$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa File: 323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa (raw, json) Hash identifier: 2XcP7iwAY7Xy+MY6Ol8KIrrLGhpwzafsgC4DW9fmcJE= Subject key identifier: 00:C9:CF:4A:AB:99:0D:05:49:DD:DF:2B:3E:F5:E8:7D:22:E4:74:62 Certificate issuer: /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f Certificate serial: 313B70119E5CB3B89D1C289FDA18BB40626A3C2C Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa Signing time: Thu 06 Mar 2025 17:58:53 +0000 ROA not before: Thu 06 Mar 2025 17:53:53 +0000 ROA not after: Thu 05 Mar 2026 17:58:53 +0000 asID: 10103 IP address blocks: 2607:74c0:100::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 22:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3b:70:11:9e:5c:b3:b8:9d:1c:28:9f:da:18:bb:40:62:6a:3c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f Validity Not Before: Mar 6 17:53:53 2025 GMT Not After : Mar 5 17:58:53 2026 GMT Subject: CN=00C9CF4AAB990D0549DDDF2B3EF5E87D22E47462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:cf:b4:cb:8d:6c:8d:91:fc:2e:b0:37:a3: 99:33:a4:b6:7f:c2:6d:ce:a5:16:d8:86:b3:b3:3b: 8e:b6:ed:de:94:ec:b1:05:c3:11:37:0e:07:4c:a5: da:dd:b2:f4:66:96:03:4d:23:a0:1d:f6:a7:cb:a2: 9b:33:8c:35:d5:9e:93:b8:ea:0b:55:19:31:a6:01: 0c:dd:65:75:7d:ca:48:3d:5e:e8:7e:e8:f7:98:00: 1c:ee:b1:9c:d4:41:5e:2c:01:e6:62:5f:32:81:95: 74:33:43:a2:19:18:b4:36:75:ec:30:ed:af:f6:93: a0:2f:dc:84:61:1a:4c:e4:d1:71:a5:f8:45:53:9c: d1:59:b1:57:c7:78:be:5b:81:2f:33:9c:68:5a:4c: 3c:29:88:18:10:84:aa:a7:33:f6:08:3d:33:f5:0d: 9d:dd:fc:69:4d:f7:7b:25:d3:7e:cb:43:15:6b:b6: 9a:fe:ba:81:3d:e5:9c:b6:09:d4:5c:f6:43:31:08: 8d:ca:d5:7f:9a:33:ff:5e:4b:35:7b:3a:00:20:c2: 74:16:7c:05:72:06:2f:95:98:56:cb:f7:62:d2:52: 1f:3f:6e:97:d0:4b:43:1a:1d:7e:1c:dc:16:9d:a7: 1d:7b:a2:a0:be:90:9d:13:37:2a:2c:e9:5f:1b:22: 59:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C9:CF:4A:AB:99:0D:05:49:DD:DF:2B:3E:F5:E8:7D:22:E4:74:62 X509v3 Authority Key Identifier: keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2607:74c0:100::/44 Signature Algorithm: sha256WithRSAEncryption b0:25:11:a1:45:2f:b9:25:90:cd:2b:0e:f1:9b:3f:e1:b5:37: 66:6f:34:c0:6b:89:46:d1:39:fc:4a:ed:7c:77:e9:f3:ff:23: 06:26:95:a5:17:8d:b6:70:65:9d:38:86:88:72:88:06:e4:0f: 1c:fe:91:af:28:1e:31:e1:28:4e:f0:e2:97:68:4e:65:98:24: 31:75:9f:6d:8d:2e:47:55:91:40:cb:20:5c:2e:94:5e:71:d6: cf:83:8e:aa:7b:51:71:af:7a:2c:b8:35:db:27:8d:23:38:02: 54:fd:44:3e:b6:48:8d:e2:07:da:1f:9a:0f:99:23:78:45:d5: f0:88:f3:8d:9a:39:21:62:48:5e:0a:f6:8f:5c:b6:b9:69:db: e8:bd:3e:e0:a2:62:1e:dc:57:a4:0f:74:3e:28:1d:52:d9:dd: 51:8f:ac:5f:e9:5e:4e:58:73:3d:47:3c:24:87:76:97:00:c1: e6:6d:34:8c:a6:dd:f5:41:ab:2c:4e:ec:64:35:3a:35:e1:bc: ff:75:e4:36:a7:ee:ea:9f:68:4d:ae:5c:3c:b7:01:a5:15:1d: 06:34:de:c6:e9:47:2d:e7:6b:3c:8a:49:6f:37:44:7b:30:87: 2f:ef:71:50:61:27:d3:3b:df:5f:11:ea:07:b2:e7:d8:f8:56: f1:7b:a2:ff -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUMTtwEZ5cs7idHCif2hi7QGJqPCwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGVkY2IyZjdjMDNhNGI2ZjQ5MzNkODA1NDZkYTQwYTQ0 MTM1NGY4NWY3ZTg4NTY3N2YwHhcNMjUwMzA2MTc1MzUzWhcNMjYwMzA1MTc1ODUz WjAzMTEwLwYDVQQDEygwMEM5Q0Y0QUFCOTkwRDA1NDlERERGMkIzRUY1RTg3RDIy RTQ3NDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KfPtMuNbI2R /C6wN6OZM6S2f8JtzqUW2IazszuOtu3elOyxBcMRNw4HTKXa3bL0ZpYDTSOgHfan y6KbM4w11Z6TuOoLVRkxpgEM3WV1fcpIPV7ofuj3mAAc7rGc1EFeLAHmYl8ygZV0 M0OiGRi0NnXsMO2v9pOgL9yEYRpM5NFxpfhFU5zRWbFXx3i+W4EvM5xoWkw8KYgY EISqpzP2CD0z9Q2d3fxpTfd7JdN+y0MVa7aa/rqBPeWctgnUXPZDMQiNytV/mjP/ Xks1ezoAIMJ0FnwFcgYvlZhWy/di0lIfP26X0EtDGh1+HNwWnacde6KgvpCdEzcq LOlfGyJZ8QIDAQABo4ICuzCCArcwHQYDVR0OBBYEFADJz0qrmQ0FSd3fKz716H0i 5HRiMB8GA1UdIwQYMBaAFMzrmr7lO6iU07zAkwYfbd5xtw5qMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzgyMWVlZjdlMDYwMzQ1ZTRiZTU2OWNkMzQ3Y2NiZTM2LzAv Q0NFQjlBQkVFNTNCQTg5NEQzQkNDMDkzMDYxRjZEREU3MUI3MEU2QS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3LzI3OWMxNGE3LWM2ZGEtNDE1NS1iODc1LTg1ZDc1MDc4ZWIzNi9kZWRj YjJmN2MwM2E0YjZmNDkzM2Q4MDU0NmRhNDBhNDQxMzU0Zjg1ZjdlODg1Njc3Zi5j ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MjFlZWY3ZTA2MDM0NWU0YmU1Njlj ZDM0N2NjYmUzNi8wLzMyMzYzMDM3M2EzNzM0NjMzMDNhMzEzMDMwM2EzYTJmMzQz NDJkMzQzNDIwM2QzZTIwMzEzMDMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYHdMABADANBgkq hkiG9w0BAQsFAAOCAQEAsCURoUUvuSWQzSsO8Zs/4bU3Zm80wGuJRtE5/ErtfHfp 8/8jBiaVpReNtnBlnTiGiHKIBuQPHP6RrygeMeEoTvDil2hOZZgkMXWfbY0uR1WR QMsgXC6UXnHWz4OOqntRca96LLg12yeNIzgCVP1EPrZIjeIH2h+aD5kjeEXV8Ijz jZo5IWJIXgr2j1y2uWnb6L0+4KJiHtxXpA90PigdUtndUY+sX+leTlhzPUc8JId2 lwDB5m00jKbd9UGrLE7sZDU6NeG8/3XkNqfu6p9oTa5cPLcBpRUdBjTexulHLedr PIpJbzdEezCHL+9xUGEn0zvfXxHqB7Ln2PhW8Xui/w== -----END CERTIFICATE-----Generated at Sat Apr 5 08:42:18 2025 by rpki-client