$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa File: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (raw, json) Hash identifier: 59uZAy7XXfBP2lTYymBUstkE3+Fixf8c03kHK/e8F/o= Subject key identifier: BC:BA:D0:AB:32:92:40:6B:4A:AC:03:D5:6F:01:DC:0E:3E:6F:F1:B6 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 7FA91ECBAA912D26B750A8AAEB6F319DD40CC76A Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa Signing time: Wed 13 Aug 2025 02:56:40 +0000 ROA not before: Wed 13 Aug 2025 02:51:40 +0000 ROA not after: Wed 12 Aug 2026 02:56:40 +0000 asID: 401812 IP address blocks: 2602:f992:fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a9:1e:cb:aa:91:2d:26:b7:50:a8:aa:eb:6f:31:9d:d4:0c:c7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Aug 13 02:51:40 2025 GMT Not After : Aug 12 02:56:40 2026 GMT Subject: CN=BCBAD0AB3292406B4AAC03D56F01DC0E3E6FF1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:21:3a:67:b0:7f:64:db:fb:ee:c8:d6:62: f2:8b:a6:01:a5:e4:10:1e:63:97:f5:9c:cc:b5:f9: ec:1a:f8:86:62:4c:86:92:0d:a2:bb:68:43:72:f3: 42:18:e2:a0:56:5b:cb:ae:27:2d:9f:04:ec:ff:7b: 4b:40:6b:56:ed:c2:46:f8:c4:d4:7f:0b:2f:56:94: 0b:04:5a:38:f3:ff:c0:9a:31:8e:24:51:a0:a1:7d: 35:13:25:0e:9b:9d:5b:e7:92:d4:6e:5e:c0:45:a6: c8:42:e9:f9:5a:66:5a:18:5d:7c:8e:19:67:26:9d: c1:69:1c:fb:38:1f:28:66:d2:83:3c:92:ec:79:87: 71:81:5e:5c:99:5f:5e:5a:c9:35:63:a8:9c:43:f9: 42:18:ce:e7:f8:fd:05:3f:c4:87:c3:b5:d3:13:97: d2:dd:88:0e:d5:e8:4f:d9:f4:3f:47:43:68:2d:7d: c0:d3:94:2b:54:92:31:e5:50:d7:22:43:f3:43:3d: 9e:56:eb:14:df:46:91:f3:ca:54:67:ce:a0:08:f6: 52:d4:09:bb:f1:ad:51:a3:6d:33:cd:f6:a3:e1:ec: 98:cd:bf:41:de:48:cf:5e:c8:ce:dd:36:b2:a9:58: e7:e1:28:60:ac:48:89:2d:39:c3:69:cf:37:5d:9f: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BA:D0:AB:32:92:40:6B:4A:AC:03:D5:6F:01:DC:0E:3E:6F:F1:B6 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:fd::/48 Signature Algorithm: sha256WithRSAEncryption 69:d3:1b:22:e7:47:1a:3a:93:12:37:20:1a:20:9c:10:97:26: 06:95:81:fb:de:da:8c:07:ba:18:11:13:c2:93:1c:b3:2e:3c: 47:92:3a:ba:f5:97:1f:6a:4c:fe:01:33:79:a4:b4:1e:83:30: 8c:0c:1b:9d:06:d9:0c:eb:8d:6a:ee:e5:24:6a:62:85:f0:03: 37:f0:6c:1b:da:f1:3b:21:df:21:3a:4c:aa:66:39:6f:f4:a4: 11:d3:4d:a4:ba:01:f8:33:1e:29:93:27:5d:70:a4:64:e4:c8: 79:18:9d:9c:5d:23:7f:7d:fd:36:eb:b8:5e:ef:79:8a:f8:e1: e3:68:af:b1:5e:0b:76:a5:e9:19:8e:a1:90:a9:a8:73:1c:6c: 54:30:1d:68:1e:fd:d9:27:ef:52:82:fd:72:eb:58:c6:aa:b1: 4a:31:ea:ea:8d:e7:a3:c2:22:8d:c0:20:ea:68:8a:e1:57:07: 3e:b5:a3:5a:0b:4a:48:6c:94:1c:14:b2:c9:f7:ff:e6:88:99: 98:b7:f8:f7:1b:98:bf:d6:8a:9f:fd:7a:82:a3:ca:33:10:45: 21:ee:62:f9:1f:df:a3:5c:18:3b:7b:c7:1a:0a:76:53:f2:db: d2:f9:12:15:6e:7a:6b:d3:79:de:2a:65:3c:2e:98:1e:95:60: c3:6d:bb:90 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUf6key6qRLSa3UKiq628xndQMx2owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwODEzMDI1MTQwWhcNMjYwODEyMDI1NjQw WjAzMTEwLwYDVQQDEyhCQ0JBRDBBQjMyOTI0MDZCNEFBQzAzRDU2RjAxREMwRTNF NkZGMUI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2ohOmewf2Tb ++7I1mLyi6YBpeQQHmOX9ZzMtfnsGviGYkyGkg2iu2hDcvNCGOKgVlvLrictnwTs /3tLQGtW7cJG+MTUfwsvVpQLBFo48//AmjGOJFGgoX01EyUOm51b55LUbl7ARabI Qun5WmZaGF18jhlnJp3BaRz7OB8oZtKDPJLseYdxgV5cmV9eWsk1Y6icQ/lCGM7n +P0FP8SHw7XTE5fS3YgO1ehP2fQ/R0NoLX3A05QrVJIx5VDXIkPzQz2eVusU30aR 88pUZ86gCPZS1Am78a1Ro20zzfaj4eyYzb9B3kjPXsjO3TayqVjn4ShgrEiJLTnD ac83XZ+hzwIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFLy60KsykkBrSqwD1W8B3A4+ b/G2MB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzAzMTM4 MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHACYC+ZIA/TANBgkqhkiG9w0BAQsFAAOCAQEAadMbIudH GjqTEjcgGiCcEJcmBpWB+97ajAe6GBETwpMcsy48R5I6uvWXH2pM/gEzeaS0HoMw jAwbnQbZDOuNau7lJGpihfADN/BsG9rxOyHfITpMqmY5b/SkEdNNpLoB+DMeKZMn XXCkZOTIeRidnF0jf339Nuu4Xu95ivjh42ivsV4LdqXpGY6hkKmocxxsVDAdaB79 2SfvUoL9cutYxqqxSjHq6o3no8IijcAg6miK4VcHPrWjWgtKSGyUHBSyyff/5oiZ mLf49xuYv9aKn/16gqPKMxBFIe5i+R/fo1wYO3vHGgp2U/Lb0vkSFW56a9N53ipl PC6YHpVgw227kA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:37:14 2025 by rpki-client