$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: d2dDREGPrJ3gyhSD/K10bn0J+xTnnm0P1WXtQ1IJR1Q= Subject key identifier: 2E:F5:CE:6C:71:11:6F:6D:0C:2E:40:A4:A2:98:62:E2:09:23:9D:BA Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 55E1675F7AB73724FFBBABFEC616D4C789871E56 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3356.roa Signing time: Sat 16 Nov 2024 06:15:24 +0000 ROA not before: Sat 16 Nov 2024 06:10:24 +0000 ROA not after: Sat 15 Nov 2025 06:15:24 +0000 asID: 3356 IP address blocks: 66.225.236.0/24 maxlen: 24 75.102.15.0/24 maxlen: 24 167.88.146.0/24 maxlen: 24 204.93.147.0/24 maxlen: 24 205.234.154.0/24 maxlen: 24 216.246.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e1:67:5f:7a:b7:37:24:ff:bb:ab:fe:c6:16:d4:c7:89:87:1e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Nov 16 06:10:24 2024 GMT Not After : Nov 15 06:15:24 2025 GMT Subject: CN=2EF5CE6C71116F6D0C2E40A4A29862E209239DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:55:8b:e3:bc:dc:b2:91:90:f3:a0:2d:45: 98:21:20:b8:dc:4d:db:df:49:8d:8d:87:06:5b:45: 17:bd:2b:8a:dc:ab:04:0b:80:73:ff:18:43:af:49: b1:e8:d6:c8:68:4d:e3:25:24:cf:6f:ce:2b:b9:55: 0d:ae:53:22:80:46:63:0e:31:77:19:48:83:ae:f8: 9a:32:35:bd:1c:15:86:95:a1:0b:81:78:9f:0a:38: 29:b5:d4:e5:8a:0c:dd:9f:ce:ea:8d:0f:8f:10:7c: 09:e2:49:57:2d:50:cd:32:0c:7c:50:5d:a1:7c:01: 92:7f:5c:6c:b4:10:c5:ff:1d:11:20:aa:a0:8c:c8: 87:58:54:01:89:29:dd:6f:0f:2d:70:dd:e1:87:c4: a3:51:68:0a:9d:05:eb:93:d4:1f:a1:a1:6f:64:b1: 88:31:5c:7e:6b:96:a1:ce:84:3f:c2:60:8d:79:70: 44:f2:37:ce:00:e7:f7:8c:97:cb:1f:83:f8:66:53: be:d2:6c:aa:64:84:7e:e5:05:2f:98:d5:d4:95:b1: 99:12:fb:73:ae:83:d2:42:60:b5:7f:45:aa:ea:e3: 3c:2d:72:32:55:1b:ee:60:01:24:b4:87:4c:6b:4f: 02:e1:d8:8d:86:50:2d:2f:10:0d:af:ab:ca:5b:65: 15:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F5:CE:6C:71:11:6F:6D:0C:2E:40:A4:A2:98:62:E2:09:23:9D:BA X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.225.236.0/24 75.102.15.0/24 167.88.146.0/24 204.93.147.0/24 205.234.154.0/24 216.246.106.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:f6:53:32:02:0e:db:a5:09:64:c6:44:58:86:c9:bd:4b:69: 60:01:fb:97:bb:48:2e:5f:d0:7e:d7:68:6b:3c:70:1a:53:76: f7:a5:d6:3d:05:b9:b3:a8:c6:b5:c3:2f:21:59:7f:c5:39:3b: 30:59:61:66:96:7f:70:c4:4e:b7:48:5d:5d:2a:c7:c0:27:fd: 06:9f:3d:fe:35:9b:65:bd:c2:2b:28:9d:36:a6:ca:66:47:d3: 99:1c:c0:73:2d:47:c0:d8:69:5d:e3:1b:91:9b:8e:69:9f:f4: 3c:07:45:3c:3c:82:d4:4e:34:03:47:c5:75:74:bb:ab:14:9a: 76:fa:e7:08:7d:80:27:af:74:4c:c4:d4:53:1e:b7:4e:f7:c1: bf:b2:2a:cc:4b:8d:dd:c3:59:35:30:82:c9:1d:be:7e:28:fd: f7:33:b9:a0:ff:06:d1:7c:8e:13:71:c9:30:d7:a9:a6:4a:16: bb:ad:d4:f8:74:f3:73:ad:af:3f:2a:df:8c:47:0d:31:fa:cf: 41:a9:f9:26:be:51:8c:20:44:f7:1a:02:cd:1d:ad:f5:27:f2: 94:f0:48:d0:6b:5f:db:56:9e:07:2b:59:59:97:ff:6b:d2:67: 87:9e:ea:7c:66:44:63:7d:28:ba:98:4a:8e:cc:ac:a0:db:b5: b1:17:f8:ed -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUVeFnX3q3NyT/u6v+xhbUx4mHHlYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE2MDYxMDI0WhcNMjUxMTE1MDYxNTI0 WjAzMTEwLwYDVQQDEygyRUY1Q0U2QzcxMTE2RjZEMEMyRTQwQTRBMjk4NjJFMjA5 MjM5REJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYBVi+O83LKR kPOgLUWYISC43E3b30mNjYcGW0UXvSuK3KsEC4Bz/xhDr0mx6NbIaE3jJSTPb84r uVUNrlMigEZjDjF3GUiDrviaMjW9HBWGlaELgXifCjgptdTligzdn87qjQ+PEHwJ 4klXLVDNMgx8UF2hfAGSf1xstBDF/x0RIKqgjMiHWFQBiSndbw8tcN3hh8SjUWgK nQXrk9QfoaFvZLGIMVx+a5ahzoQ/wmCNeXBE8jfOAOf3jJfLH4P4ZlO+0myqZIR+ 5QUvmNXUlbGZEvtzroPSQmC1f0Wq6uM8LXIyVRvuYAEktIdMa08C4diNhlAtLxAN r6vKW2UVJwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC71zmxxEW9tDC5ApKKYYuIJ I526MB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBABC4ewDBABLZg8DBACnWJIDBADMXZMD BADN6poDBADY9mowDQYJKoZIhvcNAQELBQADggEBAI/2UzICDtulCWTGRFiGyb1L aWAB+5e7SC5f0H7XaGs8cBpTdvel1j0FubOoxrXDLyFZf8U5OzBZYWaWf3DETrdI XV0qx8An/QafPf41m2W9wisonTamymZH05kcwHMtR8DYaV3jG5Gbjmmf9DwHRTw8 gtRONANHxXV0u6sUmnb65wh9gCevdEzE1FMet073wb+yKsxLjd3DWTUwgskdvn4o /fczuaD/BtF8jhNxyTDXqaZKFrut1Ph083Otrz8q34xHDTH6z0Gp+Sa+UYwgRPca As0drfUn8pTwSNBrX9tWngcrWVmX/2vSZ4ee6nxmRGN9KLqYSo7MrKDbtbEX+O0= -----END CERTIFICATE-----Generated at Thu Nov 21 23:35:00 2024 by rpki-client on console-ams.rpki-client.org