$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: osajNWFig2sG36NPUY94EcJp2aCk83Qsg1+g+2CsrpI= Subject key identifier: 6E:62:1A:34:55:C5:DF:1C:9C:F5:55:6A:B2:F6:BA:24:62:A2:11:1E Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 3F34C3EEF1814F258B827DA3DFDC907071AE67AF Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20001.roa Signing time: Thu 19 Jun 2025 09:39:35 +0000 ROA not before: Thu 19 Jun 2025 09:34:35 +0000 ROA not after: Thu 18 Jun 2026 09:39:35 +0000 asID: 20001 IP address blocks: 40.183.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:34:c3:ee:f1:81:4f:25:8b:82:7d:a3:df:dc:90:70:71:ae:67:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jun 19 09:34:35 2025 GMT Not After : Jun 18 09:39:35 2026 GMT Subject: CN=6E621A3455C5DF1C9CF5556AB2F6BA2462A2111E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:87:93:4c:0c:c5:c2:6c:03:cc:5a:b1:fe: 8c:43:8b:22:3a:bf:d6:8b:bf:7a:45:91:d3:23:b8: 86:23:63:9f:95:c9:15:80:cc:f1:fa:5b:61:22:12: 65:a3:b7:4b:24:3f:6b:ab:11:0f:5c:61:95:b9:17: c2:03:0d:35:63:e8:dc:64:51:48:8d:3a:68:be:9c: 81:6c:a1:ba:e5:a8:31:fe:b5:6e:64:08:9b:a9:8e: 9d:6a:8b:62:a4:3e:04:e6:58:1e:91:3f:01:a6:28: dc:48:f7:2a:ad:cd:c7:32:3f:f0:e5:68:fd:75:33: bd:45:03:48:30:07:7c:1c:f6:37:aa:da:63:33:5c: 8b:28:bb:00:c5:83:17:1b:ad:bb:64:49:7c:cd:5d: 94:83:a4:d2:52:89:07:b7:4f:49:44:af:5a:f6:15: 1a:10:d8:50:06:3c:82:0b:a6:85:20:6d:b6:20:b7: 2b:61:b2:02:57:73:1f:22:0f:e7:f5:a8:46:86:09: 64:8d:94:df:b6:fb:32:3c:82:c3:c8:fb:a1:97:1f: 4e:2f:28:3e:8d:ea:3c:15:b2:88:be:ee:63:db:88: 80:e2:78:eb:45:b5:6f:6b:71:62:8f:36:f0:80:ce: cd:e7:b3:d8:a3:2b:42:56:d0:b3:87:31:83:a8:a0: 59:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:62:1A:34:55:C5:DF:1C:9C:F5:55:6A:B2:F6:BA:24:62:A2:11:1E X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.128.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:fe:5c:5a:d3:fb:87:bc:3e:0d:d2:1a:91:8b:dc:44:4e:bc: 3a:7a:43:dc:65:59:e0:cb:0b:69:c4:71:f5:b1:f5:3a:40:96: 4e:cb:6f:e3:8e:d4:ff:eb:fd:74:97:d4:d3:bb:2b:26:4c:01: 7d:ff:7d:2c:e2:8a:6a:f8:28:0f:39:7c:40:f7:89:b7:ba:45: b6:33:82:4e:20:37:34:6b:9e:55:75:7c:69:9f:fb:d8:1d:31: ae:25:fe:00:87:65:bb:17:fa:41:6e:81:83:ea:40:17:76:d5: d1:4d:c4:64:48:7e:7f:5a:63:ef:d9:6a:2c:59:65:e8:0c:cf: 10:9b:d6:8e:94:25:a8:bd:7d:e7:f7:e8:3d:70:72:63:85:d6: 83:ab:e8:8e:8b:04:1d:d8:b7:63:7f:ab:95:39:0e:f1:ab:d3: 12:15:14:f7:bd:ea:7c:cf:53:33:dd:b5:54:94:47:1a:e8:45: 60:3e:33:98:a5:9f:52:26:9b:9a:42:0d:32:cf:ef:3b:a9:11: da:20:e4:fd:3c:af:3f:00:ad:68:54:28:61:81:09:11:0d:fe: 44:4c:2a:cd:c8:9b:e2:3d:38:d9:77:ae:c5:c5:fc:a8:73:a6: 1f:c4:c3:fd:ee:c7:75:08:74:c1:9e:3e:4c:f9:b1:fa:38:12: 06:93:72:5e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUPzTD7vGBTyWLgn2j39yQcHGuZ68wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjE5MDkzNDM1WhcNMjYwNjE4MDkzOTM1 WjAzMTEwLwYDVQQDEyg2RTYyMUEzNDU1QzVERjFDOUNGNTU1NkFCMkY2QkEyNDYy QTIxMTFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRWHk0wMxcJs A8xasf6MQ4siOr/Wi796RZHTI7iGI2OflckVgMzx+lthIhJlo7dLJD9rqxEPXGGV uRfCAw01Y+jcZFFIjTpovpyBbKG65agx/rVuZAibqY6daotipD4E5lgekT8Bpijc SPcqrc3HMj/w5Wj9dTO9RQNIMAd8HPY3qtpjM1yLKLsAxYMXG627ZEl8zV2Ug6TS UokHt09JRK9a9hUaENhQBjyCC6aFIG22ILcrYbICV3MfIg/n9ahGhglkjZTftvsy PILDyPuhlx9OLyg+jeo8FbKIvu5j24iA4njrRbVva3FijzbwgM7N57PYoytCVtCz hzGDqKBZHQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFG5iGjRVxd8cnPVVarL2uiRi ohEeMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKLeAMA0GCSqGSIb3DQEBCwUAA4IB AQCO/lxa0/uHvD4N0hqRi9xETrw6ekPcZVngywtpxHH1sfU6QJZOy2/jjtT/6/10 l9TTuysmTAF9/30s4opq+CgPOXxA94m3ukW2M4JOIDc0a55VdXxpn/vYHTGuJf4A h2W7F/pBboGD6kAXdtXRTcRkSH5/WmPv2WosWWXoDM8Qm9aOlCWovX3n9+g9cHJj hdaDq+iOiwQd2Ldjf6uVOQ7xq9MSFRT3vep8z1Mz3bVUlEca6EVgPjOYpZ9SJpua Qg0yz+87qRHaIOT9PK8/AK1oVChhgQkRDf5ETCrNyJviPTjZd67Fxfyoc6YfxMP9 7sd1CHTBnj5M+bH6OBIGk3Je -----END CERTIFICATE-----Generated at Sun Jun 29 10:39:39 2025 by rpki-client