$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: 2CqTRqsPdj1Tg7u/Z2GRYEZ4lj4WsY7MhsStd7KUa6k= Subject key identifier: 6D:DD:DE:4E:DC:A4:7B:7F:BF:00:18:C0:C6:18:B2:4C:25:05:81:4C Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 200DE021BA9CF55DF28380A53200DC66B53FD0A6 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa Signing time: Thu 24 Apr 2025 22:49:05 +0000 ROA not before: Thu 24 Apr 2025 22:44:05 +0000 ROA not after: Thu 23 Apr 2026 22:49:05 +0000 asID: 7029 IP address blocks: 67.210.108.0/24 maxlen: 24 67.210.109.0/24 maxlen: 24 89.35.93.0/24 maxlen: 24 89.35.94.0/24 maxlen: 24 89.35.95.0/24 maxlen: 24 162.213.1.0/24 maxlen: 24 208.76.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0d:e0:21:ba:9c:f5:5d:f2:83:80:a5:32:00:dc:66:b5:3f:d0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 24 22:44:05 2025 GMT Not After : Apr 23 22:49:05 2026 GMT Subject: CN=6DDDDE4EDCA47B7FBF0018C0C618B24C2505814C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:48:10:29:2e:5b:22:db:9a:0b:eb:e2:c0: 01:9e:31:f2:1e:07:5a:41:73:f2:89:47:d1:8b:b4: 48:19:f4:de:d8:8b:09:6f:21:f8:ed:9b:39:fe:9c: b4:18:02:19:da:2c:eb:ee:8e:19:54:5b:94:7e:ad: f2:ea:4e:f2:7f:7d:79:d5:9c:aa:58:12:61:2e:a2: 9d:27:96:58:bd:49:e1:ac:5e:22:88:6f:1d:82:d8: 66:1f:45:07:f0:e2:1f:0d:93:b5:b3:0c:47:35:16: 05:5a:21:0a:76:af:fa:f9:be:6b:e2:36:a9:d5:e4: de:d1:4b:26:a8:3a:87:6b:9c:fa:a0:9d:96:32:d4: b5:0d:21:5f:0e:14:c1:89:4e:dd:ed:70:41:6a:83: fc:49:2c:bd:53:5d:d5:ce:a5:94:f6:f2:b3:4d:38: 79:36:08:7f:89:6e:3d:67:8b:62:34:14:37:6e:20: 48:df:15:e3:64:9d:4d:3f:18:b7:38:f5:da:bb:be: f4:a7:55:17:c2:ba:bf:10:17:5c:dd:91:fe:c9:1b: 1c:21:62:29:36:6f:7a:d4:1a:df:40:25:2a:06:3e: 40:7e:c6:12:79:3b:1d:2d:b3:a7:aa:9d:3f:2f:e6: 45:bb:75:e7:a3:be:43:76:4d:e3:7d:cb:32:09:1f: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DD:DE:4E:DC:A4:7B:7F:BF:00:18:C0:C6:18:B2:4C:25:05:81:4C X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.108.0/23 89.35.93.0-89.35.95.255 162.213.1.0/24 208.76.41.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:1b:de:6c:ed:c8:c2:0e:5e:b4:85:1a:4e:cd:63:ad:81:4e: bc:7d:47:08:10:2e:c0:04:3d:71:74:8e:62:80:8d:6a:e2:2c: ec:2c:87:01:06:f7:4f:0c:a9:7e:fb:cf:40:c2:c6:3c:f0:21: 17:e2:01:50:86:60:2a:a9:d5:9b:35:fe:e5:2a:dc:77:05:61: 15:53:9d:84:ea:46:d4:47:6a:32:19:20:6f:fa:71:ef:ed:57: ff:57:34:1d:93:d9:f6:df:b1:8a:1e:94:aa:5c:78:ca:51:dc: 67:68:30:fa:90:73:65:10:3f:85:61:d8:3f:ba:e8:58:3d:cd: 99:d4:61:56:9b:07:bb:14:e2:3d:6f:32:08:24:b9:c7:db:4d: f6:50:98:92:b9:38:df:4b:46:25:1d:15:ed:9b:fe:b0:15:9f: 80:c2:25:3c:47:1b:69:fe:de:86:ef:62:36:4b:d4:46:6c:65: 86:24:35:92:f6:0b:8a:fc:d6:a5:df:46:2e:1d:df:62:a5:be: bf:93:90:29:f3:57:41:83:5d:c4:fd:6f:0d:24:37:f6:57:95: 3c:85:83:96:ec:5f:1a:99:4d:53:f5:af:0c:53:8a:77:a0:09: 86:e2:30:69:e9:8d:22:b2:3b:91:56:47:8f:51:77:bf:51:fb: d0:39:37:db -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUIA3gIbqc9V3yg4ClMgDcZrU/0KYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDI0MjI0NDA1WhcNMjYwNDIzMjI0OTA1 WjAzMTEwLwYDVQQDEyg2REREREU0RURDQTQ3QjdGQkYwMDE4QzBDNjE4QjI0QzI1 MDU4MTRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeRIECkuWyLb mgvr4sABnjHyHgdaQXPyiUfRi7RIGfTe2IsJbyH47Zs5/py0GAIZ2izr7o4ZVFuU fq3y6k7yf3151ZyqWBJhLqKdJ5ZYvUnhrF4iiG8dgthmH0UH8OIfDZO1swxHNRYF WiEKdq/6+b5r4jap1eTe0UsmqDqHa5z6oJ2WMtS1DSFfDhTBiU7d7XBBaoP8SSy9 U13VzqWU9vKzTTh5Ngh/iW49Z4tiNBQ3biBI3xXjZJ1NPxi3OPXau770p1UXwrq/ EBdc3ZH+yRscIWIpNm961BrfQCUqBj5AfsYSeTsdLbOnqp0/L+ZFu3Xno75Ddk3j fcsyCR8nYwIDAQABo4IClzCCApMwHQYDVR0OBBYEFG3d3k7cpHt/vwAYwMYYskwl BYFMMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOQYI KwYBBQUHAQcBAf8EKjAoMCYEAgABMCADBAFD0mwwDAMEAFkjXQMEBVkjQAMEAKLV AQMEANBMKTANBgkqhkiG9w0BAQsFAAOCAQEAKxvebO3Iwg5etIUaTs1jrYFOvH1H CBAuwAQ9cXSOYoCNauIs7CyHAQb3TwypfvvPQMLGPPAhF+IBUIZgKqnVmzX+5Src dwVhFVOdhOpG1EdqMhkgb/px7+1X/1c0HZPZ9t+xih6Uqlx4ylHcZ2gw+pBzZRA/ hWHYP7roWD3NmdRhVpsHuxTiPW8yCCS5x9tN9lCYkrk430tGJR0V7Zv+sBWfgMIl PEcbaf7ehu9iNkvURmxlhiQ1kvYLivzWpd9GLh3fYqW+v5OQKfNXQYNdxP1vDSQ3 9leVPIWDluxfGplNU/WvDFOKd6AJhuIwaemNIrI7kVZHj1F3v1H70Dk32w== -----END CERTIFICATE-----Generated at Thu May 8 08:01:44 2025 by rpki-client