
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa
File: 323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa (raw, json)
Hash identifier: hote8g/hXG/tFY8uNdLdTweBz/k58Z5+HVhKHFDFgSs=
Subject key identifier: 5D:CF:B6:CE:1C:3A:9F:28:9D:77:6B:F0:87:27:CF:57:C4:54:6C:C1
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 44BBA3AD1DDA2D5D2A44E4FBB2E74EFB67603FC0
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa
Signing time: Mon 11 May 2026 03:15:25 +0000
ROA not before: Mon 11 May 2026 03:10:25 +0000
ROA not after: Mon 10 May 2027 03:15:25 +0000
asID: 153376
IP address blocks: 2602:f92a:a468::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 04:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:bb:a3:ad:1d:da:2d:5d:2a:44:e4:fb:b2:e7:4e:fb:67:60:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: May 11 03:10:25 2026 GMT
Not After : May 10 03:15:25 2027 GMT
Subject: CN=5DCFB6CE1C3A9F289D776BF08727CF57C4546CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:ca:03:04:8a:3f:33:f9:b6:ee:f9:ac:a3:
05:2a:3e:2d:6a:a0:c1:a6:a9:c8:ba:bf:fd:9d:de:
d8:8e:8b:74:41:08:c2:a8:6f:b6:62:ab:fd:17:67:
3f:e3:5f:5e:50:6c:81:75:aa:37:f9:07:93:44:ab:
4e:c0:47:47:ed:46:73:a3:9b:66:5a:c7:ae:d4:0c:
95:2b:3f:ec:61:4f:61:73:43:45:d0:7f:2e:55:9c:
9b:79:c6:3b:02:11:d1:69:07:56:ee:0e:2d:ab:e5:
7c:ba:f6:aa:c1:6a:95:2a:6b:d9:6f:24:b3:ba:e8:
e0:be:f7:78:b7:89:26:db:fb:9c:75:88:d2:f7:00:
a2:a2:93:f0:77:11:02:18:64:da:25:10:49:17:cd:
a1:93:97:3e:cf:3e:c9:93:e3:16:c1:16:8c:71:7e:
f1:86:21:3e:d6:2a:4d:7f:fc:2a:57:13:47:e9:1a:
eb:09:c7:db:bf:ff:48:f7:1a:1a:ca:f5:89:a6:da:
1f:54:f3:3b:94:49:fa:6f:66:56:1e:40:c3:a3:f8:
35:7e:64:dd:9c:f7:4d:67:05:ee:f5:05:4f:5c:d3:
58:f6:48:6e:1d:73:6e:bf:a9:75:cd:aa:ba:9c:66:
9f:60:22:88:b4:75:d2:ee:d5:af:f6:90:be:f0:fe:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:B6:CE:1C:3A:9F:28:9D:77:6B:F0:87:27:CF:57:C4:54:6C:C1
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a468::/48
Signature Algorithm: sha256WithRSAEncryption
78:b2:9d:3a:c5:7e:51:9b:76:b3:f9:4e:42:51:10:d2:b6:87:
81:4b:49:20:fc:de:1c:0b:65:ac:93:b2:2e:aa:03:b6:ad:68:
4e:93:ad:3b:f6:d8:09:1d:a3:3d:0e:ff:63:39:85:cf:3a:6d:
c5:24:32:6a:8a:1c:cd:48:32:48:45:17:f9:08:31:e7:7c:97:
4d:c7:3c:02:ba:d4:06:5e:39:32:60:3b:ef:ea:01:36:6f:f4:
18:b5:ac:b9:4c:4d:9d:b7:4f:93:68:79:77:06:37:72:58:6f:
6f:85:ea:13:32:ac:28:62:18:22:69:7e:67:89:0e:fe:52:5d:
86:7c:89:c7:f1:b6:58:59:eb:33:48:44:2c:97:5b:e5:d9:0f:
60:94:e9:be:e7:39:2a:a5:78:27:7c:c1:9c:8d:6b:13:b0:8d:
34:62:26:3b:39:d5:a7:9a:37:26:68:dc:0d:9a:2a:04:81:20:
a7:57:a6:15:f5:bb:84:ee:9e:3c:59:5f:64:6a:2c:94:d1:a1:
f7:78:ec:e7:1f:8b:69:bc:be:36:91:7b:26:28:27:05:68:19:
36:df:c5:22:d3:ef:0e:df:30:47:12:f4:c4:bf:30:f2:72:10:
07:0e:0e:66:c6:70:9e:97:95:2e:57:cf:a6:93:4f:83:4b:67:
ea:e6:00:98
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIURLujrR3aLV0qROT7sudO+2dgP8AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNl
ZWYyODUxNDQxZWQ3YzBmZTgwHhcNMjYwNTExMDMxMDI1WhcNMjcwNTEwMDMxNTI1
WjAzMTEwLwYDVQQDEyg1RENGQjZDRTFDM0E5RjI4OUQ3NzZCRjA4NzI3Q0Y1N0M0
NTQ2Q0MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40LKAwSKPzP5
tu75rKMFKj4taqDBpqnIur/9nd7Yjot0QQjCqG+2Yqv9F2c/419eUGyBdao3+QeT
RKtOwEdH7UZzo5tmWseu1AyVKz/sYU9hc0NF0H8uVZybecY7AhHRaQdW7g4tq+V8
uvaqwWqVKmvZbySzuujgvvd4t4km2/ucdYjS9wCiopPwdxECGGTaJRBJF82hk5c+
zz7Jk+MWwRaMcX7xhiE+1ipNf/wqVxNH6RrrCcfbv/9I9xoayvWJptofVPM7lEn6
b2ZWHkDDo/g1fmTdnPdNZwXu9QVPXNNY9khuHXNuv6l1zaq6nGafYCKItHXS7tWv
9pC+8P7QWQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFF3Pts4cOp8onXdr8Icnz1fE
VGzBMB8GA1UdIwQYMBaAFGUsAZnmVi+2EZ4lkjAWmCYpwhCNMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8xLzY1MkMwMTk5RTY1NjJGQjYxMTlFMjU5MjMwMTY5ODI2
MjlDMjEwOEQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNlZWYy
ODUxNDQxZWQ3YzBmZTguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhNjEzNDM2MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1
MzMzMzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpGgwDQYJKoZIhvcNAQELBQADggEBAHiy
nTrFflGbdrP5TkJRENK2h4FLSSD83hwLZayTsi6qA7ataE6TrTv22Akdoz0O/2M5
hc86bcUkMmqKHM1IMkhFF/kIMed8l03HPAK61AZeOTJgO+/qATZv9Bi1rLlMTZ23
T5NoeXcGN3JYb2+F6hMyrChiGCJpfmeJDv5SXYZ8icfxtlhZ6zNIRCyXW+XZD2CU
6b7nOSqleCd8wZyNaxOwjTRiJjs51aeaNyZo3A2aKgSBIKdXphX1u4TunjxZX2Rq
LJTRofd47Ocfi2m8vjaReyYoJwVoGTbfxSLT7w7fMEcS9MS/MPJyEAcODmbGcJ6X
lS5Xz6aTT4NLZ+rmAJg=
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:44 2026 by rpki-client