$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: +NfaAiIWwlPBJKi3PLnAJ/I29K6bSwhyai2V9NSqSpk= Subject key identifier: 39:8A:9D:D1:36:20:15:3A:11:7F:1F:24:CA:93:24:F3:A0:74:C3:D7 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 511CDCF964EB455489212DABB6DF3F31B4307494 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa Signing time: Mon 26 Oct 2026 08:01:31 +0000 ROA not before: Mon 26 Oct 2026 07:56:31 +0000 ROA not after: Mon 25 Oct 2027 08:01:31 +0000 asID: 29802 IP address blocks: 23.94.132.0/24 maxlen: 24 66.63.172.0/24 maxlen: 24 66.212.17.0/24 maxlen: 24 72.11.143.0/24 maxlen: 24 192.228.115.0/24 maxlen: 24 208.76.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 19:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1c:dc:f9:64:eb:45:54:89:21:2d:ab:b6:df:3f:31:b4:30:74:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 26 07:56:31 2026 GMT Not After : Oct 25 08:01:31 2027 GMT Subject: CN=398A9DD13620153A117F1F24CA9324F3A074C3D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:44:bd:01:2d:32:c7:c3:48:7b:f8:53:5d: 07:48:fe:a3:91:ee:6c:de:f0:4d:d5:fb:51:e9:f8: cd:e9:18:c8:49:32:76:87:ad:bf:1c:c2:d3:40:c4: ba:7d:61:bf:49:33:24:d9:8a:73:cc:48:33:01:25: 1a:08:e1:cb:48:6c:25:07:20:c9:b3:1e:5a:33:ca: 6a:4b:75:a7:b9:4e:7b:93:bf:3b:c5:63:ee:de:14: ea:03:0c:d0:4c:63:ae:41:4e:55:9a:c7:d5:60:c6: 59:46:63:cc:3c:e7:b2:86:0e:88:d7:c9:86:29:a0: 81:0c:7f:9b:b4:0e:d3:dd:14:73:53:32:dc:80:3d: 13:af:1a:07:ea:26:22:64:10:bb:ce:d4:78:81:6d: ce:65:99:3d:80:ac:e9:4c:b5:86:c6:28:8a:64:29: f0:52:ef:a3:a5:d0:15:52:ad:de:2a:36:48:5c:5d: 74:28:e0:0b:a2:0f:1c:e2:1d:63:0c:ea:b6:a8:a8: 3f:ee:07:8d:8f:2b:47:7b:66:4d:1d:54:16:36:ae: 29:6e:64:5f:33:34:8b:0b:b2:0f:42:4d:36:b1:fa: 0e:9d:b4:61:fe:ce:f3:6d:8b:23:35:c8:a9:fa:a8: 4a:50:a1:02:37:cb:7e:6c:cf:07:21:36:9e:11:3d: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:9D:D1:36:20:15:3A:11:7F:1F:24:CA:93:24:F3:A0:74:C3:D7 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.132.0/24 66.63.172.0/24 66.212.17.0/24 72.11.143.0/24 192.228.115.0/24 208.76.43.0/24 Signature Algorithm: sha256WithRSAEncryption 98:a5:30:6a:a9:ea:dc:5f:af:68:e2:5f:0b:79:ad:60:c9:74: 07:3e:be:5f:f3:3e:d0:91:52:56:13:5f:06:c6:38:fa:8b:bd: e1:bb:81:c2:6c:86:00:8d:77:06:63:52:1c:13:f7:6f:12:3d: 2b:d3:d2:32:fc:33:ee:a4:6b:af:3a:8a:f4:c4:84:00:82:c6: 20:97:43:e7:b5:b5:00:9a:e0:4e:47:a1:56:83:ee:86:ad:f0: bf:07:02:63:65:19:bb:c9:24:3c:ee:d9:ff:c8:f7:ea:24:ce: 82:65:4d:1d:ff:ac:30:e5:0e:29:1e:6f:d2:e5:30:74:6f:24: 74:61:10:fc:85:dd:a3:66:11:7e:b4:50:cb:fa:7b:87:17:ae: 14:b9:99:ab:dc:b3:80:ff:e8:a4:31:62:7c:97:69:90:8c:0b: 47:11:df:22:d1:cc:37:4c:15:4b:2d:c5:7c:5c:42:a8:16:79: 4c:fb:4a:3b:c2:2f:00:52:34:a4:4d:0b:d8:b0:1f:e7:08:95: bf:39:53:bf:d8:62:73:24:44:de:7e:34:fb:27:6b:ca:d3:09: 99:ad:16:98:ab:da:27:d5:cc:b2:f0:c7:2b:9f:1b:62:38:3c: 60:20:bb:82:ad:8e:f9:56:07:bf:f1:12:f9:cd:69:62:35:ae: 83:08:9a:a5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUURzc+WTrRVSJIS2rtt8/MbQwdJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYxMDI2MDc1NjMxWhcNMjcxMDI1MDgwMTMx WjAzMTEwLwYDVQQDEygzOThBOUREMTM2MjAxNTNBMTE3RjFGMjRDQTkzMjRGM0Ew NzRDM0Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTNEvQEtMsfD SHv4U10HSP6jke5s3vBN1ftR6fjN6RjISTJ2h62/HMLTQMS6fWG/STMk2YpzzEgz ASUaCOHLSGwlByDJsx5aM8pqS3WnuU57k787xWPu3hTqAwzQTGOuQU5VmsfVYMZZ RmPMPOeyhg6I18mGKaCBDH+btA7T3RRzUzLcgD0TrxoH6iYiZBC7ztR4gW3OZZk9 gKzpTLWGxiiKZCnwUu+jpdAVUq3eKjZIXF10KOALog8c4h1jDOq2qKg/7geNjytH e2ZNHVQWNq4pbmRfMzSLC7IPQk02sfoOnbRh/s7zbYsjNcip+qhKUKECN8t+bM8H ITaeET1bRwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFDmKndE2IBU6EX8fJMqTJPOg dMPXMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAF16EAwQAQj+sAwQAQtQRAwQASAuP AwQAwORzAwQA0EwrMA0GCSqGSIb3DQEBCwUAA4IBAQCYpTBqqercX69o4l8Lea1g yXQHPr5f8z7QkVJWE18Gxjj6i73hu4HCbIYAjXcGY1IcE/dvEj0r09Iy/DPupGuv Oor0xIQAgsYgl0PntbUAmuBOR6FWg+6GrfC/BwJjZRm7ySQ87tn/yPfqJM6CZU0d /6ww5Q4pHm/S5TB0byR0YRD8hd2jZhF+tFDL+nuHF64UuZmr3LOA/+ikMWJ8l2mQ jAtHEd8i0cw3TBVLLcV8XEKoFnlM+0o7wi8AUjSkTQvYsB/nCJW/OVO/2GJzJETe fjT7J2vK0wmZrRaYq9on1cyy8McrnxtiODxgILuCrY75Vge/8RL5zWliNa6DCJql -----END CERTIFICATE-----Generated at Thu Nov 5 11:12:02 2026 by rpki-client