$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323039313039.roa File: 323630323a663631333a32303a3a2f34342d3438203d3e20323039313039.roa (raw, json) Hash identifier: fj6ChiMrDRTn7XHBKHeQL9BMR31xgQpSLJeDnfSXmpk= Subject key identifier: F1:17:01:7E:F2:4A:A0:BC:2D:F8:0E:60:0B:AE:95:B9:E2:F3:96:D1 Certificate issuer: /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4 Certificate serial: 1D2A4E6AB4AFFDEEEE563DC9EFBA0B9CA1DEF167 Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323039313039.roa Signing time: Tue 09 Sep 2025 13:43:34 +0000 ROA not before: Tue 09 Sep 2025 13:38:34 +0000 ROA not after: Tue 08 Sep 2026 13:43:34 +0000 asID: 209109 IP address blocks: 2602:f613:20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2a:4e:6a:b4:af:fd:ee:ee:56:3d:c9:ef:ba:0b:9c:a1:de:f1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4 Validity Not Before: Sep 9 13:38:34 2025 GMT Not After : Sep 8 13:43:34 2026 GMT Subject: CN=F117017EF24AA0BC2DF80E600BAE95B9E2F396D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:8e:3a:5f:7c:5f:e4:67:4a:b8:42:ae:79: 0e:59:34:73:e9:ee:b7:75:94:a6:8d:88:39:56:14: d4:06:d7:a4:86:09:3f:2e:0d:7a:a7:8a:06:df:21: a9:a8:02:be:90:16:88:27:7e:37:07:a7:63:5c:d6: 67:bf:9f:a1:bd:fa:b8:70:07:f3:64:9c:06:b4:2b: f8:24:9e:1e:e6:4a:75:17:4a:46:af:b2:ff:87:d8: e3:5b:0c:d8:7d:5f:dd:71:70:3b:00:4e:b9:fa:33: 7b:f1:f3:d4:8b:85:f1:f5:f3:7f:f1:4d:d2:c1:89: b2:4f:24:4a:4c:46:b6:25:42:b3:94:a5:bc:02:6c: c5:7c:19:5f:40:fd:48:3b:4b:39:a5:e4:bd:88:c2: 73:4f:33:76:85:ca:63:f7:97:f7:77:65:41:e0:2c: 23:a3:0e:c7:7e:44:b1:d4:a3:d2:8b:b4:2f:98:e7: 72:b8:38:b1:75:12:e4:05:4d:a0:c8:c9:3d:62:b1: ea:f3:07:0b:ec:e4:35:fa:ff:cd:ed:d6:91:6e:46: 36:71:56:e3:95:f3:fe:a1:42:8a:f4:16:45:63:57: 38:69:b4:89:72:f7:c5:2a:a7:fe:42:40:19:a3:c0: 5f:aa:94:d9:a7:14:59:79:f2:fb:e1:94:87:ce:15: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:17:01:7E:F2:4A:A0:BC:2D:F8:0E:60:0B:AE:95:B9:E2:F3:96:D1 X509v3 Authority Key Identifier: keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f613:20::/44 Signature Algorithm: sha256WithRSAEncryption 48:ce:d4:18:92:ce:af:7b:c9:c5:20:77:d4:f4:14:04:83:16: 08:dd:dd:96:b6:70:07:9c:ae:7a:d0:da:d0:ce:8d:a8:78:ef: 0f:33:f8:87:fe:17:36:04:58:69:b6:a2:cf:ca:d8:25:e2:47: 6c:06:0d:45:c7:94:d6:a3:8d:21:ed:c8:f8:84:de:d0:f8:e3: 28:fe:4d:d2:c3:b8:b5:84:12:03:3d:ea:8a:06:90:8e:d6:49: 2f:6b:93:d9:0a:a5:46:8f:ca:6d:84:b5:22:96:c8:bf:c3:0b: 33:17:75:f0:62:24:e7:65:1f:8a:85:54:c4:3d:bd:cd:02:0b: e0:67:04:c7:07:9e:c7:fe:7b:03:21:b9:6e:7d:3d:95:c3:63: ba:73:25:d6:0b:e7:23:55:94:d7:9f:f4:a9:23:ba:a5:73:aa: 23:74:f3:ef:9a:bb:16:1a:2d:51:92:ba:45:b5:76:85:d3:1d: d4:98:c5:3b:92:8f:44:84:a6:bc:a1:c8:61:e9:e9:d0:ae:ff: 19:ca:1c:0f:d0:b8:3d:cd:34:95:6c:ff:6e:6e:52:de:42:95: d7:7a:61:3e:fa:b0:2c:17:08:c4:9a:62:d6:89:f6:a6:7b:12: ce:37:dd:5c:86:59:bf:d0:21:d5:c7:04:07:22:20:a1:ba:40: b5:bc:3f:75 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUHSpOarSv/e7uVj3J77oLnKHe8WcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ5MzcxZTcwNmRiOTE3MTIwMzU0Y2UxNjJlMTMxMzA3 NDQ4ZDQ0NWQzYmRhNTM0ZTQwHhcNMjUwOTA5MTMzODM0WhcNMjYwOTA4MTM0MzM0 WjAzMTEwLwYDVQQDEyhGMTE3MDE3RUYyNEFBMEJDMkRGODBFNjAwQkFFOTVCOUUy RjM5NkQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs52OOl98X+Rn SrhCrnkOWTRz6e63dZSmjYg5VhTUBtekhgk/Lg16p4oG3yGpqAK+kBaIJ343B6dj XNZnv5+hvfq4cAfzZJwGtCv4JJ4e5kp1F0pGr7L/h9jjWwzYfV/dcXA7AE65+jN7 8fPUi4Xx9fN/8U3SwYmyTyRKTEa2JUKzlKW8AmzFfBlfQP1IO0s5peS9iMJzTzN2 hcpj95f3d2VB4Cwjow7HfkSx1KPSi7QvmOdyuDixdRLkBU2gyMk9YrHq8wcL7OQ1 +v/N7daRbkY2cVbjlfP+oUKK9BZFY1c4abSJcvfFKqf+QkAZo8BfqpTZpxRZefL7 4ZSHzhWhawIDAQABo4ICuzCCArcwHQYDVR0OBBYEFPEXAX7ySqC8LfgOYAuulbni 85bRMB8GA1UdIwQYMBaAFDGKMeD5sv1YTZlOhI5+gXzMkVKqMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzEv MzE4QTMxRTBGOUIyRkQ1ODREOTk0RTg0OEU3RTgxN0NDQzkxNTJBQS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzE1ODM4YzQ4LWNmMTEtNDVjNC04ZTBiLTA0NTVmMjY0MGNkOS81ZDkz NzFlNzA2ZGI5MTcxMjAzNTRjZTE2MmUxMzEzMDc0NDhkNDQ1ZDNiZGE1MzRlNC5j ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw OGIzZTI4NTE0YS8xLzMyMzYzMDMyM2E2NjM2MzEzMzNhMzIzMDNhM2EyZjM0MzQy ZDM0MzgyMDNkM2UyMDMyMzAzOTMxMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC9hMAIDANBgkq hkiG9w0BAQsFAAOCAQEASM7UGJLOr3vJxSB31PQUBIMWCN3dlrZwB5yuetDa0M6N qHjvDzP4h/4XNgRYabaiz8rYJeJHbAYNRceU1qONIe3I+ITe0PjjKP5N0sO4tYQS Az3qigaQjtZJL2uT2QqlRo/KbYS1IpbIv8MLMxd18GIk52UfioVUxD29zQIL4GcE xweex/57AyG5bn09lcNjunMl1gvnI1WU15/0qSO6pXOqI3Tz75q7FhotUZK6RbV2 hdMd1JjFO5KPRISmvKHIYenp0K7/GcocD9C4Pc00lWz/bm5S3kKV13phPvqwLBcI xJpi1on2pnsSzjfdXIZZv9Ah1ccEByIgobpAtbw/dQ== -----END CERTIFICATE-----Generated at Tue Sep 9 21:12:01 2025 by rpki-client