$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa File: 323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa (raw, json) Hash identifier: J1SXiBUbqtsAtv3kfIos8Vi4d+SMNBjVrTeGKwjZkGk= Subject key identifier: FC:90:7D:D7:03:C1:10:44:D7:F1:EE:12:C0:31:38:58:70:15:92:9B Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 03B36CFCEBD1857FCC7D4686E3006FB40A22F979 Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa Signing time: Mon 04 Aug 2025 20:13:55 +0000 ROA not before: Mon 04 Aug 2025 20:08:55 +0000 ROA not after: Mon 03 Aug 2026 20:13:55 +0000 asID: 36236 IP address blocks: 2403:2500:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b3:6c:fc:eb:d1:85:7f:cc:7d:46:86:e3:00:6f:b4:0a:22:f9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Aug 4 20:08:55 2025 GMT Not After : Aug 3 20:13:55 2026 GMT Subject: CN=FC907DD703C11044D7F1EE12C03138587015929B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ee:40:ed:02:d0:43:a2:42:1d:e7:4c:a8:6c: 35:e4:40:52:26:20:bb:19:8e:e3:e7:25:09:8c:34: 54:c9:20:95:e4:e9:f0:bb:14:a4:86:91:59:f4:9c: 03:16:71:39:87:bb:e9:9f:4b:2f:08:06:3f:2b:66: 0e:1d:ff:e8:48:b6:02:0c:e8:1d:08:94:b3:d0:f8: 67:b6:dd:8a:8d:4f:7b:26:45:91:2d:3f:eb:ba:2f: 41:5f:cb:5f:d1:b7:e0:0a:55:a7:f9:a6:02:46:93: 20:52:35:17:b8:ce:be:b4:38:71:b5:57:7b:c5:cc: 20:a4:fa:5c:7f:d9:18:f3:19:62:85:2d:7e:11:fb: 6b:89:69:1a:21:82:bf:65:e6:d2:af:f0:7b:ec:e0: f1:65:ba:95:16:4e:72:a5:5a:22:64:f9:01:62:a1: a1:03:8d:6e:da:ff:40:9f:6d:cf:5e:35:83:15:82: 2b:61:f2:22:51:c3:f4:6a:7e:60:eb:b0:a8:8c:e7: 1b:f3:be:0c:e9:93:11:2d:57:cc:cb:69:09:6d:0c: c4:b2:71:31:84:f7:4f:5a:1c:85:e1:74:f1:e6:32: 75:94:35:2a:71:d9:73:9c:eb:64:6f:7b:47:95:6c: b8:f7:f4:83:c9:db:7c:16:ec:b0:be:38:29:7f:88: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:7D:D7:03:C1:10:44:D7:F1:EE:12:C0:31:38:58:70:15:92:9B X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:400::/48 Signature Algorithm: sha256WithRSAEncryption df:89:81:03:55:c6:2e:e1:1a:56:63:2a:65:b2:c0:5c:4c:e7: d3:f0:de:c7:9b:13:6d:56:6d:73:3e:db:2b:5e:a3:b5:26:36: 5a:ad:50:3a:f3:f0:0d:02:fa:6f:29:4d:7c:08:4a:cd:e2:89: bd:1e:b7:a1:5c:f1:f7:dd:0a:71:85:fc:58:27:9d:0a:05:e4: 15:00:b6:8d:97:2e:c7:7c:82:29:39:0a:4b:8c:09:d7:69:7d: f9:9e:37:89:80:ff:fd:70:6e:cf:cc:83:f8:10:8f:12:ff:68: d2:c2:a9:fc:2a:18:47:9e:fa:b7:7e:53:3f:36:a1:19:9a:c0: 10:5f:8f:a1:f0:45:42:e6:6a:66:b8:24:49:5c:27:e4:2c:55: 82:85:ad:0f:8b:1e:90:85:e4:11:bb:9a:8b:68:62:59:ef:ee: 2c:7e:0f:08:51:b6:94:fd:b9:a1:ec:d5:f6:96:85:b6:8e:35: ee:c8:c8:e9:ab:ce:77:fd:87:66:54:2b:b8:59:9a:86:08:6d: 7c:8c:c2:3f:ca:55:4d:67:f8:9a:46:76:ed:b9:5d:17:d2:9b: 5a:63:54:f5:91:30:ee:30:ca:f5:da:5d:73:e4:64:ec:98:d2: d4:90:f2:b8:37:1c:5e:84:83:6c:b5:66:85:5d:c6:63:51:35: 0b:c4:54:a1 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUA7Ns/OvRhX/MfUaG4wBvtAoi+XkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MDgwNDIwMDg1NVoX DTI2MDgwMzIwMTM1NVowMzExMC8GA1UEAxMoRkM5MDdERDcwM0MxMTA0NEQ3RjFF RTEyQzAzMTM4NTg3MDE1OTI5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzuQO0C0EOiQh3nTKhsNeRAUiYguxmO4+clCYw0VMkgleTp8LsUpIaRWfSc AxZxOYe76Z9LLwgGPytmDh3/6Ei2AgzoHQiUs9D4Z7bdio1PeyZFkS0/67ovQV/L X9G34ApVp/mmAkaTIFI1F7jOvrQ4cbVXe8XMIKT6XH/ZGPMZYoUtfhH7a4lpGiGC v2Xm0q/we+zg8WW6lRZOcqVaImT5AWKhoQONbtr/QJ9tz141gxWCK2HyIlHD9Gp+ YOuwqIznG/O+DOmTES1XzMtpCW0MxLJxMYT3T1ocheF08eYydZQ1KnHZc5zrZG97 R5VsuPf0g8nbfBbssL44KX+Is58CAwEAAaOCAkUwggJBMB0GA1UdDgQWBBT8kH3X A8EQRNfx7hLAMThYcBWSmzAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgagGCCsG AQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzQzMDMwM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQDJQAEADANBgkqhkiG9w0BAQsF AAOCAQEA34mBA1XGLuEaVmMqZbLAXEzn0/Dex5sTbVZtcz7bK16jtSY2Wq1QOvPw DQL6bylNfAhKzeKJvR63oVzx990KcYX8WCedCgXkFQC2jZcux3yCKTkKS4wJ12l9 +Z43iYD//XBuz8yD+BCPEv9o0sKp/CoYR576t35TPzahGZrAEF+PofBFQuZqZrgk SVwn5CxVgoWtD4sekIXkEbuai2hiWe/uLH4PCFG2lP25oezV9paFto417sjI6avO d/2HZlQruFmahghtfIzCP8pVTWf4mkZ27bldF9KbWmNU9ZEw7jDK9dpdc+Rk7JjS 1JDyuDccXoSDbLVmhV3GY1E1C8RUoQ== -----END CERTIFICATE-----Generated at Fri Aug 8 12:52:18 2025 by rpki-client