$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa File: 323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa (raw, json) Hash identifier: y53281tGaPtFBpRpHVE4NRv6gyz6F2ja9jmFUUtvmdU= Subject key identifier: 6D:E5:CC:1B:FB:AE:17:12:1B:53:9E:C7:DA:DC:BB:E4:3D:2C:47:3C Certificate issuer: /CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43 Certificate serial: 79E86A219968DA6489E954D75773E115E0545972 Authority key identifier: CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer Subject info access: rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa Signing time: Wed 11 Jun 2025 22:33:31 +0000 ROA not before: Wed 11 Jun 2025 22:28:31 +0000 ROA not after: Wed 10 Jun 2026 22:33:31 +0000 asID: 49867 IP address blocks: 2602:f9ba:a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e8:6a:21:99:68:da:64:89:e9:54:d7:57:73:e1:15:e0:54:59:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43 Validity Not Before: Jun 11 22:28:31 2025 GMT Not After : Jun 10 22:33:31 2026 GMT Subject: CN=6DE5CC1BFBAE17121B539EC7DADCBBE43D2C473C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:5c:fa:c3:bb:8c:d3:0a:f9:81:ed:0e:20: e8:a9:82:36:99:21:e0:72:c0:de:38:6e:6f:2d:14: 79:b7:cc:5a:ff:5c:d4:9e:4a:de:49:5d:fa:15:0d: 3b:d6:41:0a:ab:2f:02:16:ce:37:9a:82:83:57:01: 1f:bb:fa:5d:7e:a4:50:04:1d:71:35:94:da:fb:ee: ab:85:2a:40:95:ef:bf:77:e1:af:f3:3c:70:c9:72: 82:c3:83:fd:9f:28:ed:d1:65:25:e2:7c:aa:aa:1a: fe:03:e2:06:63:4f:79:6a:68:11:84:9f:32:65:42: 31:8a:9d:f1:1c:4e:11:31:bf:ba:c7:71:24:64:60: 34:07:94:f1:8c:85:24:da:ee:e7:c9:e9:05:91:df: 48:13:f3:73:5b:98:49:39:82:0a:52:cc:92:22:5b: 7c:66:bb:54:d0:4a:30:59:e0:cd:a8:65:48:f1:c2: 4b:76:bf:8d:a8:bd:b3:db:b1:6a:0a:70:54:f0:61: 62:5b:8c:5c:e9:4d:43:2d:df:06:26:20:9a:e8:2a: 67:b0:88:91:8f:f9:df:a8:2d:9e:4c:2a:d1:86:36: e3:e4:d3:be:f9:62:36:19:fd:6c:15:56:4f:22:e0: a2:84:4a:bc:a1:79:cd:f2:ad:dd:b5:2b:e6:b0:b9: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E5:CC:1B:FB:AE:17:12:1B:53:9E:C7:DA:DC:BB:E4:3D:2C:47:3C X509v3 Authority Key Identifier: keyid:CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f9ba:a9::/48 Signature Algorithm: sha256WithRSAEncryption 41:9b:18:a5:d8:be:c9:8a:cd:01:4a:98:4a:a2:eb:2f:8d:09: 88:21:c8:be:2a:d8:5b:32:f4:0c:0a:34:48:21:0e:71:3c:a7: e2:9c:7c:b9:ca:0c:48:76:e7:5b:55:1e:65:15:9e:15:81:55: 7d:da:4b:60:e1:81:a9:7e:8d:15:6d:34:09:dc:23:e2:c8:67: f6:9c:26:21:1b:a2:80:4e:ee:03:5a:31:b3:27:78:7c:f5:98: d2:65:b1:18:1b:0d:68:13:86:f3:2b:b9:11:e1:62:01:a6:1e: a4:bb:0e:08:e1:69:cd:06:e6:18:27:92:56:38:36:e8:39:6e: f3:34:5b:a6:65:67:27:8a:51:dd:1d:29:ad:fc:31:96:ed:df: c3:f1:01:79:32:31:1f:e4:4b:e7:11:51:13:59:b3:59:22:b3: e5:f2:4c:bd:87:dc:e1:eb:39:67:bc:0f:35:a5:d8:7e:bc:5f: a9:ee:3d:ee:2e:ab:bd:c5:ad:d2:d4:68:a2:c3:dd:9d:e6:1b: 1a:c7:3e:15:6b:30:b6:cc:43:0a:5b:c6:13:40:06:37:2a:44: fd:8e:d1:66:40:44:c0:4d:68:a3:a3:37:04:56:a0:66:12:98: d3:99:ab:a3:94:10:71:f4:f3:53:04:7a:dd:19:68:5c:b6:5f: 09:31:3f:94 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUeehqIZlo2mSJ6VTXV3PhFeBUWXIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkN2JmZTI2MzcyMzhiZDk4YWViOGU0MDJh NzcwMGM5MjRiNmVlN2FjNDMwHhcNMjUwNjExMjIyODMxWhcNMjYwNjEwMjIzMzMx WjAzMTEwLwYDVQQDEyg2REU1Q0MxQkZCQUUxNzEyMUI1MzlFQzdEQURDQkJFNDNE MkM0NzNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAortc+sO7jNMK +YHtDiDoqYI2mSHgcsDeOG5vLRR5t8xa/1zUnkreSV36FQ071kEKqy8CFs43moKD VwEfu/pdfqRQBB1xNZTa++6rhSpAle+/d+Gv8zxwyXKCw4P9nyjt0WUl4nyqqhr+ A+IGY095amgRhJ8yZUIxip3xHE4RMb+6x3EkZGA0B5TxjIUk2u7nyekFkd9IE/Nz W5hJOYIKUsySIlt8ZrtU0EowWeDNqGVI8cJLdr+NqL2z27FqCnBU8GFiW4xc6U1D Ld8GJiCa6CpnsIiRj/nfqC2eTCrRhjbj5NO++WI2Gf1sFVZPIuCihEq8oXnN8q3d tSvmsLmc1wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFG3lzBv7rhcSG1Oex9rcu+Q9 LEc8MB8GA1UdIwQYMBaAFM28qLDntoNC9uhSxuScl2IZRor2MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv Q0RCQ0E4QjBFN0I2ODM0MkY2RTg1MkM2RTQ5Qzk3NjIxOTQ2OEFGNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh NjcyZGQ3YmZlMjYzNzIzOGJkOThhZWI4ZTQwMmE3NzAwYzkyNGI2ZWU3YWM0My5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjEzOTNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDM0MzkzODM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvm6AKkwDQYJKoZI hvcNAQELBQADggEBAEGbGKXYvsmKzQFKmEqi6y+NCYghyL4q2Fsy9AwKNEghDnE8 p+KcfLnKDEh251tVHmUVnhWBVX3aS2Dhgal+jRVtNAncI+LIZ/acJiEbooBO7gNa MbMneHz1mNJlsRgbDWgThvMruRHhYgGmHqS7Dgjhac0G5hgnklY4Nug5bvM0W6Zl ZyeKUd0dKa38MZbt38PxAXkyMR/kS+cRURNZs1kis+XyTL2H3OHrOWe8DzWl2H68 X6nuPe4uq73FrdLUaKLD3Z3mGxrHPhVrMLbMQwpbxhNABjcqRP2O0WZARMBNaKOj NwRWoGYSmNOZq6OUEHH081MEet0ZaFy2XwkxP5Q= -----END CERTIFICATE-----Generated at Sun Jun 29 19:28:51 2025 by rpki-client