
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: W3Zvj32N1D3X3PVL6OA3PAkCJI/+HLIElCVYUJrO9k4=
Subject key identifier: AD:0C:E8:2D:90:C5:E4:72:AF:2D:4C:7C:A5:58:23:A8:4B:B1:94:CA
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 2F5B042F55948221D270533AD865C031F3EE465F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
Signing time: Wed 20 May 2026 20:46:41 +0000
ROA not before: Wed 20 May 2026 20:41:41 +0000
ROA not after: Wed 19 May 2027 20:46:41 +0000
asID: 29802
IP address blocks: 23.94.132.0/24 maxlen: 24
23.226.131.0/24 maxlen: 24
66.212.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 23:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5b:04:2f:55:94:82:21:d2:70:53:3a:d8:65:c0:31:f3:ee:46:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: May 20 20:41:41 2026 GMT
Not After : May 19 20:46:41 2027 GMT
Subject: CN=AD0CE82D90C5E472AF2D4C7CA55823A84BB194CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:c1:00:af:b2:5a:3c:90:a6:4c:9d:bc:3a:
be:a2:89:0c:56:34:51:b8:78:d7:41:11:06:32:5c:
3b:4d:84:af:86:a0:50:0a:3f:27:15:cc:4e:3c:70:
c2:cf:2d:81:a8:70:b8:df:fd:93:5d:b0:7a:86:ff:
d3:5f:a7:4d:10:d8:aa:ed:e6:bd:88:6a:bc:2d:d9:
62:e0:07:0b:ce:22:0f:a6:26:7d:54:b0:ff:fa:89:
cc:5b:30:b2:59:31:cc:ab:56:37:47:a2:ae:68:b4:
3b:1a:b0:91:fb:68:2c:9e:44:39:df:ad:df:9a:66:
9a:2e:da:48:18:e3:49:04:c7:1a:04:37:18:f1:83:
56:52:05:f4:3e:02:63:a4:ee:fc:2c:0e:3c:2a:5a:
88:bd:53:25:4b:88:0a:09:16:4e:1d:ca:3a:ae:ca:
a4:f0:a9:8e:47:24:2d:45:2a:1d:21:5b:db:9b:64:
ad:a6:20:48:33:f1:1d:51:6f:9f:2f:48:ae:90:4f:
a1:79:a4:82:0b:33:f8:ad:a3:61:06:c7:0b:3c:b8:
ea:f1:c0:c0:0c:2c:42:e1:43:2a:0c:3e:03:7f:6e:
bc:3e:d0:23:9e:b0:76:07:93:8d:f9:d0:95:04:64:
21:14:07:7b:b3:bd:79:3c:f8:91:3b:ef:0e:5e:13:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:E8:2D:90:C5:E4:72:AF:2D:4C:7C:A5:58:23:A8:4B:B1:94:CA
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.94.132.0/24
23.226.131.0/24
66.212.17.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:20:d7:c7:b2:05:9c:bc:1e:2e:2b:b3:ca:51:be:0c:1a:98:
39:20:6f:5a:ba:b1:02:18:59:69:cb:53:1d:65:ed:c2:16:b0:
42:d9:9c:df:4a:df:3f:02:5d:4d:50:ab:96:55:0b:22:5d:10:
76:dd:75:1f:ee:14:54:9e:44:52:8f:13:47:9c:6c:e4:5d:ff:
1d:09:06:6c:90:cb:80:b6:42:80:67:4a:09:8d:f1:df:b3:40:
7d:69:21:ec:44:89:7f:21:9b:b4:5d:8c:45:ed:fa:9d:e9:bb:
1d:e9:a3:3c:df:5d:34:a6:e7:a8:09:78:9b:9d:94:12:be:f2:
ac:5b:d4:ed:5a:31:54:4e:0d:de:43:78:d0:11:a7:63:40:4a:
3f:30:cc:84:c7:68:c4:f8:14:03:ce:5f:3f:64:c3:53:14:49:
4c:fd:87:34:89:c5:d5:4e:49:16:8b:29:a3:4f:75:31:3d:c4:
20:7b:e0:d4:75:08:39:a2:b9:ad:52:42:d5:3b:2f:73:7d:70:
58:35:90:ca:d4:4b:f4:db:79:79:77:47:03:e9:dd:47:8a:57:
8c:89:81:12:3d:32:78:0d:50:1f:75:98:f3:79:a2:3c:22:11:
38:d8:18:85:96:53:f7:e2:15:0d:84:07:ab:26:c7:25:a8:58:
5b:96:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:42:43 2026 by rpki-client