$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: wg8yT+X7OLv7EwJJ5x4cemHGppoITZdQwoAQg0cJHhE= Subject key identifier: C9:32:97:8C:46:6D:D0:3E:24:EF:F0:E3:28:FD:EC:AE:2B:B2:B2:38 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 34E3CA1C0781BB8996C488AE5E3670ABBC9888E7 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa Signing time: Mon 12 May 2025 14:03:58 +0000 ROA not before: Mon 12 May 2025 13:58:58 +0000 ROA not after: Mon 11 May 2026 14:03:58 +0000 asID: 29802 IP address blocks: 104.234.131.0/24 maxlen: 24 104.234.154.0/24 maxlen: 24 104.234.181.0/24 maxlen: 24 104.234.228.0/24 maxlen: 24 206.53.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e3:ca:1c:07:81:bb:89:96:c4:88:ae:5e:36:70:ab:bc:98:88:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 12 13:58:58 2025 GMT Not After : May 11 14:03:58 2026 GMT Subject: CN=C932978C466DD03E24EFF0E328FDECAE2BB2B238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:83:b3:1e:7e:98:ce:72:01:b9:b2:c1:5b:b9: 13:ba:59:ee:81:d7:f0:fa:3c:10:89:08:bd:ed:09: 16:32:22:dd:8b:fe:91:f9:1a:ce:d0:ea:31:f4:e6: 6e:e6:a8:7b:d0:6b:be:c8:be:27:12:ed:8a:08:1e: 2d:f6:eb:de:0e:d7:2b:47:d3:1b:44:df:52:44:7f: 21:d7:5b:57:97:04:78:85:1b:6d:c9:d6:7a:3b:9b: 32:d1:a5:13:aa:3a:ed:b9:35:3f:b5:ce:70:9b:56: db:4c:0f:e7:22:3f:57:13:e0:17:1e:1f:5b:11:3a: 26:1f:d7:68:ec:b9:7d:ca:92:3f:b3:13:2e:3a:e9: 68:a5:dc:d3:ef:f6:18:7e:43:d0:fc:aa:9e:a7:19: 56:16:7d:e4:ef:09:39:ed:27:7e:e2:d9:87:25:2b: 0c:58:ca:74:1e:86:d9:ef:75:ac:5d:8c:00:96:b2: e9:6d:ef:ef:54:2b:dd:bd:f9:0b:bd:81:38:9d:b7: 49:5b:9c:47:3f:e9:3d:52:17:92:4b:bf:a0:94:0f: 87:17:b9:50:06:e5:a8:b9:57:61:48:9e:42:d2:b8: 43:9a:52:13:70:2a:d5:0b:8f:31:00:64:44:d5:4a: 86:9e:92:c2:c3:58:99:69:1d:ad:ed:1b:83:7a:fb: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:32:97:8C:46:6D:D0:3E:24:EF:F0:E3:28:FD:EC:AE:2B:B2:B2:38 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.131.0/24 104.234.154.0/24 104.234.181.0/24 104.234.228.0/24 206.53.52.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e2:cd:ae:45:04:6f:7b:07:97:3a:3e:2d:8f:d0:f4:72:cd: 46:dc:49:2b:45:16:d7:5e:bd:83:9b:dd:71:2c:a9:cd:4b:b0: cb:32:c2:c4:d2:c6:9f:9f:77:9a:0d:5f:ac:40:36:f8:06:f5: 2c:45:eb:f3:1e:6f:4f:9a:29:f3:47:81:4f:b3:50:c1:3a:75: 04:90:20:2b:78:3f:ea:ec:a0:fb:90:02:ec:cb:6d:7c:13:6d: 6c:54:17:97:a5:29:00:1f:57:7c:32:b3:62:a7:5d:2b:7d:35: 7b:97:c5:6f:64:6f:20:a4:b5:5b:aa:d8:b9:64:4c:1f:5d:01: 2d:9e:9c:f7:99:e3:06:bc:00:56:ad:0c:22:f1:db:43:18:cd: d5:2f:bd:5a:ef:70:ac:eb:69:94:02:c2:a3:00:e8:55:64:66: 4a:e6:cb:4b:7b:43:d4:3f:48:6b:c2:6e:53:75:48:1d:c5:e1: 92:0f:f5:3a:f5:98:cd:d5:f6:fd:6f:1b:0a:70:e9:0b:84:c8: 36:52:e9:ae:32:bc:87:aa:fb:bd:27:47:00:ce:b4:95:8e:f3: fa:03:31:2f:67:41:7d:92:c8:f4:b8:2c:62:54:9a:79:45:e9: 91:5d:2f:56:ff:e7:9a:9d:b1:52:5e:24:94:96:d4:a9:15:0e: c0:21:9d:5a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUNOPKHAeBu4mWxIiuXjZwq7yYiOcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNTEyMTM1ODU4WhcNMjYwNTExMTQwMzU4 WjAzMTEwLwYDVQQDEyhDOTMyOTc4QzQ2NkREMDNFMjRFRkYwRTMyOEZERUNBRTJC QjJCMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYOzHn6YznIB ubLBW7kTulnugdfw+jwQiQi97QkWMiLdi/6R+RrO0Oox9OZu5qh70Gu+yL4nEu2K CB4t9uveDtcrR9MbRN9SRH8h11tXlwR4hRttydZ6O5sy0aUTqjrtuTU/tc5wm1bb TA/nIj9XE+AXHh9bETomH9do7Ll9ypI/sxMuOulopdzT7/YYfkPQ/KqepxlWFn3k 7wk57Sd+4tmHJSsMWMp0HobZ73WsXYwAlrLpbe/vVCvdvfkLvYE4nbdJW5xHP+k9 UheSS7+glA+HF7lQBuWouVdhSJ5C0rhDmlITcCrVC48xAGRE1UqGnpLCw1iZaR2t 7RuDevss4QIDAQABo4ICljCCApIwHQYDVR0OBBYEFMkyl4xGbdA+JO/w4yj97K4r srI4MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAaOqDAwQAaOqaAwQAaOq1AwQAaOrk AwQAzjU0MA0GCSqGSIb3DQEBCwUAA4IBAQCL4s2uRQRveweXOj4tj9D0cs1G3Ekr RRbXXr2Dm91xLKnNS7DLMsLE0safn3eaDV+sQDb4BvUsRevzHm9PminzR4FPs1DB OnUEkCAreD/q7KD7kALsy218E21sVBeXpSkAH1d8MrNip10rfTV7l8VvZG8gpLVb qti5ZEwfXQEtnpz3meMGvABWrQwi8dtDGM3VL71a73Cs62mUAsKjAOhVZGZK5stL e0PUP0hrwm5TdUgdxeGSD/U69ZjN1fb9bxsKcOkLhMg2UumuMryHqvu9J0cAzrSV jvP6AzEvZ0F9ksj0uCxiVJp5RemRXS9W/+eanbFSXiSUltSpFQ7AIZ1a -----END CERTIFICATE-----Generated at Sun Jun 8 02:11:41 2025 by rpki-client