$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa File: 3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa (raw, json) Hash identifier: F++zUjfPaCNTaRxk/m7mIAIDRYb7ctGCeM+5UdSqMtE= Subject key identifier: 38:2F:2F:65:A7:EB:EB:44:FE:C2:D8:C8:E2:4D:A3:BF:57:C6:77:89 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 622AEBBAC347B5D00391EB718F24977306CBD57F Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa Signing time: Fri 02 Aug 2024 11:24:31 +0000 ROA not before: Fri 02 Aug 2024 11:19:31 +0000 ROA not after: Fri 01 Aug 2025 11:24:31 +0000 asID: 33538 IP address blocks: 216.145.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2a:eb:ba:c3:47:b5:d0:03:91:eb:71:8f:24:97:73:06:cb:d5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:31 2024 GMT Not After : Aug 1 11:24:31 2025 GMT Subject: CN=382F2F65A7EBEB44FEC2D8C8E24DA3BF57C67789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:53:56:f1:41:8b:b4:a2:23:f7:ce:ed:4b:35: 11:c9:79:83:10:40:4c:f8:46:34:52:76:3b:cc:3b: c5:a6:a2:2a:21:07:48:8d:6c:a1:64:e8:e2:25:6c: 5a:3f:ca:93:d1:04:43:79:e7:d7:3e:6c:bc:7d:e2: 10:87:e5:dc:e3:27:36:b4:f0:00:54:63:0a:1f:43: 21:81:59:ae:23:2b:ca:e5:37:0e:1f:5a:ec:90:12: 17:23:35:63:90:9a:55:b0:24:08:70:ca:d5:ec:5c: 72:75:53:6e:ee:2c:83:56:e2:45:29:d3:a5:89:98: 3f:b0:e4:5c:54:6e:53:74:c7:e6:7d:ee:d0:4f:53: 2b:d2:5e:af:98:62:4b:58:c7:25:47:5b:d0:c6:4d: 85:1d:14:44:f2:49:69:42:27:77:8b:87:22:c3:ef: 7d:03:17:c7:97:f3:3d:70:b6:56:01:a0:86:b1:1f: 65:6a:56:dd:79:28:d1:fd:e2:e3:10:a2:e2:f5:00: 63:9e:d0:47:13:6b:01:2e:12:9b:59:b4:0a:25:54: 94:68:89:78:a4:40:21:0d:77:4e:e7:83:4f:7d:f1: a0:dd:de:84:23:65:a9:73:a4:78:c4:38:56:b1:09: 91:90:a4:94:7d:1f:7c:83:d8:20:e5:50:d3:04:90: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2F:2F:65:A7:EB:EB:44:FE:C2:D8:C8:E2:4D:A3:BF:57:C6:77:89 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.222.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:9d:30:5f:d5:3c:34:00:0e:82:12:74:46:8c:4c:65:ee:20: 05:c7:43:fb:03:55:17:87:4c:8a:b4:0d:ad:cb:b6:17:f4:4d: 1d:25:20:ee:67:a6:18:6e:1c:4f:af:72:2c:5a:a3:c4:c8:40: d6:50:c3:be:93:d7:4b:9b:bd:ef:c3:28:f7:a8:e7:66:2b:28: 12:b1:e7:6c:9e:9d:fb:0a:14:d7:8f:4e:93:e6:a0:1c:52:ae: 81:de:4c:fd:39:9c:ca:83:6c:5f:1f:0f:fb:57:c8:8a:d6:0e: ee:cd:dc:4e:23:4b:fb:c7:1d:c3:4f:40:f5:a8:ba:34:21:4d: b1:7d:8a:1c:18:81:28:83:fa:41:1e:f2:cb:24:16:48:ab:e1: 40:91:72:5a:f4:f2:d2:c2:c5:d4:a2:49:ad:68:a3:46:a2:e7: ab:36:c4:bb:dd:d3:26:06:ac:c8:32:00:10:f1:44:75:e0:57: ae:d5:a8:dc:07:c6:b2:9a:b8:13:0d:29:76:61:e1:44:8c:6d: fd:a9:c2:5c:96:4e:4f:2d:b6:7a:8b:af:e5:0d:ef:73:22:92: 2e:04:31:0e:15:d3:21:74:8d:a9:1e:80:9d:bd:fc:bd:02:35: ec:e8:84:30:2c:da:c9:3e:6e:66:82:5e:6d:d5:3e:f1:ec:b6: ae:fe:50:f8 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUYirrusNHtdADketxjySXcwbL1X8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMxWhcNMjUwODAxMTEyNDMx WjAzMTEwLwYDVQQDEygzODJGMkY2NUE3RUJFQjQ0RkVDMkQ4QzhFMjREQTNCRjU3 QzY3Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lNW8UGLtKIj 987tSzURyXmDEEBM+EY0UnY7zDvFpqIqIQdIjWyhZOjiJWxaP8qT0QRDeefXPmy8 feIQh+Xc4yc2tPAAVGMKH0MhgVmuIyvK5TcOH1rskBIXIzVjkJpVsCQIcMrV7Fxy dVNu7iyDVuJFKdOliZg/sORcVG5TdMfmfe7QT1Mr0l6vmGJLWMclR1vQxk2FHRRE 8klpQid3i4ciw+99AxfHl/M9cLZWAaCGsR9lalbdeSjR/eLjEKLi9QBjntBHE2sB LhKbWbQKJVSUaIl4pEAhDXdO54NPffGg3d6EI2Wpc6R4xDhWsQmRkKSUfR98g9gg 5VDTBJB6HQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFDgvL2Wn6+tE/sLYyOJNo79X xneJMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG SIb3DQEBCwUAA4IBAQCMnTBf1Tw0AA6CEnRGjExl7iAFx0P7A1UXh0yKtA2ty7YX 9E0dJSDuZ6YYbhxPr3IsWqPEyEDWUMO+k9dLm73vwyj3qOdmKygSsedsnp37ChTX j06T5qAcUq6B3kz9OZzKg2xfHw/7V8iK1g7uzdxOI0v7xx3DT0D1qLo0IU2xfYoc GIEog/pBHvLLJBZIq+FAkXJa9PLSwsXUokmtaKNGouerNsS73dMmBqzIMgAQ8UR1 4Feu1ajcB8aymrgTDSl2YeFEjG39qcJclk5PLbZ6i6/lDe9zIpIuBDEOFdMhdI2p HoCdvfy9AjXs6IQwLNrJPm5mgl5t1T7x7Lau/lD4 -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org