$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa File: AS29997.roa (raw, json) Hash identifier: FsBAjwbHSFxRDHhfHjx8gf2kVaOzFLreWSUTQF4TdqA= Subject key identifier: E6:7B:2F:F5:BE:0B:DE:A0:11:41:A8:3B:C6:F7:94:A5:20:AD:90:2C Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 4F606F42E48F1327DFC48F6C4044E2698B625BEB Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa Signing time: Mon 02 Oct 2023 21:55:37 +0000 ROA not before: Mon 02 Oct 2023 21:50:37 +0000 ROA not after: Mon 30 Sep 2024 21:55:37 +0000 asID: 29997 IP address blocks: 45.54.64.0/24 maxlen: 24 2607:f740:e626::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 08:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:60:6f:42:e4:8f:13:27:df:c4:8f:6c:40:44:e2:69:8b:62:5b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Oct 2 21:50:37 2023 GMT Not After : Sep 30 21:55:37 2024 GMT Subject: CN=E67B2FF5BE0BDEA01141A83BC6F794A520AD902C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:41:7e:0b:3c:09:6a:b1:e1:fd:97:34:10: 73:54:79:bf:bf:a7:32:a7:bc:ef:ee:80:82:2e:7c: 92:fc:55:3a:da:5a:2a:1c:b1:c1:65:f5:c3:d9:89: 35:f0:b1:36:84:e9:e0:c4:63:dc:38:86:ee:be:ff: c8:20:ed:da:30:63:69:d9:5b:f2:1b:84:53:48:99: 23:16:12:2e:73:2c:e2:74:50:91:0b:c8:7d:4a:13: cb:41:b1:1d:0f:df:35:7a:ce:09:6d:52:cf:9e:6a: 34:dc:6b:9c:25:73:9c:9e:b8:28:ae:9f:0a:fb:de: 6d:8e:20:46:fe:74:a6:13:7d:12:5a:19:e1:6f:4d: 66:87:c9:c9:68:cb:9e:64:59:79:f5:53:24:58:06: 9c:5b:c6:41:03:b7:38:2b:48:5f:2e:56:7a:45:51: 44:0e:d0:98:6e:7f:04:91:fe:1b:c7:06:a7:10:e1: 6e:ff:f5:ba:27:2f:3d:97:ec:29:59:95:e9:75:70: 73:38:fc:02:de:33:b1:17:dc:f3:97:13:a5:a2:b3: c9:a3:38:d7:65:81:bd:b2:07:55:a8:e5:3c:ad:85: cd:36:32:da:22:30:cd:41:e9:d2:d8:9d:2c:69:80: 72:2d:52:c5:d1:e9:b2:f6:2a:75:85:88:6c:95:5e: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7B:2F:F5:BE:0B:DE:A0:11:41:A8:3B:C6:F7:94:A5:20:AD:90:2C X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.64.0/24 IPv6: 2607:f740:e626::/48 Signature Algorithm: sha256WithRSAEncryption 8e:79:f6:85:f1:2d:dc:8c:a0:9f:0c:98:68:92:cf:29:71:3e: 69:a6:ac:e6:62:df:00:5f:85:3f:52:ac:50:53:1f:23:95:43: 59:f4:81:d9:02:a3:04:c5:f8:90:a8:11:f7:fe:2c:48:1f:28: a5:51:30:b0:0f:bf:08:44:f5:a7:76:e1:74:e4:c2:9e:a2:53: 56:1d:da:cc:ea:4c:00:7f:0a:3e:eb:31:03:2d:31:88:31:22: 76:f9:e8:91:c2:c9:74:9d:78:02:aa:bf:d4:b0:04:1c:0f:8e: 6b:3d:03:04:d4:5f:8f:73:b9:de:8c:f4:ee:51:e0:ee:cd:9c: 0d:f5:8a:d4:c2:8a:11:a7:a5:6e:82:99:9c:3a:fc:69:9d:20: db:23:d0:8e:6d:23:fe:48:b8:a1:ea:27:b0:70:a9:ae:10:5e: a6:a9:f8:9c:43:90:23:87:ff:f0:c0:f3:03:5b:79:39:ee:2f: 5d:ed:10:a5:cf:c1:d1:6b:2a:76:38:f4:77:34:28:3f:f9:b4: 73:7f:6a:3b:e3:df:88:98:06:f3:89:c9:56:a0:cd:f9:4e:7c: ab:97:9c:ac:95:9a:41:71:ec:8a:c9:09:04:c1:02:5c:c2:9c: 2e:b8:fd:26:cb:9f:8c:e6:c6:00:70:fe:f0:a9:a4:91:f5:68: fb:8e:65:53 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUT2BvQuSPEyffxI9sQETiaYtiW+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjMxMDAyMjE1MDM3WhcNMjQwOTMwMjE1NTM3 WjAzMTEwLwYDVQQDEyhFNjdCMkZGNUJFMEJERUEwMTE0MUE4M0JDNkY3OTRBNTIw QUQ5MDJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6dBfgs8CWqx 4f2XNBBzVHm/v6cyp7zv7oCCLnyS/FU62loqHLHBZfXD2Yk18LE2hOngxGPcOIbu vv/IIO3aMGNp2VvyG4RTSJkjFhIucyzidFCRC8h9ShPLQbEdD981es4JbVLPnmo0 3GucJXOcnrgorp8K+95tjiBG/nSmE30SWhnhb01mh8nJaMueZFl59VMkWAacW8ZB A7c4K0hfLlZ6RVFEDtCYbn8Ekf4bxwanEOFu//W6Jy89l+wpWZXpdXBzOPwC3jOx F9zzlxOlorPJozjXZYG9sgdVqOU8rYXNNjLaIjDNQenS2J0saYByLVLF0emy9ip1 hYhslV5YQQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFOZ7L/W+C96gEUGoO8b3lKUg rZAsMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzI5OTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALTZAMA8EAgACMAkDBwAmB/dA5iYw DQYJKoZIhvcNAQELBQADggEBAI559oXxLdyMoJ8MmGiSzylxPmmmrOZi3wBfhT9S rFBTHyOVQ1n0gdkCowTF+JCoEff+LEgfKKVRMLAPvwhE9ad24XTkwp6iU1Yd2szq TAB/Cj7rMQMtMYgxInb56JHCyXSdeAKqv9SwBBwPjms9AwTUX49zud6M9O5R4O7N nA31itTCihGnpW6CmZw6/GmdINsj0I5tI/5IuKHqJ7Bwqa4QXqap+JxDkCOH//DA 8wNbeTnuL13tEKXPwdFrKnY49Hc0KD/5tHN/ajvj34iYBvOJyVagzflOfKuXnKyV mkFx7IrJCQTBAlzCnC64/SbLn4zmxgBw/vCppJH1aPuOZVM= -----END CERTIFICATE-----Generated at Sun May 12 07:31:09 2024 by rpki-client on console-ams.rpki-client.org