$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa File: 323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa (raw, json) Hash identifier: tfiRICRNdh9qs1KS3QSDvgs0KhkEHX6CqI7FqTb4Oo8= Subject key identifier: BF:92:87:0D:7F:AF:CE:6C:4C:0B:E4:1E:CE:38:50:C8:9F:40:F3:D0 Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 031A2ED5DB71F3A7B2D4DF16A6B2FA85F4B43A34 Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa Signing time: Sat 06 Jan 2024 11:34:17 +0000 ROA not before: Sat 06 Jan 2024 11:29:17 +0000 ROA not after: Sat 04 Jan 2025 11:34:17 +0000 asID: 399164 IP address blocks: 2403:2500:8000:13::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 08:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1a:2e:d5:db:71:f3:a7:b2:d4:df:16:a6:b2:fa:85:f4:b4:3a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Jan 6 11:29:17 2024 GMT Not After : Jan 4 11:34:17 2025 GMT Subject: CN=BF92870D7FAFCE6C4C0BE41ECE3850C89F40F3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:b8:74:f2:f4:34:84:e5:ea:01:c0:49:54: 99:23:25:8f:04:e6:0f:e9:2a:64:f7:ef:59:68:38: 85:c6:24:80:2f:a4:ae:9e:05:26:f7:e1:c3:ae:bc: a1:7c:66:22:81:53:f2:b8:a9:12:30:32:bb:40:f8: 6e:bd:1d:97:c4:f3:43:7d:bf:4b:86:5b:d8:37:6e: c0:80:f0:3f:cc:56:d3:e0:48:2a:03:55:b6:24:6b: 07:0b:ca:da:23:00:cc:61:58:1c:7a:c2:c8:a1:3f: 57:67:31:21:d1:b3:0b:b1:91:0c:e7:ed:ef:7f:bd: ae:30:7d:bc:2a:47:a1:b6:0e:20:0e:00:c8:66:54: e4:06:e4:34:13:87:ae:63:18:9a:66:76:17:78:03: 91:25:d5:12:e6:4f:50:ec:af:0f:63:00:be:d9:7b: 56:aa:90:5c:1c:d9:05:78:a7:f7:f3:6f:6f:88:20: cb:79:17:b3:75:cd:13:ab:05:f2:e1:f2:95:27:4b: 0d:97:6b:c2:15:e3:05:f8:28:e3:3f:4f:bf:8e:d0: af:ed:f2:28:9e:1b:a2:0d:43:a4:0f:d5:a5:f2:a9: 7a:94:f3:89:5c:35:eb:12:61:8f:32:37:b6:25:bd: 9b:9a:23:53:e5:de:98:67:e0:ba:7c:c9:3e:0c:39: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:92:87:0D:7F:AF:CE:6C:4C:0B:E4:1E:CE:38:50:C8:9F:40:F3:D0 X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:8000:13::/64 Signature Algorithm: sha256WithRSAEncryption c5:80:be:f6:3a:ea:82:5c:30:7d:e3:15:41:ca:88:38:4a:52: 97:c1:6e:dc:d0:62:5a:bb:c7:62:78:21:22:07:79:83:49:3a: f4:86:fd:af:ee:ed:eb:0e:5b:63:40:6f:01:c3:3d:35:b6:8c: dc:38:c5:91:91:b0:3a:83:59:b8:d5:8a:c0:42:93:14:63:4b: da:1b:b6:13:44:6e:4f:2e:85:b0:c4:e9:75:be:86:21:b1:53: 1d:81:c1:5c:88:a7:d5:7b:49:0f:01:2c:b6:09:d1:6d:38:70: 16:67:b0:66:cc:ae:77:89:24:00:cc:b2:02:10:d8:78:c3:42: 0e:99:53:3c:a8:41:58:ea:d1:2e:4f:0b:1f:6d:c0:b8:d3:68: 68:d0:c9:12:a9:d8:7f:a8:ef:d3:39:3a:14:5c:c3:31:78:aa: 73:db:9f:1a:15:4c:76:36:57:9c:e7:88:cc:fc:f5:b0:a9:04: 87:48:8d:e1:81:09:ab:3f:27:15:85:3d:04:a7:f1:7a:8d:28: 07:55:fd:38:e5:bf:72:ee:6f:f7:f7:97:26:84:44:9a:bd:d6: c3:61:59:c6:cc:c9:6c:1d:87:ec:19:ad:5e:93:ad:04:10:b1: 4c:d8:5a:90:b4:f4:8e:84:59:f6:17:70:6b:9d:8f:16:25:32: 1c:b8:47:b4 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUAxou1dtx86ey1N8WprL6hfS0OjQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI0MDEwNjExMjkxN1oX DTI1MDEwNDExMzQxN1owMzExMC8GA1UEAxMoQkY5Mjg3MEQ3RkFGQ0U2QzRDMEJF NDFFQ0UzODUwQzg5RjQwRjNEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7PuHTy9DSE5eoBwElUmSMljwTmD+kqZPfvWWg4hcYkgC+krp4FJvfhw668 oXxmIoFT8ripEjAyu0D4br0dl8TzQ32/S4Zb2DduwIDwP8xW0+BIKgNVtiRrBwvK 2iMAzGFYHHrCyKE/V2cxIdGzC7GRDOft73+9rjB9vCpHobYOIA4AyGZU5AbkNBOH rmMYmmZ2F3gDkSXVEuZPUOyvD2MAvtl7VqqQXBzZBXin9/Nvb4ggy3kXs3XNE6sF 8uHylSdLDZdrwhXjBfgo4z9Pv47Qr+3yKJ4bog1DpA/VpfKpepTziVw16xJhjzI3 tiW9m5ojU+XemGfgunzJPgw5HucCAwEAAaOCAlEwggJNMB0GA1UdDgQWBBS/kocN f6/ObEwL5B7OOFDIn0Dz0DAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbIGCCsG AQUFBwELBIGlMIGiMIGfBggrBgEFBQcwC4aBknJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzgzMDMwMzAzYTMxMzMzYTNhMmYzNjM0 MmQzNjM0MjAzZDNlMjAzMzM5MzkzMTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAkAyUAgAAAEzAN BgkqhkiG9w0BAQsFAAOCAQEAxYC+9jrqglwwfeMVQcqIOEpSl8Fu3NBiWrvHYngh Igd5g0k69Ib9r+7t6w5bY0BvAcM9NbaM3DjFkZGwOoNZuNWKwEKTFGNL2hu2E0Ru Ty6FsMTpdb6GIbFTHYHBXIin1XtJDwEstgnRbThwFmewZsyud4kkAMyyAhDYeMNC DplTPKhBWOrRLk8LH23AuNNoaNDJEqnYf6jv0zk6FFzDMXiqc9ufGhVMdjZXnOeI zPz1sKkEh0iN4YEJqz8nFYU9BKfxeo0oB1X9OOW/cu5v9/eXJoREmr3Ww2FZxszJ bB2H7BmtXpOtBBCxTNhakLT0joRZ9hdwa52PFiUyHLhHtA== -----END CERTIFICATE-----Generated at Sat May 11 07:50:16 2024 by rpki-client on console-ams.rpki-client.org