$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa File: AS64089.roa (raw, json) Hash identifier: FO0AxrubxRls8/mimzyThA2KhLPc90YM3TyMgs1F4OE= Subject key identifier: 69:87:80:B3:78:5B:42:89:3E:6D:4F:13:A0:40:E8:FA:AB:C2:ED:6F Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 34CBCE2462A8C1A0535F7296E2C505850FCDCA97 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa Signing time: Fri 29 Nov 2024 13:13:24 +0000 ROA not before: Fri 29 Nov 2024 13:08:24 +0000 ROA not after: Fri 28 Nov 2025 13:13:24 +0000 asID: 64089 IP address blocks: 45.54.28.0/24 maxlen: 24 45.54.84.0/24 maxlen: 24 45.54.85.0/24 maxlen: 24 2607:f740:e005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 05:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cb:ce:24:62:a8:c1:a0:53:5f:72:96:e2:c5:05:85:0f:cd:ca:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Nov 29 13:08:24 2024 GMT Not After : Nov 28 13:13:24 2025 GMT Subject: CN=698780B3785B42893E6D4F13A040E8FAABC2ED6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:cb:59:24:79:6e:ff:26:b6:b7:f0:fa:f4: 8b:94:5e:86:14:92:9f:1d:5b:b3:c5:28:d5:29:2b: d1:06:e4:1a:62:75:c3:41:95:39:e8:b4:84:a9:a6: 72:55:0d:13:00:aa:f2:dc:35:c9:14:8d:5e:3a:8a: 29:fd:8b:c2:87:9f:7b:67:40:94:9f:51:e6:e2:92: c9:80:b3:03:7a:2a:7b:76:9c:c2:ee:43:17:83:91: 3b:04:5b:76:d7:4c:6f:40:7c:b8:2d:83:91:a2:2f: b8:63:aa:85:5f:9b:2d:f8:ad:29:bb:69:07:3b:ea: 7d:b7:a7:7c:77:a2:7b:ff:6f:47:91:bb:b3:c8:89: 83:45:e0:5b:1f:59:1a:2e:7f:56:59:12:41:5f:ba: cd:57:e5:e1:3d:00:0b:61:8b:1c:38:7b:31:2a:7f: 5b:3d:06:ae:33:57:38:17:04:08:ce:9c:bd:a1:f0: 53:ff:2e:9c:9f:5f:1d:a1:27:10:0e:aa:cd:ce:43: 98:08:87:96:51:d7:8f:27:65:58:bb:9b:3f:86:b9: 6d:fb:69:19:37:06:fe:2d:0e:84:c3:8d:ff:22:8a: 66:3a:11:b9:d6:db:40:44:d8:04:b0:63:d8:1d:d0: cb:f8:f9:15:a6:ea:b6:36:ed:f8:57:a8:a0:ca:3f: 0a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:80:B3:78:5B:42:89:3E:6D:4F:13:A0:40:E8:FA:AB:C2:ED:6F X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.28.0/24 45.54.84.0/23 IPv6: 2607:f740:e005::/48 Signature Algorithm: sha256WithRSAEncryption 53:0c:e3:bb:dc:a6:dd:f4:b6:69:72:cc:8e:8a:f5:1a:e8:8d: 56:75:42:78:bb:26:e5:64:b0:ba:0f:dc:dc:12:5c:3d:ad:b9: 6d:87:46:a6:93:68:3e:83:bf:d8:8d:24:40:7b:93:78:15:39: 23:74:e0:cd:93:2e:c0:46:f5:f8:56:53:2a:85:af:fb:ac:e4: 91:e8:45:a4:29:b4:f2:6f:50:91:c2:4f:2c:47:6e:b6:62:f2: 29:b5:51:49:99:7d:62:11:35:5a:bc:14:35:92:6a:25:89:9e: 03:b9:6c:7a:39:68:01:7b:96:d5:78:c8:88:85:0e:da:ee:6c: d2:a7:3b:2d:cb:18:af:60:59:21:8c:5d:4a:b6:2a:cb:14:74: d6:aa:55:c1:8a:85:67:95:f3:2b:a4:a6:22:32:27:9e:d6:8f: 64:41:45:f9:a2:b6:2b:f1:6b:c1:ae:89:dc:6d:ed:a0:90:02: 79:75:a8:dd:df:aa:23:43:b9:a9:04:d3:01:71:6f:77:3e:6d: f7:f3:47:1b:4f:9e:63:ce:a1:9e:15:6c:7c:19:2a:c8:36:e6: 5e:b4:7f:0e:a6:90:90:55:c8:47:31:8c:3b:34:ed:2e:5b:a8: f0:a1:91:b8:e6:e6:76:d3:b8:e4:99:ab:b2:41:3c:86:a6:b6: 6f:06:ce:90 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUNMvOJGKowaBTX3KW4sUFhQ/NypcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQxMTI5MTMwODI0WhcNMjUxMTI4MTMxMzI0 WjAzMTEwLwYDVQQDEyg2OTg3ODBCMzc4NUI0Mjg5M0U2RDRGMTNBMDQwRThGQUFC QzJFRDZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuerLWSR5bv8m trfw+vSLlF6GFJKfHVuzxSjVKSvRBuQaYnXDQZU56LSEqaZyVQ0TAKry3DXJFI1e Ooop/YvCh597Z0CUn1Hm4pLJgLMDeip7dpzC7kMXg5E7BFt210xvQHy4LYORoi+4 Y6qFX5st+K0pu2kHO+p9t6d8d6J7/29HkbuzyImDReBbH1kaLn9WWRJBX7rNV+Xh PQALYYscOHsxKn9bPQauM1c4FwQIzpy9ofBT/y6cn18doScQDqrNzkOYCIeWUdeP J2VYu5s/hrlt+2kZNwb+LQ6Ew43/IopmOhG51ttARNgEsGPYHdDL+PkVpuq2Nu34 V6igyj8KHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGmHgLN4W0KJPm1PE6BA6Pqr wu1vMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzY0MDg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYG CCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALTYcAwQBLTZUMA8EAgACMAkDBwAm B/dA4AUwDQYJKoZIhvcNAQELBQADggEBAFMM47vcpt30tmlyzI6K9RrojVZ1Qni7 JuVksLoP3NwSXD2tuW2HRqaTaD6Dv9iNJEB7k3gVOSN04M2TLsBG9fhWUyqFr/us 5JHoRaQptPJvUJHCTyxHbrZi8im1UUmZfWIRNVq8FDWSaiWJngO5bHo5aAF7ltV4 yIiFDtrubNKnOy3LGK9gWSGMXUq2KssUdNaqVcGKhWeV8yukpiIyJ57Wj2RBRfmi tivxa8Guidxt7aCQAnl1qN3fqiNDuakE0wFxb3c+bffzRxtPnmPOoZ4VbHwZKsg2 5l60fw6mkJBVyEcxjDs07S5bqPChkbjm5nbTuOSZq7JBPIamtm8GzpA= -----END CERTIFICATE-----Generated at Mon May 12 11:04:53 2025 by rpki-client