$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa File: 3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa (raw, json) Hash identifier: 1AE10Vtt+Dr/A0vhIF+NGIu7ANweZ/9zsrGd5nXr8vg= Subject key identifier: 23:BC:A1:A6:F8:4F:DA:56:31:26:BB:4B:B7:1B:3C:C4:5F:6E:AE:43 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 347C19496A7277AB1BF74131355D28F86828611E Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa Signing time: Fri 04 Jul 2025 12:05:08 +0000 ROA not before: Fri 04 Jul 2025 12:00:08 +0000 ROA not after: Fri 03 Jul 2026 12:05:08 +0000 asID: 42427 IP address blocks: 216.145.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 07:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7c:19:49:6a:72:77:ab:1b:f7:41:31:35:5d:28:f8:68:28:61:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:08 2025 GMT Not After : Jul 3 12:05:08 2026 GMT Subject: CN=23BCA1A6F84FDA563126BB4BB71B3CC45F6EAE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:88:3f:c1:fc:0d:2d:65:27:53:f1:3e:15:af: 5d:ae:31:82:85:82:b6:38:5c:a4:75:79:ef:7f:41: 6f:e7:b5:81:0e:f3:10:aa:6d:09:d7:f7:cb:63:0c: 7f:b0:76:f4:ec:c7:0b:02:7a:71:27:c3:9d:27:20: f7:81:28:5b:e8:0c:b7:68:b6:b0:e6:f9:68:86:e2: 7e:06:8f:da:da:61:40:d2:b2:0a:3a:27:76:7f:f6: b3:1e:df:80:c6:a8:a0:9a:31:e6:3f:c4:7b:49:40: fc:2f:f6:d8:b9:dd:99:7f:95:8a:6c:de:4f:57:9c: df:58:9e:09:21:54:c6:60:34:2c:4a:1f:dc:20:da: fd:d3:29:91:4e:f7:46:d6:9d:8d:05:84:5e:6a:53: 98:b2:8e:1a:91:d3:a5:dd:e8:e2:fc:51:f4:a0:6d: 9e:d7:dd:38:1a:c4:55:5d:94:9f:54:3b:42:83:8c: 13:98:b5:2b:40:a7:b8:18:c9:b4:74:cf:f1:a6:02: 1d:3c:d2:d8:6d:e2:7f:9d:b7:4f:8c:8c:ab:ba:31: 58:10:51:68:bd:ea:eb:af:2d:33:77:61:0e:0c:77: 86:65:e4:9c:a0:df:6e:7d:1a:1c:16:ee:25:e3:59: 61:6d:57:9b:74:2b:9b:f6:f0:97:23:b3:e9:80:53: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BC:A1:A6:F8:4F:DA:56:31:26:BB:4B:B7:1B:3C:C4:5F:6E:AE:43 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.218.0/24 Signature Algorithm: sha256WithRSAEncryption 83:ee:b1:85:01:83:e1:c4:5e:90:d3:d6:01:a0:f3:82:37:8d: ef:59:de:94:42:76:d3:e2:0a:b8:bf:99:b6:81:89:50:2b:4f: ea:2f:8f:4f:e4:18:a0:67:ba:e5:ca:c0:41:94:03:5b:84:cd: a2:7d:79:c5:2b:75:57:68:d8:d6:64:f1:16:52:bd:77:b7:50: 69:c3:74:19:ba:c6:70:34:a8:5d:7d:e1:bf:a0:43:27:5d:1e: 13:69:78:ce:57:2c:34:7a:ee:fb:eb:96:65:0e:bf:bb:14:c8: 9b:cb:df:67:00:66:64:ea:2d:4b:6a:be:ca:bc:e5:8f:22:5e: 3c:04:48:76:36:00:32:fd:ab:04:61:15:db:48:f8:b3:3b:0f: 01:9a:47:70:14:7d:73:8d:3e:03:01:bc:69:e3:fd:98:4c:00: 11:ee:bb:b5:78:31:80:d3:f3:8c:a7:6f:9b:46:ce:bd:5e:80: 3e:8a:d2:b9:fe:b5:57:25:38:0f:24:d9:67:a4:65:ca:28:91: 49:00:56:df:95:ea:83:8b:92:ed:92:75:08:86:59:53:a0:d5: 80:93:ba:04:37:40:c3:e2:55:2c:8b:4a:98:41:d9:4a:d1:05: 9b:b6:dc:9b:71:d7:b6:dc:96:58:ea:8a:ef:91:19:6a:9f:de: bb:54:1e:b5 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUNHwZSWpyd6sb90ExNV0o+GgoYR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA4WhcNMjYwNzAzMTIwNTA4 WjAzMTEwLwYDVQQDEygyM0JDQTFBNkY4NEZEQTU2MzEyNkJCNEJCNzFCM0NDNDVG NkVBRTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5og/wfwNLWUn U/E+Fa9drjGChYK2OFykdXnvf0Fv57WBDvMQqm0J1/fLYwx/sHb07McLAnpxJ8Od JyD3gShb6Ay3aLaw5vlohuJ+Bo/a2mFA0rIKOid2f/azHt+AxqigmjHmP8R7SUD8 L/bYud2Zf5WKbN5PV5zfWJ4JIVTGYDQsSh/cINr90ymRTvdG1p2NBYRealOYso4a kdOl3eji/FH0oG2e1904GsRVXZSfVDtCg4wTmLUrQKe4GMm0dM/xpgIdPNLYbeJ/ nbdPjIyrujFYEFFoverrry0zd2EODHeGZeScoN9ufRocFu4l41lhbVebdCub9vCX I7PpgFNS6QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFCO8oab4T9pWMSa7S7cbPMRf bq5DMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDMyMzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHaMA0GCSqG SIb3DQEBCwUAA4IBAQCD7rGFAYPhxF6Q09YBoPOCN43vWd6UQnbT4gq4v5m2gYlQ K0/qL49P5BigZ7rlysBBlANbhM2ifXnFK3VXaNjWZPEWUr13t1Bpw3QZusZwNKhd feG/oEMnXR4TaXjOVyw0eu7765ZlDr+7FMiby99nAGZk6i1Lar7KvOWPIl48BEh2 NgAy/asEYRXbSPizOw8BmkdwFH1zjT4DAbxp4/2YTAAR7ru1eDGA0/OMp2+bRs69 XoA+itK5/rVXJTgPJNlnpGXKKJFJAFbfleqDi5LtknUIhllToNWAk7oEN0DD4lUs i0qYQdlK0QWbttybcde23JZY6orvkRlqn967VB61 -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:50 2025 by rpki-client