$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa File: 3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa (raw, json) Hash identifier: 2iYDQoYPtEf9SW8kCKrl4RiNWsU/4sVY1MR8XIhUmp8= Subject key identifier: 16:2E:37:08:02:E5:6F:37:BE:94:7B:4E:4D:7C:48:01:06:A1:55:5F Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 6EA38BD3263B3E146A28495D4288554458043035 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa Signing time: Tue 02 Jan 2024 22:04:16 +0000 ROA not before: Tue 02 Jan 2024 21:59:16 +0000 ROA not after: Tue 31 Dec 2024 22:04:16 +0000 asID: 33538 IP address blocks: 216.145.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a3:8b:d3:26:3b:3e:14:6a:28:49:5d:42:88:55:44:58:04:30:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jan 2 21:59:16 2024 GMT Not After : Dec 31 22:04:16 2024 GMT Subject: CN=162E370802E56F37BE947B4E4D7C480106A1555F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:1d:4f:53:ff:0b:b5:be:62:75:68:74:3f: 19:6b:f8:9f:c6:2e:db:6e:01:c0:9d:69:14:e4:cc: f0:9e:bb:d7:8a:19:b7:20:1d:4c:63:16:e2:58:6d: ea:43:fb:01:84:73:45:d3:c7:03:0c:15:a2:8f:1c: 5e:04:f5:e5:4c:86:96:c5:b1:ed:0e:76:9e:56:f1: f5:8c:06:d0:81:c9:6f:bb:a8:32:67:9b:67:be:91: 88:56:2b:1d:e2:65:b5:42:2e:10:44:f0:6e:5e:af: 4a:cf:bd:28:23:5f:f6:67:4f:15:5c:ef:87:46:58: 49:f6:92:c3:e2:46:97:ab:89:6b:93:e3:77:12:87: 63:44:12:e7:fe:04:d6:9b:c8:1a:9c:20:d8:c4:c5: 38:0c:3f:c3:c3:0c:8b:00:f0:08:03:93:92:cd:b7: 2e:9b:83:77:48:3e:41:ac:14:64:ae:7b:b8:4b:a4: 09:8e:be:f3:2f:52:2d:8c:d1:79:1a:6c:de:82:96: a2:9c:0b:d6:91:05:9c:5c:7a:36:83:55:e9:66:1e: b8:36:24:ca:54:54:71:93:49:a3:9a:dd:bc:b6:06: ee:71:10:00:f5:eb:cf:72:c3:2d:b4:7a:01:bd:67: cc:28:cd:5c:93:5d:96:3b:c2:29:a0:ee:62:ab:52: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:37:08:02:E5:6F:37:BE:94:7B:4E:4D:7C:48:01:06:A1:55:5F X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.216.0/24 Signature Algorithm: sha256WithRSAEncryption 80:6a:60:14:b8:35:2c:2b:39:09:d6:c6:5d:28:95:82:36:ca: 6b:0c:3f:ec:4b:1c:7e:d0:55:0d:c7:e1:cc:e7:d8:ab:c5:eb: d4:f5:7c:2c:9e:cb:30:ff:0d:11:d4:01:12:ce:de:ee:7f:21: 2b:2c:58:19:ee:d5:22:53:3b:3b:65:e9:fa:77:b3:a7:16:a0: d3:28:32:93:49:e4:45:8c:e9:8d:11:63:26:5d:61:26:86:90: 69:6f:49:fb:1a:17:37:26:45:f8:d6:19:87:73:56:64:4b:3e: 79:68:2f:df:13:6c:e7:0b:26:e6:f6:cc:14:c3:ae:ba:b7:d8: 46:9d:38:6d:13:2e:b9:7d:f2:c7:b0:31:1e:47:01:2a:e5:ec: 28:e9:cc:30:12:2b:16:b8:c7:02:46:b3:9c:f7:14:e8:b5:55: 19:29:64:23:d6:e6:c9:7a:e4:94:59:f9:be:6d:62:d6:de:44: 30:9e:6f:9f:4c:06:b5:26:29:48:54:74:b9:92:06:e7:56:10: 7f:33:55:95:e2:28:70:cd:55:eb:4f:34:5d:f1:74:db:9b:dd: 05:8c:b3:9f:ba:0e:a5:ff:f2:ed:f5:cd:2d:43:5c:c2:48:7d: ce:da:4c:2a:e1:f5:db:36:5f:44:63:cd:26:50:df:c2:e3:f3: a0:81:62:70 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUbqOL0yY7PhRqKEldQohVRFgEMDUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwMTAyMjE1OTE2WhcNMjQxMjMxMjIwNDE2 WjAzMTEwLwYDVQQDEygxNjJFMzcwODAyRTU2RjM3QkU5NDdCNEU0RDdDNDgwMTA2 QTE1NTVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD8dT1P/C7W+ YnVodD8Za/ifxi7bbgHAnWkU5MzwnrvXihm3IB1MYxbiWG3qQ/sBhHNF08cDDBWi jxxeBPXlTIaWxbHtDnaeVvH1jAbQgclvu6gyZ5tnvpGIVisd4mW1Qi4QRPBuXq9K z70oI1/2Z08VXO+HRlhJ9pLD4kaXq4lrk+N3EodjRBLn/gTWm8ganCDYxMU4DD/D wwyLAPAIA5OSzbcum4N3SD5BrBRkrnu4S6QJjr7zL1ItjNF5GmzegpainAvWkQWc XHo2g1XpZh64NiTKVFRxk0mjmt28tgbucRAA9evPcsMttHoBvWfMKM1ck12WO8Ip oO5iq1LI4QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFBYuNwgC5W83vpR7Tk18SAEG oVVfMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHYMA0GCSqG SIb3DQEBCwUAA4IBAQCAamAUuDUsKzkJ1sZdKJWCNsprDD/sSxx+0FUNx+HM59ir xevU9Xwsnssw/w0R1AESzt7ufyErLFgZ7tUiUzs7Zen6d7OnFqDTKDKTSeRFjOmN EWMmXWEmhpBpb0n7Ghc3JkX41hmHc1ZkSz55aC/fE2znCybm9swUw666t9hGnTht Ey65ffLHsDEeRwEq5ewo6cwwEisWuMcCRrOc9xTotVUZKWQj1ubJeuSUWfm+bWLW 3kQwnm+fTAa1JilIVHS5kgbnVhB/M1WV4ihwzVXrTzRd8XTbm90FjLOfug6l//Lt 9c0tQ1zCSH3O2kwq4fXbNl9EY80mUN/C4/OggWJw -----END CERTIFICATE-----Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org