$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa File: 3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa (raw, json) Hash identifier: rRZIvIbeIKtFy+fg7WD5vHXyA/3sdYGOYKV7aW8aYn4= Subject key identifier: BE:E4:78:E5:5B:D0:8C:D9:03:FC:09:42:E0:2A:52:31:D4:48:57:57 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 1C17CEA2261E02D6A8BC3E9B5B984068FB55E0A3 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa Signing time: Fri 05 Jun 2026 12:30:47 +0000 ROA not before: Fri 05 Jun 2026 12:25:47 +0000 ROA not after: Fri 04 Jun 2027 12:30:47 +0000 asID: 33538 IP address blocks: 216.145.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 03:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:17:ce:a2:26:1e:02:d6:a8:bc:3e:9b:5b:98:40:68:fb:55:e0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jun 5 12:25:47 2026 GMT Not After : Jun 4 12:30:47 2027 GMT Subject: CN=BEE478E55BD08CD903FC0942E02A5231D4485757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:23:c9:58:56:c7:2a:bf:07:22:95:b7:a2: aa:e1:0a:b4:90:04:d1:19:da:e0:be:84:09:3c:38: c4:e2:ab:11:51:65:30:3c:43:04:8e:cc:04:14:f1: 70:44:5a:69:23:b8:07:61:f7:3a:3c:14:c5:a1:42: d8:df:2e:6c:e1:30:66:ee:63:76:43:23:7d:30:98: 5f:1f:87:c9:44:15:2d:9d:1a:35:2f:6d:dd:0c:96: 2a:06:a8:9d:fe:67:93:c4:71:89:94:20:94:5a:35: 7b:ba:c7:37:7e:42:25:87:6e:e9:f6:de:6d:93:0a: 8b:f0:38:c4:f4:b1:96:70:2b:cd:df:4f:4f:83:1a: b3:46:f9:0c:f1:5a:58:da:ba:e5:c0:88:50:68:be: 00:fe:07:6a:e2:64:c7:60:1f:a2:1d:a9:99:2d:03: e0:24:79:63:4c:84:45:94:17:14:9a:9e:31:84:4b: 72:61:d1:61:2c:59:56:02:31:22:72:d9:11:7c:01: 22:a4:40:ef:52:06:ac:b4:98:a0:be:58:1e:24:d7: 8a:7f:70:12:16:40:b5:a1:87:75:f5:ed:e7:4a:ea: 45:53:be:fe:cc:a5:f1:6b:6e:85:11:1f:c0:61:46: d0:db:76:41:09:ab:26:3f:6a:1b:03:4d:0e:5f:b8: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E4:78:E5:5B:D0:8C:D9:03:FC:09:42:E0:2A:52:31:D4:48:57:57 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.222.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:60:38:cb:ed:36:84:17:bd:1a:4b:5c:82:36:c7:9f:8d:08: 60:b4:f4:d5:ec:c3:d6:d5:b2:ba:67:c9:ff:cf:f0:be:a1:2a: c7:df:da:89:55:e9:04:27:2d:31:13:ab:7c:37:88:e5:fc:e4: e1:f1:4e:4d:2b:c1:45:89:23:6d:43:8b:c7:8e:48:fb:80:25: 4c:4d:7f:89:e6:de:09:35:e0:14:38:a1:17:df:e3:de:d2:aa: 51:d8:65:b9:0e:76:78:ff:50:68:5b:33:b4:7f:70:0a:c0:dc: 35:43:14:cc:ba:2a:63:52:17:87:50:d1:27:bb:35:a5:86:94: 53:5e:b0:f9:e2:0d:8f:ac:72:5b:b6:16:40:69:43:9b:d1:95: b7:5d:6f:01:78:24:b9:a3:c0:2e:df:8e:49:d9:01:19:a7:42: a1:5d:41:ba:10:c6:7a:b0:2d:b5:80:92:cb:b6:d1:11:3e:82: 9d:f4:57:58:94:ee:4e:14:78:05:f0:f7:e1:55:36:df:13:aa: b3:16:be:4a:ff:87:82:e3:77:b6:d3:c8:1c:03:5a:1b:9a:0b: f3:9d:f1:92:b7:41:8e:a4:89:7a:fa:a7:1f:08:3e:ed:df:55: 4c:86:a4:27:85:3c:b0:bf:4d:86:30:ce:64:b5:b5:18:68:17: ec:61:82:13 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUHBfOoiYeAtaovD6bW5hAaPtV4KMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTQ3WhcNMjcwNjA0MTIzMDQ3 WjAzMTEwLwYDVQQDEyhCRUU0NzhFNTVCRDA4Q0Q5MDNGQzA5NDJFMDJBNTIzMUQ0 NDg1NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs8jyVhWxyq/ ByKVt6Kq4Qq0kATRGdrgvoQJPDjE4qsRUWUwPEMEjswEFPFwRFppI7gHYfc6PBTF oULY3y5s4TBm7mN2QyN9MJhfH4fJRBUtnRo1L23dDJYqBqid/meTxHGJlCCUWjV7 usc3fkIlh27p9t5tkwqL8DjE9LGWcCvN309PgxqzRvkM8VpY2rrlwIhQaL4A/gdq 4mTHYB+iHamZLQPgJHljTIRFlBcUmp4xhEtyYdFhLFlWAjEictkRfAEipEDvUgas tJigvlgeJNeKf3ASFkC1oYd19e3nSupFU77+zKXxa26FER/AYUbQ23ZBCasmP2ob A00OX7jS8wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFL7keOVb0IzZA/wJQuAqUjHU SFdXMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG SIb3DQEBCwUAA4IBAQBLYDjL7TaEF70aS1yCNsefjQhgtPTV7MPW1bK6Z8n/z/C+ oSrH39qJVekEJy0xE6t8N4jl/OTh8U5NK8FFiSNtQ4vHjkj7gCVMTX+J5t4JNeAU OKEX3+Pe0qpR2GW5DnZ4/1BoWzO0f3AKwNw1QxTMuipjUheHUNEnuzWlhpRTXrD5 4g2PrHJbthZAaUOb0ZW3XW8BeCS5o8Au345J2QEZp0KhXUG6EMZ6sC21gJLLttER PoKd9FdYlO5OFHgF8PfhVTbfE6qzFr5K/4eC43e208gcA1obmgvznfGSt0GOpIl6 +qcfCD7t31VMhqQnhTywv02GMM5ktbUYaBfsYYIT -----END CERTIFICATE-----Generated at Wed Jun 17 12:49:02 2026 by rpki-client