$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31303a3a2f34382d3438203d3e203131333538.roa File: 323630323a663937653a31303a3a2f34382d3438203d3e203131333538.roa (raw, json) Hash identifier: ehh381SZDE0JGouQWd01Vdi6eAQwTikTMfRhOq2TW5w= Subject key identifier: 43:80:8D:88:25:EA:3E:C6:DA:CC:9C:0B:84:9B:AD:F1:8B:EC:E0:5D Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0 Certificate serial: 4B0F65659440F03047309E3233767D6A81A92B1A Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31303a3a2f34382d3438203d3e203131333538.roa Signing time: Sun 02 Mar 2025 11:20:16 +0000 ROA not before: Sun 02 Mar 2025 11:15:16 +0000 ROA not after: Sun 01 Mar 2026 11:20:16 +0000 asID: 11358 IP address blocks: 2602:f97e:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 09:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0f:65:65:94:40:f0:30:47:30:9e:32:33:76:7d:6a:81:a9:2b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0 Validity Not Before: Mar 2 11:15:16 2025 GMT Not After : Mar 1 11:20:16 2026 GMT Subject: CN=43808D8825EA3EC6DACC9C0B849BADF18BECE05D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:cf:5e:a9:3e:e3:28:b3:85:f6:97:32:36: 4d:e1:a8:67:d9:31:14:47:dc:68:e7:e4:45:0c:4e: e3:55:57:24:e9:f6:76:bc:9e:e8:c8:ea:ee:62:78: d7:b2:da:06:88:e6:16:63:d8:e7:68:df:e2:02:37: 1d:36:2a:be:51:18:18:45:d5:32:a8:f5:12:a6:32: 81:d2:c2:e1:ba:bc:5f:2e:ea:08:59:f0:44:4f:fd: aa:29:58:f3:6c:59:4c:7d:d3:91:64:6d:60:95:df: ff:3f:55:57:eb:03:2c:52:c4:f1:3f:a4:52:d4:29: 8d:e8:e3:4a:f2:9b:68:72:d8:16:a0:83:5f:3f:f7: 27:a8:be:d4:3a:e7:2a:d5:a6:7c:50:22:85:ed:64: 89:0e:f4:33:ea:f8:bb:dd:8b:ed:fb:be:80:37:a5: 21:ea:35:39:09:da:64:7f:5b:d4:41:b2:fe:e7:93: 8c:15:10:8a:12:24:98:2a:69:a9:9b:e8:83:43:14: 2a:6c:51:42:a6:9f:ef:2c:dd:16:42:66:5b:fd:d0: bc:e3:3d:e7:2d:78:5d:23:a8:63:f3:af:3a:3c:88: fc:e6:4c:2c:fb:f2:d8:1d:38:3b:d9:43:c8:1d:3e: 4d:b7:05:4a:2b:45:ff:37:71:07:35:b4:03:7f:92: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:80:8D:88:25:EA:3E:C6:DA:CC:9C:0B:84:9B:AD:F1:8B:EC:E0:5D X509v3 Authority Key Identifier: keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31303a3a2f34382d3438203d3e203131333538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f97e:10::/48 Signature Algorithm: sha256WithRSAEncryption b8:2c:4c:ce:a6:a2:7f:cd:c7:c2:7a:0f:f0:2e:a6:ba:2a:ce: 10:83:ea:50:e5:3f:6c:9c:d8:13:28:0c:ad:d0:de:07:64:14: 2e:26:36:2b:70:22:7c:0c:b3:45:80:0c:ba:b6:7d:c6:26:b6: 8d:8f:a7:7f:24:45:da:ff:a8:e0:18:fc:f9:a5:a0:19:3b:6e: d0:b9:82:7f:a6:2e:62:a2:32:41:eb:c5:1b:3a:ed:8e:f7:71: 14:aa:da:bd:39:ca:ab:07:40:22:a1:d6:05:2a:72:fb:ff:35: a6:eb:be:73:a9:33:d0:b5:51:3a:2b:45:b0:ba:b4:a3:10:d7: 61:84:02:bf:87:c6:eb:35:38:64:b8:dc:b1:21:7f:00:54:a2: f4:7c:ff:65:1e:98:96:85:f5:3d:ce:8f:ca:28:b4:3d:14:0b: ca:ff:15:ac:33:22:9c:dd:ed:53:8b:24:f4:64:da:ec:f4:86: 99:d3:6a:cb:cd:db:51:74:df:49:1d:42:26:96:86:94:53:74: e9:69:53:d9:ff:e5:c0:d2:d4:6a:e5:d1:65:ec:8a:d4:7f:f1: 1c:95:d8:e0:e3:a4:18:8c:b4:81:ee:c6:5b:48:23:97:e5:36: 18:c4:ad:3b:8d:49:4d:4b:3e:be:6b:ba:f8:c9:15:37:ae:a4: 16:11:90:1d -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUSw9lZZRA8DBHMJ4yM3Z9aoGpKxowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmEyMTY0N2FhYzNkYzIxMzNiZDM2MThhNDE3ZjVhNDc5 YTU3MjBmYzM0MGY4ZTljYzAwHhcNMjUwMzAyMTExNTE2WhcNMjYwMzAxMTEyMDE2 WjAzMTEwLwYDVQQDEyg0MzgwOEQ4ODI1RUEzRUM2REFDQzlDMEI4NDlCQURGMThC RUNFMDVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoLPXqk+4yiz hfaXMjZN4ahn2TEUR9xo5+RFDE7jVVck6fZ2vJ7oyOruYnjXstoGiOYWY9jnaN/i AjcdNiq+URgYRdUyqPUSpjKB0sLhurxfLuoIWfBET/2qKVjzbFlMfdORZG1gld// P1VX6wMsUsTxP6RS1CmN6ONK8ptoctgWoINfP/cnqL7UOucq1aZ8UCKF7WSJDvQz 6vi73Yvt+76AN6Uh6jU5Cdpkf1vUQbL+55OMFRCKEiSYKmmpm+iDQxQqbFFCpp/v LN0WQmZb/dC84z3nLXhdI6hj8686PIj85kws+/LYHTg72UPIHT5NtwVKK0X/N3EH NbQDf5L3ZQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFEOAjYgl6j7G2sycC4SbrfGL 7OBdMB8GA1UdIwQYMBaAFNMnxgjB6Fb2wHiXblBVWZRaI9rYMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGVhOThiYWUwMThlYzE4MGFjYzExMWEyLzAv RDMyN0M2MDhDMUU4NTZGNkMwNzg5NzZFNTA1NTU5OTQ1QTIzREFEOC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy YTgzMzdkLzJjZDg1ODk2LWJlY2EtNGNjOS04ZTA5LTkzNjdiMGVhOWVhNC9iYTIx NjQ3YWFjM2RjMjEzM2JkMzYxOGE0MTdmNWE0NzlhNTcyMGZjMzQwZjhlOWNjMC5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlYTk4YmFlMDE4ZWMx ODBhY2MxMTFhMi8wLzMyMzYzMDMyM2E2NjM5Mzc2NTNhMzEzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMxMzEzMzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvl+ABAwDQYJKoZI hvcNAQELBQADggEBALgsTM6mon/Nx8J6D/AuproqzhCD6lDlP2yc2BMoDK3Q3gdk FC4mNitwInwMs0WADLq2fcYmto2Pp38kRdr/qOAY/PmloBk7btC5gn+mLmKiMkHr xRs67Y73cRSq2r05yqsHQCKh1gUqcvv/NabrvnOpM9C1UTorRbC6tKMQ12GEAr+H xus1OGS43LEhfwBUovR8/2UemJaF9T3Oj8ootD0UC8r/FawzIpzd7VOLJPRk2uz0 hpnTasvN21F030kdQiaWhpRTdOlpU9n/5cDS1Grl0WXsitR/8RyV2ODjpBiMtIHu xltII5flNhjErTuNSU1LPr5ruvjJFTeupBYRkB0= -----END CERTIFICATE-----Generated at Sat May 10 11:47:38 2025 by rpki-client