$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa File: AS54339.roa (raw, json) Hash identifier: /tfM0ncQvwPAKssSwjOKfIlrxmoQaUEdD2G4WcoQ/W8= Subject key identifier: B6:3A:9E:4B:F0:94:9B:04:F3:F8:0F:0E:08:E8:4A:75:58:43:9A:09 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 3845FD855FA7933C606C2816ADDB2C65DB8FA058 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa Signing time: Thu 03 Apr 2025 16:45:32 +0000 ROA not before: Thu 03 Apr 2025 16:40:32 +0000 ROA not after: Thu 02 Apr 2026 16:45:32 +0000 asID: 54339 IP address blocks: 67.210.102.0/24 maxlen: 24 89.35.93.0/24 maxlen: 24 89.35.94.0/24 maxlen: 24 89.35.95.0/24 maxlen: 24 162.213.3.0/24 maxlen: 24 192.228.113.0/24 maxlen: 24 192.228.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:45:fd:85:5f:a7:93:3c:60:6c:28:16:ad:db:2c:65:db:8f:a0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 3 16:40:32 2025 GMT Not After : Apr 2 16:45:32 2026 GMT Subject: CN=B63A9E4BF0949B04F3F80F0E08E84A7558439A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:e5:43:bc:9e:e7:14:7b:e5:c8:1f:1c:cb: 00:35:24:5b:8a:54:fa:31:45:69:25:36:40:b2:3b: 64:97:89:c1:14:e6:2b:55:8c:03:29:64:40:5b:ef: 48:b6:c2:c0:b7:f8:8b:7e:7f:c1:ef:23:4e:2b:6d: 2f:70:7c:8b:99:82:b5:54:de:84:81:46:e6:25:c8: 0d:0c:24:4c:68:73:aa:9d:02:e1:4b:a7:b5:2d:1b: 3d:23:b4:46:f8:02:2b:9e:3c:ec:99:27:a6:b2:fe: df:e8:86:a9:56:5f:5e:0e:65:cd:d0:9e:01:5a:da: fc:a3:0f:82:d6:f2:76:9c:81:a2:e1:fa:ff:23:f2: 0d:c6:2c:6e:3e:c9:dd:e7:06:94:14:1f:f5:7c:2e: a6:07:03:3a:f0:63:a3:29:8d:02:44:7e:b7:c9:74: 3c:5e:1f:8c:6e:48:2d:50:d2:c0:9e:7c:37:26:85: b5:5a:11:eb:9c:f1:fe:1d:81:aa:bb:c1:f4:f3:14: dd:a9:9f:d2:ed:db:ae:cb:9b:28:ac:65:9b:a3:6e: 5b:a0:cc:21:02:14:a6:6a:7d:5d:fa:7a:0a:69:64: fd:08:68:f3:87:c4:c4:62:7b:fe:6c:f7:1b:70:64: 32:3a:ff:aa:c1:b8:b1:ab:c5:1c:37:42:23:f7:ce: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3A:9E:4B:F0:94:9B:04:F3:F8:0F:0E:08:E8:4A:75:58:43:9A:09 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.102.0/24 89.35.93.0-89.35.95.255 162.213.3.0/24 192.228.113.0/24 192.228.122.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:0d:65:bf:52:d2:e0:6e:08:f6:ec:c3:b3:45:95:83:f7:34: 6c:73:76:08:4b:04:2b:75:e6:76:1d:3d:46:e4:37:04:7a:2f: 96:2a:aa:d4:fe:58:ef:15:62:16:68:a9:4c:37:26:4d:f5:73: 37:30:57:b3:7c:64:98:29:e9:c0:f5:46:d9:4c:df:fa:ba:ae: 7e:66:ec:10:a2:4a:10:aa:5a:0d:72:23:0d:ca:1f:9d:a1:44: f1:9e:cf:4d:d6:92:93:b3:b2:a0:09:b8:a4:a5:45:4a:78:94: cf:f2:a1:aa:f2:8d:70:1d:ea:ee:4a:8a:60:c0:db:26:87:4b: 40:97:65:71:63:f6:7c:86:eb:2f:cf:7c:60:37:5e:e4:69:9f: 74:1c:e2:19:ec:1e:1d:60:1d:91:67:1b:ff:b5:7f:7d:b8:d8: d1:46:bf:df:e8:07:f1:a3:fd:93:76:64:8f:e3:49:e2:16:48: ed:c1:99:c5:2c:35:2e:9a:11:f4:fe:4a:f4:14:a0:65:4b:76: 35:6b:c7:61:1b:00:c5:47:20:ec:18:63:ae:c1:30:83:7e:f6: 24:d3:b9:8b:45:e9:3a:72:6b:d9:6e:31:6b:7e:ad:a0:da:56: e4:9b:03:36:38:01:7c:79:95:13:34:1f:d7:40:c7:a3:8c:c9: 7d:a8:a6:84 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOEX9hV+nkzxgbCgWrdssZduPoFgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDAzMTY0MDMyWhcNMjYwNDAyMTY0NTMy WjAzMTEwLwYDVQQDEyhCNjNBOUU0QkYwOTQ5QjA0RjNGODBGMEUwOEU4NEE3NTU4 NDM5QTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5rlQ7ye5xR7 5cgfHMsANSRbilT6MUVpJTZAsjtkl4nBFOYrVYwDKWRAW+9ItsLAt/iLfn/B7yNO K20vcHyLmYK1VN6EgUbmJcgNDCRMaHOqnQLhS6e1LRs9I7RG+AIrnjzsmSemsv7f 6IapVl9eDmXN0J4BWtr8ow+C1vJ2nIGi4fr/I/INxixuPsnd5waUFB/1fC6mBwM6 8GOjKY0CRH63yXQ8Xh+MbkgtUNLAnnw3JoW1WhHrnPH+HYGqu8H08xTdqZ/S7duu y5sorGWbo25boMwhAhSman1d+noKaWT9CGjzh8TEYnv+bPcbcGQyOv+qwbixq8Uc N0Ij98516QIDAQABo4ICnjCCApowHQYDVR0OBBYEFLY6nkvwlJsE8/gPDgjoSnVY Q5oJMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzU0MzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8G CCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAQ9JmMAwDBABZI10DBAVZI0ADBACi 1QMDBADA5HEDBADA5HowDQYJKoZIhvcNAQELBQADggEBAGoNZb9S0uBuCPbsw7NF lYP3NGxzdghLBCt15nYdPUbkNwR6L5YqqtT+WO8VYhZoqUw3Jk31czcwV7N8ZJgp 6cD1RtlM3/q6rn5m7BCiShCqWg1yIw3KH52hRPGez03WkpOzsqAJuKSlRUp4lM/y oaryjXAd6u5KimDA2yaHS0CXZXFj9nyG6y/PfGA3XuRpn3Qc4hnsHh1gHZFnG/+1 f3242NFGv9/oB/Gj/ZN2ZI/jSeIWSO3BmcUsNS6aEfT+SvQUoGVLdjVrx2EbAMVH IOwYY67BMIN+9iTTuYtF6Tpya9luMWt+raDaVuSbAzY4AXx5lRM0H9dAx6OMyX2o poQ= -----END CERTIFICATE-----Generated at Sat Apr 5 06:27:16 2025 by rpki-client