$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa File: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (raw, json) Hash identifier: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s= Subject key identifier: 64:DD:E5:6D:1B:68:40:0D:2D:7E:3B:37:61:FB:EF:5F:3E:54:EF:EA Certificate issuer: /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51 Certificate serial: 43C6F47EA10817864592AE8F56DCABBFC605A47A Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa Signing time: Mon 19 May 2025 11:32:54 +0000 ROA not before: Mon 19 May 2025 11:27:54 +0000 ROA not after: Mon 18 May 2026 11:32:54 +0000 asID: 149301 IP address blocks: 2001:df3:efc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 17:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c6:f4:7e:a1:08:17:86:45:92:ae:8f:56:dc:ab:bf:c6:05:a4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51 Validity Not Before: May 19 11:27:54 2025 GMT Not After : May 18 11:32:54 2026 GMT Subject: CN=64DDE56D1B68400D2D7E3B3761FBEF5F3E54EFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:b1:72:0d:7e:70:fd:ea:bb:b8:f0:79:53: a7:ab:fb:ef:fe:ec:7a:0e:56:17:c3:10:2e:43:5b: 86:76:65:58:b1:ed:5e:06:0d:4d:42:7a:26:65:02: ce:be:5f:91:f2:b9:29:83:b9:9b:4b:f2:7b:6b:90: 0c:bf:55:a9:18:6f:4e:41:7f:9a:e3:93:12:db:64: e9:f9:07:5e:9a:e3:04:23:a6:a8:98:6e:4a:99:42: 58:bc:3b:d3:0c:b0:80:f2:ad:8e:e7:7e:bd:66:15: 13:ce:f0:5e:c0:9b:99:5c:34:60:da:41:25:9f:2d: 53:31:a3:6a:b6:f2:8c:b6:fa:1e:07:07:c0:6e:79: e5:25:91:e8:6b:7b:ba:17:1e:4a:73:c0:c9:a7:e5: 2b:7e:ac:eb:e9:44:54:06:3c:56:8b:79:30:7c:6b: 43:53:c6:04:ef:32:d9:3c:86:7a:61:f2:0d:4d:49: 1c:30:86:56:a1:c6:75:51:81:60:9b:94:f3:a8:bb: bc:f2:92:4e:f9:99:d1:97:49:d6:88:61:09:94:51: 3f:f7:00:e0:73:5e:3b:a1:b4:47:c8:51:e9:71:c1: 91:5c:57:e7:83:3b:17:69:2c:87:ea:22:b0:49:c2: a8:5d:8f:df:2a:4a:ae:fa:89:74:a4:0b:d3:b8:23: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DD:E5:6D:1B:68:40:0D:2D:7E:3B:37:61:FB:EF:5F:3E:54:EF:EA X509v3 Authority Key Identifier: keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:efc0::/48 Signature Algorithm: sha256WithRSAEncryption 3e:a2:b1:f7:d4:01:ac:38:c5:36:f8:26:2a:62:08:83:22:ea: 3f:fa:2e:ea:16:9d:6e:f4:05:16:51:13:9b:19:19:d9:ef:9f: 1d:41:89:14:cf:15:e8:86:55:a1:bc:69:b9:1f:e7:79:0e:8d: d0:d5:e6:01:5d:50:c3:fa:2f:82:04:48:af:55:c5:79:f6:7d: cf:f8:b8:5e:90:34:e5:12:50:c1:a8:b6:3e:9f:77:bf:5c:f0: cb:b2:94:1c:bb:5a:f3:dd:80:15:92:3a:ed:a7:e2:51:59:9c: ed:95:cf:58:b8:24:35:48:f3:d7:d4:b9:a6:16:be:9c:04:19: 8f:60:af:c4:80:e8:7e:65:46:1d:e3:bd:8b:f0:50:23:7f:c6: 08:74:2d:c6:73:18:ba:65:06:c7:2f:2a:21:3b:4f:6c:fb:d5: e9:70:ec:c0:88:49:83:6a:b1:a9:40:52:7c:d5:86:7c:3b:8c: 05:5f:05:8d:03:ac:57:08:25:1c:16:7d:a8:a5:ac:fd:1a:fd: ee:84:dd:dc:4d:ec:d7:9f:54:5c:20:56:3b:d7:a0:10:6d:7d: b6:04:6d:df:4a:48:2b:6c:fd:17:3d:11:12:7a:66:d4:09:0f: 64:12:95:90:b6:99:c9:c0:e0:c7:c9:3f:e2:3a:95:cf:c8:07: 5d:f9:e3:0b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUQ8b0fqEIF4ZFkq6PVtyrv8YFpHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1 MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI1MDUxOTExMjc1NFoX DTI2MDUxODExMzI1NFowMzExMC8GA1UEAxMoNjREREU1NkQxQjY4NDAwRDJEN0Uz QjM3NjFGQkVGNUYzRTU0RUZFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqusXINfnD96ru48HlTp6v77/7seg5WF8MQLkNbhnZlWLHtXgYNTUJ6JmUC zr5fkfK5KYO5m0vye2uQDL9VqRhvTkF/muOTEttk6fkHXprjBCOmqJhuSplCWLw7 0wywgPKtjud+vWYVE87wXsCbmVw0YNpBJZ8tUzGjarbyjLb6HgcHwG555SWR6Gt7 uhceSnPAyaflK36s6+lEVAY8Vot5MHxrQ1PGBO8y2TyGemHyDU1JHDCGVqHGdVGB YJuU86i7vPKSTvmZ0ZdJ1ohhCZRRP/cA4HNeO6G0R8hR6XHBkVxX54M7F2ksh+oi sEnCqF2P3ypKrvqJdKQL07gjRicCAwEAAaOCAkcwggJDMB0GA1UdDgQWBBRk3eVt G2hADS1+Ozdh++9fPlTv6jAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1 NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0 MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgaoGCCsG AQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5 ZC82LzMyMzAzMDMxM2E2NDY2MzMzYTY1NjY2MzMwM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzEzNDM5MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8+/AMA0GCSqGSIb3DQEB CwUAA4IBAQA+orH31AGsOMU2+CYqYgiDIuo/+i7qFp1u9AUWURObGRnZ758dQYkU zxXohlWhvGm5H+d5Do3Q1eYBXVDD+i+CBEivVcV59n3P+LhekDTlElDBqLY+n3e/ XPDLspQcu1rz3YAVkjrtp+JRWZztlc9YuCQ1SPPX1LmmFr6cBBmPYK/EgOh+ZUYd 472L8FAjf8YIdC3Gcxi6ZQbHLyohO09s+9XpcOzAiEmDarGpQFJ81YZ8O4wFXwWN A6xXCCUcFn2opaz9Gv3uhN3cTezXn1RcIFY716AQbX22BG3fSkgrbP0XPRESembU CQ9kEpWQtpnJwODHyT/iOpXPyAdd+eML -----END CERTIFICATE-----Generated at Sun Jun 15 17:19:15 2025 by rpki-client