$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa File: AS209737.roa (raw, json) Hash identifier: DmPU8kYBwH/3ALmD+tnK1dEVqdd1/8IkQAE48WWYPvg= Subject key identifier: 77:9F:31:D7:F6:77:0A:55:7D:EB:1D:0F:BF:93:DE:AE:B9:FF:71:54 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 51B560AFA95E5AA5B9E1463BF3D34DFEAEA2D9D6 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa Signing time: Tue 05 Sep 2023 21:36:16 +0000 ROA not before: Tue 05 Sep 2023 21:31:16 +0000 ROA not after: Tue 03 Sep 2024 21:36:16 +0000 asID: 209737 IP address blocks: 140.99.44.0/22 maxlen: 24 140.99.180.0/22 maxlen: 24 140.99.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 Mar 2024 10:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b5:60:af:a9:5e:5a:a5:b9:e1:46:3b:f3:d3:4d:fe:ae:a2:d9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Sep 5 21:31:16 2023 GMT Not After : Sep 3 21:36:16 2024 GMT Subject: CN=779F31D7F6770A557DEB1D0FBF93DEAEB9FF7154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:23:1b:20:89:e0:be:6d:20:48:f8:a6:a3: ab:d1:23:33:4c:68:1d:be:cc:08:fb:a7:0f:c5:a0: bd:1e:b3:6c:dd:f1:c8:39:40:7e:a0:12:8b:dd:61: 82:35:30:6f:df:77:eb:97:cb:8d:9b:a8:75:61:4f: 92:50:3f:b7:d9:7d:79:37:e5:96:c7:27:e8:a7:1c: 5b:fc:7d:bd:37:e3:5f:6b:7a:d6:c6:1a:d4:ae:fc: 9c:96:26:21:34:59:70:83:3c:ed:f2:3e:c9:35:df: 87:7d:5e:37:d5:29:f5:8c:03:03:00:71:ae:8f:f6: fb:77:2f:bf:6d:40:83:d9:c7:4f:92:fa:9b:6c:27: 2b:fa:24:39:54:df:f2:4d:c4:f3:97:7b:81:79:76: c5:f2:7b:a5:18:98:99:59:ee:d9:04:7e:2a:42:d9: a5:fc:6b:41:af:b8:44:74:75:32:1f:fa:8b:93:15: be:83:7d:85:21:1e:51:09:44:d2:f8:eb:59:b0:9d: ad:cd:07:c0:c2:bd:0f:5b:1c:00:55:6f:00:99:75: 92:2b:88:2d:a4:57:4c:26:d3:57:b2:58:5e:77:38: b4:ef:14:cc:8e:74:54:4a:42:6a:e8:28:e5:61:2a: 3a:42:be:49:d8:49:a7:c5:6f:49:95:41:f0:6b:40: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9F:31:D7:F6:77:0A:55:7D:EB:1D:0F:BF:93:DE:AE:B9:FF:71:54 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.44.0/22 140.99.180.0/22 140.99.208.0/22 Signature Algorithm: sha256WithRSAEncryption 74:2c:b6:61:e6:6e:4a:ef:88:71:2e:c0:da:1e:52:3f:b1:dd: 07:48:c8:f5:d0:0e:e6:39:0f:d8:b1:9f:1f:af:2b:77:aa:2e: 5a:fd:91:a8:35:12:9e:78:d9:35:70:d0:08:c0:b6:98:13:97: 9a:83:5b:b0:4f:33:b2:1e:19:22:e1:8f:f1:6a:b1:f3:5a:da: 8b:28:48:de:94:47:6c:14:7f:bf:ea:05:4f:d2:18:0a:e7:0c: 53:91:42:c1:f7:42:85:5b:c2:9f:44:cd:45:75:8a:59:a5:86: 4e:aa:58:cd:a4:e9:26:9a:8d:fb:b9:72:e0:e2:d4:af:f4:2f: a0:4c:ac:19:c6:8a:75:77:df:70:b1:f2:33:a4:1c:d2:50:3b: a0:cc:3c:ad:a7:fe:40:c8:e1:5c:55:5d:3c:c1:bd:d9:ee:70: 9d:35:54:77:3b:65:d2:6a:bf:f8:2b:ca:37:f4:40:b3:ec:1e: 94:e0:a9:e6:0c:e7:33:c2:4a:bd:e5:81:eb:04:70:04:aa:f2: 10:7a:39:58:ad:d7:a4:21:fa:96:84:e7:98:1f:a6:69:eb:7c: 1f:28:86:58:dd:f7:e0:5d:ea:4a:0b:6d:00:21:89:57:1f:6c: 93:af:2f:3e:99:1c:f9:b3:87:5a:25:23:26:49:75:92:fa:e5: 3c:55:4c:14 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUUbVgr6leWqW54UY789NN/q6i2dYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwOTA1MjEzMTE2WhcNMjQwOTAzMjEzNjE2 WjAzMTEwLwYDVQQDEyg3NzlGMzFEN0Y2NzcwQTU1N0RFQjFEMEZCRjkzREVBRUI5 RkY3MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs98jGyCJ4L5t IEj4pqOr0SMzTGgdvswI+6cPxaC9HrNs3fHIOUB+oBKL3WGCNTBv33frl8uNm6h1 YU+SUD+32X15N+WWxyfopxxb/H29N+Nfa3rWxhrUrvycliYhNFlwgzzt8j7JNd+H fV431Sn1jAMDAHGuj/b7dy+/bUCD2cdPkvqbbCcr+iQ5VN/yTcTzl3uBeXbF8nul GJiZWe7ZBH4qQtml/GtBr7hEdHUyH/qLkxW+g32FIR5RCUTS+OtZsJ2tzQfAwr0P WxwAVW8AmXWSK4gtpFdMJtNXslhedzi07xTMjnRUSkJq6CjlYSo6Qr5J2EmnxW9J lUHwa0CcAwIDAQABo4ICizCCAocwHQYDVR0OBBYEFHefMdf2dwpVfesdD7+T3q65 /3FUMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIwOTczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAoxjLAMEAoxjtAMEAoxj0DANBgkq hkiG9w0BAQsFAAOCAQEAdCy2YeZuSu+IcS7A2h5SP7HdB0jI9dAO5jkP2LGfH68r d6ouWv2RqDUSnnjZNXDQCMC2mBOXmoNbsE8zsh4ZIuGP8Wqx81raiyhI3pRHbBR/ v+oFT9IYCucMU5FCwfdChVvCn0TNRXWKWaWGTqpYzaTpJpqN+7ly4OLUr/QvoEys GcaKdXffcLHyM6Qc0lA7oMw8raf+QMjhXFVdPMG92e5wnTVUdztl0mq/+CvKN/RA s+welOCp5gznM8JKveWB6wRwBKryEHo5WK3XpCH6loTnmB+maet8HyiGWN334F3q SgttACGJVx9sk68vPpkc+bOHWiUjJkl1kvrlPFVMFA== -----END CERTIFICATE-----Generated at Thu Mar 28 13:31:55 2024 by rpki-client on console-ams.rpki-client.org