$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3830303a3a2f34302d3430203d3e20343031363832.roa File: 323630343a6361303a3830303a3a2f34302d3430203d3e20343031363832.roa (raw, json) Hash identifier: 1TboHIsJ2POZUw7a2Yo0hJHhB7kt/xt3TW3rtzgJliE= Subject key identifier: 3E:C9:58:E5:2B:31:21:02:D7:78:EF:33:1D:81:51:A7:67:BB:8F:2A Certificate issuer: /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac Certificate serial: 1A41EC430A21E0D4AFAB135BF414DB8CF5668A67 Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3830303a3a2f34302d3430203d3e20343031363832.roa Signing time: Fri 30 May 2025 20:26:35 +0000 ROA not before: Fri 30 May 2025 20:21:35 +0000 ROA not after: Fri 29 May 2026 20:26:35 +0000 asID: 401682 IP address blocks: 2604:ca0:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:41:ec:43:0a:21:e0:d4:af:ab:13:5b:f4:14:db:8c:f5:66:8a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac Validity Not Before: May 30 20:21:35 2025 GMT Not After : May 29 20:26:35 2026 GMT Subject: CN=3EC958E52B312102D778EF331D8151A767BB8F2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:17:74:c1:c5:9a:07:16:2f:4c:02:16:22:e6: 3c:05:f6:c5:fd:ff:e2:f1:2c:ca:5a:4d:50:d9:26: 7e:33:fb:4f:3d:11:e5:c0:ce:34:cf:31:a5:90:32: 09:02:b2:37:ff:a8:cf:7e:9b:39:b8:05:a9:1c:49: 2b:60:f0:44:86:42:25:18:65:c8:72:c1:2d:a0:23: 0a:06:47:d0:09:80:a1:de:62:c0:69:42:ae:bf:c3: 4f:8f:4e:78:40:ad:1d:ed:f9:12:80:22:31:3c:67: 72:79:19:49:88:31:09:c7:9c:64:04:e6:d4:98:6b: 92:5f:55:cd:a6:8a:27:36:d1:49:62:6b:84:e1:ff: 5a:cd:37:f1:aa:6c:7a:d4:fc:a6:af:2c:ec:db:ce: 88:7c:82:a7:09:15:4b:34:66:92:b4:7c:cb:e0:17: 83:00:f7:a8:8e:54:0e:14:d9:88:39:5b:90:14:e9: fa:f4:22:d0:de:1c:a4:13:e3:c0:c2:13:bf:ec:df: 69:ab:e7:70:43:e1:1c:d6:e1:e7:9b:74:16:6a:e6: 23:e2:e8:25:aa:93:01:38:d7:ec:3c:bd:a0:f6:a9: 30:f0:b7:ae:63:87:87:f2:d3:51:0c:2d:a6:f4:24: 66:d2:22:87:44:a0:f5:4e:39:63:02:13:41:f9:da: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C9:58:E5:2B:31:21:02:D7:78:EF:33:1D:81:51:A7:67:BB:8F:2A X509v3 Authority Key Identifier: keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3830303a3a2f34302d3430203d3e20343031363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:ca0:800::/40 Signature Algorithm: sha256WithRSAEncryption b6:41:b0:63:09:28:19:71:23:44:15:41:4f:9a:fe:b6:54:20: ed:e7:23:bc:01:9d:3f:17:b4:1d:5a:9b:78:84:73:1a:4d:a1: 28:19:da:bd:da:b3:d6:a1:7c:6d:a7:75:bd:ce:af:74:69:fb: bf:4f:6e:12:31:55:de:27:68:ff:d8:28:eb:39:ea:ea:40:9c: be:2f:9e:5b:2f:a5:e3:75:66:0d:a7:bd:2d:41:2a:49:3c:52: 56:41:c7:f5:b2:be:05:37:c0:c2:ce:50:a4:a6:80:fe:4f:23: 36:17:f2:f2:76:05:c1:55:79:3a:7d:4a:bd:1a:d6:ca:a8:e7: 12:3b:fd:02:3a:d5:ab:76:c0:a3:b9:ac:6a:93:0d:c8:57:41: 32:d7:ba:a1:3d:cf:e0:0b:c2:56:10:62:cc:73:43:45:69:96: cf:4a:55:39:67:68:e1:39:bb:9d:82:55:ab:68:1f:67:78:bc: 40:41:ad:75:02:27:84:19:ad:6f:5c:8f:23:e6:a7:36:05:d9: 36:37:25:9d:09:e4:8b:e2:59:bb:60:46:be:14:31:2c:54:55: 7c:0e:5a:d9:75:98:e1:6b:27:f1:43:7f:3b:4f:85:94:b0:b4: 00:74:61:b2:4e:20:aa:b4:6a:c5:69:84:a3:68:b5:eb:fd:4a: 6b:db:94:e4 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUGkHsQwoh4NSvqxNb9BTbjPVmimcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjUwNTMwMjAyMTM1WhcNMjYwNTI5MjAyNjM1 WjAzMTEwLwYDVQQDEygzRUM5NThFNTJCMzEyMTAyRDc3OEVGMzMxRDgxNTFBNzY3 QkI4RjJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Bd0wcWaBxYv TAIWIuY8BfbF/f/i8SzKWk1Q2SZ+M/tPPRHlwM40zzGlkDIJArI3/6jPfps5uAWp HEkrYPBEhkIlGGXIcsEtoCMKBkfQCYCh3mLAaUKuv8NPj054QK0d7fkSgCIxPGdy eRlJiDEJx5xkBObUmGuSX1XNpoonNtFJYmuE4f9azTfxqmx61Pymryzs286IfIKn CRVLNGaStHzL4BeDAPeojlQOFNmIOVuQFOn69CLQ3hykE+PAwhO/7N9pq+dwQ+Ec 1uHnm3QWauYj4uglqpMBONfsPL2g9qkw8LeuY4eH8tNRDC2m9CRm0iKHRKD1Tjlj AhNB+dqhTQIDAQABo4ICujCCArYwHQYDVR0OBBYEFD7JWOUrMSEC13jvMx2BUadn u48qMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0 MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTM4MzAzMDNhM2EyZjM0MzAy ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAIMA0GCSqG SIb3DQEBCwUAA4IBAQC2QbBjCSgZcSNEFUFPmv62VCDt5yO8AZ0/F7QdWpt4hHMa TaEoGdq92rPWoXxtp3W9zq90afu/T24SMVXeJ2j/2CjrOerqQJy+L55bL6XjdWYN p70tQSpJPFJWQcf1sr4FN8DCzlCkpoD+TyM2F/LydgXBVXk6fUq9GtbKqOcSO/0C OtWrdsCjuaxqkw3IV0Ey17qhPc/gC8JWEGLMc0NFaZbPSlU5Z2jhObudglWraB9n eLxAQa11AieEGa1vXI8j5qc2Bdk2NyWdCeSL4lm7YEa+FDEsVFV8DlrZdZjhayfx Q387T4WUsLQAdGGyTiCqtGrFaYSjaLXr/Upr25Tk -----END CERTIFICATE-----Generated at Sat Jun 7 16:39:50 2025 by rpki-client