$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa File: 3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa (raw, json) Hash identifier: qINvSlbdsen3MKdvvSYtenp0xCVe8BxK96oR/Wavxmo= Subject key identifier: A4:CB:B0:6D:B9:B1:4F:8F:0F:D1:CA:7A:5B:C3:33:A8:73:BA:EC:A1 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 287502B3786324A29C1C8A61E6DDE8FDAA4B651A Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa Signing time: Tue 03 Dec 2024 22:20:33 +0000 ROA not before: Tue 03 Dec 2024 22:15:33 +0000 ROA not after: Tue 02 Dec 2025 22:20:33 +0000 asID: 33538 IP address blocks: 216.145.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:75:02:b3:78:63:24:a2:9c:1c:8a:61:e6:dd:e8:fd:aa:4b:65:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Dec 3 22:15:33 2024 GMT Not After : Dec 2 22:20:33 2025 GMT Subject: CN=A4CBB06DB9B14F8F0FD1CA7A5BC333A873BAECA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e8:0e:88:19:17:32:4d:2f:61:be:d2:87:b2: c7:03:16:a7:34:d3:e9:27:56:7b:64:91:12:5f:fc: 0b:6f:83:84:b4:13:a3:3b:57:62:3d:46:7e:b1:fb: 0c:14:56:e6:fb:5a:62:a8:0a:fe:a1:29:97:4f:13: 88:a9:97:2c:15:a2:58:40:63:e1:1b:b7:08:46:a5: 58:64:fa:d5:8e:c6:44:8b:88:59:05:a0:69:94:e3: 84:00:16:b5:94:e4:e5:8d:0a:f6:e2:38:d3:f4:f4: 7e:6e:a9:85:b5:93:6e:6a:ca:e2:7d:9a:78:dd:40: 57:1e:82:52:0f:67:2b:11:a1:e5:7a:d7:58:af:09: 07:b7:43:da:09:f6:4e:cf:e1:f4:d5:e3:b8:85:c0: a2:7c:89:25:c5:8b:bd:f5:b3:5d:f5:a0:4a:01:27: 31:cb:ee:24:38:10:e9:03:06:cf:be:02:29:e7:3f: 8f:2e:d5:f0:d1:77:e1:93:e3:58:39:03:c6:91:ff: 7c:be:98:db:7e:dc:09:5e:34:32:e3:32:9c:25:a0: 76:de:6f:d8:85:a3:b0:9c:1a:1d:1d:26:37:97:39: 33:f1:4e:1f:80:bf:5b:1a:e3:93:82:77:4b:aa:9a: f4:69:57:c9:87:43:c3:93:90:3e:23:09:6d:87:7e: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:B0:6D:B9:B1:4F:8F:0F:D1:CA:7A:5B:C3:33:A8:73:BA:EC:A1 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.216.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:81:1e:5e:08:bf:81:75:14:d2:90:8c:9b:03:d4:74:83:fb: 46:2b:f1:fe:44:91:48:a2:ba:99:70:d7:c4:d4:65:cb:34:82: ca:3c:6f:60:8b:e4:8e:c0:dc:77:58:64:1f:8a:e8:49:0f:96: 0f:e9:c5:66:44:20:09:9e:8e:4e:c0:31:c6:30:7a:df:be:a3: e2:cb:d0:de:76:cf:0b:d5:40:c0:5d:87:b9:30:83:b5:ac:77: a4:86:59:9b:3f:3e:e0:7f:dd:7b:0d:9c:51:65:27:ba:a4:0c: c0:69:43:02:34:0e:f4:18:aa:a7:9f:c8:2e:c7:78:e0:5a:e0: d5:26:60:bc:00:77:d3:13:b1:cd:bf:7b:ae:34:8f:b9:5e:77: 99:ee:32:52:32:92:df:01:e3:f8:7d:4d:ca:23:d6:32:8b:9f: 56:bb:3f:dd:60:0a:53:82:76:e8:32:5d:fd:76:4f:68:d5:86: 00:20:a9:c9:5e:72:8d:4f:56:25:d7:59:6d:61:d5:38:85:8f: fb:7f:f5:aa:2e:0d:d0:fa:fa:de:9a:86:5e:c7:12:8b:58:1c: 34:8d:49:77:98:ca:fd:99:5d:f1:1c:a8:b7:8a:f0:68:e3:18: 56:f9:55:8b:d5:9a:6e:33:4e:77:21:5f:53:3d:f9:47:fb:5d: 65:b0:93:5b -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUKHUCs3hjJKKcHIph5t3o/apLZRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQxMjAzMjIxNTMzWhcNMjUxMjAyMjIyMDMz WjAzMTEwLwYDVQQDEyhBNENCQjA2REI5QjE0RjhGMEZEMUNBN0E1QkMzMzNBODcz QkFFQ0ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OgOiBkXMk0v Yb7Sh7LHAxanNNPpJ1Z7ZJESX/wLb4OEtBOjO1diPUZ+sfsMFFbm+1piqAr+oSmX TxOIqZcsFaJYQGPhG7cIRqVYZPrVjsZEi4hZBaBplOOEABa1lOTljQr24jjT9PR+ bqmFtZNuasrifZp43UBXHoJSD2crEaHletdYrwkHt0PaCfZOz+H01eO4hcCifIkl xYu99bNd9aBKAScxy+4kOBDpAwbPvgIp5z+PLtXw0Xfhk+NYOQPGkf98vpjbftwJ XjQy4zKcJaB23m/YhaOwnBodHSY3lzkz8U4fgL9bGuOTgndLqpr0aVfJh0PDk5A+ Iwlth3503wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFKTLsG25sU+PD9HKelvDM6hz uuyhMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHYMA0GCSqG SIb3DQEBCwUAA4IBAQBdgR5eCL+BdRTSkIybA9R0g/tGK/H+RJFIorqZcNfE1GXL NILKPG9gi+SOwNx3WGQfiuhJD5YP6cVmRCAJno5OwDHGMHrfvqPiy9Deds8L1UDA XYe5MIO1rHekhlmbPz7gf917DZxRZSe6pAzAaUMCNA70GKqnn8gux3jgWuDVJmC8 AHfTE7HNv3uuNI+5XneZ7jJSMpLfAeP4fU3KI9Yyi59Wuz/dYApTgnboMl39dk9o 1YYAIKnJXnKNT1Yl11ltYdU4hY/7f/WqLg3Q+vremoZexxKLWBw0jUl3mMr9mV3x HKi3ivBo4xhW+VWL1ZpuM053IV9TPflH+11lsJNb -----END CERTIFICATE-----Generated at Sat Apr 5 15:10:14 2025 by rpki-client