$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa File: 323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa (raw, json) Hash identifier: vE1rkoCWesawSxb2fZb/aUCiFVw6EWIfplFIc3+COvo= Subject key identifier: 5A:F3:39:9E:8D:A4:98:6B:20:B1:E9:44:B2:AE:7C:F3:9D:C7:1E:CD Certificate issuer: /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959 Certificate serial: 3963ADBECAA1662FAB3A7A204D6650239F3997D3 Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa Signing time: Mon 28 Apr 2025 01:48:22 +0000 ROA not before: Mon 28 Apr 2025 01:43:22 +0000 ROA not after: Mon 27 Apr 2026 01:48:22 +0000 asID: 401682 IP address blocks: 2604:ca0:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 18:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:63:ad:be:ca:a1:66:2f:ab:3a:7a:20:4d:66:50:23:9f:39:97:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959 Validity Not Before: Apr 28 01:43:22 2025 GMT Not After : Apr 27 01:48:22 2026 GMT Subject: CN=5AF3399E8DA4986B20B1E944B2AE7CF39DC71ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:0f:47:8d:24:1d:0f:28:8a:e3:34:07:58: f8:b1:f9:fc:61:b0:0b:cf:10:e9:a3:77:45:b4:77: 62:34:af:08:db:e4:ff:49:1f:f1:67:ff:07:dc:bc: 5e:ad:ef:45:5a:d9:eb:6c:9c:f9:73:3a:52:38:53: 10:17:50:79:ca:d4:8b:03:51:f9:2d:a8:5d:3d:db: da:51:56:f5:18:0c:35:9c:8f:17:98:59:4f:43:26: 56:4a:4e:3d:6c:04:9d:04:1e:3c:28:72:b2:47:9c: 44:cb:20:79:ae:19:97:7b:77:47:f7:f7:12:31:3a: dc:7d:e0:13:a4:38:bf:5b:bc:d5:0f:90:90:0f:35: be:54:65:76:12:75:49:2c:a6:21:bb:28:eb:36:ba: 19:d1:fb:e8:91:22:49:70:a4:16:97:67:c2:7f:c8: 9f:9b:7b:80:7c:ba:0e:b0:26:da:e1:50:51:b2:96: 80:73:bb:6c:ef:b2:2d:2a:d9:d4:eb:7f:f2:0f:1c: 23:b7:e8:93:a9:ea:be:ca:50:c6:6f:3f:5c:eb:15: 6d:8e:d3:61:b5:d7:47:a5:ec:f0:63:4f:4a:76:35: 2f:8c:90:9e:61:d3:c2:8c:5c:cd:5d:c0:4c:fa:cd: 87:c4:c0:66:61:60:80:9a:06:c9:d0:2d:79:0f:f9: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F3:39:9E:8D:A4:98:6B:20:B1:E9:44:B2:AE:7C:F3:9D:C7:1E:CD X509v3 Authority Key Identifier: keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:ca0:600::/40 Signature Algorithm: sha256WithRSAEncryption 40:98:1b:c0:e0:d3:ef:7e:f7:b9:2e:23:a7:2c:f1:c4:22:3e: 92:69:ef:9b:fc:4d:1e:19:e1:b8:90:52:6b:8d:54:84:11:19: 68:60:1b:d6:6a:a3:0a:a7:ba:cf:18:d2:2e:60:87:2e:2f:dd: 0a:0e:c6:33:39:ee:26:00:10:46:a3:9e:3b:c9:8a:aa:50:7e: b0:76:25:86:96:a4:fc:1b:3c:fc:e3:7b:f7:bc:b9:96:53:1f: 87:f6:0c:9f:30:9c:24:7c:d2:88:38:d5:4d:6d:61:17:63:bf: fa:d5:d6:79:8b:78:61:78:9c:6c:4e:42:59:6b:6c:ff:41:32: 17:56:39:63:83:ec:af:2d:9e:e3:da:53:90:5d:7c:ba:e2:50: b7:e5:88:05:45:ba:3e:b9:d4:53:2e:6e:8c:01:74:b8:2e:ba: e3:de:6a:78:d5:43:63:76:f9:80:71:a6:81:34:45:bb:53:01: 85:ed:d3:5a:23:e4:f3:d4:2c:ae:ba:e9:b9:ba:19:6a:af:80: a4:c6:c0:69:26:eb:29:27:a5:12:e0:13:14:7c:67:55:70:22: 88:37:94:22:d9:1c:8e:60:67:2d:d7:49:41:5a:35:4c:09:61: 40:24:b0:49:93:37:8d:72:40:32:80:6a:c7:5d:c1:c9:98:60: 4f:98:bb:93 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUOWOtvsqhZi+rOnogTWZQI585l9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMWZmOWEwNjg4ZjFiNWJmMTM1NWU1Nzg4 Mzc0MjUzNDYxMjM1NmQ5NTkwHhcNMjUwNDI4MDE0MzIyWhcNMjYwNDI3MDE0ODIy WjAzMTEwLwYDVQQDEyg1QUYzMzk5RThEQTQ5ODZCMjBCMUU5NDRCMkFFN0NGMzlE QzcxRUNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv0PR40kHQ8o iuM0B1j4sfn8YbALzxDpo3dFtHdiNK8I2+T/SR/xZ/8H3Lxere9FWtnrbJz5czpS OFMQF1B5ytSLA1H5LahdPdvaUVb1GAw1nI8XmFlPQyZWSk49bASdBB48KHKyR5xE yyB5rhmXe3dH9/cSMTrcfeATpDi/W7zVD5CQDzW+VGV2EnVJLKYhuyjrNroZ0fvo kSJJcKQWl2fCf8ifm3uAfLoOsCba4VBRspaAc7ts77ItKtnU63/yDxwjt+iTqeq+ ylDGbz9c6xVtjtNhtddHpezwY09KdjUvjJCeYdPCjFzNXcBM+s2HxMBmYWCAmgbJ 0C15D/myLwIDAQABo4ICujCCArYwHQYDVR0OBBYEFFrzOZ6NpJhrILHpRLKufPOd xx7NMB8GA1UdIwQYMBaAFDuj+4k9g4oVcYpbxxV1DO2Jnv0fMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzAv M0JBM0ZCODkzRDgzOEExNTcxOEE1QkM3MTU3NTBDRUQ4OTlFRkQxRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0 MWFjNGYxZmY5YTA2ODhmMWI1YmYxMzU1ZTU3ODgzNzQyNTM0NjEyMzU2ZDk1OS5j ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8wLzMyMzYzMDM0M2E2MzYxMzAzYTM2MzAzMDNhM2EyZjM0MzAy ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAGMA0GCSqG SIb3DQEBCwUAA4IBAQBAmBvA4NPvfve5LiOnLPHEIj6Sae+b/E0eGeG4kFJrjVSE ERloYBvWaqMKp7rPGNIuYIcuL90KDsYzOe4mABBGo547yYqqUH6wdiWGlqT8Gzz8 43v3vLmWUx+H9gyfMJwkfNKIONVNbWEXY7/61dZ5i3hheJxsTkJZa2z/QTIXVjlj g+yvLZ7j2lOQXXy64lC35YgFRbo+udRTLm6MAXS4Lrrj3mp41UNjdvmAcaaBNEW7 UwGF7dNaI+Tz1Cyuuum5uhlqr4CkxsBpJuspJ6US4BMUfGdVcCKIN5Qi2RyOYGct 10lBWjVMCWFAJLBJkzeNckAygGrHXcHJmGBPmLuT -----END CERTIFICATE-----Generated at Wed Apr 30 00:12:46 2025 by rpki-client