$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa File: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (raw, json) Hash identifier: WWuZlGD19cauNNFGP8lkHygPrhsjx/40EDpoW/B2wUc= Subject key identifier: 17:BF:B7:41:F5:2C:08:52:BD:B5:DB:F6:26:F8:59:9E:21:86:E2:49 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 5EAF8B6803E6B1DE8059593999CD3A9D64728D5C Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa Signing time: Wed 13 Aug 2025 02:56:55 +0000 ROA not before: Wed 13 Aug 2025 02:51:55 +0000 ROA not after: Wed 12 Aug 2026 02:56:55 +0000 asID: 401812 IP address blocks: 2602:f992:fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:af:8b:68:03:e6:b1:de:80:59:59:39:99:cd:3a:9d:64:72:8d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Aug 13 02:51:55 2025 GMT Not After : Aug 12 02:56:55 2026 GMT Subject: CN=17BFB741F52C0852BDB5DBF626F8599E2186E249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:a6:3e:d7:42:e9:04:b7:70:75:c3:54:db: d8:f7:10:f1:c3:f7:81:f8:aa:f3:36:f4:bb:ff:c5: 5e:3e:8b:93:98:6b:f9:cc:38:aa:8c:09:c2:d3:e3: af:77:f1:bf:bc:48:f9:4b:38:47:d9:de:24:b6:ad: b0:e1:bb:d7:74:e2:80:b5:16:33:d8:ee:0b:6b:9b: 9c:fe:bf:74:40:58:16:68:7a:f0:48:e7:2a:8c:7f: 2d:0e:0b:64:00:7b:f2:6e:cb:8c:70:b5:c0:44:aa: 7b:dd:bd:8a:71:51:50:71:a3:55:1a:e8:b4:5c:ad: 7e:57:fe:b7:7d:06:1c:a2:68:fa:6a:ea:6b:5b:78: 7c:b6:ee:25:b1:6b:18:be:10:c5:b5:1b:a2:f2:ee: f0:88:2c:ed:ea:f2:1e:90:95:23:1a:0c:30:4a:af: 8c:ee:c3:55:f9:e8:fa:b4:43:f7:22:0a:9c:53:eb: 42:fe:ec:95:96:56:94:e2:60:f4:7a:7d:f4:74:1b: a8:bc:4d:15:0f:8b:7d:09:80:d4:c5:61:e0:73:57: 52:9c:11:09:bf:e7:05:9f:75:56:78:b7:4c:44:41: 7f:40:2a:5d:a7:a6:c4:90:b5:d9:24:a6:54:c1:35: 87:90:6a:b7:a1:20:1c:9b:c9:23:b9:57:64:f0:a6: de:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BF:B7:41:F5:2C:08:52:BD:B5:DB:F6:26:F8:59:9E:21:86:E2:49 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:fc::/48 Signature Algorithm: sha256WithRSAEncryption 12:5b:d8:68:1b:ac:a9:72:c7:98:b7:01:c9:42:d4:28:ac:b4: 15:40:6e:1e:20:2c:35:93:87:c5:6d:50:32:d9:18:94:82:87: 6a:67:e6:47:38:05:94:5d:26:47:fd:cd:2b:b0:0b:e4:da:ac: ce:be:29:0f:f0:92:67:e9:91:dc:02:5b:3d:93:5f:cc:21:43: 04:82:e9:d0:48:bd:6a:e1:89:eb:22:ab:88:a7:c5:4c:c6:67: 40:b7:28:3f:1a:9f:2d:87:57:04:cd:8a:09:02:fc:f0:c7:db: bd:f8:d4:2f:53:27:65:ab:6e:69:9b:be:86:e4:03:49:55:ff: 88:ac:0a:89:b1:bb:9e:4a:3a:34:63:5d:34:e2:8f:28:cd:7d: 64:2b:b4:ab:08:8f:a7:98:a6:9b:86:86:a0:04:9a:97:96:cd: 9a:17:30:6d:1c:91:38:86:db:71:c4:3f:57:c6:ba:be:62:e9: b5:f3:0d:85:e4:4f:5a:78:42:5b:98:7e:46:a2:38:69:49:ed: 14:29:78:29:10:6c:ef:2c:42:1a:ca:b0:bf:8d:6d:63:3e:55: 69:f4:83:e5:3f:2c:ca:4f:e3:1a:98:e8:a8:47:ab:e9:d5:01: 4e:13:23:8c:8f:a7:b2:f6:9e:99:97:fd:d7:2a:30:e8:70:17: 12:93:ad:71 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUXq+LaAPmsd6AWVk5mc06nWRyjVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwODEzMDI1MTU1WhcNMjYwODEyMDI1NjU1 WjAzMTEwLwYDVQQDEygxN0JGQjc0MUY1MkMwODUyQkRCNURCRjYyNkY4NTk5RTIx ODZFMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ+mPtdC6QS3 cHXDVNvY9xDxw/eB+KrzNvS7/8VePouTmGv5zDiqjAnC0+Ovd/G/vEj5SzhH2d4k tq2w4bvXdOKAtRYz2O4La5uc/r90QFgWaHrwSOcqjH8tDgtkAHvybsuMcLXARKp7 3b2KcVFQcaNVGui0XK1+V/63fQYcomj6auprW3h8tu4lsWsYvhDFtRui8u7wiCzt 6vIekJUjGgwwSq+M7sNV+ej6tEP3IgqcU+tC/uyVllaU4mD0en30dBuovE0VD4t9 CYDUxWHgc1dSnBEJv+cFn3VWeLdMREF/QCpdp6bEkLXZJKZUwTWHkGq3oSAcm8kj uVdk8Kbe0wIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFBe/t0H1LAhSvbXb9ib4WZ4h huJJMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjY2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzAzMTM4 MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHACYC+ZIA/DANBgkqhkiG9w0BAQsFAAOCAQEAElvYaBus qXLHmLcByULUKKy0FUBuHiAsNZOHxW1QMtkYlIKHamfmRzgFlF0mR/3NK7AL5Nqs zr4pD/CSZ+mR3AJbPZNfzCFDBILp0Ei9auGJ6yKriKfFTMZnQLcoPxqfLYdXBM2K CQL88MfbvfjUL1MnZatuaZu+huQDSVX/iKwKibG7nko6NGNdNOKPKM19ZCu0qwiP p5imm4aGoASal5bNmhcwbRyROIbbccQ/V8a6vmLptfMNheRPWnhCW5h+RqI4aUnt FCl4KRBs7yxCGsqwv41tYz5VafSD5T8syk/jGpjoqEer6dUBThMjjI+nsvaemZf9 1yow6HAXEpOtcQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:36:57 2025 by rpki-client