$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa File: 323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa (raw, json) Hash identifier: GnV3yOJlQOGDHJGLoUZpLm+18bf/C/rmK7J58M0hX5U= Subject key identifier: A5:2B:13:DC:25:50:D2:F5:6D:FC:60:1C:8F:6E:6A:A8:93:14:99:1C Certificate issuer: /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959 Certificate serial: 67D017684567876A96B9DFA3AAA2438950034A6A Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa Signing time: Mon 28 Apr 2025 01:48:11 +0000 ROA not before: Mon 28 Apr 2025 01:43:11 +0000 ROA not after: Mon 27 Apr 2026 01:48:11 +0000 asID: 401682 IP address blocks: 2604:ca0:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 23:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d0:17:68:45:67:87:6a:96:b9:df:a3:aa:a2:43:89:50:03:4a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959 Validity Not Before: Apr 28 01:43:11 2025 GMT Not After : Apr 27 01:48:11 2026 GMT Subject: CN=A52B13DC2550D2F56DFC601C8F6E6AA89314991C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:db:d6:e2:14:6c:c8:9a:ce:61:7f:6d:93: de:76:6a:a3:1a:06:c7:11:c6:28:0c:4a:84:a6:cb: 53:93:6d:ba:29:3a:bc:47:94:75:05:49:07:e9:5d: 9d:d1:b3:e2:89:e7:fc:fc:36:78:6f:39:8b:89:6b: cb:c0:8e:e4:9f:8b:d6:5f:0f:10:7d:45:6d:a5:50: ec:2c:aa:80:ae:02:9e:04:62:2d:2e:d9:d8:32:e7: a5:38:dc:4a:92:97:d3:65:39:7a:c1:be:16:02:1c: 76:68:59:5d:cb:64:18:7c:33:b2:8c:5d:61:08:53: 0e:c8:94:d6:15:3c:0d:6e:f9:7f:bc:87:4c:26:24: 70:ef:bd:e2:71:03:17:26:18:72:2d:4f:4b:e4:cf: 89:2c:2d:3d:b2:cc:61:88:28:2f:13:5a:cb:5c:6b: c6:42:62:6c:89:10:fa:02:a5:a8:0e:76:2a:03:07: 5d:4a:98:01:91:a9:05:bf:4a:b9:38:19:39:9c:30: e9:f1:b2:17:8f:9d:50:a9:0e:30:94:d7:ed:6d:4e: 9c:d4:a6:26:7b:ac:a0:87:ff:03:a7:41:9e:60:00: 9e:2e:7b:b6:a7:64:b1:34:6e:2e:b4:1f:18:72:42: 67:66:b2:6f:c8:d1:c5:d6:2a:e7:7b:ee:27:b2:82: 97:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2B:13:DC:25:50:D2:F5:6D:FC:60:1C:8F:6E:6A:A8:93:14:99:1C X509v3 Authority Key Identifier: keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:ca0:500::/40 Signature Algorithm: sha256WithRSAEncryption 54:a6:91:b6:18:3c:76:96:f0:2d:a0:20:a2:7b:1a:b8:64:3f: 9b:37:2b:db:94:31:6f:0a:27:f6:fa:b7:a1:ec:56:81:c3:f1: cb:f0:c7:4a:53:8d:e6:60:62:55:8d:44:19:70:f7:ea:2c:55: 87:b5:1b:f4:e0:e7:5a:8e:2a:3c:32:36:06:09:94:3f:e1:80: 3d:e2:9b:a0:91:1b:bf:89:27:f4:d4:04:1b:f3:82:2d:43:02: ed:f7:07:67:47:49:a5:bc:2d:40:0b:a4:4b:8f:5a:31:d5:ca: 1a:67:7f:bc:09:77:ba:d3:1e:34:41:bf:61:21:4d:b7:bf:5e: f7:a6:b7:78:d9:da:74:a1:9b:d2:f7:57:87:23:aa:c0:5d:43: 35:e2:5d:69:f5:4b:a8:64:41:49:6c:d9:b6:ce:aa:15:19:e1: 25:56:aa:47:57:a1:11:87:22:2f:46:5d:88:06:02:9e:92:7f: 32:b7:f8:04:12:de:02:a7:0f:77:d5:57:f0:c6:43:50:03:d5: 96:6d:0e:0a:f8:5c:12:de:6c:c6:e5:82:78:af:33:12:9c:22: 51:59:be:2e:15:38:dc:e4:d0:45:a0:9e:5a:e2:ea:90:05:72: 4d:de:a7:c0:05:ee:9b:31:3c:f3:8a:75:51:0d:93:7c:e5:07: 0a:a9:58:53 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUZ9AXaEVnh2qWud+jqqJDiVADSmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMWZmOWEwNjg4ZjFiNWJmMTM1NWU1Nzg4 Mzc0MjUzNDYxMjM1NmQ5NTkwHhcNMjUwNDI4MDE0MzExWhcNMjYwNDI3MDE0ODEx WjAzMTEwLwYDVQQDEyhBNTJCMTNEQzI1NTBEMkY1NkRGQzYwMUM4RjZFNkFBODkz MTQ5OTFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdnb1uIUbMia zmF/bZPedmqjGgbHEcYoDEqEpstTk226KTq8R5R1BUkH6V2d0bPiief8/DZ4bzmL iWvLwI7kn4vWXw8QfUVtpVDsLKqArgKeBGItLtnYMuelONxKkpfTZTl6wb4WAhx2 aFldy2QYfDOyjF1hCFMOyJTWFTwNbvl/vIdMJiRw773icQMXJhhyLU9L5M+JLC09 ssxhiCgvE1rLXGvGQmJsiRD6AqWoDnYqAwddSpgBkakFv0q5OBk5nDDp8bIXj51Q qQ4wlNftbU6c1KYme6ygh/8Dp0GeYACeLnu2p2SxNG4utB8YckJnZrJvyNHF1irn e+4nsoKXRwIDAQABo4ICujCCArYwHQYDVR0OBBYEFKUrE9wlUNL1bfxgHI9uaqiT FJkcMB8GA1UdIwQYMBaAFDuj+4k9g4oVcYpbxxV1DO2Jnv0fMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzAv M0JBM0ZCODkzRDgzOEExNTcxOEE1QkM3MTU3NTBDRUQ4OTlFRkQxRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0 MWFjNGYxZmY5YTA2ODhmMWI1YmYxMzU1ZTU3ODgzNzQyNTM0NjEyMzU2ZDk1OS5j ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8wLzMyMzYzMDM0M2E2MzYxMzAzYTM1MzAzMDNhM2EyZjM0MzAy ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAFMA0GCSqG SIb3DQEBCwUAA4IBAQBUppG2GDx2lvAtoCCiexq4ZD+bNyvblDFvCif2+reh7FaB w/HL8MdKU43mYGJVjUQZcPfqLFWHtRv04Odajio8MjYGCZQ/4YA94pugkRu/iSf0 1AQb84ItQwLt9wdnR0mlvC1AC6RLj1ox1coaZ3+8CXe60x40Qb9hIU23v173prd4 2dp0oZvS91eHI6rAXUM14l1p9UuoZEFJbNm2zqoVGeElVqpHV6ERhyIvRl2IBgKe kn8yt/gEEt4Cpw931VfwxkNQA9WWbQ4K+FwS3mzG5YJ4rzMSnCJRWb4uFTjc5NBF oJ5a4uqQBXJN3qfABe6bMTzzinVRDZN85QcKqVhT -----END CERTIFICATE-----Generated at Mon May 12 13:45:32 2025 by rpki-client