$ rpki-client -vvf rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a3a2f34382d3438203d3e203332303432.roa File: 323630323a663465333a3a2f34382d3438203d3e203332303432.roa (raw, json) Hash identifier: NasnTAloic9lrFVCyYjJDaw9J9G+VYbA3MYsvwj8dyY= Subject key identifier: 1E:39:E2:37:E6:3F:2B:4D:7D:55:77:3F:56:22:E1:BC:19:17:19:AA Certificate issuer: /CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288 Certificate serial: 5B4BA56948B29F8680E7A475F794EE6A130FCBFA Authority key identifier: A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer Subject info access: rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a3a2f34382d3438203d3e203332303432.roa Signing time: Sat 01 Nov 2025 20:50:52 +0000 ROA not before: Sat 01 Nov 2025 20:45:52 +0000 ROA not after: Sat 31 Oct 2026 20:50:52 +0000 asID: 32042 IP address blocks: 2602:f4e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.crl rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4b:a5:69:48:b2:9f:86:80:e7:a4:75:f7:94:ee:6a:13:0f:cb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288 Validity Not Before: Nov 1 20:45:52 2025 GMT Not After : Oct 31 20:50:52 2026 GMT Subject: CN=1E39E237E63F2B4D7D55773F5622E1BC191719AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:ec:8d:60:50:4b:c7:92:3d:7b:e7:a7:6e: 4b:34:88:19:53:0c:14:cb:dd:02:2d:8e:ab:32:f2: fd:e8:e5:11:dd:71:48:ee:e2:6c:86:08:b3:07:f0: a6:eb:51:d7:a4:7b:05:0f:56:d0:35:8b:a5:4d:b2: 0e:65:e4:37:c9:06:ce:29:c1:00:3d:b1:22:1f:d7: ba:22:d2:72:09:f1:0b:5d:f7:0d:c5:24:ab:23:24: ef:5e:6d:ef:3b:cd:d5:76:49:fe:10:ec:d1:71:57: 92:86:71:aa:4c:d0:6e:df:b4:09:21:be:87:c8:94: 2a:c6:d4:e4:ad:85:0b:06:b9:87:3a:7a:a0:41:c7: c0:7d:fb:4f:69:f6:d5:ed:db:b2:e9:a5:9f:dd:e4: 58:1a:92:1d:3d:54:7f:6f:a9:6d:10:ff:3b:f1:7c: ad:cd:8c:c8:8d:d0:97:bd:c3:40:5a:43:fa:46:9c: 4c:4c:e0:bb:20:56:af:49:b7:e6:78:84:92:fd:a5: f1:97:32:14:2a:a9:9f:97:2f:c7:b2:e1:39:77:1c: 53:50:7a:af:9a:3c:69:e5:9f:4f:b6:46:73:ea:16: e7:d0:87:bc:76:4a:10:74:83:e5:66:5f:04:38:79: c5:ef:aa:f6:86:89:9c:d8:5a:5a:5d:92:84:be:08: 44:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:39:E2:37:E6:3F:2B:4D:7D:55:77:3F:56:22:E1:BC:19:17:19:AA X509v3 Authority Key Identifier: keyid:A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a3a2f34382d3438203d3e203332303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f4e3::/48 Signature Algorithm: sha256WithRSAEncryption 04:60:46:f0:20:b8:8f:e7:45:58:0d:f4:d9:cf:b1:ad:d7:a1: cc:33:93:e8:cf:37:07:10:d9:9b:d5:bd:40:27:43:a2:49:96: 2e:32:da:5f:4f:e1:31:61:c8:1d:da:a1:af:6e:70:25:76:2b: 7a:50:01:ba:9c:89:de:38:3d:50:3f:14:74:a2:f5:fc:b2:50: 77:c5:e5:0d:47:f8:aa:1a:57:7d:0d:82:10:43:e0:08:f4:ec: c0:cb:f8:15:e4:ff:96:cd:91:b3:63:7f:2c:c9:40:f4:53:40: 6a:e1:24:9d:d2:61:da:1b:b0:fd:71:3c:ca:96:e1:f5:ab:b8: 1d:aa:b1:e3:03:14:b7:55:e9:4b:25:85:d4:0a:7b:93:e5:2e: dd:81:73:b3:b3:21:81:88:2b:23:22:de:67:50:7d:21:0b:25: 28:22:46:6e:67:f9:67:46:3b:b0:5d:75:74:b0:af:d7:46:59: 61:cb:b0:0a:5e:fd:6e:6e:a4:2e:c1:ea:ff:74:8e:d3:4e:ef: aa:e6:a6:cf:7f:5c:de:0b:9b:8f:fe:4d:b1:a2:04:1a:a5:f2: 55:37:01:b2:11:90:c3:96:ba:a9:b1:ce:2d:2a:22:76:49:20: 9f:67:92:ef:25:08:7e:9e:a2:9c:18:9c:d2:ea:14:06:db:6d: b8:30:f5:64 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUW0ulaUiyn4aA56R195TuahMPy/owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyM2MxN2E3NmNjNGM3YTlhZTU4MmUxZDllMDU3N2RkNmZi ZDI3ZDU5NTVlYTA5NDcyODgwHhcNMjUxMTAxMjA0NTUyWhcNMjYxMDMxMjA1MDUy WjAzMTEwLwYDVQQDEygxRTM5RTIzN0U2M0YyQjREN0Q1NTc3M0Y1NjIyRTFCQzE5 MTcxOUFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbfsjWBQS8eS PXvnp25LNIgZUwwUy90CLY6rMvL96OUR3XFI7uJshgizB/Cm61HXpHsFD1bQNYul TbIOZeQ3yQbOKcEAPbEiH9e6ItJyCfELXfcNxSSrIyTvXm3vO83Vdkn+EOzRcVeS hnGqTNBu37QJIb6HyJQqxtTkrYULBrmHOnqgQcfAfftPafbV7duy6aWf3eRYGpId PVR/b6ltEP878XytzYzIjdCXvcNAWkP6RpxMTOC7IFavSbfmeISS/aXxlzIUKqmf ly/HsuE5dxxTUHqvmjxp5Z9PtkZz6hbn0Ie8dkoQdIPlZl8EOHnF76r2homc2Fpa XZKEvghEYQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFB454jfmPytNfVV3P1Yi4bwZ FxmqMB8GA1UdIwQYMBaAFKiPtN0cEAIrbv2zpSc2YaQeJ1IzMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2EzNDdjMDRmYWE2MzQyM2JhYzRmYjExYjc3NTliNjk2LzAv QTg4RkI0REQxQzEwMDIyQjZFRkRCM0E1MjczNjYxQTQxRTI3NTIzMy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll ZjFiNGUyL2EyY2RiMzE5LWFlNWQtNGQ0NS04NzU0LTI5ZjRiYzMxYzQ2ZC8zYzE3 YTc2Y2M0YzdhOWFlNTgyZTFkOWUwNTc3ZGQ2ZmJkMjdkNTk1NWVhMDk0NzI4OC5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hMzQ3YzA0ZmFhNjM0MjNiYWM0ZmIx MWI3NzU5YjY5Ni8wLzMyMzYzMDMyM2E2NjM0NjUzMzNhM2EyZjM0MzgyZDM0Mzgy MDNkM2UyMDMzMzIzMDM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvTjAAAwDQYJKoZIhvcNAQEL BQADggEBAARgRvAguI/nRVgN9NnPsa3Xocwzk+jPNwcQ2ZvVvUAnQ6JJli4y2l9P 4TFhyB3aoa9ucCV2K3pQAbqcid44PVA/FHSi9fyyUHfF5Q1H+KoaV30NghBD4Aj0 7MDL+BXk/5bNkbNjfyzJQPRTQGrhJJ3SYdobsP1xPMqW4fWruB2qseMDFLdV6Usl hdQKe5PlLt2Bc7OzIYGIKyMi3mdQfSELJSgiRm5n+WdGO7BddXSwr9dGWWHLsApe /W5upC7B6v90jtNO76rmps9/XN4Lm4/+TbGiBBql8lU3AbIRkMOWuqmxzi0qInZJ IJ9nku8lCH6eopwYnNLqFAbbbbgw9WQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:59:04 2025 by rpki-client