$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa File: 3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: oODtrzQGv/Z1qQqYW7k2pBivyi/AZXUy4DEpJcdFjQI= Subject key identifier: 96:98:AE:B6:D8:66:1F:DF:9A:9D:CF:CC:FB:BF:8C:48:68:24:DE:B3 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 7143C9500BAB41EC3BD10274862A720F166FBAC5 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa Signing time: Fri 02 Aug 2024 11:24:26 +0000 ROA not before: Fri 02 Aug 2024 11:19:26 +0000 ROA not after: Fri 01 Aug 2025 11:24:26 +0000 asID: 14618 IP address blocks: 216.145.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 15:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:43:c9:50:0b:ab:41:ec:3b:d1:02:74:86:2a:72:0f:16:6f:ba:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:26 2024 GMT Not After : Aug 1 11:24:26 2025 GMT Subject: CN=9698AEB6D8661FDF9A9DCFCCFBBF8C486824DEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:d6:30:ff:8d:22:2f:b3:82:72:0d:57:44: 8c:19:db:34:7d:6b:64:2a:8f:44:8c:36:52:db:0f: 86:48:44:47:34:c8:9e:42:d7:69:71:9b:68:eb:b3: 4f:a2:27:97:6a:58:ba:1e:1a:68:25:1f:d5:6f:55: 23:2c:16:be:d3:c4:4c:bf:cb:82:c2:cf:1e:15:d9: db:a9:c8:9e:a8:5d:f4:34:1c:a0:ff:68:b5:57:5d: fa:42:cd:1e:3a:d7:fd:cd:34:c2:11:0d:e8:05:dc: d2:09:d3:7f:3f:4b:67:fb:f3:51:1e:e7:44:9f:aa: ba:c7:09:3a:32:d9:b8:4d:38:22:ef:00:72:5b:06: de:7e:67:8d:f5:b3:5a:51:63:08:e6:3b:85:56:86: 84:a9:38:aa:29:62:0a:9c:ee:86:88:66:c8:d7:4e: cc:33:e6:b4:69:fa:09:6f:fd:62:c7:1c:43:47:ea: ec:2e:38:93:ac:19:d1:1d:fb:5e:b7:8e:8b:44:54: 97:60:8e:5c:eb:b2:40:28:b3:20:09:f9:61:8a:7a: fc:b7:6c:18:b2:7d:e0:a0:a3:51:29:86:75:da:76: 26:b9:0f:03:32:37:d5:ab:cf:bd:df:3c:8f:e7:ff: 10:cd:66:57:64:7f:a7:69:f5:f2:65:08:de:42:21: 60:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:98:AE:B6:D8:66:1F:DF:9A:9D:CF:CC:FB:BF:8C:48:68:24:DE:B3 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.221.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:df:84:3c:6e:82:a4:4f:1b:b8:1c:39:e0:17:61:84:fe:51: 02:e5:f5:db:f9:35:32:01:72:38:88:cf:a0:06:4d:1b:3d:fb: e3:24:e9:0f:7f:e0:bf:bd:39:43:e7:a1:c6:91:c5:2c:6c:c5: 18:45:f4:8f:d4:d6:14:e6:e1:45:a6:59:53:85:36:32:ce:67: 73:db:62:4a:32:36:da:57:75:b2:c1:f9:1d:0e:cd:73:c4:52: 5a:b3:fa:18:9c:8d:25:7a:d2:dc:7e:ec:ed:c0:5d:47:70:13: cf:98:6b:29:44:a9:2f:9e:16:b7:a7:6d:c2:d4:4b:20:2b:4d: 83:10:1c:28:85:fa:45:9d:c8:45:22:07:cb:35:7a:99:7d:2c: d0:b5:6a:2e:22:6d:e1:d6:e9:9f:3b:75:07:17:32:44:6f:0d: 5f:50:67:d2:80:7f:d4:61:d6:62:fd:88:21:d3:d1:8e:1e:00: 8e:d9:8d:51:93:37:4d:18:c3:0e:88:3d:a5:3b:e9:16:8e:4f: a8:54:17:88:77:a9:cb:0f:72:89:8a:2f:7c:d1:ba:29:4e:32: 38:aa:31:2e:f0:64:cc:aa:66:26:cc:70:4a:cd:b5:3a:20:89: 40:18:25:ac:31:ef:57:fd:6e:80:0c:bf:71:1a:2c:07:cd:ae: 15:fd:f3:08 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUcUPJUAurQew70QJ0hipyDxZvusUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI2WhcNMjUwODAxMTEyNDI2 WjAzMTEwLwYDVQQDEyg5Njk4QUVCNkQ4NjYxRkRGOUE5RENGQ0NGQkJGOEM0ODY4 MjRERUIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyorWMP+NIi+z gnINV0SMGds0fWtkKo9EjDZS2w+GSERHNMieQtdpcZto67NPoieXali6HhpoJR/V b1UjLBa+08RMv8uCws8eFdnbqcieqF30NByg/2i1V136Qs0eOtf9zTTCEQ3oBdzS CdN/P0tn+/NRHudEn6q6xwk6Mtm4TTgi7wByWwbefmeN9bNaUWMI5juFVoaEqTiq KWIKnO6GiGbI107MM+a0afoJb/1ixxxDR+rsLjiTrBnRHftet46LRFSXYI5c67JA KLMgCflhinr8t2wYsn3goKNRKYZ12nYmuQ8DMjfVq8+93zyP5/8QzWZXZH+nafXy ZQjeQiFgRQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJaYrrbYZh/fmp3PzPu/jEho JN6zMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHdMA0GCSqG SIb3DQEBCwUAA4IBAQAO34Q8boKkTxu4HDngF2GE/lEC5fXb+TUyAXI4iM+gBk0b PfvjJOkPf+C/vTlD56HGkcUsbMUYRfSP1NYU5uFFpllThTYyzmdz22JKMjbaV3Wy wfkdDs1zxFJas/oYnI0letLcfuztwF1HcBPPmGspRKkvnha3p23C1EsgK02DEBwo hfpFnchFIgfLNXqZfSzQtWouIm3h1umfO3UHFzJEbw1fUGfSgH/UYdZi/Ygh09GO HgCO2Y1RkzdNGMMOiD2lO+kWjk+oVBeId6nLD3KJii980bopTjI4qjEu8GTMqmYm zHBKzbU6IIlAGCWsMe9X/W6ADL9xGiwHza4V/fMI -----END CERTIFICATE-----Generated at Thu Nov 21 16:17:30 2024 by rpki-client on console-fra.rpki-client.org