$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e203631313338.roa File: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (raw, json) Hash identifier: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU= Subject key identifier: 10:65:A2:D9:D1:ED:35:A0:88:C9:E5:21:B6:8A:AC:DE:E7:E8:B0:C4 Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Certificate serial: 29E32E8535399FCCA06BE88D6F966DE1948C410C Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e203631313338.roa Signing time: Fri 04 Jul 2025 23:35:51 +0000 ROA not before: Fri 04 Jul 2025 23:30:51 +0000 ROA not after: Fri 03 Jul 2026 23:35:51 +0000 asID: 61138 IP address blocks: 2404:3d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e3:2e:85:35:39:9f:cc:a0:6b:e8:8d:6f:96:6d:e1:94:8c:41:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Validity Not Before: Jul 4 23:30:51 2025 GMT Not After : Jul 3 23:35:51 2026 GMT Subject: CN=1065A2D9D1ED35A088C9E521B68AACDEE7E8B0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:f0:75:94:fc:ec:96:cc:eb:9e:69:fe:f1: 12:38:85:b8:45:32:a6:c6:7b:10:79:9b:dd:d9:c0: bf:41:3f:1e:de:6b:5c:0d:71:2d:d2:60:55:5e:31: 87:02:2e:96:9d:d7:92:92:1c:c4:61:29:ba:70:e1: cb:19:b7:21:af:d1:ca:95:f9:f6:67:e2:2b:da:66: 5d:e2:4d:cc:54:27:4c:85:b6:0e:05:42:81:5a:4a: 76:65:da:01:42:6b:dc:34:46:97:37:82:d7:cf:6a: 54:d8:86:11:5c:3c:58:5d:5c:50:9c:8b:47:26:dd: bb:e9:16:b2:69:c2:c9:be:80:e4:f8:b4:6f:de:4a: 0e:e8:5c:bf:5d:32:80:a3:7c:ac:dd:79:4b:c5:82: 09:24:85:ac:1e:db:09:65:a1:f0:4c:60:cd:bb:82: 05:1f:c0:90:38:47:1f:33:d8:44:ca:a1:e7:92:d9: 03:aa:3c:89:8c:74:d9:51:4b:eb:52:ce:62:b4:26: 0d:28:70:3a:7c:b1:1e:5b:2e:fd:3c:a6:95:bf:a0: fd:2b:91:19:e2:b0:65:1f:ac:54:f2:03:ae:80:37: 4e:4b:a2:3d:32:67:e3:bd:8c:33:65:19:23:6f:54: 0f:f1:a6:a3:57:db:57:2a:45:1c:92:15:85:31:be: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:65:A2:D9:D1:ED:35:A0:88:C9:E5:21:B6:8A:AC:DE:E7:E8:B0:C4 X509v3 Authority Key Identifier: keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e203631313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:3d80::/32 Signature Algorithm: sha256WithRSAEncryption 4d:de:e7:64:c3:0c:a2:5a:29:a1:0b:a9:1b:3e:17:cd:02:bb: a7:68:b7:5f:41:5f:cc:48:d0:90:4d:10:4b:f6:52:01:d9:47: bd:74:db:d8:ca:ed:0d:96:b2:de:12:a2:cf:e1:fd:35:b8:bf: 57:db:79:e4:d5:74:c3:33:c8:b1:0b:0b:29:9e:4f:77:21:cd: c5:49:bd:6e:29:bc:81:19:36:c6:3a:d9:d8:84:f3:30:df:46: bc:39:4d:f1:4e:3a:3b:c7:09:91:ae:c2:b2:69:1d:d5:ad:fa: 9b:d1:1f:7e:8a:42:93:52:15:f7:af:2b:23:c3:5d:57:4f:a4: a9:f0:e3:32:72:e9:02:a3:4c:52:71:07:94:4b:f5:3a:40:59: 40:7e:a3:d1:17:9e:b9:96:c1:1f:03:a9:15:c2:6e:f0:c0:18: 6d:af:4e:1f:33:0e:d2:35:7c:63:01:6a:03:fb:1e:3f:ea:a8: 44:29:3b:32:63:8a:fa:3c:38:a7:4b:35:4d:8e:c1:6f:4e:43: 88:10:9c:f6:10:59:25:8b:19:6f:9d:87:fb:12:e5:6c:9b:58: e0:ca:4e:6a:38:26:03:db:c1:c6:d3:a8:5c:f8:cb:1a:5d:fe: 54:27:20:7f:8d:bc:7a:51:f6:8b:7d:ad:c3:6c:34:fd:fa:35: 2a:68:c6:55 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUKeMuhTU5n8yga+iNb5Zt4ZSMQQwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5Q0RBNzExMTZF MjI4MTJBREY2MEI3NTAwRjkyRDdFNENCQjJCOUI0MB4XDTI1MDcwNDIzMzA1MVoX DTI2MDcwMzIzMzU1MVowMzExMC8GA1UEAxMoMTA2NUEyRDlEMUVEMzVBMDg4QzlF NTIxQjY4QUFDREVFN0U4QjBDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMD8HWU/OyWzOueaf7xEjiFuEUypsZ7EHmb3dnAv0E/Ht5rXA1xLdJgVV4x hwIulp3XkpIcxGEpunDhyxm3Ia/RypX59mfiK9pmXeJNzFQnTIW2DgVCgVpKdmXa AUJr3DRGlzeC189qVNiGEVw8WF1cUJyLRybdu+kWsmnCyb6A5Pi0b95KDuhcv10y gKN8rN15S8WCCSSFrB7bCWWh8ExgzbuCBR/AkDhHHzPYRMqh55LZA6o8iYx02VFL 61LOYrQmDShwOnyxHlsu/Tymlb+g/SuRGeKwZR+sVPIDroA3TkuiPTJn472MM2UZ I29UD/Gmo1fbVypFHJIVhTG+ogMCAwEAAaOCAjswggI3MB0GA1UdDgQWBBQQZaLZ 0e01oIjJ5SG2iqze5+iwxDAfBgNVHSMEGDAWgBSc2nERbiKBKt9gt1APktfky7K5 tDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1 NWM5MWJlM2Y5ZC84LzlDREE3MTExNkUyMjgxMkFERjYwQjc1MDBGOTJEN0U0Q0JC MkI5QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL25OcHhFVzRpZ1NyZllMZFFENUxYNU11eXViUS5jZXIwgaAGCCsG AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5 ZC84LzMyMzQzMDM0M2EzMzY0MzgzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM2 MzEzMTMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkBD2AMA0GCSqGSIb3DQEBCwUAA4IBAQBN3udk wwyiWimhC6kbPhfNArunaLdfQV/MSNCQTRBL9lIB2Ue9dNvYyu0NlrLeEqLP4f01 uL9X23nk1XTDM8ixCwspnk93Ic3FSb1uKbyBGTbGOtnYhPMw30a8OU3xTjo7xwmR rsKyaR3Vrfqb0R9+ikKTUhX3rysjw11XT6Sp8OMycukCo0xScQeUS/U6QFlAfqPR F565lsEfA6kVwm7wwBhtr04fMw7SNXxjAWoD+x4/6qhEKTsyY4r6PDinSzVNjsFv TkOIEJz2EFklixlvnYf7EuVsm1jgyk5qOCYD28HG06hc+MsaXf5UJyB/jbx6UfaL fa3DbDT9+jUqaMZV -----END CERTIFICATE-----Generated at Wed Nov 5 10:38:30 2025 by rpki-client