$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa File: AS20068.roa (raw, json) Hash identifier: vjTfKHPBOuuz5CzDV3yuxcwQX5giH0a3/wK7YW61BQQ= Subject key identifier: A5:26:8C:9E:F4:75:F4:1B:1B:BD:3D:69:B4:C9:A0:DC:DC:68:4E:4F Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 7E51A04A80F82747216F948E0664BA40B5AC16DA Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa Signing time: Sat 25 Oct 2025 07:30:39 +0000 ROA not before: Sat 25 Oct 2025 07:25:39 +0000 ROA not after: Sat 24 Oct 2026 07:30:39 +0000 asID: 20068 IP address blocks: 140.99.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:51:a0:4a:80:f8:27:47:21:6f:94:8e:06:64:ba:40:b5:ac:16:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Oct 25 07:25:39 2025 GMT Not After : Oct 24 07:30:39 2026 GMT Subject: CN=A5268C9EF475F41B1BBD3D69B4C9A0DCDC684E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:34:13:8f:33:08:5a:b6:ab:cb:bb:4c:26: c8:57:12:e3:9d:98:20:c3:c4:5e:bb:88:a4:ad:e7: 98:69:70:42:bd:01:cf:44:81:5d:a5:9f:9a:71:cf: d1:9d:af:0a:5f:be:8d:85:11:c7:2f:20:13:2f:47: 87:fb:71:85:79:62:de:58:d2:ff:d8:38:f8:e5:f2: dc:aa:03:08:18:16:8e:08:0c:f4:c6:c4:c8:81:c0: 9d:36:e3:b8:9e:75:64:8c:a9:fe:7b:a4:87:76:2c: 47:02:57:6c:fc:42:02:8a:c9:a8:51:a0:4e:a0:47: e9:d5:96:db:eb:39:ef:43:ce:9f:d6:28:59:73:d9: 88:1c:7d:0f:38:04:b9:7f:90:d7:d6:cd:37:c0:60: 1c:34:64:91:a1:1e:37:f5:6e:17:eb:ec:a5:ef:01: 59:1e:88:85:85:10:e9:1b:4d:bf:1a:f8:1c:7e:9f: e5:af:a1:3f:2a:63:8a:43:c4:39:11:6e:04:06:4b: 9e:b3:83:80:d6:af:8b:ee:0b:ae:d4:c5:f8:d6:ee: 13:93:4e:35:03:b2:82:dc:fb:0c:9b:00:d1:59:6b: da:03:47:27:d0:6c:d0:a4:e4:f4:af:1f:e4:2f:16: 4b:a4:7d:a0:3b:6c:49:80:54:e2:7e:f1:36:cc:fb: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:26:8C:9E:F4:75:F4:1B:1B:BD:3D:69:B4:C9:A0:DC:DC:68:4E:4F X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.244.0/23 Signature Algorithm: sha256WithRSAEncryption 05:7b:1c:62:d2:7d:c4:d4:6f:da:5c:42:03:26:81:ae:da:c1: 46:2c:8d:25:7e:c4:f6:f7:40:bf:93:03:42:22:a0:00:38:1c: 4d:01:31:e9:42:45:a8:a2:a1:f0:c7:51:91:6c:2d:49:d9:92: 43:5e:67:3d:30:2d:7e:9d:d2:0b:69:b9:54:3c:db:08:b3:f4: 22:84:3f:35:d6:11:3a:fc:12:f9:08:a3:41:cc:45:11:64:44: f5:d4:97:4b:a0:a9:fe:ba:12:34:ac:e7:d3:ad:99:c9:c6:cd: b9:c3:fd:a5:d5:d4:ce:36:ad:2d:19:e0:9e:72:72:bf:54:fe: 81:60:9d:3f:83:81:e7:78:73:cf:46:d5:fb:58:41:9d:bd:ae: 07:64:e9:0f:b8:9b:f7:1a:6a:b1:4d:72:62:1a:99:d2:73:92: be:d6:bc:6b:2e:e1:53:fa:55:33:89:67:1c:b6:c4:37:d7:12: 8e:89:98:d1:a5:57:43:fa:b5:72:8d:22:c2:3a:6e:77:ef:11: 0f:b9:20:21:1c:93:67:67:b7:54:a3:7e:f2:24:94:e1:a3:d2: ed:15:98:f8:7e:16:ec:f1:20:ce:43:b5:f5:cd:08:9c:01:cd: 52:c9:0c:7b:aa:3e:61:8b:e1:2c:25:af:c6:07:ed:30:8d:25: 3e:73:a9:4f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUflGgSoD4J0chb5SOBmS6QLWsFtowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUxMDI1MDcyNTM5WhcNMjYxMDI0MDczMDM5 WjAzMTEwLwYDVQQDEyhBNTI2OEM5RUY0NzVGNDFCMUJCRDNENjlCNEM5QTBEQ0RD Njg0RTRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMg0E48zCFq2 q8u7TCbIVxLjnZggw8Reu4ikreeYaXBCvQHPRIFdpZ+acc/Rna8KX76NhRHHLyAT L0eH+3GFeWLeWNL/2Dj45fLcqgMIGBaOCAz0xsTIgcCdNuO4nnVkjKn+e6SHdixH Alds/EICismoUaBOoEfp1Zbb6znvQ86f1ihZc9mIHH0POAS5f5DX1s03wGAcNGSR oR439W4X6+yl7wFZHoiFhRDpG02/Gvgcfp/lr6E/KmOKQ8Q5EW4EBkues4OA1q+L 7guu1MX41u4Tk041A7KC3PsMmwDRWWvaA0cn0GzQpOT0rx/kLxZLpH2gO2xJgFTi fvE2zPvvCwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKUmjJ70dfQbG709abTJoNzc aE5PMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIwMDY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjGP0MA0GCSqGSIb3DQEBCwUAA4IB AQAFexxi0n3E1G/aXEIDJoGu2sFGLI0lfsT290C/kwNCIqAAOBxNATHpQkWooqHw x1GRbC1J2ZJDXmc9MC1+ndILablUPNsIs/QihD811hE6/BL5CKNBzEURZET11JdL oKn+uhI0rOfTrZnJxs25w/2l1dTONq0tGeCecnK/VP6BYJ0/g4HneHPPRtX7WEGd va4HZOkPuJv3GmqxTXJiGpnSc5K+1rxrLuFT+lUziWcctsQ31xKOiZjRpVdD+rVy jSLCOm537xEPuSAhHJNnZ7dUo37yJJTho9LtFZj4fhbs8SDOQ7X1zQicAc1SyQx7 qj5hi+EsJa/GB+0wjSU+c6lP -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:35 2025 by rpki-client