$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: Ff9oLml41rE5+wYk9DLOnLb6c3eQWifpGy1BOmqnOw0= Subject key identifier: 4E:70:7C:EE:2D:D9:6D:6F:0F:AD:DB:DE:CB:B5:A2:26:94:06:64:70 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 3336AAF633529CD84D2BF5FBBA65B45F89527FCE Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa Signing time: Thu 24 Aug 2023 17:09:03 +0000 ROA not before: Thu 24 Aug 2023 17:04:03 +0000 ROA not after: Thu 22 Aug 2024 17:09:03 +0000 asID: 3356 IP address blocks: 140.99.60.0/24 maxlen: 24 140.99.69.0/24 maxlen: 24 140.99.103.0/24 maxlen: 24 140.99.241.0/24 maxlen: 24 140.99.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 03:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:36:aa:f6:33:52:9c:d8:4d:2b:f5:fb:ba:65:b4:5f:89:52:7f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Aug 24 17:04:03 2023 GMT Not After : Aug 22 17:09:03 2024 GMT Subject: CN=4E707CEE2DD96D6F0FADDBDECBB5A22694066470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:0a:e5:40:f6:9e:6f:37:6c:97:f8:43:e9: ed:0e:53:fb:05:7b:39:c5:60:f7:1a:6d:94:ae:5b: 34:f3:18:83:35:4e:3d:88:f9:a4:a2:18:b5:61:88: 23:1c:1a:34:61:a6:4f:5f:a9:4e:de:85:3d:3d:c5: 89:84:75:a5:c3:15:6f:a8:8c:82:a1:91:76:21:aa: b9:2b:a9:77:26:6d:c3:c3:25:76:b5:0b:c3:ea:74: 27:c3:7d:93:c3:f0:85:17:c6:22:7a:d9:67:f3:f6: a7:eb:00:5d:d6:5b:88:b4:85:fb:b9:56:26:fa:2e: 46:bc:b1:1c:a7:a3:f2:52:38:f2:92:9d:53:7a:a5: 93:5e:69:dd:68:f2:7e:ee:40:c6:e0:71:93:d0:d0: 59:d2:59:b2:e2:ac:34:28:04:27:96:ac:f7:0e:5a: b1:22:17:fd:84:61:d6:77:c5:e1:2b:4e:94:f5:c6: dc:45:e1:7d:77:50:a9:a0:bc:2b:ac:57:65:6a:56: 15:33:20:af:c8:a5:da:c5:c4:69:55:6e:6d:74:5f: e7:03:98:e9:d3:69:d7:47:af:6c:e6:6d:4d:45:ab: 24:71:db:e0:f1:2a:58:57:1a:07:45:b7:d0:0f:9f: bf:c1:71:88:59:d1:b9:b6:f6:21:33:61:fd:b2:32: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:70:7C:EE:2D:D9:6D:6F:0F:AD:DB:DE:CB:B5:A2:26:94:06:64:70 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.60.0/24 140.99.69.0/24 140.99.103.0/24 140.99.241.0/24 140.99.248.0/24 Signature Algorithm: sha256WithRSAEncryption af:2b:a0:06:50:95:1f:5c:eb:41:13:0f:a2:64:c4:04:07:d7: 35:6f:19:cc:f8:eb:31:2c:8a:70:40:f6:cf:01:05:aa:69:94: 23:9f:54:c2:bd:41:5e:05:67:4c:36:2d:e7:ed:fd:0f:a6:76: 1d:63:7a:0c:c9:7d:ca:7b:25:35:68:f8:a5:74:ef:37:b2:b6: 0e:68:ff:ac:ec:e1:b7:f9:65:7b:0f:62:21:7d:44:d5:aa:bf: 61:ef:4e:b9:86:a9:bc:f1:2b:0d:c2:2b:e3:93:02:18:89:ca: 98:6a:9a:51:35:b0:44:98:7c:d4:e5:bb:56:de:d4:7f:7c:aa: 7c:e2:90:cb:ed:cd:c8:dc:c6:04:6b:5b:9a:df:5f:4c:ad:58: 44:27:2b:bb:95:60:ca:63:e9:34:c9:7e:7a:bc:e9:a5:3c:43: 6e:08:f5:4b:ef:6d:1c:c1:a3:71:c2:83:e6:db:df:37:30:5f: b3:9b:7e:e0:a6:13:8b:2c:b8:aa:2b:3f:d8:90:19:aa:35:25: 83:0d:46:4e:cc:11:37:b6:0d:f0:2e:ab:b3:d7:e5:1c:f5:9e: cd:95:e1:7d:c7:e9:87:7f:ae:9b:4e:74:33:97:3a:2a:d7:db: 47:b4:b5:88:f0:dc:e3:19:6d:92:12:6e:c1:6d:ce:16:44:be: 2a:2a:db:ca -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUMzaq9jNSnNhNK/X7umW0X4lSf84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwODI0MTcwNDAzWhcNMjQwODIyMTcwOTAz WjAzMTEwLwYDVQQDEyg0RTcwN0NFRTJERDk2RDZGMEZBRERCREVDQkI1QTIyNjk0 MDY2NDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCQK5UD2nm83 bJf4Q+ntDlP7BXs5xWD3Gm2Urls08xiDNU49iPmkohi1YYgjHBo0YaZPX6lO3oU9 PcWJhHWlwxVvqIyCoZF2Iaq5K6l3Jm3DwyV2tQvD6nQnw32Tw/CFF8Yietln8/an 6wBd1luItIX7uVYm+i5GvLEcp6PyUjjykp1TeqWTXmndaPJ+7kDG4HGT0NBZ0lmy 4qw0KAQnlqz3DlqxIhf9hGHWd8XhK06U9cbcReF9d1CpoLwrrFdlalYVMyCvyKXa xcRpVW5tdF/nA5jp02nXR69s5m1NRaskcdvg8SpYVxoHRbfQD5+/wXGIWdG5tvYh M2H9sjIdCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE5wfO4t2W1vD63b3su1oiaU BmRwMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYI KwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBACMYzwDBACMY0UDBACMY2cDBACMY/ED BACMY/gwDQYJKoZIhvcNAQELBQADggEBAK8roAZQlR9c60ETD6JkxAQH1zVvGcz4 6zEsinBA9s8BBapplCOfVMK9QV4FZ0w2Left/Q+mdh1jegzJfcp7JTVo+KV07zey tg5o/6zs4bf5ZXsPYiF9RNWqv2HvTrmGqbzxKw3CK+OTAhiJyphqmlE1sESYfNTl u1be1H98qnzikMvtzcjcxgRrW5rfX0ytWEQnK7uVYMpj6TTJfnq86aU8Q24I9Uvv bRzBo3HCg+bb3zcwX7ObfuCmE4ssuKorP9iQGao1JYMNRk7METe2DfAuq7PX5Rz1 ns2V4X3H6Yd/rptOdDOXOirX20e0tYjw3OMZbZISbsFtzhZEvioq28o= -----END CERTIFICATE-----Generated at Fri May 3 00:27:25 2024 by rpki-client on console-fra.rpki-client.org