$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa File: AS209043.roa (raw, json) Hash identifier: 9dGZoUTKQzWiN9f9jEyRhkMxDgtkMuc36aUsc43SOFk= Subject key identifier: 0C:E0:E2:58:BD:0B:C1:B0:FA:72:80:F6:BA:A7:F0:AA:8D:E2:60:04 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6B4645329124A56523BCB4F1EB74A9ED153CD4F9 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa Signing time: Wed 30 Apr 2025 13:32:39 +0000 ROA not before: Wed 30 Apr 2025 13:27:39 +0000 ROA not after: Wed 29 Apr 2026 13:32:39 +0000 asID: 209043 IP address blocks: 98.142.249.0/24 maxlen: 24 104.234.68.0/24 maxlen: 24 104.234.145.0/24 maxlen: 24 206.53.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 03:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:46:45:32:91:24:a5:65:23:bc:b4:f1:eb:74:a9:ed:15:3c:d4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 30 13:27:39 2025 GMT Not After : Apr 29 13:32:39 2026 GMT Subject: CN=0CE0E258BD0BC1B0FA7280F6BAA7F0AA8DE26004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:d6:4a:7d:9d:ad:01:36:20:bf:84:13:77: fe:57:72:0f:c8:bd:05:05:0c:ec:e8:5f:b4:a7:5d: 9c:ec:74:b8:87:e7:32:ee:5e:ad:d5:a4:90:00:8a: 4c:da:f3:d5:1b:71:96:ad:3f:68:b9:69:54:3e:50: 95:43:22:b3:3b:92:5c:59:78:eb:57:71:84:18:ea: c3:ed:fd:33:2b:c7:ed:7f:1f:5e:ec:d6:57:b5:d5: 6f:e9:d6:ee:df:7e:67:5e:eb:05:aa:83:b3:34:b8: 5c:aa:46:5d:26:7b:65:a1:85:1e:2d:92:be:b1:14: 79:77:68:07:2c:88:d9:55:ef:5c:f9:f2:7e:e2:eb: 72:cc:eb:83:29:1c:fd:a6:13:5e:d2:ec:0e:45:af: 38:72:17:c3:6b:f6:32:f2:10:fd:3b:e7:3d:a9:61: 04:8f:78:62:64:e5:5a:5d:91:fe:27:7e:09:85:50: 5f:ca:2c:6a:2e:61:7b:8b:2f:b6:14:71:2e:55:27: 3b:a1:44:2b:ae:d8:8f:d8:1f:de:98:11:f3:8a:41: 81:b1:a9:81:6c:20:bd:fb:56:90:6a:4e:3c:e3:9d: 19:db:c6:3d:f8:3b:58:fc:5b:0e:73:7f:c3:1f:e0: b6:f8:80:8c:3a:a1:71:28:b3:ab:73:77:8e:20:2a: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E0:E2:58:BD:0B:C1:B0:FA:72:80:F6:BA:A7:F0:AA:8D:E2:60:04 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.249.0/24 104.234.68.0/24 104.234.145.0/24 206.53.49.0/24 Signature Algorithm: sha256WithRSAEncryption 70:f2:45:7f:66:6b:a2:f8:53:3a:26:be:b5:30:0d:be:bb:12: ff:0b:b7:f6:3b:b7:b4:12:2a:b7:4a:0d:8d:4d:7c:91:6c:93: 9f:10:f5:60:89:f1:81:ef:60:b6:3e:5c:16:27:11:c3:36:37: f5:d7:f5:a8:bc:7c:73:98:7f:5e:7d:e3:52:ce:58:dc:60:5b: d5:bc:d0:47:f4:f1:62:a6:ef:95:84:33:aa:79:c4:f3:ab:99: f0:49:0f:9e:96:b7:d9:bf:2c:d6:02:84:d9:00:50:1d:26:44: 43:fb:3f:c9:3c:3d:07:38:8f:c9:be:05:64:5d:dc:e7:cc:24: 1b:7e:23:a5:7b:25:f3:c3:9c:50:f0:08:a7:1e:c9:5d:71:dd: e2:94:3a:03:08:ec:c8:93:bb:29:c3:79:27:74:ae:29:2b:fe: 74:06:68:a0:1a:c3:ab:cb:22:9c:cb:4b:83:3f:64:b3:ad:f2: 32:ed:64:92:85:a0:c0:92:86:7b:8a:7e:e9:a4:2f:da:77:9f: e5:00:09:5f:e8:b6:11:f4:3c:f0:f7:71:c2:9a:17:08:15:26: 74:1a:d8:c5:fb:60:3e:f3:3f:a7:84:80:83:4c:29:67:8c:78: bf:65:68:1d:13:d8:3e:c2:06:aa:de:47:4b:a3:61:3f:15:33: 51:ce:2e:c7 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUa0ZFMpEkpWUjvLTx63Sp7RU81PkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDMwMTMyNzM5WhcNMjYwNDI5MTMzMjM5 WjAzMTEwLwYDVQQDEygwQ0UwRTI1OEJEMEJDMUIwRkE3MjgwRjZCQUE3RjBBQThE RTI2MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKrWSn2drQE2 IL+EE3f+V3IPyL0FBQzs6F+0p12c7HS4h+cy7l6t1aSQAIpM2vPVG3GWrT9ouWlU PlCVQyKzO5JcWXjrV3GEGOrD7f0zK8ftfx9e7NZXtdVv6dbu335nXusFqoOzNLhc qkZdJntloYUeLZK+sRR5d2gHLIjZVe9c+fJ+4utyzOuDKRz9phNe0uwORa84chfD a/Yy8hD9O+c9qWEEj3hiZOVaXZH+J34JhVBfyixqLmF7iy+2FHEuVSc7oUQrrtiP 2B/emBHzikGBsamBbCC9+1aQak48450Z28Y9+DtY/FsOc3/DH+C2+ICMOqFxKLOr c3eOICpRxQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFAzg4li9C8Gw+nKA9rqn8KqN 4mAEMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwOTA0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGKO+QMEAGjqRAMEAGjqkQMEAM41 MTANBgkqhkiG9w0BAQsFAAOCAQEAcPJFf2ZrovhTOia+tTANvrsS/wu39ju3tBIq t0oNjU18kWyTnxD1YInxge9gtj5cFicRwzY39df1qLx8c5h/Xn3jUs5Y3GBb1bzQ R/TxYqbvlYQzqnnE86uZ8EkPnpa32b8s1gKE2QBQHSZEQ/s/yTw9BziPyb4FZF3c 58wkG34jpXsl88OcUPAIpx7JXXHd4pQ6AwjsyJO7KcN5J3SuKSv+dAZooBrDq8si nMtLgz9ks63yMu1kkoWgwJKGe4p+6aQv2nef5QAJX+i2EfQ88PdxwpoXCBUmdBrY xftgPvM/p4SAg0wpZ4x4v2VoHRPYPsIGqt5HS6NhPxUzUc4uxw== -----END CERTIFICATE-----Generated at Tue May 6 15:28:34 2025 by rpki-client