$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: 7DmD99vPPJzPDX0zW8juW7szELaYi+mlUTMFoJP02ns= Subject key identifier: E7:EB:EE:11:56:DB:09:CA:D8:72:E8:F5:CF:79:2B:10:74:46:77:DB Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 304E2DD3293BD08D8675AB73C2D569B2FA5C1EB9 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa Signing time: Thu 06 Feb 2025 20:34:35 +0000 ROA not before: Thu 06 Feb 2025 20:29:35 +0000 ROA not after: Thu 05 Feb 2026 20:34:35 +0000 asID: 29802 IP address blocks: 157.254.158.0/24 maxlen: 24 157.254.182.0/24 maxlen: 24 157.254.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 00:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4e:2d:d3:29:3b:d0:8d:86:75:ab:73:c2:d5:69:b2:fa:5c:1e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Feb 6 20:29:35 2025 GMT Not After : Feb 5 20:34:35 2026 GMT Subject: CN=E7EBEE1156DB09CAD872E8F5CF792B10744677DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:c9:a9:84:81:07:a2:64:6f:77:cb:21:18: d1:f1:38:36:99:8e:76:46:04:90:76:b8:f2:b5:c0: 95:5f:ed:c8:81:c8:df:0c:70:9e:f9:43:e7:5e:a9: e1:d8:15:eb:6f:6b:8d:80:fb:64:8f:fd:fa:50:97: 65:ea:01:da:0a:70:15:ee:fa:48:37:5e:87:8c:34: 87:8c:9f:64:6c:5b:28:0c:b4:47:91:2d:dc:ae:27: d9:26:4f:71:98:0e:93:cd:30:bf:bf:38:be:cb:b0: 50:b8:58:75:d1:8e:c8:51:31:a9:d4:d1:db:6e:5a: 98:af:06:16:97:15:94:ef:02:7b:0c:fe:df:6b:cc: 67:4d:8c:e2:c9:a3:a0:7a:66:f0:8d:e4:e3:d4:7c: ff:ac:48:7c:3d:e2:d0:ea:50:92:86:80:a9:44:3b: a7:c4:34:2b:ed:92:34:29:d7:c1:9f:87:da:41:79: e3:96:56:75:ac:ad:ed:c7:e4:82:f8:c1:47:9d:7c: c0:9f:69:34:9c:16:b0:b6:3b:9d:ec:9d:b4:64:a8: fd:07:37:03:00:3b:78:a3:b1:12:34:e3:f2:99:32: 4d:3e:06:4a:72:f1:cc:bd:8a:1f:6a:34:12:63:2a: ae:2d:95:e4:97:aa:0d:c3:b2:93:87:45:33:99:98: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EB:EE:11:56:DB:09:CA:D8:72:E8:F5:CF:79:2B:10:74:46:77:DB X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.158.0/24 157.254.182.0/24 157.254.248.0/22 Signature Algorithm: sha256WithRSAEncryption 31:d8:4c:d4:af:43:3a:39:e1:05:91:df:8d:c2:f0:64:81:8d: 0b:e1:08:ec:39:1a:d3:98:71:21:d4:03:c9:29:1b:6b:d6:d1: 7d:f7:f8:c6:d0:b8:19:fa:96:5c:d0:94:23:e8:f0:e5:72:f5: 87:b9:92:74:d4:ed:69:b6:3d:4a:6e:0c:7d:01:e0:eb:d4:ef: 84:4b:0b:13:88:ba:33:9e:45:37:73:c9:77:c6:89:ad:78:f8: 99:c9:4d:9d:60:ef:c9:e2:13:20:a0:49:f5:75:f3:f2:6f:7c: c4:a3:3f:15:f4:09:81:35:46:24:dc:32:7d:93:cd:e1:49:4c: 20:6f:56:2d:32:76:d7:25:54:7d:f0:fd:5f:de:99:3d:34:39: 5f:89:1e:95:af:ae:a5:2c:fb:32:36:4e:dd:17:27:6e:72:af: b1:2f:e7:11:77:a6:b3:aa:4e:99:a2:27:82:51:a3:10:7a:31: a0:0e:05:38:a0:eb:64:24:ec:06:53:a3:f5:28:65:ea:94:68: 93:3a:7d:d0:d1:d5:84:a6:f2:07:43:d8:7b:5b:fe:08:aa:f5: 3a:3d:5b:b9:5e:0d:15:0d:a0:32:93:24:4f:2b:0e:ba:2c:c8: 6f:68:d2:d6:a1:6a:07:cf:f6:0f:aa:99:42:c2:92:3c:73:0a: 69:29:46:3f -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUME4t0yk70I2GdatzwtVpsvpcHrkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMjA2MjAyOTM1WhcNMjYwMjA1MjAzNDM1 WjAzMTEwLwYDVQQDEyhFN0VCRUUxMTU2REIwOUNBRDg3MkU4RjVDRjc5MkIxMDc0 NDY3N0RCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPfJqYSBB6Jk b3fLIRjR8Tg2mY52RgSQdrjytcCVX+3IgcjfDHCe+UPnXqnh2BXrb2uNgPtkj/36 UJdl6gHaCnAV7vpIN16HjDSHjJ9kbFsoDLRHkS3crifZJk9xmA6TzTC/vzi+y7BQ uFh10Y7IUTGp1NHbblqYrwYWlxWU7wJ7DP7fa8xnTYziyaOgembwjeTj1Hz/rEh8 PeLQ6lCShoCpRDunxDQr7ZI0KdfBn4faQXnjllZ1rK3tx+SC+MFHnXzAn2k0nBaw tjud7J20ZKj9BzcDADt4o7ESNOPymTJNPgZKcvHMvYofajQSYyquLZXkl6oNw7KT h0UzmZjh+wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFOfr7hFW2wnK2HLo9c95KxB0 RnfbMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnf6eAwQAnf62AwQCnf74MA0GCSqG SIb3DQEBCwUAA4IBAQAx2EzUr0M6OeEFkd+NwvBkgY0L4QjsORrTmHEh1APJKRtr 1tF99/jG0LgZ+pZc0JQj6PDlcvWHuZJ01O1ptj1Kbgx9AeDr1O+ESwsTiLoznkU3 c8l3xomtePiZyU2dYO/J4hMgoEn1dfPyb3zEoz8V9AmBNUYk3DJ9k83hSUwgb1Yt MnbXJVR98P1f3pk9NDlfiR6Vr66lLPsyNk7dFyducq+xL+cRd6azqk6ZoieCUaMQ ejGgDgU4oOtkJOwGU6P1KGXqlGiTOn3Q0dWEpvIHQ9h7W/4IqvU6PVu5Xg0VDaAy kyRPKw66LMhvaNLWoWoHz/YPqplCwpI8cwppKUY/ -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:56 2025 by rpki-client