$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa File: 3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa (raw, json) Hash identifier: hGnAH0NmPK1cDnP4eSCBHJ1MtH3+UNqAZd+3E047nYs= Subject key identifier: E8:FD:BF:8E:9D:E8:47:80:F0:90:61:76:80:E3:E2:C6:F3:CA:26:9D Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 07570FFA75D94BA398DA606387B8623EE8E949C7 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa Signing time: Fri 04 Jul 2025 12:05:07 +0000 ROA not before: Fri 04 Jul 2025 12:00:07 +0000 ROA not after: Fri 03 Jul 2026 12:05:07 +0000 asID: 37235 IP address blocks: 216.145.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 23:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:57:0f:fa:75:d9:4b:a3:98:da:60:63:87:b8:62:3e:e8:e9:49:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:07 2025 GMT Not After : Jul 3 12:05:07 2026 GMT Subject: CN=E8FDBF8E9DE84780F090617680E3E2C6F3CA269D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:64:1a:d7:84:e7:1c:6d:19:02:2f:a5:1d: 32:a9:c0:0f:66:01:cf:6e:75:e6:b8:e6:0a:d2:8d: cd:b9:04:4a:be:8a:94:68:3d:9e:33:9b:d0:6a:13: 65:f0:a3:83:b4:5e:46:be:73:b7:03:bc:e6:80:f3: 2d:e4:b6:2a:5a:81:02:58:7c:93:89:b5:57:14:bd: ba:be:ba:3f:17:1b:42:9e:40:87:a9:bf:52:81:86: e5:b8:dc:c9:46:59:2e:9c:a6:f1:c3:d2:9d:68:93: f8:6f:12:cb:4c:19:73:bc:c9:02:cb:74:f8:0d:99: 3a:08:9e:5e:e2:06:82:2f:e8:50:71:66:a2:81:77: 76:bb:ad:f0:74:ee:ec:f0:d7:d7:6c:0f:cd:89:a6: f3:69:fb:57:24:25:23:da:3d:cb:05:42:e6:93:18: 44:b8:91:6f:7f:67:73:36:ce:51:91:77:04:58:9a: 4e:cd:fa:a4:db:44:6d:2c:43:0d:19:bc:51:5a:86: 64:0e:1d:40:dc:bc:2f:f8:1b:ff:b3:31:1c:48:56: 27:47:30:44:71:53:01:ef:c3:ad:cb:a7:83:9f:42: ce:e8:a5:4e:35:c8:fd:26:06:72:cb:ae:8f:82:cb: 5b:6f:28:c8:68:75:34:c0:5d:7f:df:9e:28:77:94: 85:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:BF:8E:9D:E8:47:80:F0:90:61:76:80:E3:E2:C6:F3:CA:26:9D X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.222.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:87:55:25:c8:18:d2:49:d3:4f:ca:6f:60:bf:6e:1e:7c:c2: 53:78:05:e0:b5:64:0c:4e:c7:f6:87:52:7b:2c:c2:5f:7d:1b: ea:a1:d9:d9:70:63:a1:64:41:d3:d5:6d:dc:60:64:c3:f6:f7: 65:15:f2:00:ac:16:b0:4e:7e:21:6e:2d:e1:9d:c6:0f:b8:e9: 07:5d:06:a9:c3:7a:c6:ff:23:32:43:f4:9f:06:8a:a4:c0:52: 3e:2b:e3:09:d9:1c:8e:15:99:99:db:9c:07:1e:2c:b5:bf:84: c0:84:8f:93:e3:cd:9e:86:da:72:ce:51:7e:59:16:e8:89:34: 99:8a:67:7c:f0:ea:f5:1f:9b:99:5b:79:2b:b0:91:a4:94:7a: 09:87:63:5e:0d:da:a1:3c:22:16:ab:ee:03:58:30:54:9d:0f: 65:1e:65:bd:71:a6:9f:79:e3:6a:a2:30:5f:f3:f3:f5:62:9d: 0a:19:80:85:b2:c5:a7:ac:da:d8:55:8f:ff:2b:ee:14:32:15: 79:f4:71:0e:ae:e6:83:cb:32:39:ae:f0:8b:54:2e:cc:8e:e2: 87:bf:39:5f:d1:f1:c0:cb:d5:e7:35:28:dc:46:41:56:97:8b: 13:2d:a8:e7:83:09:bb:fa:77:2e:d1:33:97:b5:17:54:50:e6: e2:e3:7d:d6 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUB1cP+nXZS6OY2mBjh7hiPujpSccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA3WhcNMjYwNzAzMTIwNTA3 WjAzMTEwLwYDVQQDEyhFOEZEQkY4RTlERTg0NzgwRjA5MDYxNzY4MEUzRTJDNkYz Q0EyNjlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC9kGteE5xxt GQIvpR0yqcAPZgHPbnXmuOYK0o3NuQRKvoqUaD2eM5vQahNl8KODtF5GvnO3A7zm gPMt5LYqWoECWHyTibVXFL26vro/FxtCnkCHqb9SgYbluNzJRlkunKbxw9KdaJP4 bxLLTBlzvMkCy3T4DZk6CJ5e4gaCL+hQcWaigXd2u63wdO7s8NfXbA/NiabzaftX JCUj2j3LBULmkxhEuJFvf2dzNs5RkXcEWJpOzfqk20RtLEMNGbxRWoZkDh1A3Lwv +Bv/szEcSFYnRzBEcVMB78Oty6eDn0LO6KVONcj9JgZyy66PgstbbyjIaHU0wF1/ 354od5SFmQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFOj9v46d6EeA8JBhdoDj4sbz yiadMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM3MzIzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG SIb3DQEBCwUAA4IBAQBbh1UlyBjSSdNPym9gv24efMJTeAXgtWQMTsf2h1J7LMJf fRvqodnZcGOhZEHT1W3cYGTD9vdlFfIArBawTn4hbi3hncYPuOkHXQapw3rG/yMy Q/SfBoqkwFI+K+MJ2RyOFZmZ25wHHiy1v4TAhI+T482ehtpyzlF+WRboiTSZimd8 8Or1H5uZW3krsJGklHoJh2NeDdqhPCIWq+4DWDBUnQ9lHmW9caafeeNqojBf8/P1 Yp0KGYCFssWnrNrYVY//K+4UMhV59HEOruaDyzI5rvCLVC7MjuKHvzlf0fHAy9Xn NSjcRkFWl4sTLajngwm7+ncu0TOXtRdUUObi433W -----END CERTIFICATE-----Generated at Mon Aug 11 04:18:46 2025 by rpki-client