$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/32332e3133312e3137322e302f32342d3234203d3e203631393631.roa File: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (raw, json) Hash identifier: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60= Subject key identifier: 92:50:EF:1B:F4:F7:E9:5C:4B:F2:F7:F3:18:77:D4:6A:F9:73:7B:1B Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 7565FB157ACC2F0FD9C619CA52769DE6E15F5FC1 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/32332e3133312e3137322e302f32342d3234203d3e203631393631.roa Signing time: Tue 31 Dec 2024 21:16:43 +0000 ROA not before: Tue 31 Dec 2024 21:11:43 +0000 ROA not after: Tue 30 Dec 2025 21:16:43 +0000 asID: 61961 IP address blocks: 23.131.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Mar 2025 15:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:65:fb:15:7a:cc:2f:0f:d9:c6:19:ca:52:76:9d:e6:e1:5f:5f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Dec 31 21:11:43 2024 GMT Not After : Dec 30 21:16:43 2025 GMT Subject: CN=9250EF1BF4F7E95C4BF2F7F31877D46AF9737B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:83:ce:13:d2:da:6c:19:1d:9e:d5:98:83: f7:73:be:57:29:c1:3e:ef:34:a8:ac:a1:9d:d0:0d: 60:9b:f0:59:11:ed:21:e0:55:ad:b5:60:89:1c:f6: 37:7f:18:93:7a:5d:57:e5:c6:c5:32:4b:ce:3f:77: 2b:22:a5:ec:c3:df:48:b7:76:fc:10:9a:31:96:95: e0:7f:fc:c5:9b:63:d9:db:1f:95:2f:06:42:10:47: 44:a9:46:67:c9:38:c4:64:1e:65:8b:4b:3d:32:73: 4d:d1:5a:d2:88:2b:0e:27:7c:8c:d7:f9:aa:a2:6f: 44:65:5e:15:58:4c:a2:ba:c9:21:44:71:59:b5:fb: 43:99:b7:ff:87:82:6e:ff:35:eb:45:2f:14:ac:2f: 47:b5:21:7f:3d:9d:4a:27:4b:00:bc:af:98:2f:0c: 33:2d:1b:69:b8:5c:f5:68:32:57:ed:8b:06:d3:f2: 24:71:e6:21:d4:ae:2f:5b:50:2e:29:b0:5c:b6:09: 8f:f5:c0:68:88:a4:6b:9d:7c:c0:04:a1:0e:7f:e0: 4e:d1:a6:4c:22:71:62:db:b8:66:ef:0e:5f:22:83: 89:a0:cd:bf:a4:11:6e:91:0e:11:9b:9d:69:7c:5c: f7:cb:da:2f:38:3b:37:7b:49:ab:af:45:cb:04:f0: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:50:EF:1B:F4:F7:E9:5C:4B:F2:F7:F3:18:77:D4:6A:F9:73:7B:1B X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/32332e3133312e3137322e302f32342d3234203d3e203631393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.131.172.0/24 Signature Algorithm: sha256WithRSAEncryption 08:31:ec:44:a5:45:73:ad:ee:bc:ef:49:6c:0c:34:88:66:ec: 8f:b4:c9:8e:11:5c:b5:5f:d7:88:ca:d6:31:d2:9f:d7:bd:ed: 37:48:e9:24:cb:5a:46:64:6f:3d:59:d3:4e:d7:fb:d1:e5:be: ec:20:0b:06:1f:34:18:0c:bc:9d:81:e0:0d:54:19:14:2b:be: f9:b5:e6:b2:b8:70:b0:c0:c6:13:f9:c3:f8:84:ec:3b:a2:87: 57:b1:23:bc:aa:c3:a2:82:0e:ae:39:80:e9:34:a0:a3:49:36: 32:c0:4e:f8:fe:f4:8f:f1:77:7a:9d:dd:31:8f:20:6f:10:26: 22:de:9e:11:f4:b1:a8:7f:6a:aa:35:a9:49:18:24:47:c7:78: 65:72:cd:e8:cc:12:3f:3a:f8:9e:1b:9c:ab:cc:16:b5:b2:31: 93:b7:41:29:30:f4:8b:f9:d0:43:66:cf:10:00:14:a6:c3:13: 43:5c:c6:60:34:a3:ce:78:75:f3:90:ce:f8:e6:0a:28:cb:11: a6:ae:43:b6:08:d5:e2:98:28:f8:4d:fb:78:c5:98:54:5f:c1: 36:7b:9c:b2:08:fa:42:2f:1a:10:42:d9:c4:25:2f:99:5c:c3: 1a:7a:27:6c:bd:23:92:66:e2:f5:a1:e7:3e:4a:d1:a9:71:a0: 7d:fa:28:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUdWX7FXrMLw/ZxhnKUnad5uFfX8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjQxMjMxMjExMTQzWhcNMjUxMjMwMjExNjQz WjAzMTEwLwYDVQQDEyg5MjUwRUYxQkY0RjdFOTVDNEJGMkY3RjMxODc3RDQ2QUY5 NzM3QjFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiqDzhPS2mwZ HZ7VmIP3c75XKcE+7zSorKGd0A1gm/BZEe0h4FWttWCJHPY3fxiTel1X5cbFMkvO P3crIqXsw99It3b8EJoxlpXgf/zFm2PZ2x+VLwZCEEdEqUZnyTjEZB5li0s9MnNN 0VrSiCsOJ3yM1/mqom9EZV4VWEyiuskhRHFZtftDmbf/h4Ju/zXrRS8UrC9HtSF/ PZ1KJ0sAvK+YLwwzLRtpuFz1aDJX7YsG0/IkceYh1K4vW1AuKbBctgmP9cBoiKRr nXzABKEOf+BO0aZMInFi27hm7w5fIoOJoM2/pBFukQ4Rm51pfFz3y9ovODs3e0mr r0XLBPAkBwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJJQ7xv09+lcS/L38xh31Gr5 c3sbMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzAL hmRyc3luYzovL3Jwa2kubmVsbGljdXMubmV0L3JlcG8vbmVsbGljdXMvMi8zMjMz MmUzMTMzMzEyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzOTM2 MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAXg6wwDQYJKoZIhvcNAQELBQADggEBAAgx7ESlRXOt7rzv SWwMNIhm7I+0yY4RXLVf14jK1jHSn9e97TdI6STLWkZkbz1Z007X+9HlvuwgCwYf NBgMvJ2B4A1UGRQrvvm15rK4cLDAxhP5w/iE7Duih1exI7yqw6KCDq45gOk0oKNJ NjLATvj+9I/xd3qd3TGPIG8QJiLenhH0sah/aqo1qUkYJEfHeGVyzejMEj86+J4b nKvMFrWyMZO3QSkw9Iv50ENmzxAAFKbDE0NcxmA0o854dfOQzvjmCijLEaauQ7YI 1eKYKPhN+3jFmFRfwTZ7nLII+kIvGhBC2cQlL5lcwxp6J2y9I5Jm4vWh5z5K0alx oH36KGs= -----END CERTIFICATE-----Generated at Mon Mar 10 16:41:59 2025 by rpki-client