$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: lFJc0z4h6Muh9OfzcKDUrpizMFPRzIJEsyeU8x7zT2Q= Subject key identifier: CD:47:3A:B2:E3:A6:8B:B0:63:98:B3:2C:7E:C3:27:23:6C:DF:49:63 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 378F3BE96EFEF1C3114FBD4C7F82A04214EC9A89 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa Signing time: Wed 27 Mar 2024 00:45:06 +0000 ROA not before: Wed 27 Mar 2024 00:40:06 +0000 ROA not after: Wed 26 Mar 2025 00:45:06 +0000 asID: 29802 IP address blocks: 140.99.224.0/24 maxlen: 24 140.99.225.0/24 maxlen: 24 140.99.226.0/24 maxlen: 24 140.99.227.0/24 maxlen: 24 140.99.236.0/24 maxlen: 24 140.99.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 22:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8f:3b:e9:6e:fe:f1:c3:11:4f:bd:4c:7f:82:a0:42:14:ec:9a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Mar 27 00:40:06 2024 GMT Not After : Mar 26 00:45:06 2025 GMT Subject: CN=CD473AB2E3A68BB06398B32C7EC327236CDF4963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:d6:6a:cb:84:ec:a6:10:71:5c:1f:0a:27: 76:29:66:b2:74:fa:50:01:e7:55:e7:22:bc:e3:d4: 26:fc:8f:04:10:a2:5f:55:72:e1:48:98:e8:82:78: 99:43:7a:e8:81:6a:c6:eb:94:0e:31:e6:72:df:3b: c8:2a:38:60:26:ac:47:2a:80:54:ce:88:40:58:d2: 37:c4:41:f0:a8:7f:b5:ab:41:2d:fb:07:af:5f:0e: fb:1a:d5:77:7c:dd:58:50:f3:20:44:d0:06:03:95: 20:4c:f5:ce:f3:b8:c0:3d:f4:a8:79:df:10:35:d1: 94:71:04:2b:1b:d6:74:3b:37:23:8a:43:0f:23:a5: 12:ed:b9:84:27:42:95:2e:70:47:d9:c8:2c:fe:84: 60:40:e5:45:88:11:b8:8d:97:e2:f3:be:7e:c6:69: 6e:47:76:19:ed:11:81:dd:49:74:b0:4e:23:7f:ff: 15:98:69:4c:aa:c4:2b:16:d6:77:c2:96:e5:0c:77: 91:5d:b7:f5:ea:7d:13:f5:81:df:69:59:2b:66:1f: f1:6a:15:33:7d:7f:f2:02:a5:a4:3f:d6:69:3d:99: db:f7:b0:e4:a4:52:fe:73:df:e2:d9:93:a6:79:b4: 68:0b:a2:0b:7b:72:4c:34:91:5a:d6:2e:36:8e:a4: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:47:3A:B2:E3:A6:8B:B0:63:98:B3:2C:7E:C3:27:23:6C:DF:49:63 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.224.0/22 140.99.236.0/24 140.99.253.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:42:23:a2:59:a2:ab:2e:2c:5a:0a:5e:d7:e2:d5:57:1a:34: 93:b7:0d:e5:e3:2e:e8:46:c8:55:d3:0d:19:84:a1:ee:0b:27: 59:15:14:b3:89:be:cb:0b:50:92:6b:64:5b:a2:b5:e9:9b:dc: 3f:04:2b:15:d9:c4:99:3d:e2:93:e6:73:e7:16:da:05:f7:8a: e7:dd:d6:c3:e8:d0:93:4f:1c:5d:34:68:7b:b6:33:f9:02:26: ee:3d:0d:ee:13:ac:b9:1f:42:6a:f0:9c:85:97:34:71:15:d9: 07:ac:57:19:89:09:1d:0a:ce:55:1c:81:9e:09:12:4e:bb:2f: 3e:75:fa:1c:f8:56:a4:a4:0d:d4:18:c7:fe:d9:f5:5d:c6:4f: 3a:5c:34:6d:bf:64:b6:c6:1c:f9:b1:09:4d:c6:6d:b3:84:b9: 0d:e4:46:db:a4:bb:b9:e9:ef:30:bc:af:9b:ed:f9:0d:64:f2: a3:07:02:ff:db:f9:96:79:30:7a:01:77:5b:3f:df:04:8f:2b: 39:b1:59:03:00:7b:b0:fa:36:b3:71:7d:02:6e:1a:80:7a:36: 67:8a:99:ab:36:eb:a3:ef:f7:43:a9:bb:43:d0:1f:56:d4:0f: aa:2b:a2:a3:cb:bd:27:53:f3:d5:8e:14:ed:99:98:00:ad:96: 8a:9b:84:73 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUN4876W7+8cMRT71Mf4KgQhTsmokwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwMzI3MDA0MDA2WhcNMjUwMzI2MDA0NTA2 WjAzMTEwLwYDVQQDEyhDRDQ3M0FCMkUzQTY4QkIwNjM5OEIzMkM3RUMzMjcyMzZD REY0OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMbWasuE7KYQ cVwfCid2KWaydPpQAedV5yK849Qm/I8EEKJfVXLhSJjogniZQ3rogWrG65QOMeZy 3zvIKjhgJqxHKoBUzohAWNI3xEHwqH+1q0Et+wevXw77GtV3fN1YUPMgRNAGA5Ug TPXO87jAPfSoed8QNdGUcQQrG9Z0OzcjikMPI6US7bmEJ0KVLnBH2cgs/oRgQOVF iBG4jZfi875+xmluR3YZ7RGB3Ul0sE4jf/8VmGlMqsQrFtZ3wpblDHeRXbf16n0T 9YHfaVkrZh/xahUzfX/yAqWkP9ZpPZnb97DkpFL+c9/i2ZOmebRoC6ILe3JMNJFa 1i42jqSh1QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFM1HOrLjpouwY5izLH7DJyNs 30ljMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCjGPgAwQAjGPsAwQAjGP9MA0GCSqG SIb3DQEBCwUAA4IBAQBaQiOiWaKrLixaCl7X4tVXGjSTtw3l4y7oRshV0w0ZhKHu CydZFRSzib7LC1CSa2RborXpm9w/BCsV2cSZPeKT5nPnFtoF94rn3dbD6NCTTxxd NGh7tjP5AibuPQ3uE6y5H0Jq8JyFlzRxFdkHrFcZiQkdCs5VHIGeCRJOuy8+dfoc +FakpA3UGMf+2fVdxk86XDRtv2S2xhz5sQlNxm2zhLkN5EbbpLu56e8wvK+b7fkN ZPKjBwL/2/mWeTB6AXdbP98Ejys5sVkDAHuw+jazcX0CbhqAejZnipmrNuuj7/dD qbtD0B9W1A+qK6Kjy70nU/PVjhTtmZgArZaKm4Rz -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:11 2024 by rpki-client on console-fra.rpki-client.org