$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: p6wblvbQ2eWzssovIvHmW3Z1cjd1f6MtaN9LnWeHLaw= Subject key identifier: 08:A4:09:6D:FE:31:51:9A:25:9F:B5:68:8A:D8:F2:8D:5F:C6:B3:04 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 6F86D9DEE6D115FEF055F60959E04DF3C5F19561 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa Signing time: Thu 08 Oct 2026 14:27:51 +0000 ROA not before: Thu 08 Oct 2026 14:22:51 +0000 ROA not after: Thu 07 Oct 2027 14:27:51 +0000 asID: 29802 IP address blocks: 157.254.143.0/24 maxlen: 24 157.254.158.0/24 maxlen: 24 157.254.182.0/24 maxlen: 24 157.254.183.0/24 maxlen: 24 157.254.193.0/24 maxlen: 24 157.254.209.0/24 maxlen: 24 157.254.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 07:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:86:d9:de:e6:d1:15:fe:f0:55:f6:09:59:e0:4d:f3:c5:f1:95:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Oct 8 14:22:51 2026 GMT Not After : Oct 7 14:27:51 2027 GMT Subject: CN=08A4096DFE31519A259FB5688AD8F28D5FC6B304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:6a:6f:b8:3c:6e:f7:da:e1:ea:cd:dd:52: 44:39:04:6f:65:f8:a0:40:20:7e:88:63:7c:bf:79: b4:35:8c:19:b2:00:4f:54:e8:95:6b:72:10:52:55: 1d:8d:f6:de:46:04:08:fd:5b:59:04:2a:b2:5a:c2: 1c:f4:33:71:4a:77:db:c8:4f:c0:09:48:77:f1:9b: 7a:10:7d:42:90:8b:e4:b0:ca:c1:e6:0d:42:61:6f: 1f:5d:16:8d:d5:a2:3c:dd:e6:54:4e:7d:e3:0e:94: 92:1a:dd:b2:09:b0:d1:52:4e:b8:1e:60:da:b8:25: d9:82:2f:60:2c:ae:68:d0:a7:ee:0a:85:57:df:6b: 44:78:a1:d8:a8:17:07:1e:e5:db:06:d4:81:96:e7: b5:08:de:0f:cc:c9:f0:e0:3e:04:01:41:25:88:22: 87:b6:17:33:2d:43:fa:35:dc:64:7e:bd:80:a4:3f: ae:2e:e4:12:80:7a:30:eb:de:98:74:26:31:9f:cd: c4:6f:80:21:b3:1b:9c:80:bf:c9:5a:c9:a9:55:6c: da:0c:88:ce:0a:a4:5a:83:b2:06:29:2f:b5:7a:17: 6e:fe:2f:b7:db:5c:52:1c:e9:ca:1e:cb:46:c0:92: 72:49:cc:2c:cf:42:94:3b:0f:15:b2:15:1a:85:6b: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A4:09:6D:FE:31:51:9A:25:9F:B5:68:8A:D8:F2:8D:5F:C6:B3:04 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.143.0/24 157.254.158.0/24 157.254.182.0/23 157.254.193.0/24 157.254.209.0-157.254.210.255 Signature Algorithm: sha256WithRSAEncryption 52:ac:eb:cf:04:b3:3a:dc:eb:42:9d:80:98:a6:0b:0f:31:83: f3:69:37:89:62:90:57:dc:ce:a8:eb:88:b9:c9:dc:bf:f0:42: 87:a3:6f:43:08:87:39:35:ac:72:fc:aa:33:07:dc:f6:47:04: b3:da:89:2a:86:04:80:90:b1:6c:f8:4f:8a:92:13:bb:c6:94: 28:07:07:09:f0:3d:a1:cc:65:51:78:37:c4:4a:d9:23:65:6e: fb:80:b6:a1:8e:e4:ee:cc:08:78:c8:36:83:86:a5:0a:44:f1: 45:e0:01:24:da:ec:2b:bb:67:5f:cc:31:a9:47:c2:3d:80:96: d1:2b:24:54:96:d3:c1:c3:60:ab:4a:c8:00:5f:56:f4:1b:10: eb:cd:41:3e:77:b0:15:17:ce:00:cd:ce:35:81:df:bb:fd:c2: f6:8c:7e:83:84:88:e9:a4:12:cf:1e:9a:35:f9:d5:b7:db:3b: 06:f4:a2:4b:5c:d2:91:22:77:bc:ae:ff:76:8a:17:26:73:e3: 2d:71:40:1d:12:ce:26:b9:3a:eb:7a:82:27:2a:89:1c:e5:eb: 7b:f2:4e:c3:e3:b5:1a:48:09:72:91:4d:a1:b7:60:c0:c6:0f: 3d:24:95:79:6b:3f:b5:88:2c:1d:14:65:6f:46:aa:c2:73:2d: 18:4d:14:8c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUb4bZ3ubRFf7wVfYJWeBN88XxlWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMDA4MTQyMjUxWhcNMjcxMDA3MTQyNzUx WjAzMTEwLwYDVQQDEygwOEE0MDk2REZFMzE1MTlBMjU5RkI1Njg4QUQ4RjI4RDVG QzZCMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunZqb7g8bvfa 4erN3VJEOQRvZfigQCB+iGN8v3m0NYwZsgBPVOiVa3IQUlUdjfbeRgQI/VtZBCqy WsIc9DNxSnfbyE/ACUh38Zt6EH1CkIvksMrB5g1CYW8fXRaN1aI83eZUTn3jDpSS Gt2yCbDRUk64HmDauCXZgi9gLK5o0KfuCoVX32tEeKHYqBcHHuXbBtSBlue1CN4P zMnw4D4EAUEliCKHthczLUP6Ndxkfr2ApD+uLuQSgHow696YdCYxn83Eb4Ahsxuc gL/JWsmpVWzaDIjOCqRag7IGKS+1ehdu/i+321xSHOnKHstGwJJyScwsz0KUOw8V shUahWvgmwIDAQABo4ICnjCCApowHQYDVR0OBBYEFAikCW3+MVGaJZ+1aIrY8o1f xrMEMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8G CCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAnf6PAwQAnf6eAwQBnf62AwQAnf7B MAwDBACd/tEDBACd/tIwDQYJKoZIhvcNAQELBQADggEBAFKs688Eszrc60KdgJim Cw8xg/NpN4likFfczqjriLnJ3L/wQoejb0MIhzk1rHL8qjMH3PZHBLPaiSqGBICQ sWz4T4qSE7vGlCgHBwnwPaHMZVF4N8RK2SNlbvuAtqGO5O7MCHjINoOGpQpE8UXg ASTa7Cu7Z1/MMalHwj2AltErJFSW08HDYKtKyABfVvQbEOvNQT53sBUXzgDNzjWB 37v9wvaMfoOEiOmkEs8emjX51bfbOwb0oktc0pEid7yu/3aKFyZz4y1xQB0Szia5 Out6gicqiRzl63vyTsPjtRpICXKRTaG3YMDGDz0klXlrP7WILB0UZW9GqsJzLRhN FIw= -----END CERTIFICATE-----Generated at Thu Nov 5 11:11:49 2026 by rpki-client