$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: wUDlfGYROkV5uZp3CM73aXmZnTDjdvHlKCbDtBXSEL4= Subject key identifier: DD:35:CE:0B:24:03:1F:36:4D:66:82:5C:C4:9C:2B:91:76:28:96:B4 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 54EF99C9D0A42951B443935BE58C69CB48D4B9F7 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa Signing time: Mon 24 Feb 2025 11:09:37 +0000 ROA not before: Mon 24 Feb 2025 11:04:37 +0000 ROA not after: Mon 23 Feb 2026 11:09:37 +0000 asID: 20001 IP address blocks: 140.99.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 19:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ef:99:c9:d0:a4:29:51:b4:43:93:5b:e5:8c:69:cb:48:d4:b9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Feb 24 11:04:37 2025 GMT Not After : Feb 23 11:09:37 2026 GMT Subject: CN=DD35CE0B24031F364D66825CC49C2B91762896B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:b1:72:9a:95:4e:b0:cb:e2:b1:7f:31:0e: 17:79:d8:92:19:02:d0:a5:2e:8f:ad:09:b2:ce:03: 5e:29:d5:4c:83:31:53:cf:0f:df:bd:80:f0:f8:a3: 15:d5:d5:7c:48:f6:0e:bc:0b:c3:7f:41:bf:bd:10: b4:b2:96:60:e3:08:e8:f8:e1:df:a0:9f:95:c7:0f: 50:e9:ed:ec:3c:27:c5:ab:17:e6:f4:aa:11:3c:c4: 99:9b:b7:fb:76:52:5d:67:89:3d:6c:7c:05:9e:ea: dc:6c:54:44:4c:66:d8:be:ac:14:d1:fd:ca:5e:68: 30:a0:37:08:9a:94:73:b8:f9:7b:41:38:ef:33:9d: 42:12:31:be:d1:57:c0:bb:a0:9c:d4:89:61:00:6c: 9c:81:94:98:80:c2:af:99:7d:3b:94:eb:85:07:8a: 05:1d:50:b0:dc:c3:71:be:8c:25:24:97:e5:ef:01: 9a:5c:d0:17:7e:27:54:ff:a5:a4:e3:6a:4d:0d:4d: 09:8b:60:dd:ff:c9:ba:f8:45:f9:b9:48:4d:9f:53: 58:8c:6d:e1:e8:63:c9:82:df:26:f4:da:16:e0:33: 73:da:ad:37:ba:ea:1d:c6:2d:db:1d:ec:95:96:a5: af:84:ce:f0:28:c0:4d:10:b0:1b:29:b2:04:d3:ec: bf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:35:CE:0B:24:03:1F:36:4D:66:82:5C:C4:9C:2B:91:76:28:96:B4 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.43.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:f5:26:8a:c9:53:3e:fe:be:97:e8:3f:05:6c:a2:44:90:ce: 67:6c:ea:a1:81:75:cf:98:42:a4:09:78:d8:ef:9a:b6:4d:3f: 86:14:94:8e:90:e4:56:82:1b:c0:ec:70:9a:c7:dd:2d:90:62: 9f:55:3d:95:c8:d9:3a:5a:0e:31:c5:38:90:35:1b:e6:4f:96: 3d:87:3f:f1:d6:a4:b7:69:ac:e8:91:61:bd:80:9d:e8:9e:ee: 01:02:0e:dc:1b:c5:e1:da:a4:4c:f5:b1:70:43:24:24:15:67: bd:a4:70:a6:31:99:c6:ab:2f:2d:67:8c:0b:eb:c6:0e:78:76: 4b:c7:34:97:93:ee:e4:c4:63:3e:df:19:e8:45:19:3c:5b:3b: 4a:09:e7:cb:2a:7c:e0:11:21:de:f8:a7:fe:7b:83:19:3c:82: c3:1d:e6:e4:02:f7:9e:8f:f5:5c:7e:c0:da:11:ce:8f:e3:5b: df:55:d6:40:66:cd:af:02:38:83:bd:89:f8:c2:92:ff:80:54: 64:01:4e:18:58:30:af:a5:ae:ed:f3:5c:57:02:6d:b6:6f:8d: 18:86:cf:03:90:c8:f1:86:75:1c:7d:63:30:fa:2e:d3:02:7b: 96:f0:5d:32:bc:51:9c:fa:c1:d5:46:41:c1:b5:7b:49:51:7f: 01:24:1e:cb -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUVO+ZydCkKVG0Q5Nb5Yxpy0jUufcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMjI0MTEwNDM3WhcNMjYwMjIzMTEwOTM3 WjAzMTEwLwYDVQQDEyhERDM1Q0UwQjI0MDMxRjM2NEQ2NjgyNUNDNDlDMkI5MTc2 Mjg5NkI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9mxcpqVTrDL 4rF/MQ4XediSGQLQpS6PrQmyzgNeKdVMgzFTzw/fvYDw+KMV1dV8SPYOvAvDf0G/ vRC0spZg4wjo+OHfoJ+Vxw9Q6e3sPCfFqxfm9KoRPMSZm7f7dlJdZ4k9bHwFnurc bFRETGbYvqwU0f3KXmgwoDcImpRzuPl7QTjvM51CEjG+0VfAu6Cc1IlhAGycgZSY gMKvmX07lOuFB4oFHVCw3MNxvowlJJfl7wGaXNAXfidU/6Wk42pNDU0Ji2Dd/8m6 +EX5uUhNn1NYjG3h6GPJgt8m9NoW4DNz2q03uuodxi3bHeyVlqWvhM7wKMBNELAb KbIE0+y/BwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFN01zgskAx82TWaCXMScK5F2 KJa0MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGMrMA0GCSqGSIb3DQEBCwUAA4IB AQBq9SaKyVM+/r6X6D8FbKJEkM5nbOqhgXXPmEKkCXjY75q2TT+GFJSOkORWghvA 7HCax90tkGKfVT2VyNk6Wg4xxTiQNRvmT5Y9hz/x1qS3aazokWG9gJ3onu4BAg7c G8Xh2qRM9bFwQyQkFWe9pHCmMZnGqy8tZ4wL68YOeHZLxzSXk+7kxGM+3xnoRRk8 WztKCefLKnzgESHe+Kf+e4MZPILDHebkAveej/VcfsDaEc6P41vfVdZAZs2vAjiD vYn4wpL/gFRkAU4YWDCvpa7t81xXAm22b40Yhs8DkMjxhnUcfWMw+i7TAnuW8F0y vFGc+sHVRkHBtXtJUX8BJB7L -----END CERTIFICATE-----Generated at Fri May 9 11:20:14 2025 by rpki-client