$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: F7ehyD7p6ggKLtAFhyO+AgSOBzeYNhFRHMYoeKuHHA4= Subject key identifier: 43:7C:63:0D:F1:82:44:5C:13:3B:ED:A6:3A:C6:79:E4:67:3D:55:D0 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 685AFF4E3B21D67C449E96502E4EEDA93E9E9434 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa Signing time: Fri 22 Sep 2023 21:44:24 +0000 ROA not before: Fri 22 Sep 2023 21:39:24 +0000 ROA not after: Fri 20 Sep 2024 21:44:24 +0000 asID: 20001 IP address blocks: 74.50.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 02:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5a:ff:4e:3b:21:d6:7c:44:9e:96:50:2e:4e:ed:a9:3e:9e:94:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Sep 22 21:39:24 2023 GMT Not After : Sep 20 21:44:24 2024 GMT Subject: CN=437C630DF182445C133BEDA63AC679E4673D55D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:f0:da:84:30:32:55:d7:8f:51:3f:04:ff: d4:ff:4a:97:e0:94:c0:b4:95:17:2a:d8:eb:d5:8f: 0b:66:a2:65:1a:89:56:15:8c:4c:8f:ee:04:86:a6: 67:4e:42:64:de:59:37:ef:90:11:34:ae:eb:38:5b: cb:4a:5c:90:85:e8:e9:00:f5:c8:93:cb:6c:2e:f1: 64:34:f2:5e:fc:86:73:2f:86:57:9e:25:35:18:af: f4:15:69:ba:dc:65:99:c0:e6:55:e4:59:e9:71:3f: 2a:21:e2:3d:98:5b:e9:67:4e:f2:4b:c5:4f:3d:ff: 4f:56:f3:c4:be:55:75:9d:34:73:ce:2a:72:3e:d5: 04:ee:4a:bd:b9:b3:99:40:48:43:f7:2d:3e:4d:04: ea:91:09:86:f8:64:7a:25:72:46:3f:d8:4f:7f:49: c0:db:be:20:10:46:89:ef:2d:52:ee:0a:b1:11:c5: 04:3f:5a:2f:a8:f5:c7:f4:5b:c6:67:23:2e:7b:70: f4:48:2c:f9:e8:ae:02:d9:1c:9a:2e:1e:57:96:9d: 42:81:29:27:13:b6:f2:b3:a1:0e:e6:31:68:88:24: d2:05:f1:52:0e:a7:0f:fe:7b:92:fe:ab:1c:03:8e: 44:1a:14:54:59:cf:82:7f:e5:01:59:d8:92:92:37: db:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7C:63:0D:F1:82:44:5C:13:3B:ED:A6:3A:C6:79:E4:67:3D:55:D0 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.50.16.0/20 Signature Algorithm: sha256WithRSAEncryption 8c:de:5d:84:3e:5f:7c:67:58:52:32:59:67:81:ca:03:af:e6: b0:a7:87:02:7c:4f:1e:db:50:32:1d:1e:c5:00:23:c7:c1:e9: a4:03:ab:b5:8e:bd:3d:10:3f:f2:35:4b:5d:6c:81:90:a5:7a: 71:bf:e8:0e:a5:1c:c7:4e:a9:0f:cb:2b:89:45:d7:b6:35:e1: 2b:fd:a3:85:37:a9:5f:e3:85:7e:2f:40:85:f8:0d:2a:0c:cf: 29:9a:73:20:3e:9a:e9:0c:ad:20:ad:d4:11:86:02:af:0a:52: 64:ee:87:32:c8:cf:d9:f5:cb:d2:c5:26:fd:3e:95:4d:dd:90: 0a:af:5f:58:0f:1e:5d:28:e5:d6:c3:1b:5d:17:f0:ca:53:54: be:e2:8d:52:39:a4:e1:f9:cc:0b:4d:7f:4a:25:5b:00:f1:fa: 1a:f6:bc:57:39:ff:71:1f:72:07:d6:a5:7c:55:92:63:bf:3e: 07:94:42:ca:c3:ec:8c:5a:fe:0c:86:a0:39:d1:96:a4:52:99: 99:f0:7e:06:16:f8:f2:92:5e:70:67:8d:d8:1a:00:78:dd:62: 55:de:b3:59:2d:d2:09:33:c2:1e:15:1f:fe:7c:53:1b:23:f6: c0:72:8d:18:47:53:b8:82:9d:53:48:7e:e4:8c:f2:3d:3c:40: 30:5f:1e:6e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUaFr/Tjsh1nxEnpZQLk7tqT6elDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwOTIyMjEzOTI0WhcNMjQwOTIwMjE0NDI0 WjAzMTEwLwYDVQQDEyg0MzdDNjMwREYxODI0NDVDMTMzQkVEQTYzQUM2NzlFNDY3 M0Q1NUQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlbw2oQwMlXX j1E/BP/U/0qX4JTAtJUXKtjr1Y8LZqJlGolWFYxMj+4EhqZnTkJk3lk375ARNK7r OFvLSlyQhejpAPXIk8tsLvFkNPJe/IZzL4ZXniU1GK/0FWm63GWZwOZV5FnpcT8q IeI9mFvpZ07yS8VPPf9PVvPEvlV1nTRzzipyPtUE7kq9ubOZQEhD9y0+TQTqkQmG +GR6JXJGP9hPf0nA274gEEaJ7y1S7gqxEcUEP1ovqPXH9FvGZyMue3D0SCz56K4C 2RyaLh5Xlp1CgSknE7bys6EO5jFoiCTSBfFSDqcP/nuS/qscA45EGhRUWc+Cf+UB WdiSkjfbhwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFEN8Yw3xgkRcEzvtpjrGeeRn PVXQMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjIQMA0GCSqGSIb3DQEBCwUAA4IB AQCM3l2EPl98Z1hSMllngcoDr+awp4cCfE8e21AyHR7FACPHwemkA6u1jr09ED/y NUtdbIGQpXpxv+gOpRzHTqkPyyuJRde2NeEr/aOFN6lf44V+L0CF+A0qDM8pmnMg PprpDK0grdQRhgKvClJk7ocyyM/Z9cvSxSb9PpVN3ZAKr19YDx5dKOXWwxtdF/DK U1S+4o1SOaTh+cwLTX9KJVsA8foa9rxXOf9xH3IH1qV8VZJjvz4HlELKw+yMWv4M hqA50ZakUpmZ8H4GFvjykl5wZ43YGgB43WJV3rNZLdIJM8IeFR/+fFMbI/bAco0Y R1O4gp1TSH7kjPI9PEAwXx5u -----END CERTIFICATE-----Generated at Wed May 1 01:02:41 2024 by rpki-client on console-fra.rpki-client.org