$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365343a3a2f34382d3438203d3e20333936393933.roa File: 323630323a663734333a3365343a3a2f34382d3438203d3e20333936393933.roa (raw, json) Hash identifier: QsXSaeXC8470ajw+MDLlgTJYLJQhdr4w1UBqF9hEm38= Subject key identifier: 84:7F:45:7D:A1:A2:3E:EA:12:29:2F:00:9C:C7:6F:F7:5B:36:A1:1F Certificate issuer: /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3 Certificate serial: 500360B6F3371CA23F0CBE9F0A2764E4B695F6BB Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer Subject info access: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365343a3a2f34382d3438203d3e20333936393933.roa Signing time: Thu 12 Jun 2025 00:16:27 +0000 ROA not before: Thu 12 Jun 2025 00:11:27 +0000 ROA not after: Thu 11 Jun 2026 00:16:27 +0000 asID: 396993 IP address blocks: 2602:f743:3e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 17:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:03:60:b6:f3:37:1c:a2:3f:0c:be:9f:0a:27:64:e4:b6:95:f6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3 Validity Not Before: Jun 12 00:11:27 2025 GMT Not After : Jun 11 00:16:27 2026 GMT Subject: CN=847F457DA1A23EEA12292F009CC76FF75B36A11F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:30:8d:7e:da:62:4a:55:40:91:8b:33:24:09: 04:f5:a1:d0:fa:1c:7f:c6:4e:55:58:b4:b4:3a:e0: 28:26:26:95:cd:99:6a:c1:cf:f5:cf:52:9d:cc:4d: 47:8b:6c:b6:49:db:b7:fb:3b:25:4d:3b:f6:90:50: b5:bb:28:19:ee:b3:25:8e:70:d7:18:85:8f:79:57: 74:ff:91:92:83:3d:f6:cd:57:2b:84:5e:ff:dd:e3: 9d:32:93:67:0a:c4:56:f4:50:d8:1e:0d:b2:a6:e9: 7a:54:20:c4:57:16:2a:6b:e8:9e:62:ca:25:64:59: e7:34:60:ef:b1:98:f9:9f:4a:8c:0a:30:f0:88:59: 2c:96:23:a9:55:5d:30:f7:19:ae:bb:aa:3c:fc:b1: 36:ab:f7:81:4d:13:ef:63:b1:f5:5d:0f:18:c1:28: 64:57:7f:67:40:51:06:54:25:87:09:d7:a5:36:8e: 65:5c:93:1b:05:11:90:47:c7:2c:49:76:3f:7d:e0: 9a:0b:18:f4:97:da:d3:af:54:fd:33:43:22:67:ce: 81:46:6e:1c:fd:e7:e1:b1:e8:3c:20:e8:92:5e:ae: a2:bc:77:43:f0:cc:c3:98:4b:f2:2c:5f:47:df:fe: 53:88:3b:cf:5d:a5:1b:1c:ff:e2:ea:13:77:14:2c: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7F:45:7D:A1:A2:3E:EA:12:29:2F:00:9C:C7:6F:F7:5B:36:A1:1F X509v3 Authority Key Identifier: keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365343a3a2f34382d3438203d3e20333936393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f743:3e4::/48 Signature Algorithm: sha256WithRSAEncryption 97:76:62:99:5c:3e:63:af:4d:99:56:54:36:45:f3:3b:5d:4f: 93:9d:59:e9:8d:79:a6:39:fa:fa:e2:1a:24:13:2d:2c:a8:a3: b4:3b:c9:8e:22:20:26:33:6d:a1:bc:24:02:a8:47:7a:90:35: 78:a7:d8:d1:0b:de:fc:f7:8b:cd:40:a8:c0:4b:d7:00:eb:89: b4:54:2e:aa:58:1e:11:c5:c4:31:b3:fa:33:48:db:94:fd:aa: 67:fb:df:df:e8:1e:c9:fb:0c:4c:45:8d:4d:c5:9d:76:4d:c4: a4:c0:52:4c:d1:9f:90:5c:80:de:75:47:d0:cf:0a:83:f8:05: 13:6a:82:f4:bc:60:bc:bd:a9:a7:a4:89:2e:08:07:9a:b2:48: 65:0d:17:e3:2d:45:6d:13:6a:d7:3a:a6:fd:60:f7:03:80:87: e9:ca:c2:43:26:b9:37:61:c3:08:92:53:2a:f2:47:28:3a:60: ff:c6:20:8e:df:08:cf:8a:40:eb:9f:d4:47:90:31:d7:c4:21: 3c:6d:7a:04:fb:22:d0:b3:51:ad:0f:c1:ab:c3:80:de:33:92: 72:69:fe:ab:45:df:74:77:ab:46:bd:0a:9b:75:0a:18:b9:8c: 8c:f5:a4:59:c7:7e:c7:f8:8b:48:01:c6:35:cd:c3:a8:95:77: 9e:ff:1d:b3 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUUANgtvM3HKI/DL6fCidk5LaV9rswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjUwNjEyMDAxMTI3WhcNMjYwNjExMDAxNjI3 WjAzMTEwLwYDVQQDEyg4NDdGNDU3REExQTIzRUVBMTIyOTJGMDA5Q0M3NkZGNzVC MzZBMTFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTCNftpiSlVA kYszJAkE9aHQ+hx/xk5VWLS0OuAoJiaVzZlqwc/1z1KdzE1Hi2y2Sdu3+zslTTv2 kFC1uygZ7rMljnDXGIWPeVd0/5GSgz32zVcrhF7/3eOdMpNnCsRW9FDYHg2ypul6 VCDEVxYqa+ieYsolZFnnNGDvsZj5n0qMCjDwiFksliOpVV0w9xmuu6o8/LE2q/eB TRPvY7H1XQ8YwShkV39nQFEGVCWHCdelNo5lXJMbBRGQR8csSXY/feCaCxj0l9rT r1T9M0MiZ86BRm4c/efhseg8IOiSXq6ivHdD8MzDmEvyLF9H3/5TiDvPXaUbHP/i 6hN3FCwdXQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFIR/RX2hoj7qEikvAJzHb/db NqEfMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi NzllYzA4YmFjYi8wLzMyMzYzMDMyM2E2NjM3MzQzMzNhMzM2NTM0M2EzYTJmMzQz ODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3QwPkMA0G CSqGSIb3DQEBCwUAA4IBAQCXdmKZXD5jr02ZVlQ2RfM7XU+TnVnpjXmmOfr64hok Ey0sqKO0O8mOIiAmM22hvCQCqEd6kDV4p9jRC97894vNQKjAS9cA64m0VC6qWB4R xcQxs/ozSNuU/apn+9/f6B7J+wxMRY1NxZ12TcSkwFJM0Z+QXIDedUfQzwqD+AUT aoL0vGC8vamnpIkuCAeaskhlDRfjLUVtE2rXOqb9YPcDgIfpysJDJrk3YcMIklMq 8kcoOmD/xiCO3wjPikDrn9RHkDHXxCE8bXoE+yLQs1GtD8Grw4DeM5Jyaf6rRd90 d6tGvQqbdQoYuYyM9aRZx37H+ItIAcY1zcOolXee/x2z -----END CERTIFICATE-----Generated at Mon Oct 27 16:30:36 2025 by rpki-client