61803663B6A06ADED2B5959B80 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa Signing time: Wed 08 Jul 2026 04:27:21 +0000 ROA not before: Wed 08 Jul 2026 04:22:21 +0000 ROA not after: Wed 07 Jul 2027 04:27:21 +0000 asID: 273202 IP address blocks: 2602:f992:f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 18:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2d:af:b1:d0:c5:9e:61:80:36:63:b6:a0:6a:de:d2:b5:95:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jul 8 04:22:21 2026 GMT Not After : Jul 7 04:27:21 2027 GMT Subject: CN=EC0AF1B8C8A91ECCE835DAD67045DD993B58765A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:0d:f9:e8:5e:ad:09:ed:19:ba:db:a1:f7: b5:95:3a:3c:e4:e7:67:18:fa:55:8e:42:53:64:84: a5:3a:ad:a9:a0:5e:cb:db:8f:53:d6:f6:f4:75:16: e8:90:c1:3b:dc:eb:03:1f:c5:81:c0:0e:e6:9e:fc: 97:47:a6:67:14:6e:b8:8f:87:65:3f:e0:e5:5c:0b: fc:08:21:29:4d:f0:70:a8:7d:24:21:7e:85:cf:44: 47:c2:b0:99:ec:7d:4d:18:27:8a:27:67:d6:fd:60: fe:ee:0b:6d:ee:de:5a:3a:78:8c:c8:33:d7:44:d3: 09:03:5b:eb:4e:4f:de:c5:97:fe:77:b1:6c:5f:e2: 08:78:16:68:aa:4e:af:2c:ad:ca:50:c5:74:7b:f9: 38:78:4d:c5:22:ca:11:f3:be:b5:d6:de:d0:b0:d4: 90:81:59:82:a9:fa:7e:87:b3:b8:01:5d:9d:a8:cb: 84:86:1c:12:7d:d3:d9:7b:a6:0a:11:e5:2b:39:50: 27:1d:0e:63:5d:fd:7e:df:57:b4:05:5e:59:1e:49: 95:6c:1c:bb:2c:65:ae:a7:8e:58:df:a3:a6:55:93: 9b:22:1f:d9:bf:49:d6:d3:f9:c2:00:42:46:d5:d0: ac:64:34:eb:88:da:8a:1b:13:d3:16:5c:64:84:9a: 63:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0A:F1:B8:C8:A9:1E:CC:E8:35:DA:D6:70:45:DD:99:3B:58:76:5A X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:f2::/48 Signature Algorithm: sha256WithRSAEncryption 52:ed:d0:42:da:a9:bb:b4:8c:c4:0f:f9:16:a3:b9:48:f7:34: 9a:13:c8:43:41:b1:9a:49:de:1b:84:32:8f:b2:48:f7:9a:28: 77:ef:ab:f6:e4:d5:d2:50:e2:3a:7a:22:ac:4c:9e:28:cb:71: 4c:11:b0:55:f8:6c:2a:fc:9c:cf:26:57:4d:a3:21:1e:ef:f5: 2c:49:39:7e:04:1a:f8:3b:e3:aa:50:1d:7d:70:d8:27:d0:d6: cd:90:3f:e1:3a:2a:bc:b1:63:70:49:45:d6:98:14:54:f0:3e: 40:5a:f0:e0:17:58:ef:b2:61:f0:69:a7:bf:f3:f8:10:ff:a3: 37:49:2b:5d:c8:21:9a:93:0b:3e:39:75:97:ff:3b:e6:88:7c: 82:93:68:b5:bf:5c:2a:f0:3b:4b:20:22:c1:e6:f3:7f:22:88: 28:16:77:c1:f0:d9:2a:2b:71:8a:a8:fa:df:1d:bd:4e:c1:85: a2:b0:d8:11:aa:4b:fe:fa:0a:09:1e:da:26:a2:10:a3:08:ce: ea:ae:58:89:b2:95:8f:89:11:d4:3d:13:42:f0:01:29:53:f6: d2:dc:98:29:76:36:d8:70:81:06:d2:32:0c:32:3e:cd:f3:29: b0:87:5c:38:98:b1:fd:20:cb:22:a7:c2:84:0e:aa:76:40:58: 4f:92:5d:a2 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUUS2vsdDFnmGANmO2oGre0rWVm4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwNzA4MDQyMjIxWhcNMjcwNzA3MDQyNzIx WjAzMTEwLwYDVQQDEyhFQzBBRjFCOEM4QTkxRUNDRTgzNURBRDY3MDQ1REQ5OTNC NTg3NjVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgMN+eherQnt Gbrbofe1lTo85OdnGPpVjkJTZISlOq2poF7L249T1vb0dRbokME73OsDH8WBwA7m nvyXR6ZnFG64j4dlP+DlXAv8CCEpTfBwqH0kIX6Fz0RHwrCZ7H1NGCeKJ2fW/WD+ 7gtt7t5aOniMyDPXRNMJA1vrTk/exZf+d7FsX+IIeBZoqk6vLK3KUMV0e/k4eE3F IsoR87611t7QsNSQgVmCqfp+h7O4AV2dqMuEhhwSfdPZe6YKEeUrOVAnHQ5jXf1+ 31e0BV5ZHkmVbBy7LGWup45Y36OmVZObIh/Zv0nW0/nCAEJG1dCsZDTriNqKGxPT FlxkhJpjRwIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFOwK8bjIqR7M6DXa1nBF3Zk7 WHZaMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjYzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMzMy MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHACYC+ZIA8jANBgkqhkiG9w0BAQsFAAOCAQEAUu3QQtqp u7SMxA/5FqO5SPc0mhPIQ0GxmkneG4Qyj7JI95ood++r9uTV0lDiOnoirEyeKMtx TBGwVfhsKvyczyZXTaMhHu/1LEk5fgQa+DvjqlAdfXDYJ9DWzZA/4ToqvLFjcElF 1pgUVPA+QFrw4BdY77Jh8Gmnv/P4EP+jN0krXcghmpMLPjl1l/875oh8gpNotb9c KvA7SyAiwebzfyKIKBZ3wfDZKitxiqj63x29TsGForDYEapL/voKCR7aJqIQowjO 6q5YibKVj4kR1D0TQvABKVP20tyYKXY22HCBBtIyDDI+zfMpsIdcOJix/SDLIqfC hA6qdkBYT5Jdog== -----END CERTIFICATE-----Generated at Thu Jul 23 23:33:44 2026 by rpki-client