$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33601.roa File: AS33601.roa (raw, json) Hash identifier: aP2EzSV8LIeBYtwNEODgf0PfZjwVi+YjY3rhO/EJOXo= Subject key identifier: B9:AA:59:B6:57:59:CA:39:DC:00:53:94:87:FF:D1:8C:9D:16:F4:E8 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 4D96CC673E712FB57805D6A3C514179C14F11C07 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33601.roa Signing time: Wed 27 Mar 2024 11:40:04 +0000 ROA not before: Wed 27 Mar 2024 11:35:04 +0000 ROA not after: Wed 26 Mar 2025 11:40:04 +0000 asID: 33601 IP address blocks: 157.254.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 04:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:96:cc:67:3e:71:2f:b5:78:05:d6:a3:c5:14:17:9c:14:f1:1c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 27 11:35:04 2024 GMT Not After : Mar 26 11:40:04 2025 GMT Subject: CN=B9AA59B65759CA39DC00539487FFD18C9D16F4E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:e6:eb:af:d7:57:e8:0b:3a:48:c2:66:2d: c5:f2:34:49:f2:69:3a:55:d6:de:06:48:2c:25:a3: f8:06:f2:5f:62:39:c5:4b:71:e9:53:44:c5:15:d0: bf:93:4d:79:ac:29:a9:de:c5:6a:a3:a5:0d:85:cd: 0e:ce:be:5f:73:a5:36:a7:ac:87:62:04:d6:1d:15: 45:a4:08:89:17:c3:37:c0:e7:83:ef:7c:2b:b9:7a: c7:b5:54:8f:77:b3:fe:64:fb:98:77:9d:55:94:3a: 5b:dd:99:1e:fe:a6:2a:79:ca:bc:70:a0:59:05:54: 59:0d:38:b8:ab:38:8e:2a:ae:a8:73:e5:cf:b6:ef: 61:f6:65:15:92:ff:e5:d7:89:5e:47:fa:09:06:f3: e8:eb:5d:4e:b2:5f:a7:60:e6:24:62:37:6e:0b:9f: a7:60:6c:23:bf:05:8d:b5:d5:12:ce:19:bb:f0:a4: 31:2c:72:de:eb:ea:6d:60:94:43:85:1f:4e:2e:3f: c2:f3:a6:3e:8c:7a:d3:b5:d2:97:6f:84:77:41:e5: a1:d9:84:a7:c7:af:b9:40:07:d4:20:31:b1:fd:9c: 2a:77:2e:66:40:da:40:aa:f7:6b:7a:d5:04:21:98: 93:7b:2c:9b:10:d5:f6:b6:3f:52:ed:0f:62:c3:72: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AA:59:B6:57:59:CA:39:DC:00:53:94:87:FF:D1:8C:9D:16:F4:E8 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33601.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.24.0/23 Signature Algorithm: sha256WithRSAEncryption 21:ed:2c:7e:4b:10:c5:ac:78:a0:d7:a3:24:88:14:22:67:86: 68:c4:ef:c2:77:e6:cb:71:cd:3d:fa:71:db:1f:0f:a8:27:9b: 10:4e:d2:f3:1f:2a:a9:00:b5:84:fd:c5:dd:03:62:f0:ca:f6: 12:ff:e2:d0:4b:8e:83:35:37:6e:33:98:16:cc:13:69:9a:09: a2:2d:6a:4c:9d:49:a4:b1:fc:d8:3b:12:07:73:bd:3b:a0:ca: de:3a:2b:99:1d:12:ea:bf:ae:7c:08:b5:c8:d7:0b:d3:d9:8b: bb:9a:f8:e3:0b:4b:17:a1:30:1f:00:d7:e4:73:3a:3d:c0:43: 0e:2e:a5:e5:38:2e:41:cb:dd:00:3f:74:64:d8:b3:43:5d:04: 15:94:26:76:6d:84:5c:95:82:68:0e:ad:24:58:02:d6:5e:42: 66:83:6c:ba:25:36:df:62:0c:4b:5c:15:d9:6f:42:27:4d:5b: 36:cd:93:15:97:a3:84:85:cd:f0:1a:8f:f1:02:8b:82:b2:43: 07:bc:4a:00:90:9a:96:21:de:85:0c:f1:8f:6a:e2:ed:a1:fa: 65:0c:04:6a:2f:1b:ff:c7:87:f1:01:dc:e6:a2:04:61:88:45: f4:b8:48:b7:12:82:f3:91:99:dc:91:84:95:49:e3:0f:10:e8: 19:88:21:80 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUTZbMZz5xL7V4BdajxRQXnBTxHAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwMzI3MTEzNTA0WhcNMjUwMzI2MTE0MDA0 WjAzMTEwLwYDVQQDEyhCOUFBNTlCNjU3NTlDQTM5REMwMDUzOTQ4N0ZGRDE4QzlE MTZGNEU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI3m66/XV+gL OkjCZi3F8jRJ8mk6VdbeBkgsJaP4BvJfYjnFS3HpU0TFFdC/k015rCmp3sVqo6UN hc0Ozr5fc6U2p6yHYgTWHRVFpAiJF8M3wOeD73wruXrHtVSPd7P+ZPuYd51VlDpb 3Zke/qYqecq8cKBZBVRZDTi4qziOKq6oc+XPtu9h9mUVkv/l14leR/oJBvPo611O sl+nYOYkYjduC5+nYGwjvwWNtdUSzhm78KQxLHLe6+ptYJRDhR9OLj/C86Y+jHrT tdKXb4R3QeWh2YSnx6+5QAfUIDGx/Zwqdy5mQNpAqvdretUEIZiTeyybENX2tj9S 7Q9iw3JcywIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLmqWbZXWco53ABTlIf/0Yyd FvToMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzMzNjAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnf4YMA0GCSqGSIb3DQEBCwUAA4IB AQAh7Sx+SxDFrHig16MkiBQiZ4ZoxO/Cd+bLcc09+nHbHw+oJ5sQTtLzHyqpALWE /cXdA2LwyvYS/+LQS46DNTduM5gWzBNpmgmiLWpMnUmksfzYOxIHc707oMreOiuZ HRLqv658CLXI1wvT2Yu7mvjjC0sXoTAfANfkczo9wEMOLqXlOC5By90AP3Rk2LND XQQVlCZ2bYRclYJoDq0kWALWXkJmg2y6JTbfYgxLXBXZb0InTVs2zZMVl6OEhc3w Go/xAouCskMHvEoAkJqWId6FDPGPauLtofplDARqLxv/x4fxAdzmogRhiEX0uEi3 EoLzkZnckYSVSeMPEOgZiCGA -----END CERTIFICATE-----Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org