$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: EWywicLPZjE41nccN66bjF7SJVvlyoNftqasSf3ubHk= Subject key identifier: 42:D7:55:8C:68:D6:19:EB:3E:F9:6F:62:5A:8B:F4:D4:95:52:40:4A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6439FA13FC582D5B0534B48D618E39F4934780C2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa Signing time: Mon 23 Jun 2025 11:39:27 +0000 ROA not before: Mon 23 Jun 2025 11:34:27 +0000 ROA not after: Mon 22 Jun 2026 11:39:27 +0000 asID: 20001 IP address blocks: 104.234.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Jun 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:39:fa:13:fc:58:2d:5b:05:34:b4:8d:61:8e:39:f4:93:47:80:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jun 23 11:34:27 2025 GMT Not After : Jun 22 11:39:27 2026 GMT Subject: CN=42D7558C68D619EB3EF96F625A8BF4D49552404A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:9e:a9:e6:fc:a3:d2:07:f5:48:06:bb:69: e0:8d:4f:a7:13:51:20:92:34:bf:24:ae:4f:ff:a6: dc:cb:75:d1:e6:7d:1f:3a:12:0b:71:47:48:b8:f4: fa:2b:e0:9e:ef:09:ea:74:db:ed:97:f6:6b:46:e3: 0c:c6:e1:33:10:d6:23:88:ed:16:1e:99:05:45:3f: 0a:5a:e4:64:e6:95:db:30:92:55:af:8f:5e:e3:dd: bd:3b:62:d2:d1:f0:79:65:9e:85:91:4f:22:52:c9: 46:5b:05:c3:0a:09:62:23:e2:bc:14:cc:eb:79:3f: 07:6f:34:d5:2d:64:9b:bc:40:07:0d:44:bb:35:95: 4b:29:07:32:34:90:82:15:35:aa:73:92:e7:2b:d0: ed:29:31:02:b1:f7:ec:36:35:3e:b7:b3:a2:1b:1b: 71:af:58:bf:82:90:cb:47:88:28:2c:5a:dc:eb:87: aa:00:e9:55:3e:f4:60:ec:02:2b:22:42:b2:98:f2: 34:92:d5:99:9c:5c:9b:27:39:64:fa:d2:c6:98:65: cf:24:2b:04:10:28:1c:cb:61:b7:2d:f3:e5:24:11: 26:92:20:54:67:e2:e5:18:5a:80:e6:14:3b:ad:65: 32:71:75:03:e8:04:2a:63:a7:ec:f0:05:7b:88:3c: 8f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D7:55:8C:68:D6:19:EB:3E:F9:6F:62:5A:8B:F4:D4:95:52:40:4A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.122.0/24 Signature Algorithm: sha256WithRSAEncryption 48:4e:5a:ff:8e:7e:6f:72:ca:97:e5:71:89:f0:e6:7f:6d:cc: 04:cf:a8:f8:67:71:6c:b5:a4:29:2c:a9:2a:00:88:eb:08:07: 42:6b:b2:1e:57:3d:19:0b:01:79:4e:0d:ba:2f:fe:6f:b0:2f: e6:5d:23:19:bb:f1:0c:1c:6b:51:f5:60:53:6c:65:b5:81:93: 1c:b3:85:a4:9c:3b:79:b7:5d:fb:8e:04:16:bc:e1:5c:37:42: fc:12:c1:49:36:39:cc:e8:2a:24:fb:ba:b7:42:76:52:50:ce: 6f:bb:3b:3d:44:d8:34:f1:1f:81:ce:ec:fd:57:bd:fe:19:0b: de:6d:41:16:35:55:d5:84:7a:c9:61:43:8a:22:11:6c:e2:df: aa:df:6f:f5:89:40:58:22:ae:18:08:2f:26:17:2e:47:fe:00: 2c:c5:ba:4e:c7:b4:81:b2:f5:d3:31:1a:75:38:5c:90:f3:68: 9c:d3:51:a8:a6:6f:b9:98:85:86:dc:21:2a:bc:88:0b:a4:e1: 3d:b4:fe:be:92:40:1a:09:ee:6d:83:a6:77:b5:32:17:45:cc: 06:3f:17:30:0f:39:b0:e4:97:21:4d:23:15:85:31:7a:c8:7e: 05:5a:92:b1:66:3c:b3:20:b0:3c:25:d9:98:9e:bd:48:98:2e: 49:a7:0b:61 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUZDn6E/xYLVsFNLSNYY459JNHgMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNjIzMTEzNDI3WhcNMjYwNjIyMTEzOTI3 WjAzMTEwLwYDVQQDEyg0MkQ3NTU4QzY4RDYxOUVCM0VGOTZGNjI1QThCRjRENDk1 NTI0MDRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nSeqeb8o9IH 9UgGu2ngjU+nE1EgkjS/JK5P/6bcy3XR5n0fOhILcUdIuPT6K+Ce7wnqdNvtl/Zr RuMMxuEzENYjiO0WHpkFRT8KWuRk5pXbMJJVr49e4929O2LS0fB5ZZ6FkU8iUslG WwXDCgliI+K8FMzreT8HbzTVLWSbvEAHDUS7NZVLKQcyNJCCFTWqc5LnK9DtKTEC sffsNjU+t7OiGxtxr1i/gpDLR4goLFrc64eqAOlVPvRg7AIrIkKymPI0ktWZnFyb Jzlk+tLGmGXPJCsEECgcy2G3LfPlJBEmkiBUZ+LlGFqA5hQ7rWUycXUD6AQqY6fs 8AV7iDyPXQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFELXVYxo1hnrPvlvYlqL9NSV UkBKMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOp6MA0GCSqGSIb3DQEBCwUAA4IB AQBITlr/jn5vcsqX5XGJ8OZ/bcwEz6j4Z3FstaQpLKkqAIjrCAdCa7IeVz0ZCwF5 Tg26L/5vsC/mXSMZu/EMHGtR9WBTbGW1gZMcs4WknDt5t137jgQWvOFcN0L8EsFJ NjnM6Cok+7q3QnZSUM5vuzs9RNg08R+Bzuz9V73+GQvebUEWNVXVhHrJYUOKIhFs 4t+q32/1iUBYIq4YCC8mFy5H/gAsxbpOx7SBsvXTMRp1OFyQ82ic01Gopm+5mIWG 3CEqvIgLpOE9tP6+kkAaCe5tg6Z3tTIXRcwGPxcwDzmw5JchTSMVhTF6yH4FWpKx ZjyzILA8JdmYnr1ImC5Jpwth -----END CERTIFICATE-----Generated at Sun Jun 29 00:35:53 2025 by rpki-client