$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa File: 323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa (raw, json) Hash identifier: kr16yVTYyREcgB1MKyrg+fhMFxct8ykdpIrPxY5EbL4= Subject key identifier: 06:0B:94:6C:54:5C:03:83:A2:B1:CA:1E:17:0A:9C:10:58:1F:73:0B Certificate issuer: /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959 Certificate serial: 2C242568672763D1EADB52CF52D5EF56359F1595 Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa Signing time: Mon 28 Apr 2025 01:47:36 +0000 ROA not before: Mon 28 Apr 2025 01:42:36 +0000 ROA not after: Mon 27 Apr 2026 01:47:36 +0000 asID: 401682 IP address blocks: 2604:ca0:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 23:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:24:25:68:67:27:63:d1:ea:db:52:cf:52:d5:ef:56:35:9f:15:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959 Validity Not Before: Apr 28 01:42:36 2025 GMT Not After : Apr 27 01:47:36 2026 GMT Subject: CN=060B946C545C0383A2B1CA1E170A9C10581F730B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:ec:5b:d6:28:df:b1:1b:e4:07:43:1f:68: 3c:ca:1b:57:69:ff:fb:34:b7:0e:30:7a:0f:a1:b4: 26:55:58:91:35:a3:dc:66:f5:cb:85:e9:00:6b:65: 46:c9:98:f9:74:5c:83:51:30:95:04:ad:f3:3f:fc: 16:6d:9a:cc:65:b3:9e:21:df:f0:e5:47:9a:ce:dd: d5:18:c2:6d:b0:a9:07:90:9a:3b:41:fd:96:18:51: fd:0a:6b:9a:7f:e5:33:33:90:ee:ec:79:31:47:57: d4:ac:92:09:88:aa:8a:3f:6d:00:28:b3:83:e6:ed: a1:de:98:da:34:b8:39:97:6c:34:50:34:b6:1a:d5: 13:fd:d8:cb:c7:80:9c:00:2a:c7:cc:13:8f:f9:9e: fc:18:f2:4a:56:92:9d:56:bb:ad:2f:01:14:2c:55: b6:fb:fd:6f:bc:82:b2:a3:c3:43:91:60:a4:53:e7: 6d:a0:f2:01:6a:68:4d:c2:2d:e1:3e:8f:33:5d:a5: af:d5:af:a7:cd:43:b9:e9:de:a2:54:53:5f:ac:4c: bc:24:09:53:af:2b:3c:0f:10:2c:fb:44:d1:ef:b5: 82:26:1e:85:a0:36:a2:8c:c5:35:31:36:9c:74:a9: e1:06:18:97:a2:f0:f2:fb:87:10:79:46:2c:81:8b: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0B:94:6C:54:5C:03:83:A2:B1:CA:1E:17:0A:9C:10:58:1F:73:0B X509v3 Authority Key Identifier: keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:ca0:100::/40 Signature Algorithm: sha256WithRSAEncryption 8e:ce:65:30:56:be:51:6f:69:a3:f2:29:84:1f:db:b5:0b:b0: 67:4e:60:38:51:11:b7:e7:6f:73:6e:b2:9c:d0:df:68:4c:ea: 20:86:c5:bd:35:1a:c3:44:86:af:7c:2d:28:bf:8d:cd:de:db: be:5a:ae:83:9c:d1:21:90:0f:c2:ce:9c:80:b5:bb:98:3d:28: ba:58:24:ab:ea:c6:8b:47:4f:af:fc:b2:38:59:9c:26:96:d0: 8a:79:1f:da:e9:ce:41:a5:1d:4f:88:60:4c:2f:52:77:f4:4c: b7:9b:2d:41:2e:65:01:4b:35:72:eb:9c:f1:8a:d5:63:59:36: 61:5f:3b:cc:96:02:d5:6f:76:6d:3d:e3:f5:fe:90:e4:75:2e: 24:a1:86:06:01:07:74:69:3c:4f:cc:f6:3f:c3:d4:5c:e1:9f: fb:7c:12:fc:9f:1a:1e:92:ee:b4:b2:6c:d7:00:14:fa:79:04: f9:e4:02:19:c6:a7:ba:33:fb:33:36:3b:6f:5c:6c:33:21:cd: 32:b4:0f:2a:91:29:54:97:4d:3b:2d:b5:36:84:c6:01:16:e6: 39:b3:08:d9:c4:f6:78:2c:de:db:aa:ac:ff:b2:4a:5a:7d:36: e5:11:4c:69:01:ec:41:2d:44:16:8d:a4:42:94:36:cb:93:85: f2:4c:39:3f -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIULCQlaGcnY9Hq21LPUtXvVjWfFZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMWZmOWEwNjg4ZjFiNWJmMTM1NWU1Nzg4 Mzc0MjUzNDYxMjM1NmQ5NTkwHhcNMjUwNDI4MDE0MjM2WhcNMjYwNDI3MDE0NzM2 WjAzMTEwLwYDVQQDEygwNjBCOTQ2QzU0NUMwMzgzQTJCMUNBMUUxNzBBOUMxMDU4 MUY3MzBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbDsW9Yo37Eb 5AdDH2g8yhtXaf/7NLcOMHoPobQmVViRNaPcZvXLhekAa2VGyZj5dFyDUTCVBK3z P/wWbZrMZbOeId/w5Ueazt3VGMJtsKkHkJo7Qf2WGFH9Cmuaf+UzM5Du7HkxR1fU rJIJiKqKP20AKLOD5u2h3pjaNLg5l2w0UDS2GtUT/djLx4CcACrHzBOP+Z78GPJK VpKdVrutLwEULFW2+/1vvIKyo8NDkWCkU+dtoPIBamhNwi3hPo8zXaWv1a+nzUO5 6d6iVFNfrEy8JAlTrys8DxAs+0TR77WCJh6FoDaijMU1MTacdKnhBhiXovDy+4cQ eUYsgYvELQIDAQABo4ICujCCArYwHQYDVR0OBBYEFAYLlGxUXAODorHKHhcKnBBY H3MLMB8GA1UdIwQYMBaAFDuj+4k9g4oVcYpbxxV1DO2Jnv0fMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzAv M0JBM0ZCODkzRDgzOEExNTcxOEE1QkM3MTU3NTBDRUQ4OTlFRkQxRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0 MWFjNGYxZmY5YTA2ODhmMWI1YmYxMzU1ZTU3ODgzNzQyNTM0NjEyMzU2ZDk1OS5j ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8wLzMyMzYzMDM0M2E2MzYxMzAzYTMxMzAzMDNhM2EyZjM0MzAy ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKABMA0GCSqG SIb3DQEBCwUAA4IBAQCOzmUwVr5Rb2mj8imEH9u1C7BnTmA4URG3529zbrKc0N9o TOoghsW9NRrDRIavfC0ov43N3tu+Wq6DnNEhkA/CzpyAtbuYPSi6WCSr6saLR0+v /LI4WZwmltCKeR/a6c5BpR1PiGBML1J39Ey3my1BLmUBSzVy65zxitVjWTZhXzvM lgLVb3ZtPeP1/pDkdS4koYYGAQd0aTxPzPY/w9Rc4Z/7fBL8nxoeku60smzXABT6 eQT55AIZxqe6M/szNjtvXGwzIc0ytA8qkSlUl007LbU2hMYBFuY5swjZxPZ4LN7b qqz/skpafTblEUxpAexBLUQWjaRClDbLk4XyTDk/ -----END CERTIFICATE-----Generated at Mon May 12 13:45:37 2025 by rpki-client