$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa File: AS33696.roa (raw, json) Hash identifier: 0pOO07jQvr3x5lh6x7FdJYkaFFqt3ebxcD9Lxa81+mE= Subject key identifier: 82:B0:C2:C3:07:2B:92:60:74:A5:A6:58:94:60:DE:BD:4E:A8:A1:A0 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 192AC8ED4C105A747BE2ED2922A9840B8BA98846 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa Signing time: Tue 29 Aug 2023 20:33:27 +0000 ROA not before: Tue 29 Aug 2023 20:28:27 +0000 ROA not after: Tue 27 Aug 2024 20:33:27 +0000 asID: 33696 IP address blocks: 140.99.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2a:c8:ed:4c:10:5a:74:7b:e2:ed:29:22:a9:84:0b:8b:a9:88:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Aug 29 20:28:27 2023 GMT Not After : Aug 27 20:33:27 2024 GMT Subject: CN=82B0C2C3072B926074A5A6589460DEBD4EA8A1A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:1e:91:2f:7f:4b:44:da:7b:ad:c5:9e:da: ec:c6:f7:e9:6d:74:29:0c:6b:03:a2:00:9d:16:08: ab:f6:44:46:b7:94:55:68:66:35:cb:e8:c3:dc:aa: da:6a:31:ac:64:db:fe:3d:06:8e:28:79:be:59:fc: a2:2f:f5:2c:af:9e:0f:01:11:39:6b:bc:02:81:1a: c4:3e:16:02:57:26:db:57:f5:63:0b:ce:4c:4c:b0: ba:ff:c2:82:98:a7:ce:e5:52:f6:1b:6b:2f:1a:3b: e3:f4:35:c0:85:0f:2e:d0:d8:eb:1a:f7:09:2b:96: 6d:ae:64:90:a1:4c:66:0e:26:5a:e4:54:e1:18:06: df:e2:d1:4a:7e:c1:15:bd:4b:b6:cc:e9:3f:29:1c: e1:a2:b4:4d:ed:d0:04:4b:ef:5e:8a:4e:28:d7:e1: b2:22:b3:81:31:06:90:d1:95:32:5b:40:b1:23:08: bb:60:26:11:fd:dc:a6:d1:60:f3:d9:0b:40:77:01: bd:60:b4:00:4d:c9:b7:44:e4:f2:84:d0:92:cf:90: 79:90:0f:22:9a:c8:36:e4:cf:3d:13:11:e3:9b:71: 4a:75:8c:1d:ed:2b:8e:a2:f3:a0:78:97:4b:b2:30: a2:1a:31:3d:04:0d:45:1f:6a:f7:ef:0a:da:d0:5f: a9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B0:C2:C3:07:2B:92:60:74:A5:A6:58:94:60:DE:BD:4E:A8:A1:A0 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.35.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:42:6d:1b:b3:59:34:e1:20:f4:5d:9d:b4:5d:bb:4f:24:0a: 0a:fa:27:cd:59:fb:78:09:0a:bc:3f:27:91:f6:93:74:f8:39: 7f:23:36:4f:e4:1d:8d:72:65:be:f8:60:8a:90:2a:ba:8d:4f: bb:f5:10:11:70:3a:a5:ac:ad:f5:25:00:64:17:73:72:d7:9b: 81:b6:d3:17:c0:d8:d6:0c:84:a8:31:ff:40:11:f8:d2:9f:da: fd:1f:8e:98:12:df:a1:15:df:b9:53:88:65:04:71:5c:fb:c3: cd:19:f2:e3:c4:63:52:f6:5e:fa:74:33:67:bd:61:a9:04:6a: 11:fc:c9:8f:3e:e1:54:95:e7:ac:75:5b:10:aa:55:e3:b1:16: 25:20:02:72:66:48:c8:90:5a:d9:85:23:8a:66:ed:1e:54:49: a2:90:8d:e0:5f:a3:2f:aa:ca:d3:b0:ef:fd:03:4a:7e:1f:7b: 03:f9:4a:e2:d3:1d:9b:7a:3f:66:1e:b1:17:39:ed:60:0d:eb: 26:88:63:0a:34:f9:2f:47:65:b2:db:f8:9f:af:a1:c3:77:a7: af:de:d3:91:1d:04:1f:6d:36:0e:36:0c:2e:06:4b:98:2a:a4: 5d:d4:35:a8:46:a4:cf:3d:78:7b:8a:dc:70:19:08:11:29:6b: ae:bd:0d:91 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUGSrI7UwQWnR74u0pIqmEC4upiEYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwODI5MjAyODI3WhcNMjQwODI3MjAzMzI3 WjAzMTEwLwYDVQQDEyg4MkIwQzJDMzA3MkI5MjYwNzRBNUE2NTg5NDYwREVCRDRF QThBMUEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFMekS9/S0Ta e63FntrsxvfpbXQpDGsDogCdFgir9kRGt5RVaGY1y+jD3KraajGsZNv+PQaOKHm+ WfyiL/Usr54PARE5a7wCgRrEPhYCVybbV/VjC85MTLC6/8KCmKfO5VL2G2svGjvj 9DXAhQ8u0NjrGvcJK5ZtrmSQoUxmDiZa5FThGAbf4tFKfsEVvUu2zOk/KRzhorRN 7dAES+9eik4o1+GyIrOBMQaQ0ZUyW0CxIwi7YCYR/dym0WDz2QtAdwG9YLQATcm3 ROTyhNCSz5B5kA8imsg25M89ExHjm3FKdYwd7SuOovOgeJdLsjCiGjE9BA1FH2r3 7wra0F+pBwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIKwwsMHK5JgdKWmWJRg3r1O qKGgMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzMzNjk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGMjMA0GCSqGSIb3DQEBCwUAA4IB AQBuQm0bs1k04SD0XZ20XbtPJAoK+ifNWft4CQq8PyeR9pN0+Dl/IzZP5B2NcmW+ +GCKkCq6jU+79RARcDqlrK31JQBkF3Ny15uBttMXwNjWDISoMf9AEfjSn9r9H46Y Et+hFd+5U4hlBHFc+8PNGfLjxGNS9l76dDNnvWGpBGoR/MmPPuFUleesdVsQqlXj sRYlIAJyZkjIkFrZhSOKZu0eVEmikI3gX6MvqsrTsO/9A0p+H3sD+Uri0x2bej9m HrEXOe1gDesmiGMKNPkvR2Wy2/ifr6HDd6ev3tORHQQfbTYONgwuBkuYKqRd1DWo RqTPPXh7itxwGQgRKWuuvQ2R -----END CERTIFICATE-----Generated at Tue Aug 29 21:07:01 2023 by rpki-client on console-ams.rpki-client.org