$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: OiscLebae8OUHQa0enyosIxLuMP6k6za/2L8PbKp+NI= Subject key identifier: A6:97:0A:2F:6F:F5:6C:C0:16:4E:C9:EB:C1:0B:E8:9B:B6:3B:9E:DA Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 658888BBF11F40E628ECC3510D51A43C5AF91BC2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa Signing time: Thu 07 Mar 2024 16:30:09 +0000 ROA not before: Thu 07 Mar 2024 16:25:09 +0000 ROA not after: Thu 06 Mar 2025 16:30:09 +0000 asID: 29802 IP address blocks: 104.234.131.0/24 maxlen: 24 104.234.154.0/24 maxlen: 24 104.234.186.0/24 maxlen: 24 206.53.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 May 2024 00:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:88:88:bb:f1:1f:40:e6:28:ec:c3:51:0d:51:a4:3c:5a:f9:1b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 7 16:25:09 2024 GMT Not After : Mar 6 16:30:09 2025 GMT Subject: CN=A6970A2F6FF56CC0164EC9EBC10BE89BB63B9EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b8:ef:00:c2:87:0e:e7:05:80:5d:e9:80:29: eb:cd:a0:31:28:94:d6:01:2c:02:85:4a:1f:00:4c: d7:00:d4:df:15:26:73:10:ea:32:f2:eb:9f:25:79: 65:81:5d:25:58:44:12:b9:8f:bf:ab:a5:80:0f:db: 92:8b:95:fb:d8:5d:7f:e2:64:21:ee:65:6b:45:20: a9:82:c3:1b:10:ee:5e:61:ef:99:5f:d9:25:20:2c: 06:b9:49:74:a9:6e:90:c1:ca:44:3a:4b:06:ae:f2: 00:17:8c:f8:c6:12:bf:57:5b:5f:80:f3:fa:8c:c9: 24:71:2a:bb:9d:e9:85:9c:e4:a9:f5:67:7b:0c:65: 66:cc:59:df:2e:29:71:10:84:33:ff:df:f7:73:c7: 74:54:f0:b5:aa:3c:3b:88:1f:52:63:02:44:56:cd: 46:9e:3e:65:0f:18:e3:ef:10:20:a1:c8:47:41:be: 61:db:1b:da:16:b5:e6:8d:fd:d8:56:d4:96:85:fa: 8a:70:89:18:d8:03:b2:88:d3:fa:09:e5:4d:a9:4c: 6e:de:46:bc:55:99:22:72:f9:54:e7:a7:80:ab:08: d1:95:81:e6:a8:5e:39:26:91:7a:07:4d:76:74:6d: 04:d6:74:00:e3:19:da:19:cf:15:6e:ca:cf:23:e8: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:97:0A:2F:6F:F5:6C:C0:16:4E:C9:EB:C1:0B:E8:9B:B6:3B:9E:DA X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.131.0/24 104.234.154.0/24 104.234.186.0/24 206.53.52.0/24 Signature Algorithm: sha256WithRSAEncryption a0:53:06:fb:19:08:5b:92:8b:2c:96:b8:af:27:09:f8:1a:45: b8:26:46:ae:c9:ba:ea:89:9e:ae:97:00:4b:34:a0:af:f8:9b: 49:5d:0d:b0:78:d7:c7:4f:9a:ff:51:f1:6b:67:32:9f:7d:e3: b3:f0:5d:c3:12:1d:a1:ae:39:e7:da:35:b5:a4:82:38:ce:53: 3a:eb:4f:7f:cb:dc:3a:f0:75:86:e2:f8:4d:d6:9d:95:e4:64: d0:38:5b:f1:1d:94:5a:8d:e7:13:72:43:ec:91:a2:d5:53:66: 9a:39:af:c0:63:73:da:f7:fb:02:73:b5:23:c2:62:c3:c8:a0: c8:68:ef:55:b6:55:da:61:e6:cf:44:9c:3d:e5:6b:1d:14:36: fa:2c:45:09:29:3c:be:a6:7a:c7:54:94:d5:86:e0:f9:9f:b9: ba:57:cc:1b:6e:e8:c5:2c:55:b9:3e:77:90:b8:8b:be:38:d8: d1:84:60:a5:51:f8:4d:31:0f:7a:7d:6a:96:52:c8:69:10:1b: be:e9:94:76:50:c7:94:83:65:62:a1:b1:96:e2:04:6d:41:ec: ef:59:79:4a:cc:14:b4:59:9f:c7:80:e9:13:99:24:38:ee:40: 1d:bb:f4:f8:b7:33:67:5c:10:a6:21:cb:87:22:92:85:5f:2e: 35:fb:2e:38 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUZYiIu/EfQOYo7MNRDVGkPFr5G8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMzA3MTYyNTA5WhcNMjUwMzA2MTYzMDA5 WjAzMTEwLwYDVQQDEyhBNjk3MEEyRjZGRjU2Q0MwMTY0RUM5RUJDMTBCRTg5QkI2 M0I5RURBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bjvAMKHDucF gF3pgCnrzaAxKJTWASwChUofAEzXANTfFSZzEOoy8uufJXllgV0lWEQSuY+/q6WA D9uSi5X72F1/4mQh7mVrRSCpgsMbEO5eYe+ZX9klICwGuUl0qW6QwcpEOksGrvIA F4z4xhK/V1tfgPP6jMkkcSq7nemFnOSp9Wd7DGVmzFnfLilxEIQz/9/3c8d0VPC1 qjw7iB9SYwJEVs1Gnj5lDxjj7xAgochHQb5h2xvaFrXmjf3YVtSWhfqKcIkY2AOy iNP6CeVNqUxu3ka8VZkicvlU56eAqwjRlYHmqF45JpF6B012dG0E1nQA4xnaGc8V bsrPI+gPVQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFKaXCi9v9WzAFk7J68EL6Ju2 O57aMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaOqDAwQAaOqaAwQAaOq6AwQAzjU0 MA0GCSqGSIb3DQEBCwUAA4IBAQCgUwb7GQhbkosslrivJwn4GkW4JkauybrqiZ6u lwBLNKCv+JtJXQ2weNfHT5r/UfFrZzKffeOz8F3DEh2hrjnn2jW1pII4zlM6609/ y9w68HWG4vhN1p2V5GTQOFvxHZRajecTckPskaLVU2aaOa/AY3Pa9/sCc7UjwmLD yKDIaO9VtlXaYebPRJw95WsdFDb6LEUJKTy+pnrHVJTVhuD5n7m6V8wbbujFLFW5 PneQuIu+ONjRhGClUfhNMQ96fWqWUshpEBu+6ZR2UMeUg2ViobGW4gRtQezvWXlK zBS0WZ/HgOkTmSQ47kAdu/T4tzNnXBCmIcuHIpKFXy41+y44 -----END CERTIFICATE-----Generated at Tue Apr 30 01:01:34 2024 by rpki-client on console-fra.rpki-client.org