$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa File: AS33490.roa (raw, json) Hash identifier: TAOuEH4G2Dw50MAg4XZuGUrV3HOh73myMcxRm5i1MA4= Subject key identifier: 2C:7B:AA:A2:2E:39:79:01:11:81:79:47:FF:32:6E:F3:44:C7:E9:50 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 2F1A4C3D7BD42E00CECA711A5C6BE5548E8F3FA9 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa Signing time: Tue 26 Nov 2024 11:30:29 +0000 ROA not before: Tue 26 Nov 2024 11:25:29 +0000 ROA not after: Tue 25 Nov 2025 11:30:29 +0000 asID: 33490 IP address blocks: 140.99.27.0/24 maxlen: 24 140.99.59.0/24 maxlen: 24 140.99.123.0/24 maxlen: 24 140.99.151.0/24 maxlen: 24 140.99.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 05:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1a:4c:3d:7b:d4:2e:00:ce:ca:71:1a:5c:6b:e5:54:8e:8f:3f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Nov 26 11:25:29 2024 GMT Not After : Nov 25 11:30:29 2025 GMT Subject: CN=2C7BAAA22E39790111817947FF326EF344C7E950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:c4:b9:1d:78:9f:ae:a1:a3:46:77:e2:29: 80:e9:04:64:58:fe:d0:34:8a:38:88:6d:34:ee:53: d5:43:e3:cb:54:b6:7c:a7:68:cd:c0:31:4d:b8:1a: 81:09:99:10:af:8b:ed:5f:27:e8:78:8f:1a:43:5e: 39:c7:8f:ee:1d:64:54:b0:f7:de:fd:81:2f:31:0a: ee:07:29:43:de:ff:bb:b4:39:11:6a:45:92:6c:c1: 52:03:8b:84:58:64:6a:95:35:4f:7c:5f:90:6c:c4: 37:53:a1:64:f6:3c:80:8c:a0:c6:dc:11:0a:0b:e1: 01:6b:45:7f:84:bc:ad:cc:af:b3:11:ae:37:1f:45: 2b:2a:e7:e6:29:03:03:d3:3a:f4:bd:b9:b0:92:69: 1a:37:8e:05:61:4a:68:5d:d0:4a:b3:7d:b5:9f:43: a1:41:f2:b4:d2:c6:d0:90:c2:18:bd:2e:d0:c9:4d: c2:7b:56:e6:21:56:eb:f0:d7:a8:71:6d:d2:59:23: 6a:b4:dd:31:f2:70:0d:21:9a:00:ea:24:b8:55:c5: 32:c6:bf:29:be:7e:94:b7:e4:c1:73:54:30:fa:0e: c1:93:9a:75:2d:34:f6:df:3e:be:56:4e:c7:d0:27: 6b:d0:88:9b:ac:25:90:97:a3:85:a9:c8:cf:c8:85: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7B:AA:A2:2E:39:79:01:11:81:79:47:FF:32:6E:F3:44:C7:E9:50 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.27.0/24 140.99.59.0/24 140.99.123.0/24 140.99.151.0/24 140.99.211.0/24 Signature Algorithm: sha256WithRSAEncryption 72:62:11:d6:6c:ba:63:34:56:a1:ed:65:d7:f1:89:b8:de:16: c0:f9:ef:d6:c9:7e:c6:0d:b3:7e:8d:96:1b:bf:b8:b5:72:4c: e7:83:81:72:ac:8f:76:3e:82:e6:06:b7:6f:16:74:d7:c0:4c: fd:82:d1:6e:67:db:67:13:cd:1a:97:3c:8d:ea:c3:13:33:7e: bf:1e:f7:a9:cb:03:81:38:13:ce:69:5e:ec:0d:09:40:2c:ae: 48:61:76:8e:47:c2:a0:b2:35:cb:32:9a:54:fe:a3:88:51:4a: 50:90:c3:14:84:b5:60:6c:b2:af:5e:fe:85:29:be:20:01:8f: 2c:84:1e:ec:75:3b:0d:d5:13:58:63:1a:eb:94:2b:77:f0:b6: e9:76:bb:51:3e:a2:89:b0:86:3a:fa:cd:96:7f:78:2b:f3:b2: 10:fd:b5:2c:88:3a:d2:2f:04:06:1e:13:e9:b9:4d:28:82:17: d2:b6:62:10:c2:a7:2f:55:ed:28:88:ff:16:cf:e4:fe:36:1b: 53:13:08:68:58:02:55:1a:75:2b:12:ae:be:d9:f7:b3:b7:84: ae:96:ea:58:32:8b:20:63:a7:19:a7:8c:c1:b9:87:69:c4:27: dd:a7:c3:2a:74:73:4f:73:48:bc:e7:40:cb:26:bd:54:c6:ed: a6:1a:71:8e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIULxpMPXvULgDOynEaXGvlVI6PP6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQxMTI2MTEyNTI5WhcNMjUxMTI1MTEzMDI5 WjAzMTEwLwYDVQQDEygyQzdCQUFBMjJFMzk3OTAxMTE4MTc5NDdGRjMyNkVGMzQ0 QzdFOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMjEuR14n66h o0Z34imA6QRkWP7QNIo4iG007lPVQ+PLVLZ8p2jNwDFNuBqBCZkQr4vtXyfoeI8a Q145x4/uHWRUsPfe/YEvMQruBylD3v+7tDkRakWSbMFSA4uEWGRqlTVPfF+QbMQ3 U6Fk9jyAjKDG3BEKC+EBa0V/hLytzK+zEa43H0UrKufmKQMD0zr0vbmwkmkaN44F YUpoXdBKs321n0OhQfK00sbQkMIYvS7QyU3Ce1bmIVbr8NeocW3SWSNqtN0x8nAN IZoA6iS4VcUyxr8pvn6Ut+TBc1Qw+g7Bk5p1LTT23z6+Vk7H0Cdr0IibrCWQl6OF qcjPyIWm1QIDAQABo4ICljCCApIwHQYDVR0OBBYEFCx7qqIuOXkBEYF5R/8ybvNE x+lQMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzMzNDkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjGMbAwQAjGM7AwQAjGN7AwQAjGOX AwQAjGPTMA0GCSqGSIb3DQEBCwUAA4IBAQByYhHWbLpjNFah7WXX8Ym43hbA+e/W yX7GDbN+jZYbv7i1ckzng4FyrI92PoLmBrdvFnTXwEz9gtFuZ9tnE80alzyN6sMT M36/HvepywOBOBPOaV7sDQlALK5IYXaOR8KgsjXLMppU/qOIUUpQkMMUhLVgbLKv Xv6FKb4gAY8shB7sdTsN1RNYYxrrlCt38LbpdrtRPqKJsIY6+s2Wf3gr87IQ/bUs iDrSLwQGHhPpuU0oghfStmIQwqcvVe0oiP8Wz+T+NhtTEwhoWAJVGnUrEq6+2fez t4SulupYMosgY6cZp4zBuYdpxCfdp8MqdHNPc0i850DLJr1Uxu2mGnGO -----END CERTIFICATE-----Generated at Thu Apr 17 11:04:38 2025 by rpki-client