$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: 4WV+mqUkXbZsWG3+XAYKYuC0w6i61cRs9FtCsIjmYSA= Subject key identifier: 37:09:19:E5:38:D2:D5:53:2C:44:B9:8B:31:A9:2A:2E:08:71:04:32 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 78B7FDA5ED946B4FA3C93069D2505969EC425028 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa Signing time: Tue 08 Jul 2025 06:21:32 +0000 ROA not before: Tue 08 Jul 2025 06:16:32 +0000 ROA not after: Tue 07 Jul 2026 06:21:32 +0000 asID: 7029 IP address blocks: 157.254.11.0/24 maxlen: 24 157.254.13.0/24 maxlen: 24 157.254.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 01:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b7:fd:a5:ed:94:6b:4f:a3:c9:30:69:d2:50:59:69:ec:42:50:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 8 06:16:32 2025 GMT Not After : Jul 7 06:21:32 2026 GMT Subject: CN=370919E538D2D5532C44B98B31A92A2E08710432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:c7:a3:49:6e:be:8f:9e:43:3b:31:56:58: fc:45:e7:ba:ab:ce:af:e8:2e:39:9c:59:d2:f3:4b: 4e:b7:12:9e:63:f9:6a:1d:96:10:a1:82:f6:46:1d: f2:ad:40:05:6d:cc:7c:48:2d:ae:f6:8f:68:42:35: 34:75:20:ff:ea:df:3d:33:7c:6b:34:93:24:e2:98: c4:fa:4f:97:2d:62:85:f6:dc:fa:b9:8e:b5:98:13: b3:d3:c7:e3:41:00:7f:36:ae:c6:c8:48:90:ba:c5: f9:24:8c:c2:bc:a3:39:f1:b0:ed:c3:c8:9b:22:88: 7a:32:c9:0e:e5:ba:04:cc:a8:69:66:ed:47:55:87: b2:35:bf:06:c0:bc:6d:e6:5c:b0:f8:ce:e9:e0:48: 28:fa:52:78:35:20:cf:2e:9d:b2:84:53:ab:8c:98: 79:17:b4:52:e4:ec:b5:c9:f8:d0:b8:27:1f:76:61: eb:3a:fc:71:57:16:01:0f:0d:27:ca:de:91:de:c5: fa:c5:3f:a9:3d:ca:fe:6e:9c:c5:76:7d:61:5d:72: c6:b0:d3:17:51:7f:ef:d9:99:be:e7:d5:65:6e:00: 6c:18:8a:c5:c1:9d:5b:2b:a9:5a:64:c4:91:df:84: b6:12:be:fa:ef:d0:ad:f3:a8:92:11:09:82:94:37: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:09:19:E5:38:D2:D5:53:2C:44:B9:8B:31:A9:2A:2E:08:71:04:32 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.11.0/24 157.254.13.0/24 157.254.180.0/23 Signature Algorithm: sha256WithRSAEncryption 41:9d:0b:a3:b6:3e:4b:7c:41:22:67:38:6c:61:80:26:2e:a9: 8f:0c:7c:5e:53:d4:d8:a3:64:50:55:60:1a:05:a1:2d:23:52: 62:87:3f:af:05:0d:3a:ee:68:2e:b4:9a:8a:93:fe:63:bf:bc: b9:66:2c:d6:d7:be:8b:70:a7:fb:1a:10:cf:67:8f:fd:b3:7f: 36:ce:9c:b1:87:36:93:89:c1:73:31:f9:26:f1:c5:62:d0:bf: 3d:2f:5d:17:a2:3f:48:b8:86:2b:1e:cd:6d:8b:48:a2:78:3f: ce:43:9e:2b:35:6e:7f:6f:d5:68:ff:e7:f0:0a:43:6e:9d:76: f0:48:5d:fd:0d:78:fb:6a:9f:eb:02:7b:b2:61:c0:0c:11:bf: 2b:08:d2:ef:b3:36:28:16:91:49:08:aa:bf:eb:05:3b:c8:1e: 5a:53:d8:01:1c:5d:6b:63:91:41:b7:ae:b0:54:07:83:32:67: ff:27:62:d2:89:38:6a:9d:c6:d7:77:ff:8b:f6:0f:0d:08:e2: 7e:28:0c:59:1f:70:9c:6e:83:0f:76:ec:09:d7:ac:36:98:4e: de:32:21:72:ee:c7:f6:79:54:02:b4:1b:b0:00:51:17:5a:0b: 74:4d:ba:f8:56:40:77:a9:da:18:50:2f:4e:00:a3:33:a0:41: 65:c8:ba:d9 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUeLf9pe2Ua0+jyTBp0lBZaexCUCgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNzA4MDYxNjMyWhcNMjYwNzA3MDYyMTMy WjAzMTEwLwYDVQQDEygzNzA5MTlFNTM4RDJENTUzMkM0NEI5OEIzMUE5MkEyRTA4 NzEwNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDfHo0luvo+e QzsxVlj8Ree6q86v6C45nFnS80tOtxKeY/lqHZYQoYL2Rh3yrUAFbcx8SC2u9o9o QjU0dSD/6t89M3xrNJMk4pjE+k+XLWKF9tz6uY61mBOz08fjQQB/Nq7GyEiQusX5 JIzCvKM58bDtw8ibIoh6MskO5boEzKhpZu1HVYeyNb8GwLxt5lyw+M7p4Ego+lJ4 NSDPLp2yhFOrjJh5F7RS5Oy1yfjQuCcfdmHrOvxxVxYBDw0nyt6R3sX6xT+pPcr+ bpzFdn1hXXLGsNMXUX/v2Zm+59VlbgBsGIrFwZ1bK6laZMSR34S2Er7679Ct86iS EQmClDdtswIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFDcJGeU40tVTLES5izGpKi4I cQQyMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACd/gsDBACd/g0DBAGd/rQwDQYJKoZI hvcNAQELBQADggEBAEGdC6O2Pkt8QSJnOGxhgCYuqY8MfF5T1NijZFBVYBoFoS0j UmKHP68FDTruaC60moqT/mO/vLlmLNbXvotwp/saEM9nj/2zfzbOnLGHNpOJwXMx +SbxxWLQvz0vXReiP0i4hisezW2LSKJ4P85Dnis1bn9v1Wj/5/AKQ26ddvBIXf0N ePtqn+sCe7JhwAwRvysI0u+zNigWkUkIqr/rBTvIHlpT2AEcXWtjkUG3rrBUB4My Z/8nYtKJOGqdxtd3/4v2Dw0I4n4oDFkfcJxugw927AnXrDaYTt4yIXLux/Z5VAK0 G7AAURdaC3RNuvhWQHep2hhQL04AozOgQWXIutk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:58:34 2025 by rpki-client