$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: 3IhF8T2By9Qg6sNlNawltpuRcHGjvtefhbmDdzKoU18= Subject key identifier: 4B:CF:77:B2:8A:D0:08:2A:51:17:F4:FC:73:93:A7:B3:AF:12:76:DE Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 5FE5AA295AA6F35230DF4DB846F285F9D68D121B Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa Signing time: Thu 11 Jul 2024 13:49:11 +0000 ROA not before: Thu 11 Jul 2024 13:44:11 +0000 ROA not after: Thu 10 Jul 2025 13:49:11 +0000 asID: 396356 IP address blocks: 140.99.164.0/24 maxlen: 24 140.99.216.0/24 maxlen: 24 140.99.217.0/24 maxlen: 24 140.99.218.0/24 maxlen: 24 140.99.219.0/24 maxlen: 24 140.99.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 04:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e5:aa:29:5a:a6:f3:52:30:df:4d:b8:46:f2:85:f9:d6:8d:12:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jul 11 13:44:11 2024 GMT Not After : Jul 10 13:49:11 2025 GMT Subject: CN=4BCF77B28AD0082A5117F4FC7393A7B3AF1276DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:e7:2a:df:b2:00:9f:d9:5a:10:19:89:bc: 86:10:51:4f:cc:20:a3:6b:d3:a0:1f:7b:20:9a:08: f4:cf:42:87:53:bf:48:40:a9:3b:dc:b0:7c:c5:bf: ee:f0:4a:2f:14:10:77:fd:8a:c5:d5:d5:cb:e2:a2: 98:21:fd:83:16:d8:d0:dc:b6:6f:3f:cc:47:5f:c9: 35:5a:ac:d0:32:55:90:e0:a7:b0:ef:7d:24:9f:39: 10:3c:63:0d:c4:84:8f:01:05:cc:8d:33:2c:5f:f4: f8:2b:33:58:a3:c2:b1:4f:e1:89:7a:7a:e4:23:63: 9e:0d:e0:c6:aa:b6:5f:e2:d8:08:33:bf:5e:b3:91: f9:cd:2a:6d:0a:c7:99:f5:8b:32:46:b2:d5:d7:52: 69:e9:52:f7:cf:4f:22:1b:91:fe:df:7a:13:b9:af: 97:dd:eb:d4:a0:61:3d:49:78:a3:57:6c:dc:c6:af: 18:96:d5:21:fa:c7:ce:66:91:f2:47:a7:71:5d:1f: c3:b5:04:b8:1e:dd:06:1c:5d:ac:38:6a:b2:e3:8c: e1:70:53:f8:c2:9e:a2:75:f7:93:24:9d:49:1f:71: 08:19:5c:95:9c:46:97:eb:6a:71:f7:a0:1d:19:fb: a5:cd:d3:2e:65:21:14:78:0b:fa:0c:45:37:04:13: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CF:77:B2:8A:D0:08:2A:51:17:F4:FC:73:93:A7:B3:AF:12:76:DE X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.164.0/24 140.99.216.0/22 140.99.222.0/24 Signature Algorithm: sha256WithRSAEncryption 34:84:12:d0:8f:f6:a6:be:a4:c1:c1:9a:8c:74:52:06:bd:8c: 56:1f:8e:8d:9b:a4:0c:9b:dc:4b:15:7e:37:28:8e:f5:6d:c9: 92:f4:c6:09:ae:48:b5:8d:51:b8:2e:f1:fa:a9:f0:f9:6c:a2: a8:06:c9:41:e1:de:d1:c7:8e:77:99:81:d9:be:ac:07:11:78: 3e:59:1c:52:1c:7b:2f:8a:43:a2:59:15:f1:54:50:31:dd:83: 5b:b6:1b:7d:bf:6c:c5:20:95:25:1f:9b:9c:90:9c:6e:b2:eb: 3e:15:0b:36:a3:38:99:d9:37:28:8b:6e:e5:3d:24:e8:44:84: 58:13:65:66:fa:fb:58:ba:7f:e3:e1:25:38:80:a0:26:e3:0b: 44:0e:82:4f:38:47:01:91:81:84:88:97:dd:2f:0d:19:07:15: 47:c2:fa:ae:0e:46:a0:d3:e5:a2:9f:65:5a:e0:a6:a2:59:f9: e5:ae:b0:d1:a6:84:1f:95:40:eb:d1:44:11:4c:6e:33:d2:b7: b7:23:b7:5b:e8:de:a2:37:96:c1:d9:61:38:85:47:d9:0e:08: 33:94:55:4b:56:24:c6:50:7d:82:ed:56:bf:90:51:df:1e:97: 51:21:8c:44:37:15:12:69:de:2b:72:47:6a:1c:93:72:06:f3: b0:0b:c2:54 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUX+WqKVqm81Iw3024RvKF+daNEhswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwNzExMTM0NDExWhcNMjUwNzEwMTM0OTEx WjAzMTEwLwYDVQQDEyg0QkNGNzdCMjhBRDAwODJBNTExN0Y0RkM3MzkzQTdCM0FG MTI3NkRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OznKt+yAJ/Z WhAZibyGEFFPzCCja9OgH3sgmgj0z0KHU79IQKk73LB8xb/u8EovFBB3/YrF1dXL 4qKYIf2DFtjQ3LZvP8xHX8k1WqzQMlWQ4Kew730knzkQPGMNxISPAQXMjTMsX/T4 KzNYo8KxT+GJenrkI2OeDeDGqrZf4tgIM79es5H5zSptCseZ9YsyRrLV11Jp6VL3 z08iG5H+33oTua+X3evUoGE9SXijV2zcxq8YltUh+sfOZpHyR6dxXR/DtQS4Ht0G HF2sOGqy44zhcFP4wp6idfeTJJ1JH3EIGVyVnEaX62px96AdGfulzdMuZSEUeAv6 DEU3BBN7xwIDAQABo4ICizCCAocwHQYDVR0OBBYEFEvPd7KK0AgqURf0/HOTp7Ov EnbeMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAIxjpAMEAoxj2AMEAIxj3jANBgkq hkiG9w0BAQsFAAOCAQEANIQS0I/2pr6kwcGajHRSBr2MVh+OjZukDJvcSxV+NyiO 9W3JkvTGCa5ItY1RuC7x+qnw+WyiqAbJQeHe0ceOd5mB2b6sBxF4PlkcUhx7L4pD olkV8VRQMd2DW7Ybfb9sxSCVJR+bnJCcbrLrPhULNqM4mdk3KItu5T0k6ESEWBNl Zvr7WLp/4+ElOICgJuMLRA6CTzhHAZGBhIiX3S8NGQcVR8L6rg5GoNPlop9lWuCm oln55a6w0aaEH5VA69FEEUxuM9K3tyO3W+jeojeWwdlhOIVH2Q4IM5RVS1YkxlB9 gu1Wv5BR3x6XUSGMRDcVEmneK3JHahyTcgbzsAvCVA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:23 2025 by rpki-client