$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa File: 323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa (raw, json) Hash identifier: EbC6Ugl/8biZ4cMjpNLU7ynD6MJQMnZ3r/+/wChTDHc= Subject key identifier: 8B:89:AB:78:7F:15:E1:88:09:CC:67:7B:EE:04:3F:59:C7:CE:E6:CE Certificate issuer: /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac Certificate serial: 21759F9867F61DE77B04C53650977D8413C26BAA Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa Signing time: Fri 30 May 2025 20:26:33 +0000 ROA not before: Fri 30 May 2025 20:21:33 +0000 ROA not after: Fri 29 May 2026 20:26:33 +0000 asID: 401682 IP address blocks: 2604:ca0:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 22:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:75:9f:98:67:f6:1d:e7:7b:04:c5:36:50:97:7d:84:13:c2:6b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac Validity Not Before: May 30 20:21:33 2025 GMT Not After : May 29 20:26:33 2026 GMT Subject: CN=8B89AB787F15E18809CC677BEE043F59C7CEE6CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:d6:95:bf:75:e9:66:ff:1c:ce:8f:6d:59: 33:b1:47:75:e2:85:96:81:48:2c:14:9f:b8:3c:10: 66:7d:dc:1d:2f:b8:3f:32:63:ff:d7:1a:c4:cf:d7: 14:3c:4f:9a:a2:e6:8e:57:7b:7b:41:0d:c1:49:ab: 34:6c:e7:6a:6c:39:58:f4:c2:d1:c0:9d:d9:b3:39: 43:0e:f7:eb:f0:51:95:07:5a:ee:08:3c:bb:81:b0: c1:33:94:c5:fc:bc:7c:d0:27:58:df:47:4b:a0:60: 48:8a:8a:17:1f:76:6c:7a:30:87:4c:23:94:c1:11: 1a:cb:dc:52:fd:69:3b:0e:f7:dd:fe:a3:2d:56:55: 9f:51:d4:6d:76:c9:25:2f:56:56:23:8b:6e:df:81: 99:d4:c7:5e:8b:17:b1:3c:7b:06:ed:63:38:49:d1: dc:e1:bb:2c:80:ea:fe:91:41:13:e7:f9:ef:47:99: 1d:c3:5d:7a:ab:0d:8a:71:82:af:42:55:dc:39:a4: 17:11:94:bd:0b:59:fb:70:5d:b5:43:1e:52:77:c0: 84:c5:f8:64:3f:ad:a1:50:c1:ca:a8:45:ef:b9:75: ae:55:8a:e2:2c:22:62:1f:21:4f:08:c1:3a:4a:49: 26:a6:19:e0:cd:87:83:8d:19:07:1e:29:4d:51:a4: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:89:AB:78:7F:15:E1:88:09:CC:67:7B:EE:04:3F:59:C7:CE:E6:CE X509v3 Authority Key Identifier: keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:ca0:700::/40 Signature Algorithm: sha256WithRSAEncryption 61:8b:da:aa:2e:7f:38:f9:b4:8e:2c:8f:c9:07:81:8a:0f:32: 73:3f:ce:53:a3:bb:cd:46:43:37:e3:8c:aa:4a:97:71:3c:ed: 1e:bc:6d:4a:06:68:47:62:18:0b:83:05:ae:13:cd:a2:ff:8d: f1:5e:7a:42:88:28:21:32:a5:54:7f:79:97:60:bf:9c:83:7b: 87:0d:6e:f9:c7:a9:c0:32:f8:47:3e:82:4e:ad:53:d2:96:ed: 70:e3:68:8a:46:94:3e:a1:e7:5e:d2:61:e9:0a:a6:a8:39:62: d1:b5:cc:d9:d4:a1:36:19:14:55:58:74:a8:89:41:84:37:00: a7:9b:6e:b9:f9:7e:8d:01:5e:6b:0c:d9:3b:f0:02:f3:5c:1a: c7:1b:70:1c:cb:db:c4:f3:da:b1:c0:71:24:dd:1c:d0:e4:01: a4:28:2a:f8:b0:59:ef:a6:63:1c:1f:64:fb:38:71:29:8e:62: 59:fe:29:6a:86:36:fb:c1:d0:0b:68:a2:28:ea:80:48:91:a1: 7c:e6:de:7b:62:5b:d3:b4:dc:d6:37:23:ee:be:4b:8f:00:c1: b1:c5:d5:1d:12:ae:4b:0c:49:84:6e:07:58:e4:6c:36:d9:fb: 76:ce:de:b8:e3:36:05:7e:51:84:97:5e:44:1e:05:8d:78:f8: 3f:ed:fe:7c -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUIXWfmGf2Hed7BMU2UJd9hBPCa6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjUwNTMwMjAyMTMzWhcNMjYwNTI5MjAyNjMz WjAzMTEwLwYDVQQDEyg4Qjg5QUI3ODdGMTVFMTg4MDlDQzY3N0JFRTA0M0Y1OUM3 Q0VFNkNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu77Wlb916Wb/ HM6PbVkzsUd14oWWgUgsFJ+4PBBmfdwdL7g/MmP/1xrEz9cUPE+aouaOV3t7QQ3B Sas0bOdqbDlY9MLRwJ3ZszlDDvfr8FGVB1ruCDy7gbDBM5TF/Lx80CdY30dLoGBI iooXH3ZsejCHTCOUwREay9xS/Wk7Dvfd/qMtVlWfUdRtdsklL1ZWI4tu34GZ1Mde ixexPHsG7WM4SdHc4bssgOr+kUET5/nvR5kdw116qw2KcYKvQlXcOaQXEZS9C1n7 cF21Qx5Sd8CExfhkP62hUMHKqEXvuXWuVYriLCJiHyFPCME6SkkmphngzYeDjRkH HilNUaSMIwIDAQABo4ICujCCArYwHQYDVR0OBBYEFIuJq3h/FeGICcxne+4EP1nH zubOMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0 MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTM3MzAzMDNhM2EyZjM0MzAy ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAHMA0GCSqG SIb3DQEBCwUAA4IBAQBhi9qqLn84+bSOLI/JB4GKDzJzP85To7vNRkM344yqSpdx PO0evG1KBmhHYhgLgwWuE82i/43xXnpCiCghMqVUf3mXYL+cg3uHDW75x6nAMvhH PoJOrVPSlu1w42iKRpQ+oede0mHpCqaoOWLRtczZ1KE2GRRVWHSoiUGENwCnm265 +X6NAV5rDNk78ALzXBrHG3Acy9vE89qxwHEk3RzQ5AGkKCr4sFnvpmMcH2T7OHEp jmJZ/ilqhjb7wdALaKIo6oBIkaF85t57YlvTtNzWNyPuvkuPAMGxxdUdEq5LDEmE bgdY5Gw22ft2zt644zYFflGEl15EHgWNePg/7f58 -----END CERTIFICATE-----Generated at Sat Jun 7 13:39:36 2025 by rpki-client