$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: Ni7chj7M9fxUAe4rKay6/wgU9iNLdvCIU4KuASQ12MU= Subject key identifier: 44:DC:9A:E4:E7:0D:86:3B:EC:8B:CC:1E:A7:D7:3A:81:74:FC:52:2B Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683 Certificate serial: 73CDA15109F267D789C1DBF8D9CBB2AF4F83324B Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS29802.roa Signing time: Thu 07 May 2026 13:41:53 +0000 ROA not before: Thu 07 May 2026 13:36:53 +0000 ROA not after: Thu 06 May 2027 13:41:53 +0000 asID: 29802 IP address blocks: 207.180.29.0/24 maxlen: 24 207.180.49.0/24 maxlen: 24 216.75.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 11:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cd:a1:51:09:f2:67:d7:89:c1:db:f8:d9:cb:b2:af:4f:83:32:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683 Validity Not Before: May 7 13:36:53 2026 GMT Not After : May 6 13:41:53 2027 GMT Subject: CN=44DC9AE4E70D863BEC8BCC1EA7D73A8174FC522B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:cd:0e:f6:f1:17:60:47:f1:98:41:96:97: 4a:6d:e0:9b:d2:7a:31:d0:5b:39:be:fb:80:8b:b8: 19:eb:df:9b:ab:d4:c8:f4:ea:00:22:9b:c8:ad:67: 6d:b5:fc:a7:db:39:89:ec:47:df:17:46:b9:68:66: 95:8e:41:fa:64:f4:d1:00:2e:31:0d:36:36:0a:e7: 4d:36:ae:c7:6b:95:5a:0a:6b:02:73:54:4c:dc:51: 57:0e:02:55:31:38:d7:1b:53:10:a4:df:b1:22:ef: 15:6b:9d:e5:98:2e:47:0f:9b:d6:88:f3:51:13:7b: f5:81:4a:2c:d2:c5:1e:31:93:06:7b:d1:1a:65:67: 08:13:4a:06:70:9f:4f:fa:56:e1:7d:2f:25:8e:d4: 45:69:fc:f7:1e:64:a1:74:b6:46:e5:40:82:8f:48: 1f:33:21:3c:9e:c5:b3:23:13:fd:35:b6:ae:54:49: 58:3e:55:6a:61:dc:dd:b0:b4:73:48:b1:eb:11:ff: fe:2d:b9:de:26:0b:5b:37:eb:4c:a5:c2:1b:45:a9: 58:98:c4:45:21:32:d4:65:ef:a1:9b:4f:50:de:5b: fb:f6:54:75:09:b8:7a:e6:02:dd:56:36:4d:74:e7: 20:ad:20:c1:00:45:b8:db:81:f0:08:6f:37:dd:39: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DC:9A:E4:E7:0D:86:3B:EC:8B:CC:1E:A7:D7:3A:81:74:FC:52:2B X509v3 Authority Key Identifier: keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.180.29.0/24 207.180.49.0/24 216.75.134.0/24 Signature Algorithm: sha256WithRSAEncryption 58:b6:f5:a2:58:52:b7:76:a6:90:3f:ac:ef:34:ea:a5:b4:8a: b2:ac:fd:e4:1b:c4:cb:d3:df:c1:c4:c8:80:04:08:0b:01:ac: b7:51:cf:67:e1:74:8a:fc:b9:30:63:36:44:e0:b4:fd:69:fd: aa:c7:04:6a:08:85:73:60:f7:cb:7f:69:a3:74:e0:3a:27:30: 27:ff:b7:ed:2b:0f:dc:0c:87:6b:df:2a:67:fa:fb:f7:bb:69: 3f:de:1c:2e:c7:b7:8d:37:14:24:35:33:98:7a:fe:1c:b7:f1: 16:8e:0a:25:48:13:0d:f9:65:0c:a8:be:0d:4c:09:72:03:1d: 1a:af:54:3a:ae:48:26:8e:05:9b:61:36:53:41:cb:ef:11:6b: 82:28:2c:37:16:ab:31:1f:7e:b0:11:78:9f:9a:0d:a1:b6:20: 50:4b:cf:9b:d5:34:9c:7f:ce:ff:f9:c5:5c:81:32:53:57:4f: 05:fa:e6:37:31:be:89:38:f5:d3:ae:eb:d9:ca:c4:9d:ad:e3: 9c:a5:1f:de:bb:4e:ad:6b:dd:eb:c6:47:04:b2:11:0e:68:eb: 3b:63:c3:3b:38:be:92:46:b3:fc:eb:c2:76:f8:61:e8:7d:24: 11:42:9d:fb:5c:69:70:f0:4a:dd:bf:13:4a:d9:bf:29:13:dc: 59:31:48:cf -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUc82hUQnyZ9eJwdv42cuyr0+DMkswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA3MTMzNjUzWhcNMjcwNTA2MTM0MTUz WjAzMTEwLwYDVQQDEyg0NERDOUFFNEU3MEQ4NjNCRUM4QkNDMUVBN0Q3M0E4MTc0 RkM1MjJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutfNDvbxF2BH 8ZhBlpdKbeCb0nox0Fs5vvuAi7gZ69+bq9TI9OoAIpvIrWdttfyn2zmJ7EffF0a5 aGaVjkH6ZPTRAC4xDTY2CudNNq7Ha5VaCmsCc1RM3FFXDgJVMTjXG1MQpN+xIu8V a53lmC5HD5vWiPNRE3v1gUos0sUeMZMGe9EaZWcIE0oGcJ9P+lbhfS8ljtRFafz3 HmShdLZG5UCCj0gfMyE8nsWzIxP9NbauVElYPlVqYdzdsLRzSLHrEf/+LbneJgtb N+tMpcIbRalYmMRFITLUZe+hm09Q3lv79lR1Cbh65gLdVjZNdOcgrSDBAEW424Hw CG833TlBBQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFETcmuTnDYY77IvMHqfXOoF0 /FIrMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4 NmRkM2YvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAz7QdAwQAz7QxAwQA2EuGMA0GCSqG SIb3DQEBCwUAA4IBAQBYtvWiWFK3dqaQP6zvNOqltIqyrP3kG8TL09/BxMiABAgL Aay3Uc9n4XSK/LkwYzZE4LT9af2qxwRqCIVzYPfLf2mjdOA6JzAn/7ftKw/cDIdr 3ypn+vv3u2k/3hwux7eNNxQkNTOYev4ct/EWjgolSBMN+WUMqL4NTAlyAx0ar1Q6 rkgmjgWbYTZTQcvvEWuCKCw3FqsxH36wEXifmg2htiBQS8+b1TScf87/+cVcgTJT V08F+uY3Mb6JOPXTruvZysSdreOcpR/eu06ta93rxkcEshEOaOs7Y8M7OL6SRrP8 68J2+GHofSQRQp37XGlw8ErdvxNK2b8pE9xZMUjP -----END CERTIFICATE-----Generated at Tue May 12 22:17:25 2026 by rpki-client