$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa File: 3137302e31302e3134322e302f32342d3234203d3e203630343932.roa (raw, json) Hash identifier: fi28WScSYzVIx789zVg7EPVs0l+ZcfutHUZAKH8WeB8= Subject key identifier: 34:14:91:D3:2C:D8:8D:71:98:DE:4D:4E:6D:73:BC:E4:1E:08:4D:22 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 1C42B8B0CB4727911D2117EE1DECEE901B0818B1 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa Signing time: Fri 01 Sep 2023 11:14:30 +0000 ROA not before: Fri 01 Sep 2023 11:09:30 +0000 ROA not after: Fri 30 Aug 2024 11:14:30 +0000 asID: 60492 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:42:b8:b0:cb:47:27:91:1d:21:17:ee:1d:ec:ee:90:1b:08:18:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:30 2023 GMT Not After : Aug 30 11:14:30 2024 GMT Subject: CN=341491D32CD88D7198DE4D4E6D73BCE41E084D22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:2d:6c:1f:09:dd:fe:7a:87:a6:4b:13:56: f8:56:d5:af:b5:18:c0:27:e4:18:74:ed:8b:0e:18: 5d:e0:af:04:72:0f:44:e2:ad:64:c0:91:a4:06:71: 37:bf:15:42:0e:d5:eb:96:26:db:20:78:5f:fe:74: fa:71:34:9f:83:56:a1:6b:15:d3:97:7b:ac:9b:72: 13:66:3d:0e:d7:29:b8:28:ad:81:77:d3:c7:a6:ba: 6a:66:70:c5:74:2a:2a:76:a5:dd:4f:62:0b:b6:60: de:2c:57:73:72:03:52:ac:19:bb:f0:d5:39:18:b0: ac:45:b4:ed:88:3b:56:7f:f7:36:80:74:e7:98:13: cc:6a:38:a3:a1:85:64:39:24:6b:45:5d:20:32:70: f3:a7:e3:be:0d:4d:79:91:58:4e:6f:7b:b5:9a:ff: 15:82:cc:1b:de:63:d1:5c:6f:d8:87:75:70:df:d6: 3f:0b:3f:21:85:6b:24:74:e4:ec:51:b4:5a:61:7c: 13:be:61:0e:1e:81:99:29:9a:ef:eb:99:0f:96:c7: 42:51:34:28:21:ec:4b:b9:95:6b:45:3f:c9:3a:b7: e2:bc:05:f7:a9:4d:3f:1b:fa:5f:bc:4c:81:a0:07: 91:0a:a5:b3:f9:11:1f:49:5c:ec:06:67:c5:0f:5d: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:91:D3:2C:D8:8D:71:98:DE:4D:4E:6D:73:BC:E4:1E:08:4D:22 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:be:f6:3c:13:f0:89:4d:64:e1:0b:e4:16:01:47:3d:e8:d6: bd:99:0e:e8:69:f6:5f:1d:55:aa:94:36:bd:0a:0c:e0:cd:a4: f1:96:dd:3f:ac:f0:9a:80:e4:f1:88:5b:8c:c3:e4:5b:5e:88: c7:2d:1a:91:0c:e6:06:13:03:85:22:ee:9a:e0:bd:7f:bc:aa: 4b:b6:ba:f5:49:49:d4:a0:f7:eb:f2:40:94:2b:cc:c4:b8:f8: 39:c4:f4:14:e3:de:16:9c:e5:37:b9:6f:5d:5e:25:ba:43:a2: 71:66:cd:b3:4d:14:07:f0:7b:66:b1:f4:d4:85:32:95:69:b2: 49:a6:e6:76:61:66:79:5e:a1:fa:ed:d5:6a:b7:ec:b4:20:c5: 8d:df:f0:cc:ca:83:91:24:05:9a:8d:61:ba:b7:73:eb:98:8b: 2c:32:1f:5c:e6:dd:17:69:67:3b:11:87:e1:17:4a:52:03:dd: e6:3d:c2:2d:46:7b:71:1f:ea:60:fa:d5:43:02:b7:3f:0f:0f: 09:ec:1e:c8:60:9d:62:ea:f2:ec:d1:e2:14:cd:35:83:30:a5: 57:3d:26:d6:be:46:f0:03:a6:de:6b:45:c4:a8:13:fb:c9:51: 95:c8:2f:86:ba:ab:33:11:60:e5:86:b1:db:05:80:b4:c7:30: fe:d3:69:05 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUHEK4sMtHJ5EdIRfuHezukBsIGLEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMwWhcNMjQwODMwMTExNDMw WjAzMTEwLwYDVQQDEygzNDE0OTFEMzJDRDg4RDcxOThERTRENEU2RDczQkNFNDFF MDg0RDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hotbB8J3f56 h6ZLE1b4VtWvtRjAJ+QYdO2LDhhd4K8Ecg9E4q1kwJGkBnE3vxVCDtXrlibbIHhf /nT6cTSfg1ahaxXTl3usm3ITZj0O1ym4KK2Bd9PHprpqZnDFdCoqdqXdT2ILtmDe LFdzcgNSrBm78NU5GLCsRbTtiDtWf/c2gHTnmBPMajijoYVkOSRrRV0gMnDzp+O+ DU15kVhOb3u1mv8Vgswb3mPRXG/Yh3Vw39Y/Cz8hhWskdOTsUbRaYXwTvmEOHoGZ KZrv65kPlsdCUTQoIexLuZVrRT/JOrfivAX3qU0/G/pfvEyBoAeRCqWz+REfSVzs BmfFD13m/QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDQUkdMs2I1xmN5NTm1zvOQe CE0iMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzNjMwMzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQBLvvY8E/CJTWThC+QWAUc96Na9mQ7oafZfHVWqlDa9CgzgzaTx lt0/rPCagOTxiFuMw+RbXojHLRqRDOYGEwOFIu6a4L1/vKpLtrr1SUnUoPfr8kCU K8zEuPg5xPQU494WnOU3uW9dXiW6Q6JxZs2zTRQH8HtmsfTUhTKVabJJpuZ2YWZ5 XqH67dVqt+y0IMWN3/DMyoORJAWajWG6t3PrmIssMh9c5t0XaWc7EYfhF0pSA93m PcItRntxH+pg+tVDArc/Dw8J7B7IYJ1i6vLs0eIUzTWDMKVXPSbWvkbwA6bea0XE qBP7yVGVyC+GuqszEWDlhrHbBYC0xzD+02kF -----END CERTIFICATE-----Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org