$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: jYYz3B2Fg/uwfWTntd0rkux+fsm+8jxida2zELPpup4= Subject key identifier: 59:05:1D:73:42:53:FA:78:AF:D7:F8:B8:BB:DA:3B:7B:0C:BA:90:D6 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 195B18F93F2C386A9295C1C43FE815D7B8F298DD Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa Signing time: Tue 31 Dec 2024 14:29:36 +0000 ROA not before: Tue 31 Dec 2024 14:24:36 +0000 ROA not after: Tue 30 Dec 2025 14:29:36 +0000 asID: 3356 IP address blocks: 157.254.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Feb 2025 15:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5b:18:f9:3f:2c:38:6a:92:95:c1:c4:3f:e8:15:d7:b8:f2:98:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 31 14:24:36 2024 GMT Not After : Dec 30 14:29:36 2025 GMT Subject: CN=59051D734253FA78AFD7F8B8BBDA3B7B0CBA90D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:00:bd:d2:42:1a:f3:c8:fd:73:26:75:a3: df:19:84:84:eb:da:3d:cf:9d:cb:3f:4c:0d:60:af: c7:dd:1b:26:96:c3:40:ba:1a:b8:f8:8c:fa:1e:ea: c0:1c:56:07:ca:e8:79:b8:23:e1:c8:c8:d2:1d:80: d5:08:e6:0d:66:b2:d4:03:7d:39:c5:4e:ea:8f:fe: 00:84:8b:3e:9e:07:ad:88:bf:2f:cc:04:71:f1:fb: e2:dc:e3:27:4d:05:4d:df:db:30:93:a9:e8:d5:5c: c8:2e:a2:cb:41:05:d4:f0:32:a2:67:80:ea:03:80: 6d:14:17:00:e2:f5:ff:2d:d3:86:01:d7:9c:18:dd: 9b:f5:3b:54:a1:dc:d1:74:5a:53:a0:2b:83:7b:63: e7:e7:0c:c2:a7:0a:bf:28:eb:41:77:7f:07:8c:c5: 06:e1:24:14:98:b2:fb:10:f3:c2:20:e7:6c:80:28: 67:35:9c:84:d2:c6:7c:51:8f:e0:92:c4:dc:7e:e4: c8:b8:81:e7:fc:64:17:77:04:7f:f3:d4:9f:74:d5: a8:6c:e0:e2:73:c5:f2:33:70:50:3d:f8:69:71:a1: c3:8e:12:30:84:df:d1:4a:21:22:c4:6f:d2:7b:8f: 94:a4:43:87:3f:04:7a:ae:90:48:94:fe:75:c3:d9: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:05:1D:73:42:53:FA:78:AF:D7:F8:B8:BB:DA:3B:7B:0C:BA:90:D6 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.132.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:7a:0d:83:a5:89:f5:f9:54:15:fe:2c:68:00:94:9f:0b:00: 9a:65:96:13:0c:ea:23:d8:c8:00:2e:8e:32:2f:2a:7e:25:81: a4:aa:6d:4a:b1:df:2e:81:25:be:85:39:74:03:81:dd:5e:ae: a4:95:b5:7a:89:0f:cf:db:00:c4:64:a6:27:73:75:65:92:a6: fa:f4:12:36:02:de:95:9e:3f:7a:08:82:c1:03:28:0c:6d:32: bd:47:d4:18:d4:51:48:4b:fb:0e:b8:4a:ae:3e:d3:a7:86:02: 4e:8d:f1:7c:b7:01:39:3d:74:66:f7:28:6b:4b:fe:8a:98:aa: 38:df:83:63:5d:1d:64:87:c4:b3:a7:c6:9e:e0:40:cb:87:c9: cc:62:56:e9:ad:b6:03:b5:37:b3:6c:7b:ce:08:18:6f:15:2b: 6b:02:a8:ed:22:91:bd:61:6e:0e:a9:31:b2:9e:b5:5c:9d:98: b4:20:00:a4:1f:f0:dd:5e:9b:73:d5:6d:b5:f9:5b:5a:46:0e: 9a:df:f5:d1:62:5c:51:49:50:38:86:c6:24:c3:25:48:09:ac: 98:6d:9b:83:02:4f:5c:bc:e8:99:c6:5f:d3:2b:b6:19:6c:84: 0c:50:8e:b6:cf:85:41:7b:43:58:35:3b:d6:ef:85:23:b3:7a: 2f:cc:21:04 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUGVsY+T8sOGqSlcHEP+gV17jymN0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQxMjMxMTQyNDM2WhcNMjUxMjMwMTQyOTM2 WjAzMTEwLwYDVQQDEyg1OTA1MUQ3MzQyNTNGQTc4QUZEN0Y4QjhCQkRBM0I3QjBD QkE5MEQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC8AvdJCGvPI /XMmdaPfGYSE69o9z53LP0wNYK/H3RsmlsNAuhq4+Iz6HurAHFYHyuh5uCPhyMjS HYDVCOYNZrLUA305xU7qj/4AhIs+ngetiL8vzARx8fvi3OMnTQVN39swk6no1VzI LqLLQQXU8DKiZ4DqA4BtFBcA4vX/LdOGAdecGN2b9TtUodzRdFpToCuDe2Pn5wzC pwq/KOtBd38HjMUG4SQUmLL7EPPCIOdsgChnNZyE0sZ8UY/gksTcfuTIuIHn/GQX dwR/89SfdNWobODic8XyM3BQPfhpcaHDjhIwhN/RSiEixG/Se4+UpEOHPwR6rpBI lP51w9mg9wIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFFkFHXNCU/p4r9f4uLvaO3sM upDWMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKd/oQwDQYJKoZIhvcNAQELBQADggEB ABp6DYOlifX5VBX+LGgAlJ8LAJpllhMM6iPYyAAujjIvKn4lgaSqbUqx3y6BJb6F OXQDgd1erqSVtXqJD8/bAMRkpidzdWWSpvr0EjYC3pWeP3oIgsEDKAxtMr1H1BjU UUhL+w64Sq4+06eGAk6N8Xy3ATk9dGb3KGtL/oqYqjjfg2NdHWSHxLOnxp7gQMuH ycxiVumttgO1N7Nse84IGG8VK2sCqO0ikb1hbg6pMbKetVydmLQgAKQf8N1em3PV bbX5W1pGDprf9dFiXFFJUDiGxiTDJUgJrJhtm4MCT1y86JnGX9MrthlshAxQjrbP hUF7Q1g1O9bvhSOzei/MIQQ= -----END CERTIFICATE-----Generated at Wed Feb 5 04:41:56 2025 by rpki-client