$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54641.roa File: AS54641.roa (raw, json) Hash identifier: QhqGCnRVsrb2MGBkPYDHS8tchJQdXzG5ey2rRFu6a/c= Subject key identifier: C3:35:AE:F3:15:5C:D4:08:43:E4:B4:89:6B:E6:44:61:0C:FD:E8:FF Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 3E1015F19B6D90ABDAD1CF4B73EAF426BA1486AB Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54641.roa Signing time: Fri 03 May 2024 00:00:09 +0000 ROA not before: Thu 02 May 2024 23:55:09 +0000 ROA not after: Fri 02 May 2025 00:00:09 +0000 asID: 54641 IP address blocks: 140.99.144.0/22 maxlen: 24 140.99.172.0/22 maxlen: 24 140.99.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 14:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:10:15:f1:9b:6d:90:ab:da:d1:cf:4b:73:ea:f4:26:ba:14:86:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: May 2 23:55:09 2024 GMT Not After : May 2 00:00:09 2025 GMT Subject: CN=C335AEF3155CD40843E4B4896BE644610CFDE8FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e4:a2:99:a9:1d:ec:70:91:a2:15:d7:98:71: 13:31:00:d4:6b:fa:5d:f0:ff:60:82:68:82:0a:4b: cd:36:b9:72:ec:ee:0e:9d:be:2c:38:1d:51:ea:d7: 7a:fc:1a:27:ee:0e:5f:f8:56:42:9c:d2:1e:a3:6b: 26:1b:66:98:94:41:20:33:ae:bb:3b:b5:b8:07:87: 1e:e2:a5:aa:8b:81:26:0c:d7:fd:24:9c:c4:72:f3: 53:bb:03:af:33:d3:22:3c:45:4c:a4:44:22:b5:a9: fb:cc:a5:35:1a:df:ff:3d:da:99:dd:98:34:5e:10: bd:b4:d3:c2:27:26:da:01:04:13:86:68:7b:d1:6b: a1:ef:ea:99:01:7a:63:3f:97:b1:cf:25:9d:81:ef: 2e:09:fe:08:4f:06:9d:b7:d4:b4:fc:04:ce:bb:cf: 86:dd:24:4b:7a:46:cd:25:27:bb:c2:f1:ae:38:a1: c2:6b:cb:9f:cb:81:03:11:d2:c7:2c:58:20:33:58: c3:d6:41:df:b3:34:43:c7:bb:f1:6c:1f:3c:df:c7: c0:ca:0c:b3:87:ed:69:c3:27:1e:c0:e2:61:89:c2: 01:5a:98:38:6a:a3:3b:aa:7a:66:c8:e7:7c:3d:87: 3f:a4:cb:d2:83:ce:a4:9d:f3:6c:85:59:ad:d7:02: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:35:AE:F3:15:5C:D4:08:43:E4:B4:89:6B:E6:44:61:0C:FD:E8:FF X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.144.0/22 140.99.172.0-140.99.179.255 Signature Algorithm: sha256WithRSAEncryption 89:6a:be:c8:a1:77:90:4f:6d:a2:48:2a:83:94:7f:69:14:16: 28:7f:2b:3e:14:4a:b0:3c:28:6d:bc:cb:47:9c:a9:43:3f:40: 93:2c:fc:75:3a:08:ec:cb:bd:a8:ae:04:d0:40:33:15:61:d0: dd:ac:dd:54:ea:45:97:b8:1e:a2:e6:93:f5:64:2f:e5:31:4c: e1:95:c8:7f:d5:c2:fd:af:6e:2d:25:ec:16:16:27:c7:bc:b3: 94:ea:a3:e3:79:23:42:16:5b:3b:14:f6:30:c0:5e:4d:57:dc: f9:a9:d6:bc:48:99:6f:aa:e1:85:57:07:12:84:ee:42:ef:a3: 78:a5:86:03:88:06:3b:d1:90:de:d5:e5:8c:16:99:6b:97:9b: 12:03:e5:98:e6:ec:fc:84:4d:3f:20:4f:6d:f0:13:2f:13:1b: e6:f1:b2:ba:50:02:06:57:6d:d7:45:e7:5f:3b:3a:bd:ba:7c: aa:df:a9:71:5e:76:1a:c5:45:f1:ab:d9:69:d3:7d:94:97:6b: dc:68:0c:2e:66:56:9c:62:37:48:c9:58:31:69:b5:07:69:42: 68:92:0f:8e:a9:75:03:03:8e:13:64:52:2f:25:ae:18:19:b5: b6:0b:7d:ab:5e:c2:f7:f3:4c:e7:a3:d3:26:34:23:b2:88:0f: a9:fc:6b:33 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIUPhAV8ZttkKva0c9Lc+r0JroUhqswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwNTAyMjM1NTA5WhcNMjUwNTAyMDAwMDA5 WjAzMTEwLwYDVQQDEyhDMzM1QUVGMzE1NUNENDA4NDNFNEI0ODk2QkU2NDQ2MTBD RkRFOEZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uSimakd7HCR ohXXmHETMQDUa/pd8P9ggmiCCkvNNrly7O4Onb4sOB1R6td6/Bon7g5f+FZCnNIe o2smG2aYlEEgM667O7W4B4ce4qWqi4EmDNf9JJzEcvNTuwOvM9MiPEVMpEQitan7 zKU1Gt//PdqZ3Zg0XhC9tNPCJybaAQQThmh70Wuh7+qZAXpjP5exzyWdge8uCf4I Twadt9S0/ATOu8+G3SRLekbNJSe7wvGuOKHCa8ufy4EDEdLHLFggM1jD1kHfszRD x7vxbB8838fAygyzh+1pwycewOJhicIBWpg4aqM7qnpmyOd8PYc/pMvSg86knfNs hVmt1wL2AwIDAQABo4ICjDCCAogwHQYDVR0OBBYEFMM1rvMVXNQIQ+S0iWvmRGEM /ej/MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzU0NjQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0G CCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCjGOQMAwDBAKMY6wDBAKMY7AwDQYJ KoZIhvcNAQELBQADggEBAIlqvsihd5BPbaJIKoOUf2kUFih/Kz4USrA8KG28y0ec qUM/QJMs/HU6COzLvaiuBNBAMxVh0N2s3VTqRZe4HqLmk/VkL+UxTOGVyH/Vwv2v bi0l7BYWJ8e8s5Tqo+N5I0IWWzsU9jDAXk1X3Pmp1rxImW+q4YVXBxKE7kLvo3il hgOIBjvRkN7V5YwWmWuXmxID5Zjm7PyETT8gT23wEy8TG+bxsrpQAgZXbddF5187 Or26fKrfqXFedhrFRfGr2WnTfZSXa9xoDC5mVpxiN0jJWDFptQdpQmiSD46pdQMD jhNkUi8lrhgZtbYLfatewvfzTOej0yY0I7KID6n8azM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:16:13 2024 by rpki-client on console-ams.rpki-client.org