$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa File: AS209043.roa (raw, json) Hash identifier: YhCSf/padU1nchR04/nObCFZa8IUgyKYBWP9umMJJbM= Subject key identifier: 9A:8D:D9:5E:06:2C:08:25:71:73:54:C7:B3:27:7A:7B:79:26:F9:8C Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 5BDFBFD6A1ABEBA6668403518720A97B0FC35B77 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa Signing time: Thu 20 Feb 2025 08:28:26 +0000 ROA not before: Thu 20 Feb 2025 08:23:26 +0000 ROA not after: Thu 19 Feb 2026 08:28:26 +0000 asID: 209043 IP address blocks: 98.142.249.0/24 maxlen: 24 104.234.68.0/24 maxlen: 24 104.234.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:df:bf:d6:a1:ab:eb:a6:66:84:03:51:87:20:a9:7b:0f:c3:5b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Feb 20 08:23:26 2025 GMT Not After : Feb 19 08:28:26 2026 GMT Subject: CN=9A8DD95E062C0825717354C7B3277A7B7926F98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:bf:6b:c7:61:f5:43:22:09:85:62:c9:df: 69:90:2e:07:01:eb:2f:98:78:40:cd:60:2e:f6:23: 44:14:59:ef:38:8a:3d:6d:b4:03:b1:5c:05:6b:92: 83:e0:73:1c:4b:be:10:79:ab:4e:b4:d7:78:14:d6: 0b:3d:6b:8e:84:e4:08:b6:b3:77:98:4f:04:ce:3f: 5b:14:a5:3b:9e:54:c0:60:5f:f8:dd:36:d3:03:cc: e6:93:d4:ed:f2:98:55:b5:de:0b:4e:e5:32:56:42: 9c:67:a0:9e:26:5d:b9:84:2b:57:87:fb:5b:68:d7: 54:0b:91:cc:8e:77:54:19:eb:69:8a:55:de:0a:e1: 04:65:fe:83:70:0d:9b:7f:8a:89:46:2f:e7:eb:fa: 5f:26:eb:02:ac:da:10:99:05:dc:f3:a0:96:44:6d: d9:bd:fe:2c:2f:72:6e:bf:56:f8:3a:f1:4a:d1:f6: 05:5c:35:13:14:c3:b4:f2:54:ed:de:bf:6d:10:5b: bf:e3:92:52:79:d9:1b:10:64:56:7b:a2:07:65:17: 6f:aa:25:d4:a3:75:e8:2f:4b:1d:22:19:7e:0e:78: 57:58:4f:86:38:37:9d:f0:b0:9b:c5:1e:05:d4:79: c6:7d:74:e7:86:36:6b:70:1a:a8:09:d6:bb:d0:b5: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8D:D9:5E:06:2C:08:25:71:73:54:C7:B3:27:7A:7B:79:26:F9:8C X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.249.0/24 104.234.68.0/24 104.234.145.0/24 Signature Algorithm: sha256WithRSAEncryption 34:31:a3:43:87:8b:db:67:fa:3b:39:f0:bd:8e:f7:5b:01:5e: 20:51:45:c0:ee:d6:13:1f:47:b8:1a:05:f9:ee:de:69:e7:68: c2:bc:01:a2:01:d4:33:e8:49:8b:8a:d5:41:e2:10:78:66:aa: ea:3b:d9:c3:1c:40:08:bb:88:49:38:79:7c:d8:b9:18:97:d2: 0b:95:7e:a7:db:4a:ca:5a:39:35:05:d3:5e:3c:63:51:69:2f: ca:05:dd:46:46:43:7f:b4:61:54:23:57:7c:eb:2e:53:22:9d: 14:76:4a:05:44:ab:22:21:d2:f8:20:2d:14:d6:8a:bc:c4:c7: bc:a7:8a:50:d0:f8:fe:48:e9:70:d0:e6:db:32:5c:6f:92:d4: bc:9d:c3:f4:33:1c:ba:0d:9a:c3:e8:40:a0:0d:e9:e1:38:bd: 30:e0:4e:d2:31:8f:0a:e6:a7:f1:b0:aa:29:06:01:d4:4e:c6: 5f:41:33:65:45:4b:17:8d:2a:ac:e6:ff:e6:74:27:b3:e8:64: 1a:4e:73:30:b1:7a:06:76:02:bd:83:3e:a8:07:4c:a6:cd:67: b7:0e:36:32:97:bd:13:c5:7a:19:36:9d:b4:ee:07:78:52:39: 47:f6:fe:3c:47:d7:e7:2e:59:4a:db:90:20:0f:fd:e2:f0:b0: 03:8a:23:6f -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUW9+/1qGr66ZmhANRhyCpew/DW3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMjIwMDgyMzI2WhcNMjYwMjE5MDgyODI2 WjAzMTEwLwYDVQQDEyg5QThERDk1RTA2MkMwODI1NzE3MzU0QzdCMzI3N0E3Qjc5 MjZGOThDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wy/a8dh9UMi CYViyd9pkC4HAesvmHhAzWAu9iNEFFnvOIo9bbQDsVwFa5KD4HMcS74QeatOtNd4 FNYLPWuOhOQItrN3mE8Ezj9bFKU7nlTAYF/43TbTA8zmk9Tt8phVtd4LTuUyVkKc Z6CeJl25hCtXh/tbaNdUC5HMjndUGetpilXeCuEEZf6DcA2bf4qJRi/n6/pfJusC rNoQmQXc86CWRG3Zvf4sL3Juv1b4OvFK0fYFXDUTFMO08lTt3r9tEFu/45JSedkb EGRWe6IHZRdvqiXUo3XoL0sdIhl+DnhXWE+GODed8LCbxR4F1HnGfXTnhjZrcBqo Cda70LU5ZwIDAQABo4ICizCCAocwHQYDVR0OBBYEFJqN2V4GLAglcXNUx7Mnent5 JvmMMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwOTA0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGKO+QMEAGjqRAMEAGjqkTANBgkq hkiG9w0BAQsFAAOCAQEANDGjQ4eL22f6OznwvY73WwFeIFFFwO7WEx9HuBoF+e7e aedowrwBogHUM+hJi4rVQeIQeGaq6jvZwxxACLuISTh5fNi5GJfSC5V+p9tKylo5 NQXTXjxjUWkvygXdRkZDf7RhVCNXfOsuUyKdFHZKBUSrIiHS+CAtFNaKvMTHvKeK UND4/kjpcNDm2zJcb5LUvJ3D9DMcug2aw+hAoA3p4Ti9MOBO0jGPCuan8bCqKQYB 1E7GX0EzZUVLF40qrOb/5nQns+hkGk5zMLF6BnYCvYM+qAdMps1ntw42Mpe9E8V6 GTadtO4HeFI5R/b+PEfX5y5ZStuQIA/94vCwA4ojbw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:08 2025 by rpki-client