$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa File: 323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa (raw, json) Hash identifier: 0cYuANW+wAdJW+ewvALnQxscNpRx7sOJb/wKl/oYNic= Subject key identifier: 1B:C5:A1:DC:11:09:80:0B:85:A8:00:51:2E:4A:20:FC:E4:C5:03:B2 Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 6E7E78BAA11DC41D9EB971AA1B54AADD301FE0EA Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa Signing time: Sat 07 Dec 2024 13:13:28 +0000 ROA not before: Sat 07 Dec 2024 13:08:28 +0000 ROA not after: Sat 06 Dec 2025 13:13:28 +0000 asID: 399170 IP address blocks: 2403:2500:9000:129::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 06:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7e:78:ba:a1:1d:c4:1d:9e:b9:71:aa:1b:54:aa:dd:30:1f:e0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Dec 7 13:08:28 2024 GMT Not After : Dec 6 13:13:28 2025 GMT Subject: CN=1BC5A1DC1109800B85A800512E4A20FCE4C503B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:aa:ea:7c:d3:e6:2a:a0:d6:4f:ad:b0:8b: 72:38:29:f2:6b:ea:71:1a:96:15:8e:0d:c3:9c:72: 69:ba:8a:5f:1e:2b:dd:44:0d:1e:dc:55:7e:90:08: 49:8c:05:e1:88:d8:4c:61:fc:5a:0c:96:70:32:ed: aa:49:f7:b2:b0:fb:97:a8:f6:05:fc:55:a5:d2:45: 9e:e6:e7:a6:da:15:e8:6f:21:53:d2:98:dd:48:4e: 31:d0:2b:c2:1a:47:6a:af:1a:db:ba:23:b7:5a:ce: 77:ce:1b:36:e7:af:7f:dd:1e:93:53:40:25:77:e2: b2:da:b1:4e:71:20:9e:95:79:a7:51:d1:8d:1d:1b: 7e:3e:64:68:09:50:be:bc:9f:43:ab:97:b3:2a:de: f3:e8:06:87:64:45:cf:1e:52:af:c8:78:60:ba:56: e5:11:b5:0e:4f:c8:d4:02:7a:bf:09:62:72:27:61: 26:62:32:70:70:eb:8a:34:b8:86:2f:09:6a:fe:94: 23:8e:a9:2b:c4:97:95:4c:fc:10:8b:70:b3:60:f0: b0:80:dc:70:73:05:0e:27:76:6a:66:16:d1:e9:a6: 95:5b:59:2d:c4:1c:fa:8f:68:0f:f3:2c:d6:0c:b6: 0e:47:83:72:59:d1:71:2f:6c:d6:71:27:62:d9:33: 2f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C5:A1:DC:11:09:80:0B:85:A8:00:51:2E:4A:20:FC:E4:C5:03:B2 X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:9000:129::/64 Signature Algorithm: sha256WithRSAEncryption 09:69:1e:8a:7e:12:be:54:36:e6:a4:f4:e5:20:74:81:df:43: 5f:be:ef:21:d9:7a:a4:85:be:8e:ad:82:67:ee:33:82:97:31: 7a:91:9a:08:5f:40:0a:b8:18:ef:1a:8c:ed:b4:aa:97:c6:f0: fc:81:d9:bd:a0:6d:4b:00:02:89:d5:bd:73:06:da:97:e5:06: 9b:a7:0c:ed:98:db:5d:fa:a3:cd:30:a3:65:95:d9:9a:d6:5b: ea:a6:be:2b:96:52:62:80:18:b4:4c:53:d5:9a:c8:89:8c:d8: 2c:62:f4:77:6b:1a:14:1e:12:8c:3e:ce:43:db:1d:e1:88:f4: 03:39:f5:2e:e4:ec:f8:c3:5d:c5:08:fd:51:7f:6e:f6:a9:89: 79:89:ce:4e:0b:5d:11:85:5e:ed:96:b6:eb:e5:d4:95:02:66: 21:6d:05:28:e7:6b:2e:ca:56:bc:02:f4:fd:de:d9:72:24:cb: 22:4b:05:94:42:2d:4b:b8:54:1a:70:8a:80:6d:e7:b3:97:45: d7:cf:48:28:54:c1:f6:58:fd:96:6b:91:d0:f2:56:e1:7a:5d: 11:22:c1:ee:eb:bd:1a:99:24:c1:b2:1f:e8:0c:59:41:f4:6d: 60:56:8a:06:72:1c:ea:ab:5a:97:0e:32:6a:e8:fc:f4:45:cf: f6:fa:5f:e4 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUbn54uqEdxB2euXGqG1Sq3TAf4OowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI0MTIwNzEzMDgyOFoX DTI1MTIwNjEzMTMyOFowMzExMC8GA1UEAxMoMUJDNUExREMxMTA5ODAwQjg1QTgw MDUxMkU0QTIwRkNFNEM1MDNCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANU0qup80+YqoNZPrbCLcjgp8mvqcRqWFY4Nw5xyabqKXx4r3UQNHtxVfpAI SYwF4YjYTGH8WgyWcDLtqkn3srD7l6j2BfxVpdJFnubnptoV6G8hU9KY3UhOMdAr whpHaq8a27ojt1rOd84bNuevf90ek1NAJXfistqxTnEgnpV5p1HRjR0bfj5kaAlQ vryfQ6uXsyre8+gGh2RFzx5Sr8h4YLpW5RG1Dk/I1AJ6vwlicidhJmIycHDrijS4 hi8Jav6UI46pK8SXlUz8EItws2DwsIDccHMFDid2amYW0emmlVtZLcQc+o9oD/Ms 1gy2DkeDclnRcS9s1nEnYtkzL78CAwEAAaOCAlMwggJPMB0GA1UdDgQWBBQbxaHc EQmAC4WoAFEuSiD85MUDsjAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbQGCCsG AQUFBwELBIGnMIGkMIGhBggrBgEFBQcwC4aBlHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzkzMDMwMzAzYTMxMzIzOTNhM2EyZjM2 MzQyZDM2MzQyMDNkM2UyMDMzMzkzOTMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACQDJQCQAAEp MA0GCSqGSIb3DQEBCwUAA4IBAQAJaR6KfhK+VDbmpPTlIHSB30Nfvu8h2Xqkhb6O rYJn7jOClzF6kZoIX0AKuBjvGozttKqXxvD8gdm9oG1LAAKJ1b1zBtqX5Qabpwzt mNtd+qPNMKNlldma1lvqpr4rllJigBi0TFPVmsiJjNgsYvR3axoUHhKMPs5D2x3h iPQDOfUu5Oz4w13FCP1Rf272qYl5ic5OC10RhV7tlrbr5dSVAmYhbQUo52suyla8 AvT93tlyJMsiSwWUQi1LuFQacIqAbeezl0XXz0goVMH2WP2Wa5HQ8lbhel0RIsHu 670amSTBsh/oDFlB9G1gVooGchzqq1qXDjJq6Pz0Rc/2+l/k -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:54 2025 by rpki-client on console.sobornost.net