$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa File: AS40092.roa (raw, json) Hash identifier: MRx+RehvJlHTlHjel/lF+gMsLS9zrShnSrBTrB2ZaXY= Subject key identifier: 8C:2E:0D:50:6A:FD:26:71:7E:48:B4:08:40:E0:E0:8F:92:01:9E:95 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 1606A9313AF79FD1AE6380E801ED49717655713D Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa Signing time: Thu 07 Nov 2024 08:42:42 +0000 ROA not before: Thu 07 Nov 2024 08:37:42 +0000 ROA not after: Thu 06 Nov 2025 08:42:42 +0000 asID: 40092 IP address blocks: 45.56.216.0/21 maxlen: 24 45.114.224.0/22 maxlen: 24 66.102.128.0/20 maxlen: 24 103.26.140.0/22 maxlen: 24 172.96.176.0/22 maxlen: 24 190.180.144.0/22 maxlen: 24 200.69.0.0/21 maxlen: 24 200.69.16.0/22 maxlen: 24 208.79.216.0/22 maxlen: 24 216.7.88.0/22 maxlen: 24 2604:9780::/32 maxlen: 48 2605:6f00::/32 maxlen: 48 2606:bd00::/32 maxlen: 48 2620:b:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 08:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:06:a9:31:3a:f7:9f:d1:ae:63:80:e8:01:ed:49:71:76:55:71:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Nov 7 08:37:42 2024 GMT Not After : Nov 6 08:42:42 2025 GMT Subject: CN=8C2E0D506AFD26717E48B40840E0E08F92019E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:81:7f:90:e3:99:d9:1e:e2:ef:e5:22:cc: d5:ab:fb:ea:0d:d7:e4:9b:5d:a5:14:57:5c:1d:1f: 98:da:d4:c0:1e:7c:a0:f4:67:ce:f0:7f:db:7e:71: 26:a5:f8:90:22:c2:40:66:0b:84:ab:8e:eb:d2:27: 99:22:5f:b0:92:5f:67:14:41:b3:0e:a8:bb:98:2a: dc:c2:03:75:0c:34:a1:45:e2:13:77:37:64:8f:b4: d6:7d:ac:e7:47:f5:8a:14:cd:2d:c4:84:66:54:c1: 10:b7:05:2d:78:b1:5d:5d:21:6f:ce:47:11:4d:6d: ee:a9:eb:bc:9c:6c:0b:5b:2b:78:bf:16:b1:ea:e6: a5:87:7e:3c:34:fd:09:e9:49:7c:21:31:bc:a9:23: 1a:ce:a3:e9:69:b8:3f:aa:c7:93:de:97:1f:f4:80: 54:50:68:9a:d3:73:47:61:46:1b:8a:7f:c4:98:c2: f4:e3:33:59:02:58:a9:28:50:1e:1b:4f:e1:96:84: 66:d3:24:89:5a:66:b3:19:c6:19:53:fc:31:d7:15: bc:a2:aa:9e:f2:28:bb:83:69:89:7b:6f:7f:b2:a2: a5:69:ce:25:b5:e5:f8:a4:56:55:66:6f:d9:99:77: 92:d3:88:7e:8b:e3:06:11:24:b4:d7:74:24:f3:8c: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2E:0D:50:6A:FD:26:71:7E:48:B4:08:40:E0:E0:8F:92:01:9E:95 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.56.216.0/21 45.114.224.0/22 66.102.128.0/20 103.26.140.0/22 172.96.176.0/22 190.180.144.0/22 200.69.0.0/21 200.69.16.0/22 208.79.216.0/22 216.7.88.0/22 IPv6: 2604:9780::/32 2605:6f00::/32 2606:bd00::/32 2620:b:e000::/48 Signature Algorithm: sha256WithRSAEncryption 33:ec:a4:02:ad:9a:2c:23:fb:2d:3e:3b:53:c4:a9:9e:fc:9c: c8:ca:3c:ac:db:54:af:35:6f:77:3a:ee:83:cd:7b:5f:c3:3a: 87:4d:ee:ed:20:5b:d0:b0:e4:b8:49:ca:ae:d9:bc:b1:4d:92: 4e:a3:f6:4d:0c:95:fc:34:0b:bd:1c:04:40:8c:39:b7:cc:be: ce:f9:a6:5f:36:39:46:1d:43:89:de:42:81:4d:b7:27:31:5f: 4f:c8:2a:db:e2:f5:04:1b:71:7b:4b:a8:ed:6c:20:79:63:e5: aa:dc:44:1a:8b:da:a4:65:bd:b3:c2:e8:7b:f4:68:9d:0c:f7: 86:79:a6:dc:bb:93:3d:0f:9c:19:39:d5:72:cc:4f:99:46:4d: 4d:d2:1c:22:47:7a:78:a3:6d:0d:e9:3e:02:db:e2:01:42:24: 1f:59:77:b6:ab:f8:49:2e:03:1f:99:18:5d:16:39:21:de:66: 17:c8:c6:8a:8e:91:a7:a9:e4:fa:59:83:be:18:7c:f5:98:a9: 5b:04:1e:a9:0f:5c:46:86:76:2c:9b:ed:11:49:eb:fc:22:66: 96:6f:94:66:ec:40:3b:3d:62:d3:b9:a4:0a:4f:0e:e3:14:9a: 50:b7:17:43:a4:c9:0e:84:d1:e3:44:37:23:b4:9e:7e:2d:20: 89:b0:29:65 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUFgapMTr3n9GuY4DoAe1JcXZVcT0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQxMTA3MDgzNzQyWhcNMjUxMTA2MDg0MjQy WjAzMTEwLwYDVQQDEyg4QzJFMEQ1MDZBRkQyNjcxN0U0OEI0MDg0MEUwRTA4Rjky MDE5RTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi6Bf5Djmdke 4u/lIszVq/vqDdfkm12lFFdcHR+Y2tTAHnyg9GfO8H/bfnEmpfiQIsJAZguEq47r 0ieZIl+wkl9nFEGzDqi7mCrcwgN1DDShReITdzdkj7TWfaznR/WKFM0txIRmVMEQ twUteLFdXSFvzkcRTW3uqeu8nGwLWyt4vxax6ualh348NP0J6Ul8ITG8qSMazqPp abg/qseT3pcf9IBUUGia03NHYUYbin/EmML04zNZAlipKFAeG0/hloRm0ySJWmaz GcYZU/wx1xW8oqqe8ii7g2mJe29/sqKlac4lteX4pFZVZm/ZmXeS04h+i+MGESS0 13Qk84xcfwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFIwuDVBq/SZxfki0CEDg4I+S AZ6VMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwMDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHsG CCsGAQUFBwEHAQH/BGwwajBCBAIAATA8AwQDLTjYAwQCLXLgAwQEQmaAAwQCZxqM AwQCrGCwAwQCvrSQAwQDyEUAAwQCyEUQAwQC0E/YAwQC2AdYMCQEAgACMB4DBQAm BJeAAwUAJgVvAAMFACYGvQADBwAmIAAL4AAwDQYJKoZIhvcNAQELBQADggEBADPs pAKtmiwj+y0+O1PEqZ78nMjKPKzbVK81b3c67oPNe1/DOodN7u0gW9Cw5LhJyq7Z vLFNkk6j9k0Mlfw0C70cBECMObfMvs75pl82OUYdQ4neQoFNtycxX0/IKtvi9QQb cXtLqO1sIHlj5arcRBqL2qRlvbPC6Hv0aJ0M94Z5pty7kz0PnBk51XLMT5lGTU3S HCJHenijbQ3pPgLb4gFCJB9Zd7ar+EkuAx+ZGF0WOSHeZhfIxoqOkaep5PpZg74Y fPWYqVsEHqkPXEaGdiyb7RFJ6/wiZpZvlGbsQDs9YtO5pApPDuMUmlC3F0OkyQ6E 0eNENyO0nn4tIImwKWU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:31:28 2025 by rpki-client