$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209242.roa File: AS209242.roa (raw, json) Hash identifier: /s709T91ZWf9rqF9yWEKYEceYAIZLMsJC/Dap/cQYog= Subject key identifier: F0:BA:DC:7D:D8:7E:3B:00:84:BD:9B:96:44:85:08:19:FA:47:68:C2 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 59D80ED46F32824D6EC9782EF943E87D3240F28C Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209242.roa Signing time: Sat 22 Feb 2025 07:28:26 +0000 ROA not before: Sat 22 Feb 2025 07:23:26 +0000 ROA not after: Sat 21 Feb 2026 07:28:26 +0000 asID: 209242 IP address blocks: 104.234.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d8:0e:d4:6f:32:82:4d:6e:c9:78:2e:f9:43:e8:7d:32:40:f2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Feb 22 07:23:26 2025 GMT Not After : Feb 21 07:28:26 2026 GMT Subject: CN=F0BADC7DD87E3B0084BD9B9644850819FA4768C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:77:b4:1b:02:4f:8a:1f:51:4d:a1:09:00: de:10:f5:51:70:dd:dd:6d:b3:28:b8:17:3f:9e:ad: da:4f:4a:28:5a:cd:05:10:c0:ce:c2:f3:dd:73:2a: de:df:c9:c8:e4:9e:e9:44:3a:3d:fb:7d:17:66:9c: 5d:6f:3a:96:ae:5a:52:73:bd:1c:a9:b8:63:96:d8: 40:92:bb:99:fd:48:00:02:89:95:bc:3e:8b:2e:ad: a8:af:a0:3b:eb:db:1b:1f:0f:88:3c:bb:5d:21:b2: 9c:2d:dd:7b:be:42:a2:ce:25:32:0d:40:21:35:a2: b3:06:a4:2d:e9:77:73:a7:bd:b6:52:02:df:9c:bc: 25:85:92:fd:cb:98:4f:64:3c:81:f2:e5:c7:5c:48: 19:90:bb:88:ce:a3:d8:c4:af:28:67:18:02:06:0f: 40:8d:f5:a5:fb:91:41:08:d2:f1:d6:3b:0c:62:97: 1e:25:c9:03:06:fc:31:0d:2f:3d:84:03:8c:5c:7e: 26:6c:21:a7:b5:93:f1:5a:df:a0:98:57:9f:50:45: c7:b2:d9:d0:3e:f1:07:5e:f6:b6:7f:66:cd:c2:b9: 42:56:ed:23:9d:80:6b:85:67:b5:3b:6b:30:66:13: 73:ca:58:eb:22:cd:8c:68:78:45:87:46:26:1a:04: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BA:DC:7D:D8:7E:3B:00:84:BD:9B:96:44:85:08:19:FA:47:68:C2 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.239.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:0a:c9:18:51:43:20:fd:cb:9a:61:8a:77:a8:c8:52:39:a3: 19:8b:b7:d4:e4:3b:31:bf:be:06:f3:b3:1d:22:32:14:b9:99: 8e:10:5c:de:22:6b:30:4f:81:1a:36:19:21:fe:17:ca:39:30: b0:48:7f:51:33:08:fe:ee:a9:68:a7:ec:77:ec:0c:ee:56:30: 01:6c:a3:c3:89:85:78:9c:9e:af:5f:bd:bc:8d:3a:b5:14:d3: e7:33:57:cc:fe:c4:b3:b1:56:41:13:e5:f4:bd:ea:bd:3f:78: 5d:a4:f2:17:88:8c:62:af:c3:61:d6:80:b9:53:d3:d3:2b:51: fd:db:71:d9:e2:c4:48:b8:c6:25:c5:11:61:ff:c8:6a:24:a7: 93:68:9d:b9:f1:cf:0f:8d:5f:f9:5c:8e:b1:55:ba:0c:7f:37: 3d:35:39:a4:fc:61:90:be:d7:b6:a3:00:5c:5a:2c:1e:1d:f9: 57:ac:c2:19:d3:a6:fd:8b:85:4b:11:7a:d1:dd:49:fb:96:74: 25:c9:43:82:8a:df:e8:59:2b:69:9e:41:31:16:86:a6:fa:5f: 17:79:f1:bc:d0:88:80:be:a2:95:8d:a2:36:6f:8f:a8:ee:e4: d9:b6:84:f7:42:cc:c9:44:3e:6c:7b:ed:63:9b:ed:29:80:05: af:6a:92:67 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUWdgO1G8ygk1uyXgu+UPofTJA8owwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMjIyMDcyMzI2WhcNMjYwMjIxMDcyODI2 WjAzMTEwLwYDVQQDEyhGMEJBREM3REQ4N0UzQjAwODRCRDlCOTY0NDg1MDgxOUZB NDc2OEMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntl3tBsCT4of UU2hCQDeEPVRcN3dbbMouBc/nq3aT0ooWs0FEMDOwvPdcyre38nI5J7pRDo9+30X ZpxdbzqWrlpSc70cqbhjlthAkruZ/UgAAomVvD6LLq2or6A769sbHw+IPLtdIbKc Ld17vkKiziUyDUAhNaKzBqQt6Xdzp722UgLfnLwlhZL9y5hPZDyB8uXHXEgZkLuI zqPYxK8oZxgCBg9AjfWl+5FBCNLx1jsMYpceJckDBvwxDS89hAOMXH4mbCGntZPx Wt+gmFefUEXHstnQPvEHXva2f2bNwrlCVu0jnYBrhWe1O2swZhNzyljrIs2MaHhF h0YmGgS7UQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPC63H3YfjsAhL2blkSFCBn6 R2jCMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwOTI0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq7zANBgkqhkiG9w0BAQsFAAOC AQEAfQrJGFFDIP3LmmGKd6jIUjmjGYu31OQ7Mb++BvOzHSIyFLmZjhBc3iJrME+B GjYZIf4XyjkwsEh/UTMI/u6paKfsd+wM7lYwAWyjw4mFeJyer1+9vI06tRTT5zNX zP7Es7FWQRPl9L3qvT94XaTyF4iMYq/DYdaAuVPT0ytR/dtx2eLESLjGJcURYf/I aiSnk2idufHPD41f+VyOsVW6DH83PTU5pPxhkL7XtqMAXFosHh35V6zCGdOm/YuF SxF60d1J+5Z0JclDgorf6FkraZ5BMRaGpvpfF3nxvNCIgL6ilY2iNm+PqO7k2baE 90LMyUQ+bHvtY5vtKYAFr2qSZw== -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:12 2025 by rpki-client