$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: HuYAo7UoyGcykyxbBkvV7sOyY5l/O3RznaTF2rASEos= Subject key identifier: 34:C4:51:62:1A:FD:57:0C:37:BC:2B:51:08:2F:8E:B3:89:86:69:D7 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 52C2EE3D24F444EE8371303728E91C242E21785B Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa Signing time: Thu 26 Jun 2025 18:29:44 +0000 ROA not before: Thu 26 Jun 2025 18:24:44 +0000 ROA not after: Thu 25 Jun 2026 18:29:44 +0000 asID: 3356 IP address blocks: 140.99.60.0/24 maxlen: 24 140.99.69.0/24 maxlen: 24 140.99.103.0/24 maxlen: 24 140.99.241.0/24 maxlen: 24 140.99.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 02:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c2:ee:3d:24:f4:44:ee:83:71:30:37:28:e9:1c:24:2e:21:78:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jun 26 18:24:44 2025 GMT Not After : Jun 25 18:29:44 2026 GMT Subject: CN=34C451621AFD570C37BC2B51082F8EB3898669D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:4b:fe:77:e4:61:40:49:b7:b6:55:93:25: 96:d5:69:42:fd:a3:dd:75:5e:d9:df:dc:57:fe:76: a0:af:b6:22:ce:e6:c7:1f:03:2e:67:c6:70:44:76: 38:88:31:25:4f:07:11:a2:d4:15:fe:9e:f0:c9:cd: 3d:a0:3a:a4:01:ae:6d:d7:1f:bd:22:b5:ca:f1:c2: ee:5b:84:c1:0a:c6:0e:56:7d:21:93:b1:48:b9:d6: 7e:70:6c:a2:37:cd:0c:09:59:d7:23:15:c4:eb:38: 56:75:ca:bc:95:75:90:3f:06:c9:5b:a4:f5:d3:85: e7:31:b3:b8:e0:85:e2:87:37:be:a9:b1:c2:72:d0: 54:f7:49:d0:42:a5:c8:2f:1c:6f:d7:d3:27:3a:f5: ef:c4:75:0b:7d:ff:ca:0e:51:0a:a7:d7:27:3b:f0: f0:fe:bb:49:3b:42:a1:b4:50:99:09:0d:73:d2:dc: de:18:09:26:56:2a:0f:6a:3a:ea:7a:44:31:23:18: 74:05:c0:b0:47:a2:dc:78:5a:e7:bc:9b:ff:c3:1c: 0a:cd:7d:40:1a:36:89:6c:a2:22:42:bc:64:9b:80: 2e:13:62:47:e8:4b:94:e9:f7:85:cc:06:f8:a4:8e: a5:04:14:94:84:f5:a6:97:48:96:27:8c:5d:59:ac: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C4:51:62:1A:FD:57:0C:37:BC:2B:51:08:2F:8E:B3:89:86:69:D7 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.60.0/24 140.99.69.0/24 140.99.103.0/24 140.99.241.0/24 140.99.248.0/24 Signature Algorithm: sha256WithRSAEncryption 20:02:39:47:9f:b2:d4:9b:72:c1:86:37:46:9b:c3:8a:f3:bb: b5:08:4b:34:e7:9f:c4:8d:d8:ed:b6:74:3b:90:cc:05:4c:b8: e9:77:0f:67:c8:72:72:12:cb:fe:51:fd:e9:bf:b9:49:34:d4: 72:01:ed:92:ef:d3:83:da:b5:68:5a:70:b5:25:bf:d0:34:57: 98:16:e9:fd:99:31:59:1e:18:8d:3d:63:97:05:ab:07:c5:e0: 3b:40:70:55:73:c5:e8:3b:3b:f2:73:96:7a:ec:ff:4f:9d:59: 64:cf:d2:6b:f6:21:b7:12:fd:ac:29:fa:92:32:98:cb:99:0c: 33:dd:5a:fe:cb:38:f3:86:cc:ba:07:e6:5c:01:fe:f0:65:14: 3a:f4:8b:45:a2:55:76:1a:d3:86:68:54:10:23:f2:69:15:60: 68:07:a3:6f:f8:92:84:d6:40:6c:51:38:36:b9:9e:19:79:b6: 79:22:aa:aa:03:1b:6d:97:cb:37:43:be:e6:93:45:40:22:a4: 8c:1d:f6:20:a6:2d:1e:10:f0:b5:5d:c2:e5:26:d1:13:b7:04: 3a:91:40:81:87:65:cd:0e:14:82:e9:8c:b9:54:ac:fc:df:06: cb:47:9f:92:1f:46:bf:11:40:e1:34:1b:dd:8f:c4:8f:10:66: 7a:80:fb:50 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUUsLuPST0RO6DcTA3KOkcJC4heFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwNjI2MTgyNDQ0WhcNMjYwNjI1MTgyOTQ0 WjAzMTEwLwYDVQQDEygzNEM0NTE2MjFBRkQ1NzBDMzdCQzJCNTEwODJGOEVCMzg5 ODY2OUQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArahL/nfkYUBJ t7ZVkyWW1WlC/aPddV7Z39xX/nagr7YizubHHwMuZ8ZwRHY4iDElTwcRotQV/p7w yc09oDqkAa5t1x+9IrXK8cLuW4TBCsYOVn0hk7FIudZ+cGyiN80MCVnXIxXE6zhW dcq8lXWQPwbJW6T104XnMbO44IXihze+qbHCctBU90nQQqXILxxv19MnOvXvxHUL ff/KDlEKp9cnO/Dw/rtJO0KhtFCZCQ1z0tzeGAkmVioPajrqekQxIxh0BcCwR6Lc eFrnvJv/wxwKzX1AGjaJbKIiQrxkm4AuE2JH6EuU6feFzAb4pI6lBBSUhPWml0iW J4xdWax+MwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDTEUWIa/VcMN7wrUQgvjrOJ hmnXMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYI KwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBACMYzwDBACMY0UDBACMY2cDBACMY/ED BACMY/gwDQYJKoZIhvcNAQELBQADggEBACACOUefstSbcsGGN0abw4rzu7UISzTn n8SN2O22dDuQzAVMuOl3D2fIcnISy/5R/em/uUk01HIB7ZLv04PatWhacLUlv9A0 V5gW6f2ZMVkeGI09Y5cFqwfF4DtAcFVzxeg7O/Jzlnrs/0+dWWTP0mv2IbcS/awp +pIymMuZDDPdWv7LOPOGzLoH5lwB/vBlFDr0i0WiVXYa04ZoVBAj8mkVYGgHo2/4 koTWQGxRODa5nhl5tnkiqqoDG22XyzdDvuaTRUAipIwd9iCmLR4Q8LVdwuUm0RO3 BDqRQIGHZc0OFILpjLlUrPzfBstHn5IfRr8RQOE0G92PxI8QZnqA+1A= -----END CERTIFICATE-----Generated at Sun Jun 29 15:50:50 2025 by rpki-client