$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: hmC9MFTOdAw5jRIDxdEMouiPhUanJd4zHmFFAN7NyLs= Subject key identifier: C2:B2:0D:A2:74:38:87:98:CD:EB:1A:14:AF:D0:81:C1:0D:94:64:7A Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9 Certificate serial: 0B3D0A694882E8A9AB35F76DE2925C1CD2925D76 Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS3356.roa Signing time: Thu 24 Aug 2023 17:09:29 +0000 ROA not before: Thu 24 Aug 2023 17:04:29 +0000 ROA not after: Thu 22 Aug 2024 17:09:29 +0000 asID: 3356 IP address blocks: 66.225.236.0/24 maxlen: 24 75.102.15.0/24 maxlen: 24 167.88.146.0/24 maxlen: 24 204.93.147.0/24 maxlen: 24 205.234.154.0/24 maxlen: 24 216.246.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 02:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3d:0a:69:48:82:e8:a9:ab:35:f7:6d:e2:92:5c:1c:d2:92:5d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9 Validity Not Before: Aug 24 17:04:29 2023 GMT Not After : Aug 22 17:09:29 2024 GMT Subject: CN=C2B20DA274388798CDEB1A14AFD081C10D94647A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:8d:7e:99:6a:f0:84:7c:40:dd:67:75:04: 22:1e:62:0d:f6:e0:99:4c:10:cd:a9:b0:c2:50:c2: 6b:d7:e5:9a:75:46:3d:d3:43:8c:73:ae:3e:5c:92: 33:2f:93:ca:5c:72:46:59:04:82:bc:42:7b:08:d4: ab:03:a0:37:dd:13:46:81:3f:04:1e:ad:93:0f:9c: 2f:41:84:61:d0:ab:6e:7e:cf:63:36:0c:11:83:1f: 77:6e:45:9a:8d:5d:e6:46:65:ae:0e:dd:c0:ce:9a: 67:7e:4e:9d:87:ac:34:c5:42:ff:a1:ef:f9:dd:67: de:6c:1d:f3:76:85:1f:1d:b5:17:cb:cb:90:6f:09: 19:df:b1:92:60:d2:3b:3c:5d:32:22:31:ce:d4:29: be:0c:79:f2:9e:1d:86:a3:b8:13:21:bf:14:22:67: 73:bd:92:74:7a:ad:cc:87:8d:16:83:0c:e5:74:2c: 66:04:9e:b3:9e:66:fe:d3:61:04:ef:71:d4:fa:1c: 5b:03:ea:9c:33:5c:e9:fd:62:a7:98:a3:84:73:74: ce:5f:f6:21:fa:ae:0f:71:76:4b:9b:30:4d:9c:2c: 55:2c:55:b6:70:a3:49:f3:11:f9:82:6e:e8:9c:f7: c9:5a:47:7b:63:d4:e7:0e:77:e7:e3:40:0c:30:c2: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:0D:A2:74:38:87:98:CD:EB:1A:14:AF:D0:81:C1:0D:94:64:7A X509v3 Authority Key Identifier: keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.225.236.0/24 75.102.15.0/24 167.88.146.0/24 204.93.147.0/24 205.234.154.0/24 216.246.106.0/24 Signature Algorithm: sha256WithRSAEncryption a3:f8:bd:88:9c:7a:15:e4:67:6a:40:4c:20:4c:df:9a:d5:34: 3a:15:d7:56:a7:3d:c8:54:29:eb:a5:f8:a0:59:be:f9:b5:a6: cd:7b:3e:62:5b:69:41:f1:ff:54:09:db:a4:64:f6:0f:c9:17: 20:f0:6a:af:98:d5:14:55:2b:29:9c:ac:6b:bd:9e:f9:a1:d3: 6d:8e:49:f4:b7:df:7a:47:1f:b5:5e:52:7c:cb:88:10:d5:cb: 33:9b:6c:83:f2:a1:eb:ab:f2:c7:29:d7:63:ca:c4:ac:cc:06: a7:ec:ae:50:86:80:31:ac:1b:cc:ea:23:bc:a3:df:0b:48:14: 78:c7:ca:1c:ae:6b:ac:d5:bb:e5:94:cd:7b:45:15:ac:de:ca: 46:96:fe:c6:98:c0:0d:04:42:96:a2:a1:55:41:ad:1a:bf:e8: 02:3a:3d:d9:e2:46:70:11:9e:77:bf:ba:ed:57:8d:f1:31:7f: d3:0b:53:1b:29:29:e0:01:94:b7:3a:7d:8a:ef:79:f3:bc:32: d7:db:92:0e:38:0f:f2:8d:f0:ff:73:a3:e0:4c:19:82:8c:35: 32:b1:08:e1:86:bf:a6:89:73:05:ab:29:da:8e:ce:75:cb:47: 75:58:d3:6b:92:95:81:78:67:c3:34:85:f3:8b:db:aa:ea:bd: 53:48:95:56 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUCz0KaUiC6KmrNfdt4pJcHNKSXXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2 Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwODI0MTcwNDI5WhcNMjQwODIyMTcwOTI5 WjAzMTEwLwYDVQQDEyhDMkIyMERBMjc0Mzg4Nzk4Q0RFQjFBMTRBRkQwODFDMTBE OTQ2NDdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ONfplq8IR8 QN1ndQQiHmIN9uCZTBDNqbDCUMJr1+WadUY900OMc64+XJIzL5PKXHJGWQSCvEJ7 CNSrA6A33RNGgT8EHq2TD5wvQYRh0Ktufs9jNgwRgx93bkWajV3mRmWuDt3Azppn fk6dh6w0xUL/oe/53WfebB3zdoUfHbUXy8uQbwkZ37GSYNI7PF0yIjHO1Cm+DHny nh2Go7gTIb8UImdzvZJ0eq3Mh40WgwzldCxmBJ6znmb+02EE73HU+hxbA+qcM1zp /WKnmKOEc3TOX/Yh+q4PcXZLmzBNnCxVLFW2cKNJ8xH5gm7onPfJWkd7Y9TnDnfn 40AMMMIn+wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMKyDaJ0OIeYzesaFK/QgcEN lGR6MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4 ZDM2NjAvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBABC4ewDBABLZg8DBACnWJIDBADMXZMD BADN6poDBADY9mowDQYJKoZIhvcNAQELBQADggEBAKP4vYicehXkZ2pATCBM35rV NDoV11anPchUKeul+KBZvvm1ps17PmJbaUHx/1QJ26Rk9g/JFyDwaq+Y1RRVKymc rGu9nvmh022OSfS333pHH7VeUnzLiBDVyzObbIPyoeur8scp12PKxKzMBqfsrlCG gDGsG8zqI7yj3wtIFHjHyhyua6zVu+WUzXtFFazeykaW/saYwA0EQpaioVVBrRq/ 6AI6PdniRnARnne/uu1XjfExf9MLUxspKeABlLc6fYrvefO8Mtfbkg44D/KN8P9z o+BMGYKMNTKxCOGGv6aJcwWrKdqOznXLR3VY02uSlYF4Z8M0hfOL26rqvVNIlVY= -----END CERTIFICATE-----Generated at Thu May 2 03:11:24 2024 by rpki-client on console-ams.rpki-client.org