$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa File: AS29997.roa (raw, json) Hash identifier: rdh5pwTfhFZw/ZGGBT2r8knLvwF56Pbm9hHcyCIuWA4= Subject key identifier: 11:39:65:67:DB:E8:56:AB:D0:28:BE:6A:7A:39:38:AD:EB:C7:49:23 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 0201BCEAE255E92666C14C7B0BEE38E18E447B14 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa Signing time: Mon 02 Sep 2024 22:13:10 +0000 ROA not before: Mon 02 Sep 2024 22:08:10 +0000 ROA not after: Mon 01 Sep 2025 22:13:10 +0000 asID: 29997 IP address blocks: 45.54.64.0/24 maxlen: 24 2607:f740:e626::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:01:bc:ea:e2:55:e9:26:66:c1:4c:7b:0b:ee:38:e1:8e:44:7b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Sep 2 22:08:10 2024 GMT Not After : Sep 1 22:13:10 2025 GMT Subject: CN=11396567DBE856ABD028BE6A7A3938ADEBC74923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:8a:b3:93:25:8d:31:34:ac:f9:f7:6c:49: 18:d6:52:c8:c3:a2:a7:50:e1:95:63:18:97:b7:21: c2:c7:07:de:f9:1d:f2:b0:11:09:ae:4e:b7:0e:95: b9:b4:1b:a1:7e:df:9e:57:d2:e4:c2:b4:12:bf:46: fe:f6:f1:97:20:8c:e6:91:0b:4c:11:89:59:2f:57: 14:0c:3b:ae:7d:df:55:9c:9d:55:24:05:46:92:88: 2a:86:fe:4d:34:46:5c:0a:6b:b0:1e:8c:2d:c9:a1: 00:58:ea:cd:2f:f6:bc:5d:ff:f0:71:31:c8:48:04: bf:cc:cf:55:77:60:57:99:5a:17:ce:89:e5:70:f7: 92:ea:5e:ed:63:54:be:cc:88:42:95:52:29:66:d8: 7d:86:d4:25:e2:ca:3d:da:f3:6a:60:20:c8:98:35: 82:75:8c:aa:48:cd:36:f9:e4:71:ac:b3:af:27:c0: d3:3b:f7:af:b4:7f:d3:06:61:88:f0:07:71:86:83: a6:f6:eb:1a:4b:1c:aa:ee:20:12:56:e1:de:20:c5: fd:ee:ff:c3:47:b4:03:b6:51:b6:b1:7f:30:9b:fe: 0a:b2:1e:75:2c:8a:72:08:8b:fd:4d:1d:62:22:c5: c3:d4:d8:42:0b:b2:ad:db:01:69:ef:1d:e1:4c:72: f2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:39:65:67:DB:E8:56:AB:D0:28:BE:6A:7A:39:38:AD:EB:C7:49:23 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.64.0/24 IPv6: 2607:f740:e626::/48 Signature Algorithm: sha256WithRSAEncryption 9a:e8:ce:ee:1d:24:51:0a:20:7f:5f:db:08:e5:6d:f3:97:52: 54:e8:e0:42:be:96:9d:8c:65:50:7a:36:31:e5:ed:5d:81:d4: 97:2f:a9:60:72:b6:63:98:18:c6:d3:88:da:38:87:e6:f3:c3: 0b:b7:68:ad:75:7a:41:50:10:d9:08:6e:94:d7:26:78:98:94: 61:c0:7b:be:1c:2b:47:3c:09:01:94:70:b1:6f:de:0b:d9:34: c2:40:01:6f:6b:12:aa:eb:60:d7:a4:d7:63:b3:95:0d:47:2d: 29:44:fc:34:11:20:94:f2:2f:f1:6a:02:d6:51:c4:f7:7e:fe: 26:5a:12:f4:01:e1:18:b2:05:03:45:95:c8:5f:9d:13:a0:eb: ba:9f:d9:50:bd:51:87:13:73:bc:84:86:1f:74:65:81:9d:df: 86:38:29:09:42:ff:8d:ff:bc:4c:13:6e:de:ad:3c:0e:a6:0c: 65:de:ef:90:26:8a:d6:82:90:6e:1f:fc:2a:96:eb:00:7e:1c: d2:1b:06:4e:8e:bf:5c:7f:28:9d:83:61:ea:0d:a8:98:97:cf: 5f:72:ae:d5:5c:89:16:74:15:87:90:16:2e:ed:ad:0c:59:87: 0e:b7:a6:e9:0d:d4:8c:cf:3a:e4:e2:81:22:58:b6:2d:83:27: 6c:56:ca:15 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUAgG86uJV6SZmwUx7C+444Y5EexQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQwOTAyMjIwODEwWhcNMjUwOTAxMjIxMzEw WjAzMTEwLwYDVQQDEygxMTM5NjU2N0RCRTg1NkFCRDAyOEJFNkE3QTM5MzhBREVC Qzc0OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT+Ks5MljTE0 rPn3bEkY1lLIw6KnUOGVYxiXtyHCxwfe+R3ysBEJrk63DpW5tBuhft+eV9LkwrQS v0b+9vGXIIzmkQtMEYlZL1cUDDuufd9VnJ1VJAVGkogqhv5NNEZcCmuwHowtyaEA WOrNL/a8Xf/wcTHISAS/zM9Vd2BXmVoXzonlcPeS6l7tY1S+zIhClVIpZth9htQl 4so92vNqYCDImDWCdYyqSM02+eRxrLOvJ8DTO/evtH/TBmGI8AdxhoOm9usaSxyq 7iASVuHeIMX97v/DR7QDtlG2sX8wm/4Ksh51LIpyCIv9TR1iIsXD1NhCC7Kt2wFp 7x3hTHLy+QIDAQABo4ICjzCCAoswHQYDVR0OBBYEFBE5ZWfb6Far0Ci+ano5OK3r x0kjMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzI5OTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALTZAMA8EAgACMAkDBwAmB/dA5iYw DQYJKoZIhvcNAQELBQADggEBAJrozu4dJFEKIH9f2wjlbfOXUlTo4EK+lp2MZVB6 NjHl7V2B1JcvqWBytmOYGMbTiNo4h+bzwwu3aK11ekFQENkIbpTXJniYlGHAe74c K0c8CQGUcLFv3gvZNMJAAW9rEqrrYNek12OzlQ1HLSlE/DQRIJTyL/FqAtZRxPd+ /iZaEvQB4RiyBQNFlchfnROg67qf2VC9UYcTc7yEhh90ZYGd34Y4KQlC/43/vEwT bt6tPA6mDGXe75AmitaCkG4f/CqW6wB+HNIbBk6Ov1x/KJ2DYeoNqJiXz19yrtVc iRZ0FYeQFi7trQxZhw63pukN1IzPOuTigSJYti2DJ2xWyhU= -----END CERTIFICATE-----Generated at Mon Nov 25 07:14:49 2024 by rpki-client on console-fra.rpki-client.org