$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: C+SawXeb7ebZnD8cFNIeBnlqRbYTpXZ26mFZYIR1tDY= Subject key identifier: 4D:38:B8:5E:6F:8F:1B:AB:87:BD:D8:A6:7E:9F:58:56:CB:9C:D1:CB Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1A2A6F0914DF86F6E3021C782CA457FE13EB97DF Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa Signing time: Wed 19 Aug 2026 18:35:34 +0000 ROA not before: Wed 19 Aug 2026 18:30:34 +0000 ROA not after: Wed 18 Aug 2027 18:35:34 +0000 asID: 29802 IP address blocks: 157.254.143.0/24 maxlen: 24 157.254.158.0/24 maxlen: 24 157.254.182.0/24 maxlen: 24 157.254.183.0/24 maxlen: 24 157.254.209.0/24 maxlen: 24 157.254.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 07:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2a:6f:09:14:df:86:f6:e3:02:1c:78:2c:a4:57:fe:13:eb:97:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Aug 19 18:30:34 2026 GMT Not After : Aug 18 18:35:34 2027 GMT Subject: CN=4D38B85E6F8F1BAB87BDD8A67E9F5856CB9CD1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:07:58:ee:ea:eb:27:a0:ab:c4:a4:b7:77: 12:db:9c:83:38:77:ee:77:95:ac:fa:da:2b:39:fa: 2b:47:eb:23:0c:7e:bc:fa:8e:7d:9c:75:d2:6d:f3: 0c:9b:42:f0:90:a2:71:18:38:8d:2f:6d:bf:32:28: 90:df:7b:46:00:f4:2e:ce:54:8d:35:41:b4:84:e1: 9c:df:a6:11:19:c1:d4:65:17:d8:18:81:d3:c3:60: 62:7a:a8:0b:17:8b:6c:3a:8f:b3:f3:03:dc:7c:44: b7:56:26:ed:53:87:98:3f:a6:9b:4b:de:a4:d0:51: 7b:24:e3:82:93:77:98:e5:10:b1:5f:e1:ae:8a:a5: 6f:e7:b2:63:a2:7d:b3:07:99:7b:09:1b:83:6a:9b: f2:3c:dc:22:90:8d:ee:d5:8b:70:36:84:ad:a9:cb: fe:dc:2a:49:be:51:f4:b8:50:be:c8:1f:e6:5f:39: b4:d6:d3:18:d8:8d:2b:42:91:2f:ed:29:60:95:89: 43:9f:68:1f:b2:9f:e7:ad:72:bb:66:60:a7:2a:b6: 1a:ec:af:6c:b2:f6:ff:67:04:60:22:f2:1f:27:3e: 64:2c:b4:75:f7:57:bf:5e:ce:25:87:a3:5e:33:88: 40:31:e6:f9:0e:1c:04:3c:b6:44:17:b5:27:97:08: 01:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:B8:5E:6F:8F:1B:AB:87:BD:D8:A6:7E:9F:58:56:CB:9C:D1:CB X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.143.0/24 157.254.158.0/24 157.254.182.0/23 157.254.209.0-157.254.210.255 Signature Algorithm: sha256WithRSAEncryption 8b:c0:8e:1b:86:6d:69:67:fe:34:1e:65:a9:13:f3:23:f0:11: 66:8a:99:50:4b:41:79:ed:50:82:7f:d1:02:57:02:4c:4e:1b: da:dc:bc:22:ea:2c:63:f3:2e:34:35:d6:e9:81:7f:34:1a:88: 53:3b:73:b9:4c:24:b3:a5:09:db:9b:e1:b5:a5:56:b1:f0:59: 99:a3:ef:70:d6:15:55:01:d0:21:94:b4:2a:db:ba:f3:31:c0: a8:46:bf:8f:64:19:11:ed:ef:3c:5e:62:32:ff:49:bb:df:be: 4a:04:72:b7:a1:3b:ad:ce:f9:2b:f6:40:35:33:ae:33:74:68: 11:fe:f3:b0:26:25:dd:8b:93:1a:b9:d4:89:46:94:1c:1b:d7: cf:ae:a9:d6:12:59:a5:59:f3:c9:4a:74:d2:35:ad:99:74:6e: 8b:ad:30:3d:d2:40:4a:d6:dd:b6:3d:95:69:cb:c2:bb:b1:b8: 62:3f:8a:3b:e6:c1:7d:a6:33:48:ab:3a:c1:8f:fa:77:67:a3: 28:13:45:4b:95:b3:97:d8:97:23:04:da:89:0b:20:0f:f0:d8: 5a:5c:01:d3:33:75:92:1a:10:f4:6a:75:8e:29:8b:22:9d:c2: fd:b2:01:53:a7:c0:22:ac:06:09:e2:48:87:14:09:6b:34:fe: f0:33:18:19 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIUGipvCRTfhvbjAhx4LKRX/hPrl98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwODE5MTgzMDM0WhcNMjcwODE4MTgzNTM0 WjAzMTEwLwYDVQQDEyg0RDM4Qjg1RTZGOEYxQkFCODdCREQ4QTY3RTlGNTg1NkNC OUNEMUNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumIHWO7q6yeg q8Skt3cS25yDOHfud5Ws+torOforR+sjDH68+o59nHXSbfMMm0LwkKJxGDiNL22/ MiiQ33tGAPQuzlSNNUG0hOGc36YRGcHUZRfYGIHTw2BieqgLF4tsOo+z8wPcfES3 VibtU4eYP6abS96k0FF7JOOCk3eY5RCxX+GuiqVv57Jjon2zB5l7CRuDapvyPNwi kI3u1YtwNoStqcv+3CpJvlH0uFC+yB/mXzm01tMY2I0rQpEv7SlglYlDn2gfsp/n rXK7ZmCnKrYa7K9ssvb/ZwRgIvIfJz5kLLR191e/Xs4lh6NeM4hAMeb5DhwEPLZE F7UnlwgBZwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFE04uF5vjxurh73Ypn6fWFbL nNHLMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkG CCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAnf6PAwQAnf6eAwQBnf62MAwDBACd /tEDBACd/tIwDQYJKoZIhvcNAQELBQADggEBAIvAjhuGbWln/jQeZakT8yPwEWaK mVBLQXntUIJ/0QJXAkxOG9rcvCLqLGPzLjQ11umBfzQaiFM7c7lMJLOlCdub4bWl VrHwWZmj73DWFVUB0CGUtCrbuvMxwKhGv49kGRHt7zxeYjL/SbvfvkoEcrehO63O +Sv2QDUzrjN0aBH+87AmJd2Lkxq51IlGlBwb18+uqdYSWaVZ88lKdNI1rZl0bout MD3SQErW3bY9lWnLwruxuGI/ijvmwX2mM0irOsGP+ndnoygTRUuVs5fYlyME2okL IA/w2FpcAdMzdZIaEPRqdY4piyKdwv2yAVOnwCKsBgniSIcUCWs0/vAzGBk= -----END CERTIFICATE-----Generated at Sun Sep 20 17:57:21 2026 by rpki-client