$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: CuBc2aZEH99J9ipssWxInt0Iifp0ZK+sqdsgWwJQBf0= Subject key identifier: 3E:DA:CF:03:85:49:AF:9A:EE:2F:4F:86:38:D8:6A:E4:9C:E8:8D:3F Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6D19B701E90750815E9EF594A706B2819688429E Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa Signing time: Sun 02 Feb 2025 00:00:03 +0000 ROA not before: Sat 01 Feb 2025 23:55:03 +0000 ROA not after: Sun 01 Feb 2026 00:00:03 +0000 asID: 29802 IP address blocks: 104.234.131.0/24 maxlen: 24 104.234.154.0/24 maxlen: 24 104.234.181.0/24 maxlen: 24 104.234.228.0/24 maxlen: 24 206.53.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:19:b7:01:e9:07:50:81:5e:9e:f5:94:a7:06:b2:81:96:88:42:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Feb 1 23:55:03 2025 GMT Not After : Feb 1 00:00:03 2026 GMT Subject: CN=3EDACF038549AF9AEE2F4F8638D86AE49CE88D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:98:72:97:9b:34:8e:cc:48:ae:78:92:cb: 73:9b:41:fd:1d:3b:cd:88:f2:f1:60:ff:65:3c:cf: e6:66:82:9b:8c:6d:6e:ae:5b:d9:79:79:c7:6f:13: 6d:50:80:ca:ed:a1:45:03:74:9f:56:52:6d:02:81: 98:92:24:e2:e3:bf:71:a3:e4:07:e1:83:62:04:75: 6c:24:d2:89:8e:ee:17:70:eb:f9:f6:d4:f5:66:47: c1:e9:31:c8:c0:67:6c:76:e2:af:f5:9e:f2:5a:61: 21:0e:1b:ce:c2:e9:af:40:92:62:6a:e1:9f:66:f7: 6a:1c:3d:9a:cb:2a:bc:16:59:f5:c6:82:e5:23:cb: ac:71:cf:d7:ae:77:07:e6:50:42:3c:19:a6:9f:be: ab:94:c8:61:82:d4:25:04:1a:77:42:0f:a6:fd:6e: 0f:48:0f:a2:e7:63:99:d7:b1:be:a8:82:6b:e3:b0: e3:90:35:ae:cb:f2:0b:e1:2e:9a:77:c7:85:5f:88: e0:c3:99:c7:42:5f:74:e6:d3:92:7a:d9:54:33:df: 4a:43:a9:20:9b:9d:16:08:61:44:b8:75:6f:e7:2a: 88:23:4e:42:12:a8:68:56:e6:f1:67:d9:dd:a1:78: b3:31:df:61:d7:93:49:77:0a:d6:31:be:16:e3:22: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DA:CF:03:85:49:AF:9A:EE:2F:4F:86:38:D8:6A:E4:9C:E8:8D:3F X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.131.0/24 104.234.154.0/24 104.234.181.0/24 104.234.228.0/24 206.53.52.0/24 Signature Algorithm: sha256WithRSAEncryption 91:ca:29:9d:65:2e:8a:82:d4:43:96:a1:9a:4f:eb:7c:d3:88: d6:e8:b7:c2:d6:49:08:7d:c7:36:90:e2:75:9b:79:52:a4:ae: 23:e6:14:42:91:3d:af:d4:91:cb:6e:02:9b:bf:a4:c8:26:0d: 38:87:68:59:2a:fd:a5:3d:9e:cf:ff:ad:ba:20:7a:1e:6d:b8: a9:cb:1a:0d:75:0e:0f:dc:1e:f8:00:53:ae:77:8a:fe:a9:a7: 81:13:58:b6:32:56:c7:85:80:b9:20:1d:88:82:ba:67:e6:44: 95:27:65:66:f1:b1:ed:f1:81:6d:4a:bb:5b:13:99:98:f7:77: ad:47:f6:c6:99:37:56:ad:62:20:b8:f1:3b:bd:8c:fe:78:3f: 0c:bd:0d:67:f4:c3:89:bf:b2:22:04:a7:f2:43:bb:b9:c9:04: 2a:3a:ba:2c:4d:69:f2:99:35:a5:f1:ea:bc:ad:95:ed:3d:66: 78:5d:3b:e5:0a:48:39:2e:89:2e:41:8d:b6:4c:4b:37:7a:a2: de:40:20:47:4b:a2:ab:94:76:1e:ae:c8:0d:9b:a7:b4:59:cb: 2e:1e:6a:85:81:05:b0:9b:be:4b:3f:b6:4e:7f:93:8e:a3:7a: 14:39:9b:cb:b4:ed:39:10:1e:33:ae:fc:ee:f9:0c:7a:73:fd: 97:4e:e2:bb -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUbRm3AekHUIFenvWUpwaygZaIQp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMjAxMjM1NTAzWhcNMjYwMjAxMDAwMDAz WjAzMTEwLwYDVQQDEygzRURBQ0YwMzg1NDlBRjlBRUUyRjRGODYzOEQ4NkFFNDlD RTg4RDNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvSYcpebNI7M SK54kstzm0H9HTvNiPLxYP9lPM/mZoKbjG1urlvZeXnHbxNtUIDK7aFFA3SfVlJt AoGYkiTi479xo+QH4YNiBHVsJNKJju4XcOv59tT1ZkfB6THIwGdsduKv9Z7yWmEh DhvOwumvQJJiauGfZvdqHD2ayyq8Fln1xoLlI8uscc/XrncH5lBCPBmmn76rlMhh gtQlBBp3Qg+m/W4PSA+i52OZ17G+qIJr47DjkDWuy/IL4S6ad8eFX4jgw5nHQl90 5tOSetlUM99KQ6kgm50WCGFEuHVv5yqII05CEqhoVubxZ9ndoXizMd9h15NJdwrW Mb4W4yLqQQIDAQABo4ICljCCApIwHQYDVR0OBBYEFD7azwOFSa+a7i9PhjjYauSc 6I0/MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAaOqDAwQAaOqaAwQAaOq1AwQAaOrk AwQAzjU0MA0GCSqGSIb3DQEBCwUAA4IBAQCRyimdZS6KgtRDlqGaT+t804jW6LfC 1kkIfcc2kOJ1m3lSpK4j5hRCkT2v1JHLbgKbv6TIJg04h2hZKv2lPZ7P/626IHoe bbipyxoNdQ4P3B74AFOud4r+qaeBE1i2MlbHhYC5IB2Igrpn5kSVJ2Vm8bHt8YFt SrtbE5mY93etR/bGmTdWrWIguPE7vYz+eD8MvQ1n9MOJv7IiBKfyQ7u5yQQqOros TWnymTWl8eq8rZXtPWZ4XTvlCkg5LokuQY22TEs3eqLeQCBHS6KrlHYersgNm6e0 WcsuHmqFgQWwm75LP7ZOf5OOo3oUOZvLtO05EB4zrvzu+Qx6c/2XTuK7 -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:28 2025 by rpki-client