$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: nKx+pMRI5qJZ5wr+u9HQxjJE+DSmTybqRDx+E4DNR2o= Subject key identifier: DE:01:C6:4C:11:6F:9A:13:22:5F:09:33:8C:80:66:7B:AB:76:DA:AD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2CA49C47B47FFFBC880BBB4DBB620C448BF64255 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa Signing time: Tue 04 Mar 2025 14:11:16 +0000 ROA not before: Tue 04 Mar 2025 14:06:16 +0000 ROA not after: Tue 03 Mar 2026 14:11:16 +0000 asID: 7029 IP address blocks: 157.254.11.0/24 maxlen: 24 157.254.13.0/24 maxlen: 24 157.254.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a4:9c:47:b4:7f:ff:bc:88:0b:bb:4d:bb:62:0c:44:8b:f6:42:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 4 14:06:16 2025 GMT Not After : Mar 3 14:11:16 2026 GMT Subject: CN=DE01C64C116F9A13225F09338C80667BAB76DAAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:3b:0d:5e:c4:5f:06:33:c8:41:a9:ba:72: dc:7a:db:b4:74:42:3e:77:eb:1b:a6:8c:76:b0:42: 51:d5:5b:be:9b:e8:f7:b3:f0:e0:14:0e:62:82:f2: c9:2d:ba:b0:0a:7b:1c:08:00:5b:ef:c1:36:63:bb: 29:d0:e0:4d:50:ce:9e:f5:6b:02:93:03:4c:9b:e6: 11:7e:1e:93:b7:ac:0f:78:fb:e1:8b:54:80:67:8c: e1:f4:aa:17:d4:f0:e7:93:df:4d:ab:f6:02:2f:59: 92:28:8c:7f:52:7a:35:44:c3:32:43:70:0f:74:ca: 30:35:93:6c:3d:60:c5:2a:cb:21:55:5d:1d:fd:93: 0b:21:49:59:cd:82:30:76:1e:95:db:ce:1e:40:2f: be:96:3c:1f:ad:18:f5:c7:53:9e:64:02:9a:2e:ac: ec:9e:66:50:96:9a:cf:2b:b3:4a:bd:bd:29:51:80: 90:90:98:b1:93:68:ab:29:1c:40:7c:98:fe:6e:44: ca:f4:17:1b:8d:91:79:6b:aa:5e:45:ba:32:9c:5a: b1:56:7b:31:c4:08:0d:20:8d:2c:3d:44:4f:c8:34: e9:1c:42:75:82:3c:ec:bd:f7:01:57:ae:fe:54:89: a3:a8:c4:0a:4a:88:fa:4d:37:61:f3:b7:72:0b:8d: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:C6:4C:11:6F:9A:13:22:5F:09:33:8C:80:66:7B:AB:76:DA:AD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.11.0/24 157.254.13.0/24 157.254.180.0/23 Signature Algorithm: sha256WithRSAEncryption 28:98:36:66:dc:f0:25:cf:e4:73:b6:2b:27:75:38:1a:34:6a: c3:44:93:56:ff:2a:69:78:9b:6f:6d:25:12:25:9a:e1:91:49: 9d:47:a5:f8:3f:6a:2d:c1:78:24:56:69:e1:b4:ef:37:83:2a: 8e:5f:30:1d:f2:1c:ec:9e:87:8f:63:9e:f8:9a:5f:ff:59:e3: 62:67:16:1a:a5:2a:0c:f1:2b:39:ea:89:e4:1b:10:a2:ed:0d: 86:a0:26:b2:7a:52:72:74:53:41:ea:aa:87:a1:fb:ee:5d:be: 02:e8:8e:40:4a:57:71:53:b3:83:36:74:b6:73:d3:f4:e2:1d: 0e:f4:1b:54:83:7d:43:8c:56:65:2d:8d:d7:85:38:29:4a:50: d1:28:0d:99:c3:7b:06:64:f1:13:a3:69:9d:be:b5:d1:1a:c3: 8c:aa:be:5e:79:1e:6c:e9:f5:d9:33:5d:9f:77:8f:38:82:81: 28:f8:3c:97:77:34:13:f4:d7:3a:2b:2e:f9:9d:2e:cd:10:cf: 82:59:e5:fb:98:f5:1c:13:3a:34:c2:ad:f3:56:65:2f:13:08: aa:71:2c:55:19:90:98:8f:91:09:81:b4:52:0f:c6:b0:05:e0: eb:ee:67:0b:3e:d4:1e:fa:2c:8f:69:7c:d1:ae:6d:e5:f3:7d: 67:05:dd:67 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIULKScR7R//7yIC7tNu2IMRIv2QlUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMzA0MTQwNjE2WhcNMjYwMzAzMTQxMTE2 WjAzMTEwLwYDVQQDEyhERTAxQzY0QzExNkY5QTEzMjI1RjA5MzM4QzgwNjY3QkFC NzZEQUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rI7DV7EXwYz yEGpunLcetu0dEI+d+sbpox2sEJR1Vu+m+j3s/DgFA5igvLJLbqwCnscCABb78E2 Y7sp0OBNUM6e9WsCkwNMm+YRfh6Tt6wPePvhi1SAZ4zh9KoX1PDnk99Nq/YCL1mS KIx/Uno1RMMyQ3APdMowNZNsPWDFKsshVV0d/ZMLIUlZzYIwdh6V284eQC++ljwf rRj1x1OeZAKaLqzsnmZQlprPK7NKvb0pUYCQkJixk2irKRxAfJj+bkTK9BcbjZF5 a6peRboynFqxVnsxxAgNII0sPURPyDTpHEJ1gjzsvfcBV67+VImjqMQKSoj6TTdh 87dyC43dSwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFN4BxkwRb5oTIl8JM4yAZnur dtqtMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACd/gsDBACd/g0DBAGd/rQwDQYJKoZI hvcNAQELBQADggEBACiYNmbc8CXP5HO2Kyd1OBo0asNEk1b/Kml4m29tJRIlmuGR SZ1Hpfg/ai3BeCRWaeG07zeDKo5fMB3yHOyeh49jnviaX/9Z42JnFhqlKgzxKznq ieQbEKLtDYagJrJ6UnJ0U0Hqqoeh++5dvgLojkBKV3FTs4M2dLZz0/TiHQ70G1SD fUOMVmUtjdeFOClKUNEoDZnDewZk8ROjaZ2+tdEaw4yqvl55Hmzp9dkzXZ93jziC gSj4PJd3NBP01zorLvmdLs0Qz4JZ5fuY9RwTOjTCrfNWZS8TCKpxLFUZkJiPkQmB tFIPxrAF4OvuZws+1B76LI9pfNGubeXzfWcF3Wc= -----END CERTIFICATE-----Generated at Sun Apr 27 06:00:27 2025 by rpki-client