$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa File: AS209043.roa (raw, json) Hash identifier: ourjPd41g87rtMOzre3d9NfOKhaek1ZYsiTtOPu4Bvw= Subject key identifier: 8B:99:10:C5:05:BF:11:F2:2C:13:44:BD:D6:1E:52:AD:39:23:C8:96 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 039D01564AEC0CE8AE764D250ADA4A80AB227E81 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa Signing time: Thu 21 Mar 2024 07:54:18 +0000 ROA not before: Thu 21 Mar 2024 07:49:18 +0000 ROA not after: Thu 20 Mar 2025 07:54:18 +0000 asID: 209043 IP address blocks: 98.142.249.0/24 maxlen: 24 104.234.68.0/24 maxlen: 24 104.234.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 13:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9d:01:56:4a:ec:0c:e8:ae:76:4d:25:0a:da:4a:80:ab:22:7e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 21 07:49:18 2024 GMT Not After : Mar 20 07:54:18 2025 GMT Subject: CN=8B9910C505BF11F22C1344BDD61E52AD3923C896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:1f:7d:bc:b9:7f:76:d5:07:0c:24:59:7a: e8:af:94:d8:12:27:3d:88:e8:d9:c2:73:bf:ca:04: 46:72:d7:75:31:8a:24:a3:99:6b:c1:e6:ba:4b:a1: 73:25:11:10:d9:b0:79:40:ef:94:65:0c:54:50:27: 2d:c6:94:3d:e8:ae:e1:6a:a8:c5:0c:da:0c:b6:0b: b8:69:14:ad:44:58:17:b7:26:52:e5:f9:51:3f:a9: fb:af:9e:a0:e8:11:03:30:ea:fb:08:18:67:d0:d9: 53:3e:4b:eb:de:59:9c:0a:63:ac:c6:b3:1b:47:9b: eb:fa:4d:52:fe:6d:02:85:0e:12:b9:d7:e8:fe:70: d3:c0:a6:e7:01:a5:55:e1:b3:ab:a1:09:7b:fc:a4: a7:41:f5:f4:b2:c0:30:e3:9d:f2:7a:50:ee:bf:60: 0b:99:be:ef:59:68:d0:14:c0:92:df:60:a1:f1:79: 6d:79:5a:07:d9:f5:21:ac:1c:d1:03:57:2f:2a:6f: a9:ae:72:3d:0a:9c:ce:8b:88:a0:48:55:8f:81:fd: dd:bb:90:93:1c:e7:9a:58:fe:6d:1f:db:6a:94:dc: d4:e8:eb:7a:52:e1:21:07:fd:01:1d:7b:9b:a2:f4: b1:72:f1:8f:43:69:de:fa:fc:ab:5e:1f:45:c5:aa: 03:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:99:10:C5:05:BF:11:F2:2C:13:44:BD:D6:1E:52:AD:39:23:C8:96 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.249.0/24 104.234.68.0/24 104.234.145.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:ae:3b:dd:a4:e8:07:f6:ac:da:16:e7:a5:df:04:29:d8:fa: ee:ba:e9:3c:26:e2:5a:ff:3a:ce:48:35:b5:65:86:8e:90:85: 87:bf:c9:79:bf:ac:2d:60:a8:2d:f7:d2:a6:d7:b9:86:54:33: 9f:72:f3:35:59:de:a4:cb:2c:0a:b0:4b:46:7f:fb:ec:f3:72: 2d:13:4f:82:64:88:a8:24:f6:e0:d1:4f:39:ae:33:e0:74:82: 65:8a:dd:48:7b:42:33:f0:9f:ba:ab:0b:9e:27:52:a0:a6:12: 11:50:a1:74:e4:63:35:45:73:8f:35:ae:d3:35:00:1c:20:83: a6:97:b2:9f:2b:c6:18:30:aa:f7:08:57:3c:c5:ee:ae:c4:44: a4:44:ce:2a:74:33:32:5c:3a:94:f7:09:a6:bc:1a:e3:01:90: 2c:a9:48:b4:2c:05:1c:50:6a:24:d3:0f:e3:11:35:e4:03:55: a9:cf:64:83:a4:0b:04:f6:d0:e3:c0:1f:e3:da:ec:a4:43:db: 96:bb:b8:83:e4:b5:59:86:cd:46:de:15:34:cc:91:78:7f:96: a9:47:1a:ce:23:d1:8a:3e:28:53:d7:98:1d:3d:26:14:22:91: 93:eb:30:3f:69:b4:1d:59:a2:df:96:a8:cf:aa:04:2f:af:94: dd:96:9d:28 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUA50BVkrsDOiudk0lCtpKgKsifoEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMzIxMDc0OTE4WhcNMjUwMzIwMDc1NDE4 WjAzMTEwLwYDVQQDEyg4Qjk5MTBDNTA1QkYxMUYyMkMxMzQ0QkRENjFFNTJBRDM5 MjNDODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEUffby5f3bV BwwkWXror5TYEic9iOjZwnO/ygRGctd1MYoko5lrwea6S6FzJREQ2bB5QO+UZQxU UCctxpQ96K7haqjFDNoMtgu4aRStRFgXtyZS5flRP6n7r56g6BEDMOr7CBhn0NlT Pkvr3lmcCmOsxrMbR5vr+k1S/m0ChQ4Sudfo/nDTwKbnAaVV4bOroQl7/KSnQfX0 ssAw453yelDuv2ALmb7vWWjQFMCS32Ch8XlteVoH2fUhrBzRA1cvKm+prnI9CpzO i4igSFWPgf3du5CTHOeaWP5tH9tqlNzU6Ot6UuEhB/0BHXubovSxcvGPQ2ne+vyr Xh9FxaoD9QIDAQABo4ICizCCAocwHQYDVR0OBBYEFIuZEMUFvxHyLBNEvdYeUq05 I8iWMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwOTA0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGKO+QMEAGjqRAMEAGjqkTANBgkq hkiG9w0BAQsFAAOCAQEAfa473aToB/as2hbnpd8EKdj67rrpPCbiWv86zkg1tWWG jpCFh7/Jeb+sLWCoLffSpte5hlQzn3LzNVnepMssCrBLRn/77PNyLRNPgmSIqCT2 4NFPOa4z4HSCZYrdSHtCM/CfuqsLnidSoKYSEVChdORjNUVzjzWu0zUAHCCDppey nyvGGDCq9whXPMXursREpETOKnQzMlw6lPcJprwa4wGQLKlItCwFHFBqJNMP4xE1 5ANVqc9kg6QLBPbQ48Af49rspEPblru4g+S1WYbNRt4VNMyReH+WqUcaziPRij4o U9eYHT0mFCKRk+swP2m0HVmi35aoz6oEL6+U3ZadKA== -----END CERTIFICATE-----Generated at Fri May 17 13:12:27 2024 by rpki-client on console-ams.rpki-client.org