$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: TEZ4GZOC90VyWew6MpT2XOmbMtqU/DnJa6e5C4SNDbo= Subject key identifier: BA:EF:C0:05:FC:9A:64:D7:72:FC:06:4A:AF:D9:3E:2E:E8:A7:18:49 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 1271A39512F353E56822A759DAA2D135123B0705 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa Signing time: Fri 29 Aug 2025 15:44:06 +0000 ROA not before: Fri 29 Aug 2025 15:39:06 +0000 ROA not after: Fri 28 Aug 2026 15:44:06 +0000 asID: 7029 IP address blocks: 40.27.0.0/21 maxlen: 24 40.27.28.0/22 maxlen: 24 40.27.40.0/21 maxlen: 24 40.27.56.0/21 maxlen: 24 40.27.140.0/22 maxlen: 24 40.223.122.0/24 maxlen: 24 40.223.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 16:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:71:a3:95:12:f3:53:e5:68:22:a7:59:da:a2:d1:35:12:3b:07:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 29 15:39:06 2025 GMT Not After : Aug 28 15:44:06 2026 GMT Subject: CN=BAEFC005FC9A64D772FC064AAFD93E2EE8A71849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:fe:61:99:f4:f2:41:60:39:6a:f9:df:b1: 39:d2:88:40:23:1e:15:18:5b:71:58:05:c6:2d:f3: 7e:ae:fc:83:89:24:31:6c:dd:93:ce:78:0c:f1:99: cc:83:87:30:1e:7d:06:1a:98:49:6c:d4:57:31:5b: b5:69:62:09:e6:df:ba:05:a2:67:64:14:21:ea:74: 91:5f:64:4a:d4:b4:30:cc:d0:e5:f7:0e:04:1f:98: b4:1f:fd:44:29:07:ed:ed:5a:62:79:65:fd:8c:24: 2a:72:45:5f:47:e3:77:fa:17:0c:c4:5b:d6:75:6e: 39:12:bd:a2:c1:70:2e:87:be:73:b9:6f:10:95:06: 1d:93:ac:e0:92:df:28:af:60:8d:40:43:6d:41:f9: 4b:8e:2b:26:dc:4a:e8:ef:a8:f9:16:52:32:ba:f9: da:fb:5a:a8:b8:83:4a:1f:c9:7d:11:43:0c:f3:1a: e4:3e:a6:a5:d3:df:92:69:65:a8:6d:1d:93:98:c9: c5:52:a9:43:96:20:b2:8d:70:b7:f9:aa:e4:69:69: 33:85:6a:8d:63:2e:00:30:94:8c:fe:f9:8d:f6:bb: 32:bc:88:cf:4b:b2:11:8d:f4:ca:63:98:18:49:d6: 16:59:f2:23:83:05:fd:c3:7d:2e:78:69:c6:14:d5: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EF:C0:05:FC:9A:64:D7:72:FC:06:4A:AF:D9:3E:2E:E8:A7:18:49 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.0.0/21 40.27.28.0/22 40.27.40.0/21 40.27.56.0/21 40.27.140.0/22 40.223.122.0/24 40.223.245.0/24 Signature Algorithm: sha256WithRSAEncryption 90:70:57:9b:2d:19:71:27:46:bb:bd:70:ab:7c:29:8a:42:c8: 9f:e4:e3:dc:30:6c:5b:59:e0:3f:2c:b3:33:e6:c3:38:9c:5e: 70:a4:3b:d3:17:10:ee:44:b9:58:8a:30:18:c3:b6:44:dd:a6: ec:79:a0:9b:b8:48:d8:7b:bd:6e:5b:b1:9a:6f:7c:57:d3:53: e2:bc:bf:56:12:21:55:e7:09:36:18:5b:79:32:5b:21:30:78: 0c:3a:9c:c7:b0:99:0a:c7:b1:19:ee:f6:b7:40:07:bd:75:78: 44:b0:9d:6a:19:5b:0b:b1:39:e2:45:cb:12:4c:91:e0:43:07: 6b:a3:00:11:2f:8b:9f:90:b4:04:82:f9:4e:39:27:03:1a:17: 45:1f:53:95:60:13:d9:bd:ce:de:ff:74:2d:c4:3f:4b:02:f5: f3:ba:53:f2:aa:22:95:dd:4b:3e:a9:9b:49:77:19:01:96:a1: d8:d0:bb:e4:aa:b7:df:c4:09:b9:b1:b9:8b:ec:93:b1:90:e3: b9:3f:1c:88:00:2d:b1:e0:5c:d8:85:ce:73:d3:a9:ef:09:a4: 90:b2:3d:7e:c3:de:3f:05:7a:63:05:47:db:04:7c:59:b7:e7: 32:14:d2:22:c0:cb:26:1e:d3:88:d6:68:d9:4b:c4:d4:bd:ff: fa:53:c7:2e -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIUEnGjlRLzU+VoIqdZ2qLRNRI7BwUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODI5MTUzOTA2WhcNMjYwODI4MTU0NDA2 WjAzMTEwLwYDVQQDEyhCQUVGQzAwNUZDOUE2NEQ3NzJGQzA2NEFBRkQ5M0UyRUU4 QTcxODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z7+YZn08kFg OWr537E50ohAIx4VGFtxWAXGLfN+rvyDiSQxbN2TzngM8ZnMg4cwHn0GGphJbNRX MVu1aWIJ5t+6BaJnZBQh6nSRX2RK1LQwzNDl9w4EH5i0H/1EKQft7VpieWX9jCQq ckVfR+N3+hcMxFvWdW45Er2iwXAuh75zuW8QlQYdk6zgkt8or2CNQENtQflLjism 3Ero76j5FlIyuvna+1qouINKH8l9EUMM8xrkPqal09+SaWWobR2TmMnFUqlDliCy jXC3+arkaWkzhWqNYy4AMJSM/vmN9rsyvIjPS7IRjfTKY5gYSdYWWfIjgwX9w30u eGnGFNWWUwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLrvwAX8mmTXcvwGSq/ZPi7o pxhJMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYI KwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBAMoGwADBAIoGxwDBAMoGygDBAMoGzgD BAIoG4wDBAAo33oDBAAo3/UwDQYJKoZIhvcNAQELBQADggEBAJBwV5stGXEnRru9 cKt8KYpCyJ/k49wwbFtZ4D8sszPmwzicXnCkO9MXEO5EuViKMBjDtkTdpux5oJu4 SNh7vW5bsZpvfFfTU+K8v1YSIVXnCTYYW3kyWyEweAw6nMewmQrHsRnu9rdAB711 eESwnWoZWwuxOeJFyxJMkeBDB2ujABEvi5+QtASC+U45JwMaF0UfU5VgE9m9zt7/ dC3EP0sC9fO6U/KqIpXdSz6pm0l3GQGWodjQu+Sqt9/ECbmxuYvsk7GQ47k/HIgA LbHgXNiFznPTqe8JpJCyPX7D3j8FemMFR9sEfFm35zIU0iLAyyYe04jWaNlLxNS9 //pTxy4= -----END CERTIFICATE-----Generated at Fri Sep 5 08:34:30 2025 by rpki-client