$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: o3nGADr77LIgBErDMLjgyUmdiKCdpMDI1id6ClSAmAc= Subject key identifier: D8:AD:70:09:91:EF:51:F7:19:BD:F2:FE:B3:FC:1E:1F:A7:B1:EC:1D Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 552AB30FA9F7FAD3ABA506E512D9AD7D71E69162 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa Signing time: Mon 07 Jul 2025 07:19:11 +0000 ROA not before: Mon 07 Jul 2025 07:14:11 +0000 ROA not after: Mon 06 Jul 2026 07:19:11 +0000 asID: 29802 IP address blocks: 23.94.132.0/24 maxlen: 24 64.50.163.0/24 maxlen: 24 74.50.3.0/24 maxlen: 24 209.200.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 10:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2a:b3:0f:a9:f7:fa:d3:ab:a5:06:e5:12:d9:ad:7d:71:e6:91:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 7 07:14:11 2025 GMT Not After : Jul 6 07:19:11 2026 GMT Subject: CN=D8AD700991EF51F719BDF2FEB3FC1E1FA7B1EC1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:00:d2:a2:18:ba:6c:0d:21:fa:61:88:62: 7b:e0:fb:c4:b2:e5:cd:18:33:af:bd:ec:6e:4a:23: d4:3e:f9:8f:1e:78:1a:88:ed:2e:82:55:1e:e2:94: 77:de:3c:57:17:fe:25:71:ab:3d:72:37:a6:1a:5b: 28:02:37:11:df:c7:70:af:b1:10:68:c3:1e:75:03: 74:f6:cd:2c:45:19:b8:12:38:82:f3:36:0d:21:ee: 12:79:95:ad:19:b7:6f:1b:02:8d:4e:8d:a8:38:46: 72:56:7d:26:c3:b7:4c:5f:e2:e0:e4:e2:09:3e:37: 04:e0:16:07:c0:53:53:85:4b:c4:ba:f0:94:c3:72: c5:d6:4b:4b:3d:0a:f0:71:97:8d:c5:cb:ac:c8:7e: b5:2b:f5:88:80:79:29:01:c0:fe:f0:0a:28:4d:72: 95:0a:53:7a:9b:b7:45:67:aa:4a:00:17:24:64:5c: dc:96:a7:0a:a6:c9:6a:28:19:52:c7:57:22:79:da: 07:01:38:85:1b:2c:e7:c3:78:e7:c6:45:be:f5:47: a1:71:6e:fa:33:d1:37:ef:64:d9:74:f2:f8:c9:12: 5e:3a:da:fa:53:73:ac:ca:13:f5:86:69:76:a0:76: 2a:42:0c:df:0a:6d:63:ea:c4:d7:c1:2f:05:fe:f9: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:70:09:91:EF:51:F7:19:BD:F2:FE:B3:FC:1E:1F:A7:B1:EC:1D X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.132.0/24 64.50.163.0/24 74.50.3.0/24 209.200.233.0/24 Signature Algorithm: sha256WithRSAEncryption a6:b0:c8:85:a8:00:5f:bf:09:bd:62:0a:07:b6:0d:c1:80:1e: 45:ca:1f:20:e6:6f:11:c1:a9:36:f1:80:07:4b:af:99:06:6d: 0b:9a:0a:46:a5:e0:a7:d3:5c:1e:8e:ea:f4:79:33:db:ba:a4: ae:c6:23:bd:02:91:7c:f7:8c:43:9e:bf:8a:a6:45:fb:84:a6: d6:31:d1:6c:a5:18:b8:40:e3:f4:87:76:c4:1a:5a:5b:c4:6a: 84:47:eb:46:a4:8c:7b:7e:b6:69:68:0e:50:86:bd:8f:58:25: 1f:19:c6:ab:72:ef:61:9c:d0:c4:2d:0b:c2:59:a7:73:9a:32: 20:c7:95:65:61:e2:6f:4a:41:40:c3:ae:a3:5c:a8:dd:c4:2b: 6a:0f:b5:88:32:6e:6c:d4:e5:d4:46:7f:5a:69:1c:06:8f:0b: 4a:34:39:02:0c:80:2d:81:6f:46:f1:b2:3d:b7:4b:18:ac:01: 81:57:36:2c:db:3f:9a:ca:1f:6d:e1:67:98:d8:ae:59:10:d8: 3c:91:da:4b:e4:35:1e:ac:29:6f:94:6a:07:7d:8a:69:6e:c1: 78:ff:20:cc:bc:4f:30:5f:13:3d:0b:5d:43:a6:a3:b0:fa:2f: 8f:15:e7:8b:3d:14:9b:46:61:e1:7c:6a:0e:0d:cb:43:af:b3: 58:47:4b:a9 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUVSqzD6n3+tOrpQblEtmtfXHmkWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzA3MDcxNDExWhcNMjYwNzA2MDcxOTEx WjAzMTEwLwYDVQQDEyhEOEFENzAwOTkxRUY1MUY3MTlCREYyRkVCM0ZDMUUxRkE3 QjFFQzFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC8A0qIYumwN IfphiGJ74PvEsuXNGDOvvexuSiPUPvmPHngaiO0uglUe4pR33jxXF/4lcas9cjem GlsoAjcR38dwr7EQaMMedQN09s0sRRm4EjiC8zYNIe4SeZWtGbdvGwKNTo2oOEZy Vn0mw7dMX+Lg5OIJPjcE4BYHwFNThUvEuvCUw3LF1ktLPQrwcZeNxcusyH61K/WI gHkpAcD+8AooTXKVClN6m7dFZ6pKABckZFzclqcKpslqKBlSx1ciedoHATiFGyzn w3jnxkW+9UehcW76M9E372TZdPL4yRJeOtr6U3OsyhP1hml2oHYqQgzfCm1j6sTX wS8F/vnK6wIDAQABo4ICkDCCAowwHQYDVR0OBBYEFNitcAmR71H3Gb3y/rP8Hh+n sewdMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF16EAwQAQDKjAwQASjIDAwQA0cjp MA0GCSqGSIb3DQEBCwUAA4IBAQCmsMiFqABfvwm9YgoHtg3BgB5Fyh8g5m8Rwak2 8YAHS6+ZBm0LmgpGpeCn01wejur0eTPbuqSuxiO9ApF894xDnr+KpkX7hKbWMdFs pRi4QOP0h3bEGlpbxGqER+tGpIx7frZpaA5Qhr2PWCUfGcarcu9hnNDELQvCWadz mjIgx5VlYeJvSkFAw66jXKjdxCtqD7WIMm5s1OXURn9aaRwGjwtKNDkCDIAtgW9G 8bI9t0sYrAGBVzYs2z+ayh9t4WeY2K5ZENg8kdpL5DUerClvlGoHfYppbsF4/yDM vE8wXxM9C11DpqOw+i+PFeeLPRSbRmHhfGoODctDr7NYR0up -----END CERTIFICATE-----Generated at Sat Jul 26 02:43:03 2025 by rpki-client