$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa File: 3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: B7dtdX9yuDLDn6SPYSEN92OfPz1VQpZlcJRSY0L2gQA= Subject key identifier: C5:F8:4B:EC:AE:14:63:0C:DC:E3:ED:AA:34:3D:8E:51:9D:04:6E:8E Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 1587453FC4F5C155F762FDE6A0E073BFE1FFC419 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa Signing time: Fri 04 Jul 2025 12:05:06 +0000 ROA not before: Fri 04 Jul 2025 12:00:06 +0000 ROA not after: Fri 03 Jul 2026 12:05:06 +0000 asID: 30031 IP address blocks: 216.145.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 15:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:87:45:3f:c4:f5:c1:55:f7:62:fd:e6:a0:e0:73:bf:e1:ff:c4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:06 2025 GMT Not After : Jul 3 12:05:06 2026 GMT Subject: CN=C5F84BECAE14630CDCE3EDAA343D8E519D046E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:73:8b:ac:52:ed:17:03:8b:19:e5:c9:bc: 01:ab:12:7a:51:dd:a3:60:6d:55:24:65:bb:27:2a: ae:36:d2:b8:ba:94:5f:a7:7b:a2:3b:43:85:c3:2d: 0a:3a:7e:c5:a0:97:2a:48:bc:96:68:b2:39:70:8e: 92:b0:e7:37:45:ab:ba:30:1f:31:1c:52:f1:51:5d: 72:57:2c:59:cd:b6:f9:b3:8a:bf:29:1e:0e:93:7a: 37:6d:7a:1f:ae:da:15:e6:6e:9a:dc:dd:70:7c:65: 28:d7:5e:9b:f6:fd:aa:c4:ab:5e:0e:46:dd:7a:f9: 34:a9:21:80:eb:5d:f7:2e:eb:8c:ff:68:1d:09:5d: 69:90:ff:ff:f8:5f:85:ba:38:24:34:45:a4:65:e2: 99:42:52:12:46:07:a9:c7:3e:8f:0d:50:a1:65:82: ea:a4:4d:83:88:7b:75:9d:fe:ed:ee:d1:a6:36:d6: 43:81:2c:e7:51:11:4f:c3:9b:ce:7e:17:21:6b:a6: 40:72:36:b4:d8:b3:7a:cd:7f:41:1e:b8:2f:c8:6b: e4:69:db:0b:fb:79:ba:54:1f:f8:f3:fb:fa:38:70: a0:11:a5:a0:8d:8d:d1:11:c3:58:bf:d5:48:a4:d0: d6:5a:e0:c3:7f:13:e2:c4:5e:c6:1c:5a:7d:7a:ff: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F8:4B:EC:AE:14:63:0C:DC:E3:ED:AA:34:3D:8E:51:9D:04:6E:8E X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.221.0/24 Signature Algorithm: sha256WithRSAEncryption 40:55:38:c3:5a:0d:6b:0b:f1:e6:44:f8:3d:4d:8d:a2:45:78: a6:3d:eb:de:ed:73:df:2f:9a:34:be:2a:44:00:29:46:f0:c3: 2d:59:29:1e:03:9f:38:2d:6d:8a:e1:d7:b4:ec:01:61:b2:d0: 74:55:20:28:34:b0:81:f8:e1:9e:af:a2:62:9d:76:76:ef:78: 46:55:9d:36:87:ad:9e:82:39:b8:f0:13:9c:2b:53:e3:7d:df: b7:c5:bb:0b:40:d1:e8:9f:65:4c:64:0f:49:5c:4b:a1:ea:04: 63:15:e9:8c:58:13:9e:67:68:56:3e:8b:ac:29:d0:81:20:06: 89:86:06:a6:7f:15:88:8a:6b:ff:2d:09:78:a8:80:24:8d:dd: 8c:bf:db:11:64:72:a9:cd:1e:88:ae:ac:c7:bc:de:b8:44:cc: 3c:fa:4e:1b:8d:48:1b:69:9f:c9:13:50:ff:e2:81:f8:00:b0: 49:c3:90:88:c4:ca:f8:b4:7d:d8:05:13:99:98:63:b9:d5:f2: 55:84:bb:85:d0:cd:13:70:2f:78:57:6e:9f:83:00:54:43:e6: f7:19:70:16:5c:ff:6f:4c:c6:a0:11:39:ba:37:73:f0:c9:fe: 32:0f:f5:8c:e6:de:67:51:09:69:8e:4b:63:7d:5e:03:9e:b0: e5:dc:f7:29 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUFYdFP8T1wVX3Yv3moOBzv+H/xBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA2WhcNMjYwNzAzMTIwNTA2 WjAzMTEwLwYDVQQDEyhDNUY4NEJFQ0FFMTQ2MzBDRENFM0VEQUEzNDNEOEU1MTlE MDQ2RThFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfZzi6xS7RcD ixnlybwBqxJ6Ud2jYG1VJGW7JyquNtK4upRfp3uiO0OFwy0KOn7FoJcqSLyWaLI5 cI6SsOc3Rau6MB8xHFLxUV1yVyxZzbb5s4q/KR4Ok3o3bXofrtoV5m6a3N1wfGUo 116b9v2qxKteDkbdevk0qSGA6133LuuM/2gdCV1pkP//+F+FujgkNEWkZeKZQlIS Rgepxz6PDVChZYLqpE2DiHt1nf7t7tGmNtZDgSznURFPw5vOfhcha6ZAcja02LN6 zX9BHrgvyGvkadsL+3m6VB/48/v6OHCgEaWgjY3REcNYv9VIpNDWWuDDfxPixF7G HFp9ev+YUwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFMX4S+yuFGMM3OPtqjQ9jlGd BG6OMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHdMA0GCSqG SIb3DQEBCwUAA4IBAQBAVTjDWg1rC/HmRPg9TY2iRXimPeve7XPfL5o0vipEAClG 8MMtWSkeA584LW2K4de07AFhstB0VSAoNLCB+OGer6JinXZ273hGVZ02h62egjm4 8BOcK1Pjfd+3xbsLQNHon2VMZA9JXEuh6gRjFemMWBOeZ2hWPousKdCBIAaJhgam fxWIimv/LQl4qIAkjd2Mv9sRZHKpzR6IrqzHvN64RMw8+k4bjUgbaZ/JE1D/4oH4 ALBJw5CIxMr4tH3YBROZmGO51fJVhLuF0M0TcC94V26fgwBUQ+b3GXAWXP9vTMag ETm6N3Pwyf4yD/WM5t5nUQlpjktjfV4DnrDl3Pcp -----END CERTIFICATE-----Generated at Fri Jul 4 19:04:26 2025 by rpki-client