$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa File: AS29997.roa (raw, json) Hash identifier: zI7nmsHN9cw7yhZjG+Peu+rNTdTEdtbuRZoqX1o+u0o= Subject key identifier: 99:B8:66:C6:D8:4B:ED:8B:0F:23:71:04:53:49:2A:DB:90:14:A6:94 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 136DFB8956D50392B285F89836241F43F4B1768E Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa Signing time: Mon 06 Jul 2026 22:29:10 +0000 ROA not before: Mon 06 Jul 2026 22:24:10 +0000 ROA not after: Mon 05 Jul 2027 22:29:10 +0000 asID: 29997 IP address blocks: 45.54.64.0/24 maxlen: 24 2607:f740:e626::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 09:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6d:fb:89:56:d5:03:92:b2:85:f8:98:36:24:1f:43:f4:b1:76:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Jul 6 22:24:10 2026 GMT Not After : Jul 5 22:29:10 2027 GMT Subject: CN=99B866C6D84BED8B0F23710453492ADB9014A694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:a8:56:43:26:9c:bd:de:de:cc:c6:99:ec: e0:a4:c5:99:60:57:61:5c:4e:74:7e:c7:4c:08:de: 8d:86:ab:ef:2b:25:6f:fd:c0:85:09:8d:83:9f:d8: 1e:b8:ed:75:b1:04:93:35:e2:d6:39:9d:8b:37:45: 44:c9:e5:f7:62:f5:42:78:cf:ea:24:97:85:ca:2d: 82:42:31:af:36:e3:79:dc:d2:62:cb:2a:34:b0:73: ea:81:c6:f6:83:0e:49:b5:ba:57:3e:98:6f:59:6a: 45:f5:fe:41:2f:a7:29:b1:b6:af:e7:51:e9:e1:96: 19:bd:5c:f5:cb:04:dd:72:e5:0e:63:37:f2:78:1e: 37:3e:6c:57:e1:9e:25:6a:b1:d4:30:00:ad:de:0f: 88:c0:52:0d:7c:38:12:04:b0:74:aa:3e:82:b7:d9: c8:dd:01:34:ad:44:7f:df:68:cf:f1:3e:73:ce:73: b0:8c:40:a8:6a:a9:3b:a2:ce:e3:28:6d:83:20:13: c8:10:00:14:83:fb:eb:aa:68:ec:20:d5:be:26:7d: 03:e3:72:f0:e9:9f:a8:17:14:08:cf:e5:f1:d9:8a: f4:fb:00:db:58:80:fc:d5:17:c1:d0:8f:66:c4:9a: 1e:ea:a6:f0:73:67:5c:fc:54:3c:bb:56:b2:20:01: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B8:66:C6:D8:4B:ED:8B:0F:23:71:04:53:49:2A:DB:90:14:A6:94 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.64.0/24 IPv6: 2607:f740:e626::/48 Signature Algorithm: sha256WithRSAEncryption 02:7c:91:1b:32:db:1d:e5:79:d5:e9:93:9a:af:13:49:34:e1: 54:64:cc:dc:94:9a:9b:ca:ca:38:dd:af:69:1b:8f:54:d9:d6: 0d:59:63:23:f9:bf:af:92:2c:03:d5:4c:9f:0a:a4:b8:0c:19: a9:65:10:5e:3a:35:2a:b6:1b:f7:cd:9c:c6:5f:23:e7:ae:80: c4:50:8b:ee:f0:0b:64:a7:76:d3:96:eb:0e:70:a5:f5:9b:11: b2:0f:57:21:58:11:96:48:53:3f:e4:4c:4a:a3:15:21:b5:e2: 47:4f:9a:ae:91:63:d8:97:62:44:4f:72:4b:92:18:eb:93:4a: 89:a1:7a:be:ba:f1:e6:de:04:24:fe:34:f9:40:7c:a5:45:44: 21:c1:f9:ac:6a:e0:7e:a7:4f:28:c6:68:af:69:ef:c6:b9:54: 68:4d:20:c3:43:11:20:63:bb:ad:75:2f:40:26:dd:3d:cc:a9: 61:59:33:cf:78:f4:51:0c:b9:a7:d2:76:3f:71:6f:1e:cc:2f: 72:67:cb:40:19:3b:4f:9b:ce:5f:7f:e6:f3:3a:21:3e:0a:ac: 3b:69:e2:12:f8:d5:cf:4f:9b:48:92:f8:c3:ae:a4:6e:9e:d5: 21:8e:ca:40:e6:a2:23:25:d6:8b:26:94:21:d1:3b:a6:32:9b: ae:7f:e5:d9 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUE237iVbVA5KyhfiYNiQfQ/Sxdo4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYwNzA2MjIyNDEwWhcNMjcwNzA1MjIyOTEw WjAzMTEwLwYDVQQDEyg5OUI4NjZDNkQ4NEJFRDhCMEYyMzcxMDQ1MzQ5MkFEQjkw MTRBNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfqoVkMmnL3e 3szGmezgpMWZYFdhXE50fsdMCN6NhqvvKyVv/cCFCY2Dn9geuO11sQSTNeLWOZ2L N0VEyeX3YvVCeM/qJJeFyi2CQjGvNuN53NJiyyo0sHPqgcb2gw5JtbpXPphvWWpF 9f5BL6cpsbav51Hp4ZYZvVz1ywTdcuUOYzfyeB43PmxX4Z4larHUMACt3g+IwFIN fDgSBLB0qj6Ct9nI3QE0rUR/32jP8T5zznOwjECoaqk7os7jKG2DIBPIEAAUg/vr qmjsINW+Jn0D43Lw6Z+oFxQIz+Xx2Yr0+wDbWID81RfB0I9mxJoe6qbwc2dc/FQ8 u1ayIAF1dQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFJm4ZsbYS+2LDyNxBFNJKtuQ FKaUMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzI5OTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALTZAMA8EAgACMAkDBwAmB/dA5iYw DQYJKoZIhvcNAQELBQADggEBAAJ8kRsy2x3ledXpk5qvE0k04VRkzNyUmpvKyjjd r2kbj1TZ1g1ZYyP5v6+SLAPVTJ8KpLgMGallEF46NSq2G/fNnMZfI+eugMRQi+7w C2SndtOW6w5wpfWbEbIPVyFYEZZIUz/kTEqjFSG14kdPmq6RY9iXYkRPckuSGOuT Somher668ebeBCT+NPlAfKVFRCHB+axq4H6nTyjGaK9p78a5VGhNIMNDESBju611 L0Am3T3MqWFZM8949FEMuafSdj9xbx7ML3Jny0AZO0+bzl9/5vM6IT4KrDtp4hL4 1c9Pm0iS+MOupG6e1SGOykDmoiMl1osmlCHRO6Yym65/5dk= -----END CERTIFICATE-----Generated at Fri Jul 24 09:43:32 2026 by rpki-client