$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa File: 323630343a6361303a3a2f33322d3332203d3e20343031363832.roa (raw, json) Hash identifier: M6Xbh89rsNEX1TOXgDcLbbHkABKZdwiiEjjxzbXpgNM= Subject key identifier: 9D:6F:6D:70:05:FD:36:FB:BB:67:CC:E8:EC:17:57:84:18:37:B4:E3 Certificate issuer: /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac Certificate serial: 5795BCA19583FA4CBD39A8E8D6307A3BF84621B5 Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa Signing time: Fri 30 May 2025 20:26:13 +0000 ROA not before: Fri 30 May 2025 20:21:13 +0000 ROA not after: Fri 29 May 2026 20:26:13 +0000 asID: 401682 IP address blocks: 2604:ca0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 00:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:95:bc:a1:95:83:fa:4c:bd:39:a8:e8:d6:30:7a:3b:f8:46:21:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac Validity Not Before: May 30 20:21:13 2025 GMT Not After : May 29 20:26:13 2026 GMT Subject: CN=9D6F6D7005FD36FBBB67CCE8EC1757841837B4E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:f8:fb:32:b6:53:35:a4:d6:6d:f8:18:e9: b5:25:9f:2b:12:a0:c7:86:8f:9b:0a:5b:7e:da:08: 68:a4:0b:f8:12:de:c3:7b:eb:34:2f:06:d4:eb:93: e5:dc:ee:86:c8:bb:82:07:1f:f4:d4:7b:ce:b9:f6: 55:b8:ee:e0:57:0c:7f:68:4a:fd:87:8d:3c:91:08: f6:89:e2:4c:e7:43:bd:a9:46:08:9f:b9:46:0e:87: 15:71:9e:c6:91:70:85:c5:09:64:ac:e9:bc:cd:7f: 97:d0:f4:43:f7:0e:33:6d:b6:29:15:cf:42:19:ad: fb:5c:49:6f:23:57:ab:db:f0:e0:46:6b:5b:f7:ac: da:5a:4c:f5:c5:f0:9c:ae:ca:69:5d:5f:5c:b3:03: bf:2a:a3:81:e8:55:bb:2c:6e:41:42:b1:0f:1b:8a: 62:c0:26:8f:26:96:d0:40:a5:de:7e:36:b2:52:61: 80:73:58:c5:34:2e:d3:12:c3:a9:c4:e4:27:f3:69: 2b:e9:00:90:0b:29:27:39:7d:20:c2:06:3a:1c:e7: a0:dd:a8:d2:c2:b4:ac:b3:2f:ff:6c:c1:66:d4:c0: a3:54:48:c5:d3:72:ac:f0:52:9e:01:eb:07:fc:6e: 18:de:32:b2:fd:86:0e:33:15:11:73:a2:30:fa:be: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6F:6D:70:05:FD:36:FB:BB:67:CC:E8:EC:17:57:84:18:37:B4:E3 X509v3 Authority Key Identifier: keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:ca0::/32 Signature Algorithm: sha256WithRSAEncryption 89:4e:a6:24:bc:87:6c:1f:8f:cf:b8:50:46:f4:2d:a3:1f:92: b5:ce:00:99:fe:bf:79:a5:31:57:70:45:26:14:3f:6b:1e:e1: 7b:aa:07:a0:46:eb:c2:37:ad:86:80:e1:a2:02:fa:6f:86:eb: 79:b6:7a:f7:78:22:a3:be:e8:57:d6:69:b5:fc:fc:1c:94:6d: c3:06:bb:c7:19:e3:e4:bf:8e:6c:c7:8c:dc:34:16:01:4f:66: b3:2b:c1:a3:28:b5:23:29:92:fd:af:a3:d4:8b:ed:13:90:87: e1:99:03:51:fb:f4:96:f1:74:af:ac:47:e6:96:ce:65:b1:f0: fd:a0:ea:81:6e:d7:f0:55:b3:09:1c:72:a1:07:b2:b1:20:66: 5d:da:3a:34:89:7d:0d:65:de:4c:10:2b:bc:ac:bf:82:c2:e0: d6:c4:c3:cd:ab:27:fc:33:a8:3a:e0:00:21:f4:a2:7c:b1:fb: cc:0d:a9:61:b9:70:db:a2:45:89:ab:0a:47:0d:55:af:f6:ac: 79:e1:99:29:97:91:98:ec:61:32:93:fc:40:09:f7:b9:5e:33: f9:0e:70:d7:af:dc:66:0d:18:72:ac:75:48:d5:f4:df:48:70: 33:1a:af:f4:b5:d8:1e:08:22:df:16:cf:a5:7f:3d:26:26:64: a6:f3:e8:a0 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgIUV5W8oZWD+ky9Oajo1jB6O/hGIbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjUwNTMwMjAyMTEzWhcNMjYwNTI5MjAyNjEz WjAzMTEwLwYDVQQDEyg5RDZGNkQ3MDA1RkQzNkZCQkI2N0NDRThFQzE3NTc4NDE4 MzdCNEUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEj4+zK2UzWk 1m34GOm1JZ8rEqDHho+bClt+2ghopAv4Et7De+s0LwbU65Pl3O6GyLuCBx/01HvO ufZVuO7gVwx/aEr9h408kQj2ieJM50O9qUYIn7lGDocVcZ7GkXCFxQlkrOm8zX+X 0PRD9w4zbbYpFc9CGa37XElvI1er2/DgRmtb96zaWkz1xfCcrsppXV9cswO/KqOB 6FW7LG5BQrEPG4piwCaPJpbQQKXefjayUmGAc1jFNC7TEsOpxOQn82kr6QCQCykn OX0gwgY6HOeg3ajSwrSssy//bMFm1MCjVEjF03Ks8FKeAesH/G4Y3jKy/YYOMxUR c6Iw+r5Y3QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFJ1vbXAF/Tb7u2fM6OwXV4QY N7TjMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0 MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTNhMmYzMzMyMmQzMzMyMjAz ZDNlMjAzNDMwMzEzNjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBAygMA0GCSqGSIb3DQEBCwUA A4IBAQCJTqYkvIdsH4/PuFBG9C2jH5K1zgCZ/r95pTFXcEUmFD9rHuF7qgegRuvC N62GgOGiAvpvhut5tnr3eCKjvuhX1mm1/PwclG3DBrvHGePkv45sx4zcNBYBT2az K8GjKLUjKZL9r6PUi+0TkIfhmQNR+/SW8XSvrEfmls5lsfD9oOqBbtfwVbMJHHKh B7KxIGZd2jo0iX0NZd5MECu8rL+CwuDWxMPNqyf8M6g64AAh9KJ8sfvMDalhuXDb okWJqwpHDVWv9qx54Zkpl5GY7GEyk/xACfe5XjP5DnDXr9xmDRhyrHVI1fTfSHAz Gq/0tdgeCCLfFs+lfz0mJmSm8+ig -----END CERTIFICATE-----Generated at Fri Jul 4 09:45:18 2025 by rpki-client