$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa File: 3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa (raw, json) Hash identifier: ARlaNiFnbq8AEJMopSQCupI8wj+wN9X1Pm1OeRQ6FT8= Subject key identifier: 4E:55:45:E7:A8:C4:C1:E2:87:9C:A7:FA:46:FE:E3:79:05:5D:35:61 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 0FA655112FFE450679F729EE48D5D3257315BCC4 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa Signing time: Fri 01 Sep 2023 11:14:30 +0000 ROA not before: Fri 01 Sep 2023 11:09:30 +0000 ROA not after: Fri 30 Aug 2024 11:14:30 +0000 asID: 60492 IP address blocks: 216.145.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a6:55:11:2f:fe:45:06:79:f7:29:ee:48:d5:d3:25:73:15:bc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:30 2023 GMT Not After : Aug 30 11:14:30 2024 GMT Subject: CN=4E5545E7A8C4C1E2879CA7FA46FEE379055D3561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:34:23:20:70:9d:6d:b4:46:81:ce:d8:91: 26:3d:b8:79:c4:77:9a:6d:7c:fd:5a:22:cc:31:dc: 8e:89:35:61:84:c0:83:c0:2b:5e:37:97:94:62:cf: ee:f5:05:d1:c8:e6:f6:95:a9:85:df:83:45:e6:73: 0c:b9:8c:bd:bd:57:c2:1a:a5:66:15:8b:89:b7:94: 46:d8:10:1d:92:66:98:cd:42:01:5e:09:d8:6c:46: 91:9a:d2:63:7f:5b:41:90:02:98:0a:db:b7:83:4e: a8:77:38:40:99:fe:ef:1e:1a:36:f5:fc:b4:f0:20: 32:38:c5:88:e7:22:37:d6:ea:8b:8e:ff:d6:56:45: 22:14:31:3b:44:88:2c:b4:95:13:ac:e0:8f:a7:99: 1f:d9:3d:93:ab:13:46:fc:32:81:2d:43:a0:aa:81: 72:4e:e7:bb:6e:1c:9e:de:49:de:c5:7a:d7:b6:a8: 2b:e7:c7:99:98:73:6c:19:e6:f3:b3:60:74:19:09: d4:2d:63:56:52:98:59:ed:43:8b:c5:90:5d:21:02: 16:6b:72:e4:af:3f:99:9d:db:2c:4e:29:d3:cd:ca: 7b:2d:76:dc:05:e6:a5:1a:3d:e2:f1:1e:2d:15:89: aa:87:a7:6f:5c:bc:6d:76:32:02:08:e7:ef:8c:ef: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:55:45:E7:A8:C4:C1:E2:87:9C:A7:FA:46:FE:E3:79:05:5D:35:61 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.222.0/24 Signature Algorithm: sha256WithRSAEncryption 10:ff:41:1a:7f:c5:1f:ec:c3:0a:d6:97:fd:3c:0f:c2:95:70: f8:53:49:31:56:87:6b:08:09:05:bd:10:95:c8:d0:14:5f:f5: ce:76:a5:53:5e:15:bb:5d:c3:f7:7f:ef:a5:17:d7:eb:0b:9f: c5:9d:2b:6e:c1:df:80:a8:0e:aa:e3:25:ae:dc:cb:df:10:30: 71:6e:6a:7d:c0:91:70:c0:19:02:a9:94:30:3f:bb:f1:85:6b: 0f:09:34:70:9f:70:42:ca:4e:76:6f:50:d7:15:25:22:75:bb: 6e:4b:6d:b7:3c:c2:a8:0b:0b:9a:91:ea:f7:91:2f:74:c2:6a: 56:f2:3e:f2:ef:01:bd:d2:87:68:83:2b:d1:fa:de:6e:05:3f: 97:8b:25:a5:b2:3a:bc:00:26:ab:97:9e:16:9e:53:1f:97:14: 67:f3:d1:2c:ff:70:aa:bb:5f:2e:6d:d4:3b:85:a4:7e:3e:e2: e5:aa:dd:88:9c:93:52:8a:63:5c:e2:0c:3f:11:d8:6c:07:1f: 49:51:97:03:3d:cd:2a:67:16:fb:1e:4a:7b:76:75:48:71:8d: dc:07:e9:7f:3c:e1:40:f2:6f:01:65:26:5a:08:1e:1e:45:4a: ec:5e:28:48:ab:a6:ea:1f:73:60:0d:bc:50:eb:33:6a:f5:32: 25:d8:b2:e2 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUD6ZVES/+RQZ59ynuSNXTJXMVvMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMwWhcNMjQwODMwMTExNDMw WjAzMTEwLwYDVQQDEyg0RTU1NDVFN0E4QzRDMUUyODc5Q0E3RkE0NkZFRTM3OTA1 NUQzNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRA0IyBwnW20 RoHO2JEmPbh5xHeabXz9WiLMMdyOiTVhhMCDwCteN5eUYs/u9QXRyOb2lamF34NF 5nMMuYy9vVfCGqVmFYuJt5RG2BAdkmaYzUIBXgnYbEaRmtJjf1tBkAKYCtu3g06o dzhAmf7vHho29fy08CAyOMWI5yI31uqLjv/WVkUiFDE7RIgstJUTrOCPp5kf2T2T qxNG/DKBLUOgqoFyTue7bhye3knexXrXtqgr58eZmHNsGebzs2B0GQnULWNWUphZ 7UOLxZBdIQIWa3Lkrz+ZndssTinTzcp7LXbcBealGj3i8R4tFYmqh6dvXLxtdjIC COfvjO8hYwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFE5VReeoxMHih5yn+kb+43kF XTVhMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG SIb3DQEBCwUAA4IBAQAQ/0Eaf8Uf7MMK1pf9PA/ClXD4U0kxVodrCAkFvRCVyNAU X/XOdqVTXhW7XcP3f++lF9frC5/FnStuwd+AqA6q4yWu3MvfEDBxbmp9wJFwwBkC qZQwP7vxhWsPCTRwn3BCyk52b1DXFSUidbtuS223PMKoCwuaker3kS90wmpW8j7y 7wG90odogyvR+t5uBT+XiyWlsjq8ACarl54WnlMflxRn89Es/3Cqu18ubdQ7haR+ PuLlqt2InJNSimNc4gw/EdhsBx9JUZcDPc0qZxb7Hkp7dnVIcY3cB+l/POFA8m8B ZSZaCB4eRUrsXihIq6bqH3NgDbxQ6zNq9TIl2LLi -----END CERTIFICATE-----Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org