$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa File: AS40092.roa (raw, json) Hash identifier: 6QBOkI656OoU1pxl5K3w8Dzp+PBJ5t9i2dVgpNjm3cs= Subject key identifier: 67:D3:EE:AF:16:7A:E5:25:DF:92:C3:2E:2B:85:9D:C2:8F:75:AE:8C Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 099D5A5B0F50766D7637036CAE3EDAE66FFAFDBC Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa Signing time: Wed 17 Jan 2024 16:11:28 +0000 ROA not before: Wed 17 Jan 2024 16:06:28 +0000 ROA not after: Wed 15 Jan 2025 16:11:28 +0000 asID: 40092 IP address blocks: 66.102.128.0/20 maxlen: 24 190.180.144.0/22 maxlen: 24 208.79.216.0/22 maxlen: 24 2604:9780::/32 maxlen: 48 2605:6f00::/32 maxlen: 48 2620:b:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 02:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9d:5a:5b:0f:50:76:6d:76:37:03:6c:ae:3e:da:e6:6f:fa:fd:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jan 17 16:06:28 2024 GMT Not After : Jan 15 16:11:28 2025 GMT Subject: CN=67D3EEAF167AE525DF92C32E2B859DC28F75AE8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:10:56:1f:22:41:33:b8:04:3a:ed:65:0e: 39:3f:ba:d2:60:47:82:4c:96:c6:51:42:bb:aa:7a: b3:c7:ed:eb:81:6b:36:a2:43:10:a2:16:0e:45:19: 33:70:7d:b9:fd:fa:e4:a3:8f:f8:52:e0:db:aa:2b: e5:c8:f5:cc:0c:50:14:29:50:9f:7f:e0:c9:2c:7e: 4f:08:7e:c3:2b:ce:42:d5:aa:44:59:5a:2f:8f:32: a4:2c:bb:ec:13:f2:08:84:e2:54:1b:f5:34:43:d8: 34:7d:aa:b7:2d:0b:8a:68:14:0b:a2:6f:65:ad:5f: 43:ef:be:b1:43:3c:a2:f2:0b:73:90:07:89:b8:3c: 0a:2e:3a:99:c9:1b:61:6d:78:8e:1a:f7:0f:9f:6b: 4c:3d:a6:c4:e6:bf:b7:d2:b5:b5:9f:dd:37:24:ed: cd:b5:8c:25:4f:44:2a:d6:ed:2d:09:8a:44:ed:26: d0:14:ca:0b:16:2c:36:4f:11:30:ca:b5:50:ad:8a: 59:a9:b5:41:9d:1f:62:6e:c1:c6:35:ac:c4:10:7f: ab:ac:50:cb:5d:44:31:c7:a2:b7:9b:8b:3f:6e:db: 7f:9e:d1:bd:9f:50:b6:27:43:a8:cd:59:f4:cd:fc: 58:44:5e:75:e2:07:6d:63:8f:45:79:87:78:47:97: 56:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D3:EE:AF:16:7A:E5:25:DF:92:C3:2E:2B:85:9D:C2:8F:75:AE:8C X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.102.128.0/20 190.180.144.0/22 208.79.216.0/22 IPv6: 2604:9780::/32 2605:6f00::/32 2620:b:e000::/48 Signature Algorithm: sha256WithRSAEncryption 5c:04:36:92:7e:9c:4c:d1:39:6b:63:4f:8b:1c:80:df:2c:d0: a7:df:e5:11:e5:d0:5c:61:e2:a0:5b:4c:92:f3:44:6f:34:f8: 10:1c:64:a0:24:22:c0:33:f8:0d:fe:3b:85:4a:f4:b0:39:63: 9a:77:b5:12:86:c2:26:42:f7:68:5b:8c:e3:f4:37:4a:2e:59: 24:b2:c8:f9:58:30:ba:ac:a4:0d:fa:b0:e5:a8:10:1e:d2:b0: 43:6f:3b:26:c2:ff:18:ba:e5:c4:1e:cf:2b:3a:f4:88:26:1e: bd:54:ce:b1:16:6f:c9:2f:fd:5a:ea:79:f8:a2:50:ed:64:6d: 42:c6:9f:81:f7:ef:7a:c7:44:86:7f:15:5c:09:fb:08:d8:9c: eb:cb:04:b0:7c:cf:e5:f2:50:ce:79:3a:89:c0:0b:d8:7b:b3: ae:9e:5d:13:47:82:8e:8e:5b:7f:eb:d8:7a:37:d8:a1:d5:43: 6a:f5:1f:99:ac:56:35:a1:c1:01:ac:97:10:ac:2c:73:06:88: 19:e2:56:33:b5:3b:19:e0:0a:d4:a6:8b:43:c0:1b:0b:fa:a4: d0:97:fe:61:87:05:ba:36:3c:10:ad:d7:95:b7:a7:04:42:87: 42:88:6c:eb:d2:a7:64:9f:21:9e:b2:13:dc:fc:f9:60:42:6a: 2a:33:cb:45 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUCZ1aWw9Qdm12NwNsrj7a5m/6/bwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwMTE3MTYwNjI4WhcNMjUwMTE1MTYxMTI4 WjAzMTEwLwYDVQQDEyg2N0QzRUVBRjE2N0FFNTI1REY5MkMzMkUyQjg1OURDMjhG NzVBRThDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdgQVh8iQTO4 BDrtZQ45P7rSYEeCTJbGUUK7qnqzx+3rgWs2okMQohYORRkzcH25/frko4/4UuDb qivlyPXMDFAUKVCff+DJLH5PCH7DK85C1apEWVovjzKkLLvsE/IIhOJUG/U0Q9g0 faq3LQuKaBQLom9lrV9D776xQzyi8gtzkAeJuDwKLjqZyRthbXiOGvcPn2tMPabE 5r+30rW1n903JO3NtYwlT0Qq1u0tCYpE7SbQFMoLFiw2TxEwyrVQrYpZqbVBnR9i bsHGNazEEH+rrFDLXUQxx6K3m4s/btt/ntG9n1C2J0OozVn0zfxYRF514gdtY49F eYd4R5dWlwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFGfT7q8WeuUl35LDLiuFncKP da6MMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwMDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEoG CCsGAQUFBwEHAQH/BDswOTAYBAIAATASAwQEQmaAAwQCvrSQAwQC0E/YMB0EAgAC MBcDBQAmBJeAAwUAJgVvAAMHACYgAAvgADANBgkqhkiG9w0BAQsFAAOCAQEAXAQ2 kn6cTNE5a2NPixyA3yzQp9/lEeXQXGHioFtMkvNEbzT4EBxkoCQiwDP4Df47hUr0 sDljmne1EobCJkL3aFuM4/Q3Si5ZJLLI+VgwuqykDfqw5agQHtKwQ287JsL/GLrl xB7PKzr0iCYevVTOsRZvyS/9Wup5+KJQ7WRtQsafgffvesdEhn8VXAn7CNic68sE sHzP5fJQznk6icAL2Huzrp5dE0eCjo5bf+vYejfYodVDavUfmaxWNaHBAayXEKws cwaIGeJWM7U7GeAK1KaLQ8AbC/qk0Jf+YYcFujY8EK3XlbenBEKHQohs69KnZJ8h nrIT3Pz5YEJqKjPLRQ== -----END CERTIFICATE-----Generated at Wed May 1 00:35:08 2024 by rpki-client on console-ams.rpki-client.org