$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa File: 3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa (raw, json) Hash identifier: YI+J9qOsio2qc6ZdR15J9frLtCKebGniOV6Nt17qsRA= Subject key identifier: 42:3D:64:DD:4E:E3:10:2D:91:9E:1C:44:E7:B3:AB:35:23:C2:84:30 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 28742C4431B01B1FACA40820B9EDB793AC03770E Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa Signing time: Fri 02 Aug 2024 11:24:26 +0000 ROA not before: Fri 02 Aug 2024 11:19:26 +0000 ROA not after: Fri 01 Aug 2025 11:24:26 +0000 asID: 39588 IP address blocks: 216.145.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:74:2c:44:31:b0:1b:1f:ac:a4:08:20:b9:ed:b7:93:ac:03:77:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:26 2024 GMT Not After : Aug 1 11:24:26 2025 GMT Subject: CN=423D64DD4EE3102D919E1C44E7B3AB3523C28430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:78:94:80:5e:58:b3:d2:a8:5a:65:1c:00: ed:ff:c3:ef:d6:8f:a9:a0:47:81:2e:3d:8d:7c:32: d7:32:52:b4:d3:2a:8b:ca:eb:92:78:e0:d5:75:a9: f6:49:cf:b1:f7:c8:25:41:55:f5:04:5e:c2:3f:b4: db:2f:69:32:c8:a5:40:a3:94:3e:cd:48:f0:cc:2c: b4:4c:af:25:f6:e3:47:ad:68:99:65:17:06:e5:ea: 8b:ee:26:76:43:c8:4d:66:c9:2e:d0:94:85:1e:09: e0:5c:47:60:1a:f3:0c:bc:99:54:8f:17:02:73:22: f4:3b:e3:b2:d8:d1:a2:55:b3:c6:6a:f1:77:f4:99: 66:17:11:a5:48:db:91:fc:d6:58:13:0f:90:9c:48: 25:85:06:43:29:1e:1e:46:51:bb:85:04:1c:53:d4: 6e:56:6d:5a:d6:6c:50:4a:b9:f2:1d:31:08:3f:2f: b7:aa:7b:6e:b9:1f:17:8a:4b:b8:37:cc:9a:c4:eb: 93:93:25:a5:28:ee:03:e5:19:a6:ac:28:6f:8b:65: 89:e1:34:9e:f4:13:60:93:d0:4f:99:47:65:53:26: ae:b9:82:f0:e7:f6:34:5f:e5:0e:6e:94:c2:f1:b7: 35:6c:e2:71:47:64:de:f2:6f:6e:67:70:91:f5:b0: b8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3D:64:DD:4E:E3:10:2D:91:9E:1C:44:E7:B3:AB:35:23:C2:84:30 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.218.0/24 Signature Algorithm: sha256WithRSAEncryption 31:bc:11:5a:b4:5c:05:4c:1d:cd:b8:39:8a:c9:79:c6:29:58: 46:ec:44:b0:90:50:55:5f:93:18:a2:80:5c:5b:91:13:db:56: 25:1e:30:9e:ab:5d:ab:19:24:29:0a:ba:c7:af:83:02:e3:60: 75:de:02:56:01:72:90:71:0c:f4:7d:ab:39:72:c7:5b:c0:7c: 42:e3:13:be:67:fb:15:36:2d:d4:f1:97:3b:5f:5f:b5:2b:cf: 8b:56:92:bc:04:a2:b3:30:00:06:60:65:e6:82:48:2d:65:1d: 0a:6e:ff:7e:6e:46:6c:c1:19:46:39:c5:e6:ac:b1:bb:8a:0d: 09:8c:6b:3d:8c:7a:ba:bc:5e:2d:74:09:82:29:a3:d5:08:97: 41:a7:68:77:72:8d:69:e1:5b:c6:0f:64:d2:be:20:83:d3:0d: b2:77:78:bb:e9:56:03:64:40:e4:37:6f:d6:c6:aa:c6:29:8c: 86:ac:49:ba:bb:81:4c:ff:93:03:3c:0e:88:b0:00:07:5a:e4: 3a:ac:6f:2b:4a:ec:45:c0:16:54:36:58:c1:5a:64:68:a6:55: e2:c2:ec:e4:64:24:d0:95:d0:97:3f:70:5e:cd:67:63:9f:41: cc:6d:f1:1a:ea:11:e3:77:13:76:30:0d:e5:5d:2e:01:65:13: 4d:18:76:98 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUKHQsRDGwGx+spAggue23k6wDdw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI2WhcNMjUwODAxMTEyNDI2 WjAzMTEwLwYDVQQDEyg0MjNENjRERDRFRTMxMDJEOTE5RTFDNDRFN0IzQUIzNTIz QzI4NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3V4lIBeWLPS qFplHADt/8Pv1o+poEeBLj2NfDLXMlK00yqLyuuSeODVdan2Sc+x98glQVX1BF7C P7TbL2kyyKVAo5Q+zUjwzCy0TK8l9uNHrWiZZRcG5eqL7iZ2Q8hNZsku0JSFHgng XEdgGvMMvJlUjxcCcyL0O+Oy2NGiVbPGavF39JlmFxGlSNuR/NZYEw+QnEglhQZD KR4eRlG7hQQcU9RuVm1a1mxQSrnyHTEIPy+3qntuuR8Xiku4N8yaxOuTkyWlKO4D 5RmmrChvi2WJ4TSe9BNgk9BPmUdlUyauuYLw5/Y0X+UObpTC8bc1bOJxR2Te8m9u Z3CR9bC4IQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFEI9ZN1O4xAtkZ4cROezqzUj woQwMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHaMA0GCSqG SIb3DQEBCwUAA4IBAQAxvBFatFwFTB3NuDmKyXnGKVhG7ESwkFBVX5MYooBcW5ET 21YlHjCeq12rGSQpCrrHr4MC42B13gJWAXKQcQz0fas5csdbwHxC4xO+Z/sVNi3U 8Zc7X1+1K8+LVpK8BKKzMAAGYGXmgkgtZR0Kbv9+bkZswRlGOcXmrLG7ig0JjGs9 jHq6vF4tdAmCKaPVCJdBp2h3co1p4VvGD2TSviCD0w2yd3i76VYDZEDkN2/WxqrG KYyGrEm6u4FM/5MDPA6IsAAHWuQ6rG8rSuxFwBZUNljBWmRoplXiwuzkZCTQldCX P3BezWdjn0HMbfEa6hHjdxN2MA3lXS4BZRNNGHaY -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org