$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa File: AS39945.roa (raw, json) Hash identifier: bgm+iXJJ/ZA0Kc/OReljH86SL7cR+q7frlGVimmLIA0= Subject key identifier: 43:87:D8:A5:CF:DE:A3:53:18:9B:3A:5C:AC:A1:4C:9B:77:5F:15:B7 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 3337F877EB86216646D0A4BADFF8F5D6C0D9EFEC Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa Signing time: Mon 23 Dec 2024 08:13:29 +0000 ROA not before: Mon 23 Dec 2024 08:08:29 +0000 ROA not after: Mon 22 Dec 2025 08:13:29 +0000 asID: 39945 IP address blocks: 45.54.20.0/24 maxlen: 24 2607:f740:e620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 11:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:37:f8:77:eb:86:21:66:46:d0:a4:ba:df:f8:f5:d6:c0:d9:ef:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Dec 23 08:08:29 2024 GMT Not After : Dec 22 08:13:29 2025 GMT Subject: CN=4387D8A5CFDEA353189B3A5CACA14C9B775F15B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:16:e1:9d:5c:0b:ad:ee:19:77:38:64:1a: 05:e5:b1:61:7c:5d:40:00:ff:32:85:a5:b4:8c:2e: 8d:eb:29:95:95:93:6d:84:f5:8d:5f:38:89:ab:f3: f7:ee:4e:13:23:cc:bd:c4:59:ef:bc:b8:ab:f7:93: 14:14:9e:0e:7e:f9:fd:5d:36:72:f9:35:08:a1:b3: 35:31:82:fd:d2:37:3a:54:06:e6:2c:25:23:da:ac: d0:56:80:6c:3e:70:3d:27:af:b0:e7:3a:2b:b3:27: da:90:d1:2e:e9:df:7a:bf:bf:d8:dc:a3:cf:fa:4d: 19:db:98:ce:db:40:62:14:a8:0a:6d:41:88:e2:98: bc:9e:10:ce:b7:f5:6c:5d:bb:ba:e4:bf:b2:8c:06: 78:78:28:e2:2c:7f:2b:5e:61:1b:51:a9:76:df:e0: a8:fe:d6:2b:0b:45:d3:6d:8d:18:b7:60:a4:43:cc: e0:39:7d:ae:01:be:16:82:f8:bf:be:a0:37:29:72: 6e:f3:c6:79:14:ee:fe:d5:d2:ca:51:47:0c:9e:f8: 5e:d5:3b:7f:43:81:cf:30:fb:56:53:16:d8:7e:73: 13:ea:00:0e:df:ba:fe:a0:53:a2:25:5b:40:cf:c4: f6:a5:28:6e:54:be:0a:8c:6d:a7:2c:d6:70:de:e4: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:87:D8:A5:CF:DE:A3:53:18:9B:3A:5C:AC:A1:4C:9B:77:5F:15:B7 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.20.0/24 IPv6: 2607:f740:e620::/48 Signature Algorithm: sha256WithRSAEncryption 3c:42:48:89:07:88:8b:99:f3:61:83:7b:cd:94:f6:e8:2e:5c: 82:c6:19:09:2a:e3:e4:30:22:81:18:66:ac:05:01:da:73:67: 30:8c:eb:58:f5:d6:94:83:f5:95:0c:8c:94:f2:61:f1:48:9d: 88:38:7e:46:e6:92:15:1d:ad:09:9c:b1:39:60:3d:3e:09:1d: 81:d0:eb:d5:cb:ee:e3:9a:d8:93:cc:69:e7:35:3d:eb:dd:90: 43:f3:66:4c:ff:51:a3:d0:50:cd:8e:8a:90:08:45:ce:e1:79: b0:59:e8:db:3b:af:af:f9:fe:bd:a1:00:ee:57:cf:af:42:9c: 5b:b2:07:9a:45:4b:8b:a1:a5:1c:1a:60:74:ab:ce:85:a8:41: 31:c4:ef:fe:23:84:fe:5f:40:2a:70:54:15:7e:0d:7e:bf:7f: db:d1:72:03:5d:62:99:16:ab:a0:41:36:c1:cc:53:1d:16:2d: f7:b7:69:36:4f:4e:a8:b2:89:f3:8d:ad:67:25:7b:95:e7:8c: f2:28:e6:ec:eb:e7:0b:4a:39:38:f4:ab:e4:5a:7d:41:9b:fa: 84:2b:0e:c7:23:cd:b8:cd:37:a3:fa:7d:1c:c0:8b:de:cc:4a: ee:01:59:75:44:ad:c6:9d:68:8e:dc:16:93:c0:c2:b4:9c:95: ff:ec:c6:e8 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUMzf4d+uGIWZG0KS63/j11sDZ7+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQxMjIzMDgwODI5WhcNMjUxMjIyMDgxMzI5 WjAzMTEwLwYDVQQDEyg0Mzg3RDhBNUNGREVBMzUzMTg5QjNBNUNBQ0ExNEM5Qjc3 NUYxNUI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA238W4Z1cC63u GXc4ZBoF5bFhfF1AAP8yhaW0jC6N6ymVlZNthPWNXziJq/P37k4TI8y9xFnvvLir 95MUFJ4Ofvn9XTZy+TUIobM1MYL90jc6VAbmLCUj2qzQVoBsPnA9J6+w5zorsyfa kNEu6d96v7/Y3KPP+k0Z25jO20BiFKgKbUGI4pi8nhDOt/VsXbu65L+yjAZ4eCji LH8rXmEbUal23+Co/tYrC0XTbY0Yt2CkQ8zgOX2uAb4Wgvi/vqA3KXJu88Z5FO7+ 1dLKUUcMnvhe1Tt/Q4HPMPtWUxbYfnMT6gAO37r+oFOiJVtAz8T2pShuVL4KjG2n LNZw3uTCbwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFEOH2KXP3qNTGJs6XKyhTJt3 XxW3MB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzM5OTQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALTYUMA8EAgACMAkDBwAmB/dA5iAw DQYJKoZIhvcNAQELBQADggEBADxCSIkHiIuZ82GDe82U9uguXILGGQkq4+QwIoEY ZqwFAdpzZzCM61j11pSD9ZUMjJTyYfFInYg4fkbmkhUdrQmcsTlgPT4JHYHQ69XL 7uOa2JPMaec1PevdkEPzZkz/UaPQUM2OipAIRc7hebBZ6Ns7r6/5/r2hAO5Xz69C nFuyB5pFS4uhpRwaYHSrzoWoQTHE7/4jhP5fQCpwVBV+DX6/f9vRcgNdYpkWq6BB NsHMUx0WLfe3aTZPTqiyifONrWcle5XnjPIo5uzr5wtKOTj0q+RafUGb+oQrDscj zbjNN6P6fRzAi97MSu4BWXVErcadaI7cFpPAwrSclf/sxug= -----END CERTIFICATE-----Generated at Tue Apr 8 18:22:09 2025 by rpki-client