$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: XKQg0mBhM/sq77fUV0bBeAWDT3tJFGqzQekDgZp+TLM= Subject key identifier: 80:9F:B2:B9:39:4F:93:AB:9C:57:99:06:B5:99:9F:21:6C:8E:8E:AD Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 3130B863C6FECE3C3067E6B69749EE6988D62536 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa Signing time: Tue 05 Nov 2024 19:47:56 +0000 ROA not before: Tue 05 Nov 2024 19:42:56 +0000 ROA not after: Tue 04 Nov 2025 19:47:56 +0000 asID: 7029 IP address blocks: 104.234.85.0/24 maxlen: 24 104.234.97.0/24 maxlen: 24 104.234.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 22:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:30:b8:63:c6:fe:ce:3c:30:67:e6:b6:97:49:ee:69:88:d6:25:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 5 19:42:56 2024 GMT Not After : Nov 4 19:47:56 2025 GMT Subject: CN=809FB2B9394F93AB9C579906B5999F216C8E8EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:a8:af:b8:f4:93:40:2d:48:87:5e:b7:77: 2f:70:75:cb:e5:90:40:ae:fa:87:bc:03:a9:15:cf: 55:68:6a:ea:5e:03:8f:c1:7d:a9:df:17:26:95:7c: 8a:73:f5:22:cc:c7:48:5c:7d:00:a4:3e:fc:b6:9b: 1c:2d:ae:04:1b:f8:db:0a:52:c8:59:7c:e8:7e:54: 72:d1:84:70:0c:06:77:19:9b:b2:6e:29:6a:53:ef: d0:9f:e6:df:92:c3:ae:97:a6:27:c4:02:5e:1a:65: 39:0d:1b:72:1c:4b:fa:d4:ab:1b:0e:7d:24:f7:74: 4a:fe:eb:fa:90:f1:7c:f1:35:c1:27:ca:e7:62:9e: ed:52:ae:2e:36:32:ca:1a:f6:11:49:a6:a4:cf:f0: ad:7f:fa:ad:23:cf:f1:a8:41:79:5b:e4:ae:07:de: 94:3d:da:8b:b2:e6:ad:08:2a:5d:16:d4:ca:47:80: 5e:1b:e9:d3:63:e1:a6:de:9a:14:1b:0d:63:02:0f: 01:99:f7:92:21:f0:e0:04:98:fe:0d:7a:26:e0:95: 2a:a6:04:e9:d7:25:2c:de:2f:bb:0a:de:8a:f9:34: 2f:0a:23:3e:e9:d2:e9:60:21:c0:6c:c2:56:fd:cc: bc:91:6b:a5:de:41:6e:d9:9f:77:01:ae:2e:42:72: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9F:B2:B9:39:4F:93:AB:9C:57:99:06:B5:99:9F:21:6C:8E:8E:AD X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.85.0/24 104.234.97.0/24 104.234.246.0/24 Signature Algorithm: sha256WithRSAEncryption 70:06:9a:e4:bc:59:61:c1:16:54:5c:a9:71:28:f5:e0:58:0d: 69:a3:db:26:6a:cb:d4:1b:fa:c3:b2:1b:05:a5:d3:2e:b5:cd: 4f:80:c1:13:60:95:a4:55:4e:f3:f5:bb:4d:b2:e5:bf:bb:e9: a1:1c:0f:db:e2:e1:97:ba:0b:74:b6:67:d5:b7:eb:7b:6e:a7: ec:fe:41:2d:26:cd:90:b5:13:83:58:16:97:b9:ae:15:43:9e: ac:95:38:94:cd:6f:df:ac:c3:49:7e:ae:a0:2d:a1:b7:0e:66: 5a:16:8d:21:0e:c1:21:9d:fe:7a:b0:34:cc:a7:69:16:d0:93: 4e:65:32:54:d7:4d:23:b8:15:51:f6:f9:17:68:80:2c:ea:73: d1:99:a4:f0:e0:28:0e:dd:e3:8d:a4:86:2e:d3:7b:eb:93:d0: 43:fa:91:64:66:95:6e:0c:64:84:15:37:d4:12:7f:24:a8:d6: 3b:d1:70:43:bb:25:b0:ab:95:4f:05:c9:3c:73:2d:03:d7:75: 37:b6:07:17:e5:8e:a6:89:b5:0a:39:df:41:21:b8:87:3b:a9: 29:02:ea:35:b2:33:bd:df:08:b1:cc:a9:09:95:a4:b5:4a:90: ab:50:4f:7a:53:28:a4:96:72:fa:4a:19:40:6b:6a:78:19:33: cd:a7:59:9e -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUMTC4Y8b+zjwwZ+a2l0nuaYjWJTYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTA1MTk0MjU2WhcNMjUxMTA0MTk0NzU2 WjAzMTEwLwYDVQQDEyg4MDlGQjJCOTM5NEY5M0FCOUM1Nzk5MDZCNTk5OUYyMTZD OEU4RUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXaor7j0k0At SIdet3cvcHXL5ZBArvqHvAOpFc9VaGrqXgOPwX2p3xcmlXyKc/UizMdIXH0ApD78 tpscLa4EG/jbClLIWXzoflRy0YRwDAZ3GZuybilqU+/Qn+bfksOul6YnxAJeGmU5 DRtyHEv61KsbDn0k93RK/uv6kPF88TXBJ8rnYp7tUq4uNjLKGvYRSaakz/Ctf/qt I8/xqEF5W+SuB96UPdqLsuatCCpdFtTKR4BeG+nTY+Gm3poUGw1jAg8BmfeSIfDg BJj+DXom4JUqpgTp1yUs3i+7Ct6K+TQvCiM+6dLpYCHAbMJW/cy8kWul3kFu2Z93 Aa4uQnJU+QIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFICfsrk5T5OrnFeZBrWZnyFs jo6tMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABo6lUDBABo6mEDBABo6vYwDQYJKoZI hvcNAQELBQADggEBAHAGmuS8WWHBFlRcqXEo9eBYDWmj2yZqy9Qb+sOyGwWl0y61 zU+AwRNglaRVTvP1u02y5b+76aEcD9vi4Ze6C3S2Z9W363tup+z+QS0mzZC1E4NY Fpe5rhVDnqyVOJTNb9+sw0l+rqAtobcOZloWjSEOwSGd/nqwNMynaRbQk05lMlTX TSO4FVH2+RdogCzqc9GZpPDgKA7d442khi7Te+uT0EP6kWRmlW4MZIQVN9QSfySo 1jvRcEO7JbCrlU8FyTxzLQPXdTe2BxfljqaJtQo530EhuIc7qSkC6jWyM73fCLHM qQmVpLVKkKtQT3pTKKSWcvpKGUBrangZM82nWZ4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:40:16 2024 by rpki-client on console-ams.rpki-client.org