$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132373a3a2f36342d3634203d3e20333939313730.roa File: 323430333a323530303a393030303a3132373a3a2f36342d3634203d3e20333939313730.roa (raw, json) Hash identifier: Xjqzxg6xsfOlYWgBilbMZeLRnBJlOhn0msAHJ72H2IE= Subject key identifier: 6C:C3:61:EB:E3:5A:08:2D:AC:62:3A:9F:AF:39:79:1D:DF:42:70:1E Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 0FB2B0E591CD146EE0C5480C7CA8BD2D39AB0CDB Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132373a3a2f36342d3634203d3e20333939313730.roa Signing time: Sat 07 Dec 2024 13:13:28 +0000 ROA not before: Sat 07 Dec 2024 13:08:28 +0000 ROA not after: Sat 06 Dec 2025 13:13:28 +0000 asID: 399170 IP address blocks: 2403:2500:9000:127::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 03:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b2:b0:e5:91:cd:14:6e:e0:c5:48:0c:7c:a8:bd:2d:39:ab:0c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000 Validity Not Before: Dec 7 13:08:28 2024 GMT Not After : Dec 6 13:13:28 2025 GMT Subject: CN=6CC361EBE35A082DAC623A9FAF39791DDF42701E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:ca:5c:61:ac:57:62:aa:7a:15:7a:3a:d0: 4c:70:5d:c6:4f:c2:ad:e2:10:4c:d0:b9:bc:f7:e8: 7f:61:9f:a1:74:3c:1f:89:ef:21:c1:9a:8f:51:f4: 50:b9:38:fc:02:12:75:17:9b:d9:bf:60:5a:df:93: 61:05:f9:0c:a0:e0:c2:76:98:71:e8:49:23:53:05: c4:11:a6:7e:fe:3c:fd:65:7d:9c:30:01:07:64:dc: 28:84:b8:bf:42:e2:e6:80:9c:54:a8:fe:c7:44:3f: 9b:e6:d5:15:d0:f3:2b:e6:ab:57:02:ce:f1:05:3e: 75:a4:56:dc:c5:ec:9f:e8:e9:f7:cc:c0:19:77:61: 7f:a7:dc:e3:64:f4:37:ab:f9:3b:25:39:f3:a3:3e: dd:c5:b4:50:9e:dd:6e:09:e1:d9:c0:56:b3:9d:dd: db:ef:3f:a0:57:78:c5:19:55:19:88:6e:68:29:35: 7f:e3:42:4e:c6:c1:ae:19:4d:19:58:09:f8:00:85: ca:24:70:c6:b6:22:b7:28:af:80:a4:c8:bc:c6:dd: a7:4f:f5:a9:f1:fc:b0:37:11:10:79:4f:e1:43:5c: 68:63:09:e3:3d:b1:1c:75:3c:da:ce:6e:11:74:03: 85:d2:d6:7e:8d:e8:ef:35:8e:e3:3c:09:ef:c3:ee: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C3:61:EB:E3:5A:08:2D:AC:62:3A:9F:AF:39:79:1D:DF:42:70:1E X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132373a3a2f36342d3634203d3e20333939313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:9000:127::/64 Signature Algorithm: sha256WithRSAEncryption 5a:15:c8:82:aa:2c:53:a3:55:84:9c:23:41:d2:d0:fa:22:55: 8b:e1:db:db:e8:65:b7:f7:8b:9e:9e:02:53:ea:09:0d:8b:8a: 38:a9:c6:41:f2:17:0a:e9:c6:db:01:a1:91:a9:7c:06:05:0b: c4:88:ab:a9:f9:a3:57:6c:ef:13:f3:7c:73:aa:fd:b1:c1:95: 07:1e:39:80:ca:e8:f7:27:ac:f0:10:06:e9:36:63:af:4a:a2: 7e:d4:6e:93:03:ca:26:9e:f0:c4:5e:cb:63:f2:dd:04:42:cb: a9:77:72:4f:ac:95:78:9c:fe:a8:5c:f4:9d:ce:14:1e:6e:12: 5d:3a:04:82:84:2d:e2:d9:dd:ac:53:ef:b8:78:83:47:9b:d7: fa:ab:34:ca:ae:a5:b1:69:38:ee:11:80:de:b6:61:84:61:74: 80:24:b2:3a:1f:c3:19:d2:71:d9:71:05:1c:06:17:32:7b:23: 38:dd:f1:ec:17:b9:a1:f8:2c:e3:84:d5:ae:62:68:ff:d8:59: 3d:6f:71:68:f7:b2:34:cf:dd:3d:c4:8c:bd:42:08:4c:da:d4: 44:cd:35:9b:2e:c0:b6:dd:66:31:db:64:93:01:bc:91:f4:72: 12:19:38:33:3f:9b:89:51:f7:71:f4:e9:67:97:f3:25:f8:d4: 6e:a3:40:42 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUD7Kw5ZHNFG7gxUgMfKi9LTmrDNswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI0MTIwNzEzMDgyOFoX DTI1MTIwNjEzMTMyOFowMzExMC8GA1UEAxMoNkNDMzYxRUJFMzVBMDgyREFDNjIz QTlGQUYzOTc5MURERjQyNzAxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNOylxhrFdiqnoVejrQTHBdxk/CreIQTNC5vPfof2GfoXQ8H4nvIcGaj1H0 ULk4/AISdReb2b9gWt+TYQX5DKDgwnaYcehJI1MFxBGmfv48/WV9nDABB2TcKIS4 v0Li5oCcVKj+x0Q/m+bVFdDzK+arVwLO8QU+daRW3MXsn+jp98zAGXdhf6fc42T0 N6v5OyU586M+3cW0UJ7dbgnh2cBWs53d2+8/oFd4xRlVGYhuaCk1f+NCTsbBrhlN GVgJ+ACFyiRwxrYityivgKTIvMbdp0/1qfH8sDcREHlP4UNcaGMJ4z2xHHU82s5u EXQDhdLWfo3o7zWO4zwJ78PuGS0CAwEAAaOCAlMwggJPMB0GA1UdDgQWBBRsw2Hr 41oILaxiOp+vOXkd30JwHjAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbQGCCsG AQUFBwELBIGnMIGkMIGhBggrBgEFBQcwC4aBlHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzkzMDMwMzAzYTMxMzIzNzNhM2EyZjM2 MzQyZDM2MzQyMDNkM2UyMDMzMzkzOTMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACQDJQCQAAEn MA0GCSqGSIb3DQEBCwUAA4IBAQBaFciCqixTo1WEnCNB0tD6IlWL4dvb6GW394ue ngJT6gkNi4o4qcZB8hcK6cbbAaGRqXwGBQvEiKup+aNXbO8T83xzqv2xwZUHHjmA yuj3J6zwEAbpNmOvSqJ+1G6TA8omnvDEXstj8t0EQsupd3JPrJV4nP6oXPSdzhQe bhJdOgSChC3i2d2sU++4eINHm9f6qzTKrqWxaTjuEYDetmGEYXSAJLI6H8MZ0nHZ cQUcBhcyeyM43fHsF7mh+CzjhNWuYmj/2Fk9b3Fo97I0z909xIy9QghM2tREzTWb LsC23WYx22STAbyR9HISGTgzP5uJUfdx9Olnl/Ml+NRuo0BC -----END CERTIFICATE-----Generated at Tue Apr 8 11:37:27 2025 by rpki-client