$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: DZmvxlRDGqQJElcTmjVACnVZXrUvcjgyHhpGMVgWX14= Subject key identifier: 38:71:DA:86:37:79:DA:19:FE:6F:19:37:64:FE:E2:7A:8C:D0:7D:64 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 17081642E8441A903FC0C8DCC0A406D825D7FA2B Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa Signing time: Thu 25 Jul 2024 17:48:59 +0000 ROA not before: Thu 25 Jul 2024 17:43:59 +0000 ROA not after: Thu 24 Jul 2025 17:48:59 +0000 asID: 3356 IP address blocks: 140.99.60.0/24 maxlen: 24 140.99.69.0/24 maxlen: 24 140.99.103.0/24 maxlen: 24 140.99.241.0/24 maxlen: 24 140.99.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 04:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:08:16:42:e8:44:1a:90:3f:c0:c8:dc:c0:a4:06:d8:25:d7:fa:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jul 25 17:43:59 2024 GMT Not After : Jul 24 17:48:59 2025 GMT Subject: CN=3871DA863779DA19FE6F193764FEE27A8CD07D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:a9:10:6b:c3:9a:ff:1f:fb:64:9d:fe:3c: 5b:7f:48:09:14:52:bf:3e:26:5e:e0:8d:99:fa:82: 9c:32:bf:4c:e4:f3:8d:d9:c7:d7:3d:af:69:3f:d2: 26:ac:65:c0:03:bb:f6:b0:b6:3c:03:5e:db:db:42: fc:b5:3c:ab:57:f6:d8:d1:48:b1:4b:67:1e:98:95: 16:4d:25:79:0a:4a:de:58:d5:b9:c7:f8:34:5d:83: d8:dd:34:5d:82:77:9d:17:75:a8:62:db:73:9a:93: 91:4d:58:84:6b:37:4e:54:03:77:82:d7:13:aa:bb: f3:f5:9b:6c:88:90:d4:de:58:67:76:45:24:fd:66: 6b:4d:fa:16:a7:7f:d1:1b:dc:e7:0a:ec:a1:80:6b: cf:16:4c:0c:1c:dd:f1:89:ca:12:9f:5f:fa:e0:2f: bb:8f:7d:17:0f:55:23:07:6f:2e:f8:45:7c:29:99: 1c:6e:d6:46:01:a6:c2:bf:1c:f6:f3:99:2f:30:67: 57:07:88:a1:c4:18:bc:b8:ff:93:84:66:b8:51:fe: 06:42:d3:e0:d0:c3:1f:2e:53:08:45:45:8b:05:12: d6:19:87:12:fb:13:a9:99:a5:3b:dc:b3:5a:20:81: 2c:57:3c:98:90:dc:79:0b:c6:04:1f:72:33:ce:a2: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:71:DA:86:37:79:DA:19:FE:6F:19:37:64:FE:E2:7A:8C:D0:7D:64 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.60.0/24 140.99.69.0/24 140.99.103.0/24 140.99.241.0/24 140.99.248.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:e0:31:6f:53:43:d4:98:9e:09:ee:a8:71:c8:3d:19:ab:bb: ea:ab:b3:e4:63:51:70:6a:61:a7:ee:96:57:ca:3c:27:d1:dc: ed:ef:fe:ab:17:a5:da:2a:97:0c:0b:d9:4f:c1:49:a9:02:6c: f9:86:ae:c5:cb:c2:c8:01:35:b5:7d:6b:b0:f2:fc:b6:ae:36: 74:78:ca:81:65:72:98:e7:0e:a1:1f:de:9a:2e:36:ce:11:15: 00:80:01:d2:bc:df:1d:e4:62:cd:55:14:f1:54:db:68:3c:28: fd:fe:81:3f:ca:96:3e:21:01:59:ba:b5:7d:64:2b:1f:00:54: d2:14:97:f4:a7:25:63:46:12:52:d2:4a:12:b3:ad:74:76:0e: 32:2e:29:ff:f9:60:eb:70:3d:f7:34:28:a3:74:98:ad:91:ca: d9:f0:62:d8:f8:bf:3a:ec:94:b5:be:50:a3:7c:9f:4b:79:d9: 0d:9c:7e:7d:42:6c:c2:1d:da:47:b8:4c:d2:df:a4:8e:bd:dc: 2c:1c:2a:b5:2d:df:21:b5:9f:4d:2f:46:6d:fd:e5:cf:6f:98: f1:6d:cf:67:7d:c0:0f:19:35:1a:db:3d:f7:b4:b3:e6:e1:e7: 86:52:a5:04:e3:e9:1d:ed:e5:fc:18:c9:d1:95:3b:19:f7:6e: 65:f4:11:f5 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUFwgWQuhEGpA/wMjcwKQG2CXX+iswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwNzI1MTc0MzU5WhcNMjUwNzI0MTc0ODU5 WjAzMTEwLwYDVQQDEygzODcxREE4NjM3NzlEQTE5RkU2RjE5Mzc2NEZFRTI3QThD RDA3RDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw+pEGvDmv8f +2Sd/jxbf0gJFFK/PiZe4I2Z+oKcMr9M5PON2cfXPa9pP9ImrGXAA7v2sLY8A17b 20L8tTyrV/bY0UixS2cemJUWTSV5CkreWNW5x/g0XYPY3TRdgnedF3WoYttzmpOR TViEazdOVAN3gtcTqrvz9ZtsiJDU3lhndkUk/WZrTfoWp3/RG9znCuyhgGvPFkwM HN3xicoSn1/64C+7j30XD1UjB28u+EV8KZkcbtZGAabCvxz285kvMGdXB4ihxBi8 uP+ThGa4Uf4GQtPg0MMfLlMIRUWLBRLWGYcS+xOpmaU73LNaIIEsVzyYkNx5C8YE H3IzzqJ1YQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDhx2oY3edoZ/m8ZN2T+4nqM 0H1kMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYI KwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBACMYzwDBACMY0UDBACMY2cDBACMY/ED BACMY/gwDQYJKoZIhvcNAQELBQADggEBAGrgMW9TQ9SYngnuqHHIPRmru+qrs+Rj UXBqYafullfKPCfR3O3v/qsXpdoqlwwL2U/BSakCbPmGrsXLwsgBNbV9a7Dy/Lau NnR4yoFlcpjnDqEf3pouNs4RFQCAAdK83x3kYs1VFPFU22g8KP3+gT/Klj4hAVm6 tX1kKx8AVNIUl/SnJWNGElLSShKzrXR2DjIuKf/5YOtwPfc0KKN0mK2RytnwYtj4 vzrslLW+UKN8n0t52Q2cfn1CbMId2ke4TNLfpI693CwcKrUt3yG1n00vRm395c9v mPFtz2d9wA8ZNRrbPfe0s+bh54ZSpQTj6R3t5fwYydGVOxn3bmX0EfU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:34 2025 by rpki-client