$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa File: 323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa (raw, json) Hash identifier: v9u4hJpvtPbpSdnsbR0ndmLWm64onJO+ez5t/aDMjXw= Subject key identifier: 0C:37:D9:43:29:A4:A1:CF:C8:9B:37:E8:F7:0F:E0:8A:E8:FF:D1:84 Certificate issuer: /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac Certificate serial: 672B22B4EDE339C07D8C25CEB8A3BFCEABF5CCB8 Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa Signing time: Fri 30 May 2025 20:26:30 +0000 ROA not before: Fri 30 May 2025 20:21:30 +0000 ROA not after: Fri 29 May 2026 20:26:30 +0000 asID: 401682 IP address blocks: 2604:ca0:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 22:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2b:22:b4:ed:e3:39:c0:7d:8c:25:ce:b8:a3:bf:ce:ab:f5:cc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac Validity Not Before: May 30 20:21:30 2025 GMT Not After : May 29 20:26:30 2026 GMT Subject: CN=0C37D94329A4A1CFC89B37E8F70FE08AE8FFD184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:0a:86:c8:54:ac:69:0d:fd:6f:72:7b:44: 9a:34:1c:25:3e:4f:2c:77:a1:c7:68:a5:74:ed:1e: 08:c4:da:48:cc:d1:9b:f9:32:5a:07:2c:ed:2b:59: c7:e5:fc:59:12:61:50:fd:ee:f7:25:6b:8e:42:8f: ad:ce:ed:94:67:27:47:02:2b:ee:30:f1:ee:c3:8d: f4:9b:b6:af:5f:f0:b1:77:ab:96:70:8b:92:79:7f: 82:ca:43:9d:41:24:90:4b:cc:4b:9e:db:fa:8e:fe: bf:bd:ad:29:b2:20:aa:75:6d:29:c1:eb:1a:73:8d: 2c:46:6c:1b:37:22:0a:b6:d4:45:c6:5f:e4:4c:82: d0:fc:e2:64:26:d1:aa:ac:40:5e:ac:f5:d0:15:66: 2c:f4:78:ed:b9:ae:71:fc:29:35:5d:10:87:b3:6d: 0a:d3:29:20:b1:b9:6e:95:ab:db:c5:e0:7e:23:66: 7f:9b:27:a2:86:95:e4:94:f0:a4:b9:cf:37:56:2b: 56:b4:28:8d:85:24:b5:07:f0:c8:83:62:c8:8e:16: b0:25:1c:1c:56:c2:55:11:46:9c:c6:61:0a:fa:42: c1:c8:e0:c6:93:48:70:bd:77:d8:8e:85:c5:ef:4a: ee:2b:42:24:6e:a3:df:20:b4:a3:29:42:39:a8:c6: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:37:D9:43:29:A4:A1:CF:C8:9B:37:E8:F7:0F:E0:8A:E8:FF:D1:84 X509v3 Authority Key Identifier: keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:ca0:600::/40 Signature Algorithm: sha256WithRSAEncryption 43:50:ab:1e:d9:5a:5a:66:8f:06:98:27:fc:d0:2f:dc:03:0f: c1:90:c1:67:81:ab:c9:53:90:b5:80:af:77:95:ad:31:3b:c1: 9e:c9:0e:c3:4e:8f:c8:03:2f:af:1b:97:09:30:bf:1b:06:ee: 96:33:a0:d0:3a:e5:5f:84:92:b2:09:9c:8e:9a:2a:03:b1:58: 6b:87:4f:1d:1e:97:f0:17:0e:2c:9e:c9:be:d1:fa:29:d4:1a: 55:f3:e8:e9:63:87:08:c7:ab:4e:e9:39:5b:4d:ba:4d:d8:ba: e0:ae:2d:5d:67:f9:04:c6:38:69:f4:15:49:4d:a3:a8:15:df: 60:f8:ff:d8:79:47:cf:cf:8d:06:a4:28:b8:18:9d:0b:62:ac: 7b:4b:c7:2d:0c:39:1c:48:18:59:32:a4:7c:55:73:b9:1d:49: 49:71:b7:74:25:bc:50:84:c4:71:43:55:b0:2b:ed:40:c0:9c: c4:71:c3:fe:0e:2c:ce:0e:bc:09:b6:16:71:af:8b:8f:1b:bf: 1f:00:96:76:e7:7c:e3:71:79:30:67:34:f0:88:1a:60:d4:e4: da:93:eb:7e:a5:fd:b7:10:f1:b6:89:0f:44:b5:e1:18:5e:23: fe:4c:40:a2:b8:53:e7:08:fe:a2:1d:1e:8e:cc:8a:9e:5f:66: f7:1c:46:12 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUZysitO3jOcB9jCXOuKO/zqv1zLgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjUwNTMwMjAyMTMwWhcNMjYwNTI5MjAyNjMw WjAzMTEwLwYDVQQDEygwQzM3RDk0MzI5QTRBMUNGQzg5QjM3RThGNzBGRTA4QUU4 RkZEMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EgKhshUrGkN /W9ye0SaNBwlPk8sd6HHaKV07R4IxNpIzNGb+TJaByztK1nH5fxZEmFQ/e73JWuO Qo+tzu2UZydHAivuMPHuw430m7avX/Cxd6uWcIuSeX+CykOdQSSQS8xLntv6jv6/ va0psiCqdW0pwesac40sRmwbNyIKttRFxl/kTILQ/OJkJtGqrEBerPXQFWYs9Hjt ua5x/Ck1XRCHs20K0ykgsblulavbxeB+I2Z/myeihpXklPCkuc83VitWtCiNhSS1 B/DIg2LIjhawJRwcVsJVEUacxmEK+kLByODGk0hwvXfYjoXF70ruK0IkbqPfILSj KUI5qMbukQIDAQABo4ICujCCArYwHQYDVR0OBBYEFAw32UMppKHPyJs36PcP4Iro /9GEMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0 MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTM2MzAzMDNhM2EyZjM0MzAy ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAGMA0GCSqG SIb3DQEBCwUAA4IBAQBDUKse2VpaZo8GmCf80C/cAw/BkMFngavJU5C1gK93la0x O8GeyQ7DTo/IAy+vG5cJML8bBu6WM6DQOuVfhJKyCZyOmioDsVhrh08dHpfwFw4s nsm+0fop1BpV8+jpY4cIx6tO6TlbTbpN2Lrgri1dZ/kExjhp9BVJTaOoFd9g+P/Y eUfPz40GpCi4GJ0LYqx7S8ctDDkcSBhZMqR8VXO5HUlJcbd0JbxQhMRxQ1WwK+1A wJzEccP+DizODrwJthZxr4uPG78fAJZ253zjcXkwZzTwiBpg1OTak+t+pf23EPG2 iQ9EteEYXiP+TECiuFPnCP6iHR6OzIqeX2b3HEYS -----END CERTIFICATE-----Generated at Sat Jun 7 13:38:23 2025 by rpki-client