$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa File: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (raw, json) Hash identifier: FcS3uH0lPouCumRLFvl7n0JB1Vv1j5a/3yIEZK9NRJA= Subject key identifier: 94:C8:85:51:BC:0B:31:E8:5E:F8:18:15:14:FA:B5:C8:EE:74:8F:64 Certificate issuer: /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Certificate serial: 5D1FD3FAA70ADA3082E8801E224011C5AB02A997 Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa Signing time: Fri 18 Jul 2025 07:36:59 +0000 ROA not before: Fri 18 Jul 2025 07:31:59 +0000 ROA not after: Fri 17 Jul 2026 07:36:59 +0000 asID: 983 IP address blocks: 2407:cdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 16:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1f:d3:fa:a7:0a:da:30:82:e8:80:1e:22:40:11:c5:ab:02:a9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Validity Not Before: Jul 18 07:31:59 2025 GMT Not After : Jul 17 07:36:59 2026 GMT Subject: CN=94C88551BC0B31E85EF8181514FAB5C8EE748F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:d9:17:2f:b0:2e:c8:0c:d4:57:4a:f3:96: 5f:b5:d7:4a:aa:eb:d5:bd:af:74:37:68:61:c3:65: 30:27:c4:8d:45:ab:c7:d1:b4:bf:b8:0a:83:ba:97: 03:cb:6f:0d:0d:89:fd:e9:fd:f0:29:31:2a:20:bc: bc:bc:49:19:01:0b:e1:74:d7:f2:e5:5f:e0:ed:33: 01:41:93:01:29:7f:62:bf:cf:c8:86:7b:0b:42:4c: d3:48:d0:f5:04:f7:73:9c:cd:8b:38:f0:75:9c:5e: a9:ff:b5:91:26:14:7c:9b:bd:61:0f:74:bf:91:df: 99:2b:98:cf:b1:94:84:3b:26:00:70:86:28:4a:da: 70:cc:a5:f4:fb:9e:cd:54:4c:60:15:1b:df:59:72: be:68:70:20:75:2d:16:4d:7b:87:c0:2e:04:99:51: 6c:6a:0a:a1:45:23:d7:d1:02:bd:2a:c9:76:04:ae: a7:0b:40:94:21:25:e0:22:e3:4a:70:ab:9a:42:a2: a1:9e:06:98:47:a8:45:0f:99:4c:c8:1d:69:2e:71: f9:b6:e0:5e:ec:21:94:29:c9:a3:19:a2:8a:41:97: 9f:a7:62:3e:32:aa:c7:59:da:56:40:04:4d:e2:3c: 96:00:f7:99:5e:63:0d:fd:df:56:e2:11:00:20:01: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C8:85:51:BC:0B:31:E8:5E:F8:18:15:14:FA:B5:C8:EE:74:8F:64 X509v3 Authority Key Identifier: keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:cdc0::/32 Signature Algorithm: sha256WithRSAEncryption 71:14:64:70:f2:c4:cf:fa:7b:fc:54:f7:62:d4:80:56:8b:fa: 1c:d2:5b:6b:f7:cc:58:c4:03:d0:fd:16:e1:51:09:44:1f:0e: 2f:33:c1:5a:a6:00:f3:d7:5a:24:18:70:11:3c:17:86:1b:3a: ea:df:b1:ef:05:a0:01:54:7d:08:06:a0:14:2f:13:b5:53:1e: bc:74:83:9a:d3:9e:07:5b:7c:d7:58:08:f7:1f:ac:9b:e1:20: 4d:20:34:77:3e:0f:fa:92:46:15:af:42:b4:18:2b:b7:ca:45: 31:0d:e5:c2:0f:9a:6b:13:d0:ca:fb:78:59:3d:53:82:96:6f: 6c:63:d7:9f:eb:04:37:14:15:a7:cd:85:d7:50:74:d1:4d:b7: 99:51:be:87:3b:82:fe:f3:f1:c1:87:6b:e5:61:b9:52:f3:0e: 89:8d:d0:04:39:72:f5:13:c4:1f:e0:bc:a2:6d:52:8d:86:a7: 1c:a8:cb:87:70:32:e8:40:a1:a6:5c:47:66:0b:2c:ea:24:75: 49:07:87:f1:4a:55:91:37:e8:9d:1f:22:7e:01:0b:6f:20:f9: fa:21:58:ec:b4:cf:cb:76:9d:2e:a8:b9:ba:c4:21:07:f5:67: 7f:4b:98:77:fa:75:70:34:cf:25:e4:d2:3a:dc:92:07:4e:32: cc:08:52:d1 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUXR/T+qcK2jCC6IAeIkARxasCqZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyhBREJFMUEwRjQ2 RjlDNzdCMEQyNDlGRDZBNDM4QjQ4QjdGQjIxQkNGMB4XDTI1MDcxODA3MzE1OVoX DTI2MDcxNzA3MzY1OVowMzExMC8GA1UEAxMoOTRDODg1NTFCQzBCMzFFODVFRjgx ODE1MTRGQUI1QzhFRTc0OEY2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALey2RcvsC7IDNRXSvOWX7XXSqrr1b2vdDdoYcNlMCfEjUWrx9G0v7gKg7qX A8tvDQ2J/en98CkxKiC8vLxJGQEL4XTX8uVf4O0zAUGTASl/Yr/PyIZ7C0JM00jQ 9QT3c5zNizjwdZxeqf+1kSYUfJu9YQ90v5HfmSuYz7GUhDsmAHCGKEracMyl9Pue zVRMYBUb31lyvmhwIHUtFk17h8AuBJlRbGoKoUUj19ECvSrJdgSupwtAlCEl4CLj SnCrmkKioZ4GmEeoRQ+ZTMgdaS5x+bbgXuwhlCnJoxmiikGXn6diPjKqx1naVkAE TeI8lgD3mV5jDf3fVuIRACABc4sCAwEAAaOCAjYwggIyMB0GA1UdDgQWBBSUyIVR vAsx6F74GBUU+rXI7nSPZDAfBgNVHSMEGDAWgBStvhoPRvnHew0kn9akOLSLf7Ib zzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5 ZjJmYjI3MGNhOC8xL0FEQkUxQTBGNDZGOUM3N0IwRDI0OUZENkE0MzhCNDhCN0ZC MjFCQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL3JiNGFEMGI1eDNzTkpKX1dwRGkwaTMteUc4OC5jZXIwgZsGCCsG AQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4 LzEvMzIzNDMwMzczYTYzNjQ2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzkz ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAfNwDANBgkqhkiG9w0BAQsFAAOCAQEAcRRkcPLEz/p7 /FT3YtSAVov6HNJba/fMWMQD0P0W4VEJRB8OLzPBWqYA89daJBhwETwXhhs66t+x 7wWgAVR9CAagFC8TtVMevHSDmtOeB1t811gI9x+sm+EgTSA0dz4P+pJGFa9CtBgr t8pFMQ3lwg+aaxPQyvt4WT1TgpZvbGPXn+sENxQVp82F11B00U23mVG+hzuC/vPx wYdr5WG5UvMOiY3QBDly9RPEH+C8om1SjYanHKjLh3Ay6EChplxHZgss6iR1SQeH 8UpVkTfonR8ifgELbyD5+iFY7LTPy3adLqi5usQhB/Vnf0uYd/p1cDTPJeTSOtyS B04yzAhS0Q== -----END CERTIFICATE-----Generated at Sun Jul 20 21:08:13 2025 by rpki-client