$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: uyeNDmqqkJtCERlsQb/LXMdP3vlcWre2iLa9FiAOXiM= Subject key identifier: 8B:E6:56:36:60:86:C4:45:3B:48:A9:3E:05:A1:F3:36:B0:54:79:22 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 4A30ED00A8E7AF49EC39D5D9275CDA3DFB8BBF25 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa Signing time: Thu 28 May 2026 18:36:05 +0000 ROA not before: Thu 28 May 2026 18:31:05 +0000 ROA not after: Thu 27 May 2027 18:36:05 +0000 asID: 3356 IP address blocks: 140.99.60.0/24 maxlen: 24 140.99.69.0/24 maxlen: 24 140.99.103.0/24 maxlen: 24 140.99.241.0/24 maxlen: 24 140.99.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 14:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:30:ed:00:a8:e7:af:49:ec:39:d5:d9:27:5c:da:3d:fb:8b:bf:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: May 28 18:31:05 2026 GMT Not After : May 27 18:36:05 2027 GMT Subject: CN=8BE656366086C4453B48A93E05A1F336B0547922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:d0:60:56:b6:0b:58:e5:19:a3:c7:3c:3f: 0f:0c:05:d5:d7:f5:33:a5:fc:f3:f6:0b:0e:33:e9: 2c:5d:36:3c:1f:38:3a:cf:67:e7:65:7f:89:64:04: 10:e4:f9:29:66:e6:ac:1c:5f:c0:88:68:ec:f6:08: c0:21:92:19:e3:1b:37:48:ad:ff:32:56:f7:54:82: 41:05:26:06:a8:7b:7f:aa:b4:72:78:d7:0e:d8:a4: b6:77:a7:18:9c:df:cd:31:6e:0d:b8:82:68:46:8a: f7:98:cf:3e:e1:ae:8d:4a:51:5a:c0:0e:3f:53:df: 47:53:7a:33:33:22:77:ee:03:36:4d:81:c6:70:44: b2:15:a5:a2:c8:94:91:a8:96:de:5e:f8:a9:85:3e: 48:52:22:26:12:0a:f3:1e:4d:3d:dc:19:93:66:06: 62:d2:70:8e:2b:26:fe:52:9c:f9:0d:6f:7f:54:c0: 1b:39:1b:34:24:87:4f:9a:11:af:8a:e0:80:64:81: bb:e4:0a:db:ad:6d:fd:b0:e6:f5:9c:83:cf:5f:77: ab:ca:43:7f:2e:61:60:df:1b:35:3a:29:7a:55:0e: 9f:ba:9f:e0:16:6f:7d:6e:a4:d1:1d:9c:be:52:10: 45:f2:87:f0:ff:2c:6f:59:ab:37:ac:9e:58:9e:7b: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:56:36:60:86:C4:45:3B:48:A9:3E:05:A1:F3:36:B0:54:79:22 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.60.0/24 140.99.69.0/24 140.99.103.0/24 140.99.241.0/24 140.99.248.0/24 Signature Algorithm: sha256WithRSAEncryption 57:2e:09:11:12:59:95:af:62:bb:63:5b:18:fd:db:ae:4e:27: fa:7b:37:b8:3e:8e:10:39:5e:4a:1c:76:0f:c4:dd:e1:0a:88: 60:f6:46:cc:38:67:19:02:37:72:e1:ca:9a:9c:4f:5b:ce:2b: 91:bd:4d:01:27:9c:65:6f:34:99:4a:7c:1e:a0:43:a4:8c:18: 7e:5b:09:a4:46:8c:62:3f:9a:1c:65:cf:44:1f:64:1a:95:40: 0a:bb:f3:f6:63:56:4b:0c:00:12:f2:f2:de:01:ad:f5:99:91: c1:41:e0:e8:b1:ba:e1:f6:f6:02:03:0e:5d:e1:fd:59:ce:9f: 1b:b8:53:a7:12:9c:48:ca:d5:2a:ed:67:f1:e4:ce:8e:c2:b0: 7e:a2:a8:a7:22:65:dd:68:69:03:41:5f:bb:48:b8:ef:46:17: 4e:90:fb:99:28:dd:2f:ba:69:6b:5e:68:83:ee:de:69:72:81: c0:d9:14:9a:7e:c9:c6:62:13:89:99:89:9d:71:b0:98:f9:bb: 04:d3:4f:56:f8:d9:39:bc:de:c0:b1:d2:8a:1a:9d:f8:59:32: 7f:c2:de:52:fc:cc:8f:3b:28:bb:83:6a:a4:d5:9b:50:ba:f7: 83:58:83:84:5b:0c:67:6b:f1:5b:a2:e0:58:9f:ba:d2:e7:1d: ed:4d:21:b0 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUSjDtAKjnr0nsOdXZJ1zaPfuLvyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjYwNTI4MTgzMTA1WhcNMjcwNTI3MTgzNjA1 WjAzMTEwLwYDVQQDEyg4QkU2NTYzNjYwODZDNDQ1M0I0OEE5M0UwNUExRjMzNkIw NTQ3OTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx/QYFa2C1jl GaPHPD8PDAXV1/Uzpfzz9gsOM+ksXTY8Hzg6z2fnZX+JZAQQ5PkpZuasHF/AiGjs 9gjAIZIZ4xs3SK3/Mlb3VIJBBSYGqHt/qrRyeNcO2KS2d6cYnN/NMW4NuIJoRor3 mM8+4a6NSlFawA4/U99HU3ozMyJ37gM2TYHGcESyFaWiyJSRqJbeXviphT5IUiIm EgrzHk093BmTZgZi0nCOKyb+Upz5DW9/VMAbORs0JIdPmhGviuCAZIG75ArbrW39 sOb1nIPPX3erykN/LmFg3xs1Oil6VQ6fup/gFm99bqTRHZy+UhBF8ofw/yxvWas3 rJ5YnnvP4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIvmVjZghsRFO0ipPgWh8zaw VHkiMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYI KwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBACMYzwDBACMY0UDBACMY2cDBACMY/ED BACMY/gwDQYJKoZIhvcNAQELBQADggEBAFcuCRESWZWvYrtjWxj9265OJ/p7N7g+ jhA5Xkocdg/E3eEKiGD2Rsw4ZxkCN3LhypqcT1vOK5G9TQEnnGVvNJlKfB6gQ6SM GH5bCaRGjGI/mhxlz0QfZBqVQAq78/ZjVksMABLy8t4BrfWZkcFB4OixuuH29gID Dl3h/VnOnxu4U6cSnEjK1SrtZ/Hkzo7CsH6iqKciZd1oaQNBX7tIuO9GF06Q+5ko 3S+6aWteaIPu3mlygcDZFJp+ycZiE4mZiZ1xsJj5uwTTT1b42Tm83sCx0ooanfhZ Mn/C3lL8zI87KLuDaqTVm1C694NYg4RbDGdr8Vui4FifutLnHe1NIbA= -----END CERTIFICATE-----Generated at Thu Jun 4 13:02:03 2026 by rpki-client