$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: 0iijKFUg41M4/E//iWk7SFacQDIhyRP0vvG0sMiT2yM= Subject key identifier: B7:7A:18:EE:7E:EE:B6:3E:E7:EC:58:7F:0A:1D:3C:A1:64:36:66:52 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0ABABDE9F77AD1E57350E1FB0F816479C36F296C Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa Signing time: Mon 07 Jul 2025 12:04:08 +0000 ROA not before: Mon 07 Jul 2025 11:59:08 +0000 ROA not after: Mon 06 Jul 2026 12:04:08 +0000 asID: 20001 IP address blocks: 104.234.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 22:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ba:bd:e9:f7:7a:d1:e5:73:50:e1:fb:0f:81:64:79:c3:6f:29:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 7 11:59:08 2025 GMT Not After : Jul 6 12:04:08 2026 GMT Subject: CN=B77A18EE7EEEB63EE7EC587F0A1D3CA164366652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:67:17:8c:97:b8:0b:a7:50:73:37:9c:64:41: fb:fd:1b:f8:1a:5c:57:47:dc:a2:fe:a0:45:88:c2: 6a:62:34:8c:f2:22:44:85:1d:31:0e:cb:a5:73:23: b8:9e:83:49:4c:42:08:4f:28:d7:bd:06:95:a6:52: a4:2c:85:cc:c3:a7:e1:c4:f4:b3:47:46:99:54:43: 2b:02:77:ec:4f:57:6b:2b:35:d1:a7:4d:18:68:8a: 1b:75:67:83:17:6e:5c:7e:97:e2:23:a1:02:00:c0: a5:84:28:9f:65:b9:6f:80:2c:07:a1:64:58:2f:46: 76:c9:b5:5d:73:0f:1d:ac:7e:91:c9:e3:28:10:6c: f5:06:2f:4d:13:fd:5f:9a:76:28:ec:c6:14:73:b3: 59:bb:35:91:ed:55:77:68:6a:09:74:ce:6d:cd:9b: 19:6f:c4:13:3c:b5:15:f9:aa:8b:8a:ed:03:e1:5f: d9:3e:49:62:85:14:df:4e:fd:a4:2c:ef:87:07:de: 27:24:3b:f7:8d:d8:b6:61:fc:3f:84:f4:9f:52:40: 32:71:6d:80:6a:b7:d1:62:19:ed:f0:d2:a3:77:42: 82:c7:78:b3:28:d3:a5:ce:15:e0:77:2c:38:0c:61: 91:48:00:53:36:72:52:72:0b:29:66:b1:17:ec:14: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7A:18:EE:7E:EE:B6:3E:E7:EC:58:7F:0A:1D:3C:A1:64:36:66:52 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.122.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a6:ed:6b:fb:d0:d8:85:bc:5c:08:02:e8:06:ed:16:33:6d: af:89:45:cf:44:11:74:f9:cc:3a:93:f6:fa:b4:16:8f:36:b0: ac:21:99:b9:c6:8e:e7:36:63:0e:08:11:82:fb:56:49:11:5f: 84:68:e0:50:7b:30:8c:5c:e1:26:d4:76:a5:dc:21:88:e2:5b: cf:b7:af:ca:9d:c3:d9:0d:8d:21:df:11:78:89:ab:89:c4:e5: b3:c6:de:4d:90:53:d8:51:14:a0:01:a6:21:e5:13:9f:1b:52: a0:45:7d:04:a7:ef:62:df:87:89:01:fa:91:95:09:a6:1b:20: 7d:0e:f5:47:ce:85:76:06:79:73:e5:c5:ad:6d:45:ac:a2:09: b5:72:83:c1:d8:0a:7a:fb:98:e0:1b:ec:4b:43:32:9d:0b:b1: 61:74:34:bf:ee:80:80:ac:43:b6:8c:0a:76:10:c7:8c:a9:b1: 25:a1:5d:02:33:96:d0:16:c3:83:de:dd:f9:04:82:ce:4f:94: 68:9e:72:f9:29:4c:13:57:8c:31:71:5e:26:b4:65:c6:d1:a9: c2:b6:1a:db:73:f3:ca:c4:7f:59:b5:54:17:a6:32:54:d0:66: 0c:d0:1a:b9:cd:45:97:7f:fe:19:01:b2:2f:6b:61:06:d0:91: f3:1c:f0:bb -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUCrq96fd60eVzUOH7D4FkecNvKWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNzA3MTE1OTA4WhcNMjYwNzA2MTIwNDA4 WjAzMTEwLwYDVQQDEyhCNzdBMThFRTdFRUVCNjNFRTdFQzU4N0YwQTFEM0NBMTY0 MzY2NjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WcXjJe4C6dQ czecZEH7/Rv4GlxXR9yi/qBFiMJqYjSM8iJEhR0xDsulcyO4noNJTEIITyjXvQaV plKkLIXMw6fhxPSzR0aZVEMrAnfsT1drKzXRp00YaIobdWeDF25cfpfiI6ECAMCl hCifZblvgCwHoWRYL0Z2ybVdcw8drH6RyeMoEGz1Bi9NE/1fmnYo7MYUc7NZuzWR 7VV3aGoJdM5tzZsZb8QTPLUV+aqLiu0D4V/ZPklihRTfTv2kLO+HB94nJDv3jdi2 Yfw/hPSfUkAycW2AarfRYhnt8NKjd0KCx3izKNOlzhXgdyw4DGGRSABTNnJScgsp ZrEX7BQgBwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLd6GO5+7rY+5+xYfwodPKFk NmZSMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOp6MA0GCSqGSIb3DQEBCwUAA4IB AQBQpu1r+9DYhbxcCALoBu0WM22viUXPRBF0+cw6k/b6tBaPNrCsIZm5xo7nNmMO CBGC+1ZJEV+EaOBQezCMXOEm1Hal3CGI4lvPt6/KncPZDY0h3xF4iauJxOWzxt5N kFPYURSgAaYh5ROfG1KgRX0Ep+9i34eJAfqRlQmmGyB9DvVHzoV2Bnlz5cWtbUWs ogm1coPB2Ap6+5jgG+xLQzKdC7FhdDS/7oCArEO2jAp2EMeMqbEloV0CM5bQFsOD 3t35BILOT5RonnL5KUwTV4wxcV4mtGXG0anCthrbc/PKxH9ZtVQXpjJU0GYM0Bq5 zUWXf/4ZAbIva2EG0JHzHPC7 -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:30 2025 by rpki-client