$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209043.roa File: AS209043.roa (raw, json) Hash identifier: 2h6sRbfm0yuZb8hPlmboGWwsVS7pFdbHf17z0+O0lhM= Subject key identifier: 0F:1D:CC:41:A6:E0:0C:97:CD:95:71:E2:62:C0:40:7C:88:6A:5B:F9 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 7EE97A1B6FF3CF9A52CCCAC69FA028200285AA39 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209043.roa Signing time: Tue 25 Feb 2025 12:28:26 +0000 ROA not before: Tue 25 Feb 2025 12:23:26 +0000 ROA not after: Tue 24 Feb 2026 12:28:26 +0000 asID: 209043 IP address blocks: 157.254.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e9:7a:1b:6f:f3:cf:9a:52:cc:ca:c6:9f:a0:28:20:02:85:aa:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Feb 25 12:23:26 2025 GMT Not After : Feb 24 12:28:26 2026 GMT Subject: CN=0F1DCC41A6E00C97CD9571E262C0407C886A5BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:96:a3:3d:4a:bb:06:53:d2:0c:5d:31:41:df: 2f:bc:84:f2:d1:97:e9:99:8f:f8:65:86:8e:23:49: 88:d2:b7:fd:a6:7e:aa:ee:d5:c3:98:4c:1a:ab:7e: 2b:a5:6c:0e:aa:4c:e9:90:7e:7f:0c:9e:b1:58:0b: 49:e4:21:a1:68:f6:39:dd:8a:d3:24:38:f3:8e:6f: 36:6c:63:3e:e2:01:7d:c5:f6:7a:f9:f6:4d:9e:ed: 9c:f9:6b:68:b5:36:da:23:14:e2:97:85:3b:64:4f: df:2b:74:21:6e:31:58:e8:cf:01:de:6d:00:e1:1f: 69:35:59:44:59:98:19:45:7c:40:8c:06:99:f1:27: 7c:fe:7d:f7:b3:1a:72:90:e5:6a:29:59:13:08:df: e2:d5:c5:52:13:04:3f:06:1d:7f:74:02:bf:52:6f: 0e:fe:24:1d:0a:e9:dd:b0:e2:16:bb:05:4d:cc:6b: 97:70:10:8c:b8:6b:4e:de:38:2d:b1:39:e2:a7:ef: 1d:44:4c:65:80:42:0e:05:c7:f7:a9:71:34:33:b3: 38:01:4c:2f:8d:73:79:d5:e8:a0:89:74:f3:c5:48: e4:bf:60:6b:40:1b:12:11:f4:17:fa:d9:11:02:de: 31:5e:72:70:92:9f:95:5a:51:ce:55:73:2c:90:1f: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1D:CC:41:A6:E0:0C:97:CD:95:71:E2:62:C0:40:7C:88:6A:5B:F9 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.159.0/24 Signature Algorithm: sha256WithRSAEncryption 73:5f:58:89:7c:e1:97:47:2d:b9:5d:b9:e1:a4:65:b3:dd:24: fc:c9:f6:e8:69:ff:45:c9:22:2c:38:30:7b:eb:a6:de:44:b4: 6f:13:7d:e7:2c:d8:ad:ff:5c:8a:da:28:70:61:55:72:3c:e9: 4d:e7:73:77:38:a3:fd:d8:13:06:7c:cf:00:3d:56:e9:73:32: 39:38:b7:60:83:52:81:4f:01:b5:9e:be:40:15:8b:51:6e:ba: ac:48:52:51:3e:bc:b5:30:c6:5b:cb:60:dd:b1:17:40:8f:30: 95:a3:06:92:8a:9f:5f:74:1f:47:ee:e7:a9:03:64:de:e6:af: 4d:14:1b:a9:fd:a4:c2:48:c6:44:d0:90:7a:ce:0b:5b:e4:f3: 4e:bb:cb:96:8c:a5:b3:d7:bd:3e:3a:28:7e:41:69:02:ae:9a: 76:7d:44:e9:df:23:8c:47:85:a2:76:a9:b4:c3:30:36:41:bc: 76:f3:72:f1:17:c6:28:1c:e1:ee:52:0e:66:27:c0:e4:63:90: f4:20:22:fd:7c:68:80:6a:7a:37:77:48:50:4b:30:43:91:ca: 00:a2:0c:c2:5a:ba:ec:8d:ba:94:eb:e3:3c:ea:2b:e3:78:f6: 31:57:e5:e2:06:ea:37:d1:84:46:db:7a:da:22:34:df:cb:4e: 79:a8:bc:90 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUful6G2/zz5pSzMrGn6AoIAKFqjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMjI1MTIyMzI2WhcNMjYwMjI0MTIyODI2 WjAzMTEwLwYDVQQDEygwRjFEQ0M0MUE2RTAwQzk3Q0Q5NTcxRTI2MkMwNDA3Qzg4 NkE1QkY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JajPUq7BlPS DF0xQd8vvITy0ZfpmY/4ZYaOI0mI0rf9pn6q7tXDmEwaq34rpWwOqkzpkH5/DJ6x WAtJ5CGhaPY53YrTJDjzjm82bGM+4gF9xfZ6+fZNnu2c+WtotTbaIxTil4U7ZE/f K3QhbjFY6M8B3m0A4R9pNVlEWZgZRXxAjAaZ8Sd8/n33sxpykOVqKVkTCN/i1cVS EwQ/Bh1/dAK/Um8O/iQdCundsOIWuwVNzGuXcBCMuGtO3jgtsTnip+8dRExlgEIO Bcf3qXE0M7M4AUwvjXN51eigiXTzxUjkv2BrQBsSEfQX+tkRAt4xXnJwkp+VWlHO VXMskB94gQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFA8dzEGm4AyXzZVx4mLAQHyI alv5MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIwOTA0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+nzANBgkqhkiG9w0BAQsFAAOC AQEAc19YiXzhl0ctuV254aRls90k/Mn26Gn/RckiLDgwe+um3kS0bxN95yzYrf9c itoocGFVcjzpTedzdzij/dgTBnzPAD1W6XMyOTi3YINSgU8BtZ6+QBWLUW66rEhS UT68tTDGW8tg3bEXQI8wlaMGkoqfX3QfR+7nqQNk3uavTRQbqf2kwkjGRNCQes4L W+TzTrvLloyls9e9PjoofkFpAq6adn1E6d8jjEeFonaptMMwNkG8dvNy8RfGKBzh 7lIOZifA5GOQ9CAi/XxogGp6N3dIUEswQ5HKAKIMwlq67I26lOvjPOor43j2MVfl 4gbqN9GERtt62iI038tOeai8kA== -----END CERTIFICATE-----Generated at Sat Apr 5 12:11:29 2025 by rpki-client