$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: Uyd9J4JDJJ7gzM7mn/tCqIe+4ebA8BgHa14aC1Lbfog= Subject key identifier: 3F:13:D8:7D:7A:73:03:30:2D:45:22:13:AC:FE:6F:92:EA:01:28:73 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 07EF55B48D606F5F49E0EF97C4DAE411AA893519 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa Signing time: Wed 02 Oct 2024 00:02:00 +0000 ROA not before: Tue 01 Oct 2024 23:57:00 +0000 ROA not after: Wed 01 Oct 2025 00:02:00 +0000 asID: 29802 IP address blocks: 104.234.131.0/24 maxlen: 24 104.234.154.0/24 maxlen: 24 104.234.181.0/24 maxlen: 24 104.234.186.0/24 maxlen: 24 206.53.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 22:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ef:55:b4:8d:60:6f:5f:49:e0:ef:97:c4:da:e4:11:aa:89:35:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 1 23:57:00 2024 GMT Not After : Oct 1 00:02:00 2025 GMT Subject: CN=3F13D87D7A7303302D452213ACFE6F92EA012873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:03:2a:28:1b:d4:c1:96:43:17:76:a6:5d: d4:72:83:88:57:14:49:f2:e6:a1:7c:3e:ab:da:7e: 12:79:e6:4d:ed:96:c3:35:b2:7a:30:e4:b7:3c:a8: ad:fe:2d:3c:6f:e8:25:51:b8:75:ad:92:51:e1:e1: 65:df:09:6e:51:37:78:19:bb:1c:97:45:78:02:1f: fe:43:ac:6e:e2:bf:72:6b:b3:0c:1e:e2:22:fe:6e: 9f:bf:99:bd:1f:39:e7:27:ae:ab:ef:ad:48:d2:45: 66:27:5f:9c:4a:a0:f3:1e:62:98:ec:48:bf:45:0b: a7:b7:ef:6d:2b:4a:58:20:4d:72:7d:a4:31:a0:d1: af:be:d0:26:16:87:15:c8:a5:9c:ee:48:65:e1:2f: d3:f4:ab:3f:95:69:74:fd:22:e2:fe:85:61:b9:f6: 82:75:89:22:83:5a:8f:0c:7d:5a:d4:5c:14:5b:f8: d4:d4:6f:e7:4f:8a:87:18:58:9d:bb:10:2a:41:35: b3:b1:e6:d2:cc:5e:8b:28:bc:53:56:b1:46:26:f8: 65:7d:5e:a9:fe:bf:66:61:d6:99:16:ff:ee:31:46: 9d:ee:95:56:01:7b:70:6f:e7:ce:c2:e9:cd:12:32: 8a:02:ed:c6:65:30:2d:df:41:7e:e1:72:9e:c9:87: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:13:D8:7D:7A:73:03:30:2D:45:22:13:AC:FE:6F:92:EA:01:28:73 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.131.0/24 104.234.154.0/24 104.234.181.0/24 104.234.186.0/24 206.53.52.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:a6:9f:f8:aa:4c:9e:10:8a:a9:25:60:8c:bd:cd:b9:2d:a7: 33:87:cd:24:a1:fd:af:fd:fb:c5:41:95:b6:9b:e7:61:ff:b8: 03:c1:7e:eb:ad:99:1d:ea:43:71:43:21:25:08:40:43:59:0e: dd:76:55:bd:08:7e:c3:c1:98:d4:c8:c3:ae:3e:ec:03:d1:50: 13:ca:f3:b8:2d:87:cd:80:11:83:06:0e:1a:21:dc:b5:7f:e5: 8a:b9:81:52:86:96:40:32:11:49:ae:8a:6e:93:2c:ad:23:1d: a4:d0:af:3d:68:bf:87:cf:ab:35:7a:f4:ae:78:e2:4b:11:20: 3f:f5:6f:b5:08:36:66:f7:b9:65:d7:5d:be:0a:ea:22:28:58: fe:22:dd:d0:ea:27:40:19:b8:20:54:5b:4b:89:d2:a3:fa:13: 69:26:c1:4c:36:0a:3f:6b:12:19:b8:95:a6:18:de:c7:52:41: 2b:ad:fc:86:2d:35:cc:8d:6d:50:44:d7:df:8c:e8:08:e2:25: 13:1a:6d:1d:d0:d2:b2:9b:bc:62:a4:83:05:fd:ec:4c:16:94: f0:90:d1:d5:e2:fb:be:3a:69:16:50:e1:c9:3c:dd:e1:a0:bb: aa:7f:25:ae:ef:77:f6:98:5e:20:4f:e7:02:b1:bf:78:65:f3: 96:d5:39:a5 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUB+9VtI1gb19J4O+XxNrkEaqJNRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMDAxMjM1NzAwWhcNMjUxMDAxMDAwMjAw WjAzMTEwLwYDVQQDEygzRjEzRDg3RDdBNzMwMzMwMkQ0NTIyMTNBQ0ZFNkY5MkVB MDEyODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzMDKigb1MGW Qxd2pl3UcoOIVxRJ8uahfD6r2n4SeeZN7ZbDNbJ6MOS3PKit/i08b+glUbh1rZJR 4eFl3wluUTd4Gbscl0V4Ah/+Q6xu4r9ya7MMHuIi/m6fv5m9HznnJ66r761I0kVm J1+cSqDzHmKY7Ei/RQunt+9tK0pYIE1yfaQxoNGvvtAmFocVyKWc7khl4S/T9Ks/ lWl0/SLi/oVhufaCdYkig1qPDH1a1FwUW/jU1G/nT4qHGFiduxAqQTWzsebSzF6L KLxTVrFGJvhlfV6p/r9mYdaZFv/uMUad7pVWAXtwb+fOwunNEjKKAu3GZTAt30F+ 4XKeyYdimQIDAQABo4ICljCCApIwHQYDVR0OBBYEFD8T2H16cwMwLUUiE6z+b5Lq AShzMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAaOqDAwQAaOqaAwQAaOq1AwQAaOq6 AwQAzjU0MA0GCSqGSIb3DQEBCwUAA4IBAQBtpp/4qkyeEIqpJWCMvc25Laczh80k of2v/fvFQZW2m+dh/7gDwX7rrZkd6kNxQyElCEBDWQ7ddlW9CH7DwZjUyMOuPuwD 0VATyvO4LYfNgBGDBg4aIdy1f+WKuYFShpZAMhFJropukyytIx2k0K89aL+Hz6s1 evSueOJLESA/9W+1CDZm97ll112+CuoiKFj+It3Q6idAGbggVFtLidKj+hNpJsFM Ngo/axIZuJWmGN7HUkErrfyGLTXMjW1QRNffjOgI4iUTGm0d0NKym7xipIMF/exM FpTwkNHV4vu+OmkWUOHJPN3hoLuqfyWu73f2mF4gT+cCsb94ZfOW1Tml -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:20 2024 by rpki-client on console-fra.rpki-client.org