$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: XBvEDFT+NKQT8iTaXTxpzwdxr7fMX3RwMMtkgkQMtx0= Subject key identifier: 77:B6:2B:E6:F5:38:35:BD:61:7D:37:4F:0E:3B:7D:8A:AD:CD:D6:98 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 488B733C9937A254716A6DB92797925A16FDEB2E Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa Signing time: Wed 08 Jan 2025 05:11:56 +0000 ROA not before: Wed 08 Jan 2025 05:06:56 +0000 ROA not after: Wed 07 Jan 2026 05:11:56 +0000 asID: 7029 IP address blocks: 157.254.11.0/24 maxlen: 24 157.254.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Feb 2025 15:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8b:73:3c:99:37:a2:54:71:6a:6d:b9:27:97:92:5a:16:fd:eb:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 8 05:06:56 2025 GMT Not After : Jan 7 05:11:56 2026 GMT Subject: CN=77B62BE6F53835BD617D374F0E3B7D8AADCDD698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6b:ec:3a:d3:3c:9a:b9:5c:94:09:2b:d6:c6: 05:06:58:1e:72:b4:af:1c:9e:0e:6e:d7:b1:32:de: 3b:1e:58:b7:42:0f:20:a8:c8:a8:e2:35:d6:51:d7: 12:60:d2:c0:bf:34:98:6a:59:7f:a5:ff:85:58:aa: 93:87:11:70:e7:08:bd:aa:77:6b:69:56:9e:d8:a3: b8:cb:cb:e2:c1:f5:be:2a:43:b4:86:53:c1:e6:d5: ed:8a:b5:12:00:34:3d:75:4b:42:a4:19:33:ee:8a: 4d:f9:dc:1f:d3:ab:70:f9:8b:95:aa:51:84:0e:6a: 44:0a:e2:66:8e:41:84:47:d1:55:01:e0:df:bc:14: 81:ad:8d:af:97:1f:47:b7:a6:24:9e:c6:c7:b4:56: 9a:a8:20:7c:45:d5:be:50:ff:43:e8:a3:f4:40:9f: 8f:b6:77:76:e4:26:2a:db:16:27:fc:3c:54:45:04: 1a:0f:48:6f:6f:a2:eb:2a:b1:e3:6b:1e:08:03:1e: d6:fc:f8:e9:f7:cc:41:8e:60:cf:ce:8b:ab:ad:41: fc:7d:b9:03:5f:fa:1d:1e:c4:35:56:a4:99:8c:93: 9e:da:2e:45:c2:59:12:08:fd:76:10:e1:cd:04:78: 1a:41:02:79:54:57:67:9b:dd:f0:ef:2d:0b:90:f9: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B6:2B:E6:F5:38:35:BD:61:7D:37:4F:0E:3B:7D:8A:AD:CD:D6:98 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.11.0/24 157.254.13.0/24 Signature Algorithm: sha256WithRSAEncryption 35:60:f7:47:0c:8a:8a:7a:14:db:cf:f9:4f:c1:43:65:62:95: c1:b2:96:0e:a9:df:a1:fd:ec:2a:9e:07:0e:47:39:bd:fe:f8: 94:46:54:10:a8:ed:0d:93:9f:4b:27:6d:c5:d8:cd:ed:ea:45: 73:0d:b2:0b:49:4c:80:05:5a:20:b4:49:03:8a:3f:da:eb:2e: 5d:f6:a1:54:67:33:f1:3e:70:5c:81:0e:6e:4c:2c:36:22:be: dc:33:02:7d:ff:c7:c6:0b:94:5a:a0:74:c2:86:b6:b3:7b:bb: ff:11:bd:82:7b:4e:ec:25:32:f5:ee:5f:f1:53:93:ec:fd:dd: 79:ef:45:b7:5a:10:05:27:0a:ba:17:7a:9c:3a:74:4f:3c:16: 65:6f:63:0f:cb:c4:13:39:22:54:6d:3b:41:7f:87:90:e8:80: b1:d4:12:36:df:15:a5:83:b9:8f:62:fc:c1:a1:e3:0e:79:e1: 3a:36:8f:20:e5:12:a3:ea:cc:d0:74:a7:28:3f:fe:d0:33:ea: 56:70:69:1c:91:e5:38:18:c6:ce:99:33:cd:5e:c7:36:1b:06: 37:b4:b0:e3:c6:02:20:f6:58:73:96:18:96:1b:49:92:7c:ee: 6a:9a:12:19:63:ca:15:b9:a3:57:6e:6f:6b:c0:3f:84:d7:75: de:2a:7f:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUSItzPJk3olRxam25J5eSWhb96y4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTA4MDUwNjU2WhcNMjYwMTA3MDUxMTU2 WjAzMTEwLwYDVQQDEyg3N0I2MkJFNkY1MzgzNUJENjE3RDM3NEYwRTNCN0Q4QUFE Q0RENjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GvsOtM8mrlc lAkr1sYFBlgecrSvHJ4ObtexMt47Hli3Qg8gqMio4jXWUdcSYNLAvzSYall/pf+F WKqThxFw5wi9qndraVae2KO4y8viwfW+KkO0hlPB5tXtirUSADQ9dUtCpBkz7opN +dwf06tw+YuVqlGEDmpECuJmjkGER9FVAeDfvBSBrY2vlx9Ht6YknsbHtFaaqCB8 RdW+UP9D6KP0QJ+Ptnd25CYq2xYn/DxURQQaD0hvb6LrKrHjax4IAx7W/Pjp98xB jmDPzourrUH8fbkDX/odHsQ1VqSZjJOe2i5FwlkSCP12EOHNBHgaQQJ5VFdnm93w 7y0LkPnGcQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFHe2K+b1ODW9YX03Tw47fYqt zdaYMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACd/gsDBACd/g0wDQYJKoZIhvcNAQEL BQADggEBADVg90cMiop6FNvP+U/BQ2VilcGylg6p36H97CqeBw5HOb3++JRGVBCo 7Q2Tn0snbcXYze3qRXMNsgtJTIAFWiC0SQOKP9rrLl32oVRnM/E+cFyBDm5MLDYi vtwzAn3/x8YLlFqgdMKGtrN7u/8RvYJ7TuwlMvXuX/FTk+z93XnvRbdaEAUnCroX epw6dE88FmVvYw/LxBM5IlRtO0F/h5DogLHUEjbfFaWDuY9i/MGh4w554To2jyDl EqPqzNB0pyg//tAz6lZwaRyR5TgYxs6ZM81exzYbBje0sOPGAiD2WHOWGJYbSZJ8 7mqaEhljyhW5o1dub2vAP4TXdd4qfyo= -----END CERTIFICATE-----Generated at Wed Feb 5 04:38:32 2025 by rpki-client