$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa File: AS39945.roa (raw, json) Hash identifier: HBKNSLuHUyXbzmmrUwZ8SFSon+sbYYJfqqvlzHvFHY8= Subject key identifier: C6:95:4A:41:BD:31:3C:FB:F0:6E:47:2F:F9:AD:C9:97:97:ED:A1:8D Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 559EAD0F6FD14E60A4F988CD67146C59D761D993 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa Signing time: Mon 22 Jan 2024 07:42:10 +0000 ROA not before: Mon 22 Jan 2024 07:37:10 +0000 ROA not after: Mon 20 Jan 2025 07:42:10 +0000 asID: 39945 IP address blocks: 45.54.20.0/24 maxlen: 24 2607:f740:e620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9e:ad:0f:6f:d1:4e:60:a4:f9:88:cd:67:14:6c:59:d7:61:d9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Jan 22 07:37:10 2024 GMT Not After : Jan 20 07:42:10 2025 GMT Subject: CN=C6954A41BD313CFBF06E472FF9ADC99797EDA18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:94:2c:b9:7a:f8:02:27:25:a4:f2:b5:6c: 53:c6:c6:66:dc:95:8c:f3:43:c5:d5:7b:58:66:2c: e5:21:a4:c2:9e:1b:7b:c7:20:5e:d3:72:70:de:64: e4:90:b7:00:fa:45:97:55:48:3a:ff:da:78:98:de: b8:95:4d:c2:4d:0d:01:ab:f5:6a:08:3e:d1:34:81: d2:f8:2f:50:69:c1:d9:58:3b:75:79:b0:6c:82:33: 61:37:08:2f:46:c1:f4:b3:e5:5f:ab:3a:db:45:19: a4:bb:7f:ad:d2:6e:ef:37:5a:cb:3b:79:07:9f:b3: d5:95:76:6b:95:5c:d1:17:33:76:d0:60:f3:0b:90: ff:e1:7e:d1:fc:18:41:b0:c4:50:8d:81:c4:ed:19: 26:5a:8b:f8:dd:57:88:23:a9:ec:1b:59:28:9c:5a: 07:ca:0d:df:b4:31:88:db:6a:a0:60:57:07:f1:a7: 11:09:88:3e:47:15:06:36:1e:7e:6a:7d:a3:ff:2d: 85:d7:a3:23:43:58:6d:03:fc:45:95:5d:85:9f:98: ec:a6:5c:c5:49:8e:fb:62:19:a3:b4:f3:60:7b:50: af:1c:25:ad:f3:44:42:31:b0:d6:3c:ed:87:44:14: 64:6d:7e:d5:97:c5:7e:19:81:e3:46:4b:db:d7:cd: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:95:4A:41:BD:31:3C:FB:F0:6E:47:2F:F9:AD:C9:97:97:ED:A1:8D X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.20.0/24 IPv6: 2607:f740:e620::/48 Signature Algorithm: sha256WithRSAEncryption 87:4b:83:69:51:0f:82:61:b6:20:ce:48:84:6d:af:d8:8b:c3: 40:d0:1e:34:37:3a:bd:40:c4:34:0e:45:96:11:17:a7:01:cf: 52:05:4c:89:bc:48:3f:be:a5:84:4c:67:6f:e3:13:e4:e5:f7: 86:26:59:01:44:97:e6:bb:ca:0e:83:f6:45:48:3a:65:e1:8d: 05:93:ff:e4:69:05:56:61:b5:18:51:d2:8d:5d:27:67:7a:fd: ba:1e:9b:bc:b6:b6:53:6b:79:7f:5b:85:f8:59:9c:fc:cb:a9: 2a:2a:d3:fb:6d:22:a7:8c:90:1c:ac:8a:9c:1d:86:6f:f7:37: c3:ba:75:c9:24:0c:cd:10:49:9e:67:2f:38:6f:f6:b7:43:31: a2:bc:c2:a0:56:cf:18:ea:b3:72:14:65:d7:6e:30:e8:65:7b: fd:ba:c6:a8:8c:0b:27:c3:8c:e4:9d:65:d5:18:f7:f6:6d:2a: d6:cc:73:64:50:f5:81:21:03:28:8b:35:68:b1:d0:30:b6:bf: 86:5d:2b:21:55:37:8f:d4:8b:a8:c3:80:64:0d:a8:a6:5a:cb: c8:6e:c3:5b:81:5f:6a:f0:9e:2e:ac:62:c7:a6:1e:f5:6b:ea: 4a:5b:8b:83:a3:b3:90:38:c7:a4:6a:7f:31:37:87:eb:43:76: 66:03:2a:d7 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUVZ6tD2/RTmCk+YjNZxRsWddh2ZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQwMTIyMDczNzEwWhcNMjUwMTIwMDc0MjEw WjAzMTEwLwYDVQQDEyhDNjk1NEE0MUJEMzEzQ0ZCRjA2RTQ3MkZGOUFEQzk5Nzk3 RURBMThEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRqULLl6+AIn JaTytWxTxsZm3JWM80PF1XtYZizlIaTCnht7xyBe03Jw3mTkkLcA+kWXVUg6/9p4 mN64lU3CTQ0Bq/VqCD7RNIHS+C9QacHZWDt1ebBsgjNhNwgvRsH0s+VfqzrbRRmk u3+t0m7vN1rLO3kHn7PVlXZrlVzRFzN20GDzC5D/4X7R/BhBsMRQjYHE7RkmWov4 3VeII6nsG1konFoHyg3ftDGI22qgYFcH8acRCYg+RxUGNh5+an2j/y2F16MjQ1ht A/xFlV2Fn5jsplzFSY77YhmjtPNge1CvHCWt80RCMbDWPO2HRBRkbX7Vl8V+GYHj Rkvb183waQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFMaVSkG9MTz78G5HL/mtyZeX 7aGNMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzM5OTQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALTYUMA8EAgACMAkDBwAmB/dA5iAw DQYJKoZIhvcNAQELBQADggEBAIdLg2lRD4JhtiDOSIRtr9iLw0DQHjQ3Or1AxDQO RZYRF6cBz1IFTIm8SD++pYRMZ2/jE+Tl94YmWQFEl+a7yg6D9kVIOmXhjQWT/+Rp BVZhtRhR0o1dJ2d6/boem7y2tlNreX9bhfhZnPzLqSoq0/ttIqeMkBysipwdhm/3 N8O6dckkDM0QSZ5nLzhv9rdDMaK8wqBWzxjqs3IUZdduMOhle/26xqiMCyfDjOSd ZdUY9/ZtKtbMc2RQ9YEhAyiLNWix0DC2v4ZdKyFVN4/Ui6jDgGQNqKZay8huw1uB X2rwni6sYsemHvVr6kpbi4Ojs5A4x6RqfzE3h+tDdmYDKtc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:46:01 2024 by rpki-client on console-ams.rpki-client.org