$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: 4kDEIftVJTNTzq3HJhR7fykkT9rJqkHiN4c2kvt6KqU= Subject key identifier: 5A:63:FF:2E:09:D4:E6:44:CA:89:27:F9:83:85:AC:A6:77:29:AE:A3 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 12CB7DDA5F8B4063C0EA707BEE568C572EFD3573 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 05 Jun 2026 12:30:52 +0000 ROA not before: Fri 05 Jun 2026 12:25:52 +0000 ROA not after: Fri 04 Jun 2027 12:30:52 +0000 asID: 397726 IP address blocks: 170.10.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 03:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cb:7d:da:5f:8b:40:63:c0:ea:70:7b:ee:56:8c:57:2e:fd:35:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jun 5 12:25:52 2026 GMT Not After : Jun 4 12:30:52 2027 GMT Subject: CN=5A63FF2E09D4E644CA8927F98385ACA67729AEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:3b:90:1a:12:e9:a9:b7:90:c0:3c:7d:a0: 55:40:bd:56:8a:1a:7b:cd:04:50:c0:95:bc:5e:d9: 5e:58:7a:be:df:57:25:66:e1:8e:ca:e9:bf:4d:38: 14:bc:9b:e7:e8:12:31:c6:61:b5:99:a9:d2:81:5b: 25:df:b6:08:ee:05:01:15:5d:bb:0a:38:5e:e5:bf: 97:59:8e:9b:e3:da:0c:4a:12:da:16:0f:54:1e:4e: 63:85:7e:23:6e:a8:d3:c1:e0:76:44:62:fe:0b:4d: 06:c6:91:75:68:fc:86:18:b5:c6:9e:c4:e5:7e:8f: fe:4e:04:b5:02:b6:ca:64:55:4f:8b:7d:98:d4:d7: f2:83:e9:d3:1e:99:90:7d:6c:31:ce:28:32:37:b2: c5:04:aa:3f:d5:57:05:9f:85:ca:07:80:49:9b:da: 69:27:6b:3b:b3:24:04:3c:0c:4d:57:6d:94:fa:16: 8b:38:aa:b2:93:15:7c:45:07:66:44:8b:38:4f:d4: 8a:18:a7:fd:50:e7:e0:32:e5:35:3c:0a:f7:ff:45: 1e:ee:4b:29:05:0c:71:7b:89:2d:8c:bd:88:bf:04: e1:ca:d4:75:b7:3d:22:c2:7d:dc:af:dd:c2:e7:12: 4f:6e:f1:97:dd:f5:d5:f7:9b:ed:3a:06:af:30:86: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:FF:2E:09:D4:E6:44:CA:89:27:F9:83:85:AC:A6:77:29:AE:A3 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.158.0/23 Signature Algorithm: sha256WithRSAEncryption 82:15:66:d7:41:78:4f:ac:f5:3c:da:ce:40:e6:1a:7d:4b:a4: 4b:5a:c2:a0:86:d8:de:61:ac:b4:1c:3a:65:8d:07:6c:f9:94: 06:1f:2b:0e:2a:b3:f8:ec:c9:1c:d0:2c:c9:34:9b:e7:ae:66: e0:5c:25:ae:91:0e:26:42:1d:fd:16:1f:08:04:3a:e6:ac:eb: 00:3d:85:26:39:d3:b2:cd:f4:77:62:af:49:f8:5c:85:61:9d: 4a:90:d6:28:88:c7:17:87:69:d7:04:7e:64:8b:f3:ee:43:9d: 14:27:09:97:29:b6:26:e3:9f:f2:c3:3d:9f:37:f5:3b:55:a9: 1e:4c:44:cd:75:26:07:63:7d:f2:0d:92:56:87:b0:b1:25:c1: cf:34:98:e1:c1:63:11:6c:28:cc:44:5c:f8:70:4b:c0:c1:40: 68:ab:a9:c2:91:0a:45:14:dd:d4:5a:52:9a:1e:ed:2e:a1:43: 2a:a4:ba:33:bf:09:c0:02:9f:5f:15:29:05:fa:5b:56:cd:91: a6:6f:0f:2d:69:79:84:a6:25:a0:da:ce:a3:ac:d9:92:c4:bf: f0:b6:58:b3:63:ee:1d:0f:58:e9:b8:3d:fc:31:3d:f7:22:9f: a3:35:27:3e:06:82:43:e3:11:3e:39:db:37:41:a0:d6:1c:b1: f0:71:fd:6e -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUEst92l+LQGPA6nB77laMVy79NXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTUyWhcNMjcwNjA0MTIzMDUy WjAzMTEwLwYDVQQDEyg1QTYzRkYyRTA5RDRFNjQ0Q0E4OTI3Rjk4Mzg1QUNBNjc3 MjlBRUEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEw7kBoS6am3 kMA8faBVQL1Wihp7zQRQwJW8XtleWHq+31clZuGOyum/TTgUvJvn6BIxxmG1manS gVsl37YI7gUBFV27Cjhe5b+XWY6b49oMShLaFg9UHk5jhX4jbqjTweB2RGL+C00G xpF1aPyGGLXGnsTlfo/+TgS1ArbKZFVPi32Y1Nfyg+nTHpmQfWwxzigyN7LFBKo/ 1VcFn4XKB4BJm9ppJ2s7syQEPAxNV22U+haLOKqykxV8RQdmRIs4T9SKGKf9UOfg MuU1PAr3/0Ue7kspBQxxe4ktjL2IvwThytR1tz0iwn3cr93C5xJPbvGX3fXV95vt OgavMIYg7QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFFpj/y4J1OZEyokn+YOFrKZ3 Ka6jMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzNTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqeMA0GCSqG SIb3DQEBCwUAA4IBAQCCFWbXQXhPrPU82s5A5hp9S6RLWsKghtjeYay0HDpljQds +ZQGHysOKrP47Mkc0CzJNJvnrmbgXCWukQ4mQh39Fh8IBDrmrOsAPYUmOdOyzfR3 Yq9J+FyFYZ1KkNYoiMcXh2nXBH5ki/PuQ50UJwmXKbYm45/ywz2fN/U7VakeTETN dSYHY33yDZJWh7CxJcHPNJjhwWMRbCjMRFz4cEvAwUBoq6nCkQpFFN3UWlKaHu0u oUMqpLozvwnAAp9fFSkF+ltWzZGmbw8taXmEpiWg2s6jrNmSxL/wtlizY+4dD1jp uD38MT33Ip+jNSc+BoJD4xE+Ods3QaDWHLHwcf1u -----END CERTIFICATE-----Generated at Wed Jun 17 09:27:54 2026 by rpki-client