$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: cVCrXCNTZwSHC1KoWnnsVYK8IFRvJPDt3LC9uZnDqdU= Subject key identifier: 9E:80:AA:32:61:4D:2B:09:B0:A1:C9:94:D0:69:6E:0D:07:56:08:D5 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7392F93842293F9C4E2B8E348C35DA64CD614F63 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa Signing time: Mon 13 Apr 2026 14:35:56 +0000 ROA not before: Mon 13 Apr 2026 14:30:56 +0000 ROA not after: Mon 12 Apr 2027 14:35:56 +0000 asID: 29802 IP address blocks: 104.234.131.0/24 maxlen: 24 104.234.154.0/24 maxlen: 24 104.234.181.0/24 maxlen: 24 104.234.228.0/24 maxlen: 24 206.53.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 03:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:92:f9:38:42:29:3f:9c:4e:2b:8e:34:8c:35:da:64:cd:61:4f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 13 14:30:56 2026 GMT Not After : Apr 12 14:35:56 2027 GMT Subject: CN=9E80AA32614D2B09B0A1C994D0696E0D075608D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:8c:36:c4:df:57:9f:36:83:5c:37:89:ac: bd:e8:d1:ff:ca:3e:c7:ff:13:62:05:d0:6b:81:3c: 1c:94:ad:cb:03:de:62:99:c5:35:c1:25:2b:19:ff: 49:d4:8b:4a:1f:22:bc:19:80:fe:ba:65:a4:52:c2: d1:4c:6e:aa:dd:75:a0:62:6b:c6:31:3b:5a:15:21: 77:1f:57:5d:df:1b:8f:03:5d:d3:75:0e:a3:ed:68: eb:c2:84:f1:0b:04:fd:56:6e:e4:d0:4a:07:be:b7: 0f:ea:62:4f:33:1e:72:f1:51:f2:60:c6:58:69:58: ab:ab:bc:42:c0:9c:34:68:d4:b1:70:df:0d:92:07: 19:43:68:a7:62:d4:f8:b1:60:8a:c6:80:60:73:4b: fd:7c:fb:97:4a:d4:2d:4f:7d:3f:67:69:d7:0a:c5: 85:72:9e:cd:55:ca:f6:63:fd:50:96:0b:64:74:1e: 79:2b:fc:9f:92:da:33:84:5a:ec:38:27:b1:21:ce: 66:bf:ed:25:35:6a:7d:39:49:72:3e:7b:cf:9b:8e: 40:a1:60:f0:8a:35:e6:f2:ed:cf:71:76:d0:08:da: 53:6e:58:c0:2d:58:8a:db:0c:c3:6f:8a:0c:4d:c6: c1:ee:4a:18:ad:db:95:fe:2b:50:1b:4c:9f:df:9f: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:80:AA:32:61:4D:2B:09:B0:A1:C9:94:D0:69:6E:0D:07:56:08:D5 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.131.0/24 104.234.154.0/24 104.234.181.0/24 104.234.228.0/24 206.53.52.0/24 Signature Algorithm: sha256WithRSAEncryption 89:52:5a:7a:b0:b1:d3:53:b2:59:09:c2:9a:96:25:bd:74:23: a1:5a:b4:1a:99:8b:44:cf:cf:dc:e4:f5:38:af:bf:ca:c1:c4: 84:44:98:f7:57:50:53:13:30:c6:32:f0:8e:11:7b:c7:0f:05: fb:b3:ff:78:27:8c:0f:24:e7:58:c5:5f:cf:c6:e7:c8:06:d2: d9:98:b0:45:06:ac:c5:d7:b1:19:b0:18:69:a9:6f:cf:ab:12: 54:30:3d:79:7e:ff:0e:a1:9a:c2:dc:1a:c1:cf:ca:cd:5c:0d: 81:68:a9:16:13:b6:45:85:e3:63:11:79:66:44:59:5c:f8:d7: 3b:a7:c0:53:da:cd:9a:3f:13:d7:13:22:39:ba:1b:a3:3e:09: 5d:17:05:0f:b3:0c:de:ac:28:12:d3:7d:0a:df:3f:35:81:1b: 3e:e2:e0:88:ac:fb:c2:e8:99:1b:7e:c6:f5:d2:07:90:84:1b: 8d:36:2c:4c:84:75:60:1d:51:50:ac:d8:ae:5c:af:fa:f4:3a: a8:85:f0:5f:22:f3:c8:82:e7:13:35:4e:94:5f:e2:32:d5:bb: 75:78:ba:c4:87:ce:ea:d6:b3:1f:56:09:c7:28:fc:ee:68:f8: 6f:8f:71:88:4f:4a:8c:72:a4:bd:a5:0d:fb:fb:25:24:3a:62: 82:8c:5f:2a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUc5L5OEIpP5xOK440jDXaZM1hT2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNDEzMTQzMDU2WhcNMjcwNDEyMTQzNTU2 WjAzMTEwLwYDVQQDEyg5RTgwQUEzMjYxNEQyQjA5QjBBMUM5OTREMDY5NkUwRDA3 NTYwOEQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ+MNsTfV582 g1w3iay96NH/yj7H/xNiBdBrgTwclK3LA95imcU1wSUrGf9J1ItKHyK8GYD+umWk UsLRTG6q3XWgYmvGMTtaFSF3H1dd3xuPA13TdQ6j7WjrwoTxCwT9Vm7k0EoHvrcP 6mJPMx5y8VHyYMZYaVirq7xCwJw0aNSxcN8NkgcZQ2inYtT4sWCKxoBgc0v9fPuX StQtT30/Z2nXCsWFcp7NVcr2Y/1QlgtkdB55K/yfktozhFrsOCexIc5mv+0lNWp9 OUlyPnvPm45AoWDwijXm8u3PcXbQCNpTbljALViK2wzDb4oMTcbB7koYrduV/itQ G0yf35+W2wIDAQABo4ICljCCApIwHQYDVR0OBBYEFJ6AqjJhTSsJsKHJlNBpbg0H VgjVMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAaOqDAwQAaOqaAwQAaOq1AwQAaOrk AwQAzjU0MA0GCSqGSIb3DQEBCwUAA4IBAQCJUlp6sLHTU7JZCcKaliW9dCOhWrQa mYtEz8/c5PU4r7/KwcSERJj3V1BTEzDGMvCOEXvHDwX7s/94J4wPJOdYxV/PxufI BtLZmLBFBqzF17EZsBhpqW/PqxJUMD15fv8OoZrC3BrBz8rNXA2BaKkWE7ZFheNj EXlmRFlc+Nc7p8BT2s2aPxPXEyI5uhujPgldFwUPswzerCgS030K3z81gRs+4uCI rPvC6Jkbfsb10geQhBuNNixMhHVgHVFQrNiuXK/69DqohfBfIvPIgucTNU6UX+Iy 1bt1eLrEh87q1rMfVgnHKPzuaPhvj3GIT0qMcqS9pQ37+yUkOmKCjF8q -----END CERTIFICATE-----Generated at Fri Apr 17 07:13:08 2026 by rpki-client