$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: t/AyKM8qMmiKQiWMah5E/MXMRW1TcKKTDAmY5wDGFlk= Subject key identifier: DF:9B:D0:80:29:C9:03:D0:5C:18:8D:72:68:64:D9:AE:20:4E:4E:36 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 187318E021C7C2C2CF92BB91EF0691F1AD0E1410 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa Signing time: Fri 23 Aug 2024 21:48:59 +0000 ROA not before: Fri 23 Aug 2024 21:43:59 +0000 ROA not after: Fri 22 Aug 2025 21:48:59 +0000 asID: 20001 IP address blocks: 74.50.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 08:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:73:18:e0:21:c7:c2:c2:cf:92:bb:91:ef:06:91:f1:ad:0e:14:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 23 21:43:59 2024 GMT Not After : Aug 22 21:48:59 2025 GMT Subject: CN=DF9BD08029C903D05C188D726864D9AE204E4E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:11:71:6f:f2:4a:48:13:d8:ff:66:de:18:2d: 97:9f:6e:46:19:8c:78:c8:92:8a:07:c1:33:4f:92: 34:0b:dd:df:d0:6c:9b:46:97:45:74:79:98:e9:c8: 3c:17:1e:1c:73:37:5b:fc:3c:27:1a:19:78:1e:79: c2:b5:d9:12:6b:1a:75:0b:8c:2b:c8:ae:9b:4c:e5: 44:3b:ca:53:54:e1:68:2c:e7:9a:3f:d6:e4:87:f6: b3:6f:d6:a6:30:2f:b0:7d:57:e7:07:41:4c:3b:c4: 7b:dd:ca:5f:22:a7:d5:bf:a4:f9:e8:e9:91:bb:9a: 3c:1e:14:af:2f:b5:21:98:de:05:05:60:85:9b:67: b5:7b:53:19:00:09:3e:4a:9e:9d:30:3f:ec:ad:8e: 37:94:a1:bd:92:53:a3:70:62:6c:a5:19:c0:ae:83: 33:f3:2d:85:55:f6:6b:5d:9f:c2:ba:a6:9f:ab:98: dc:83:f6:78:76:79:14:4a:c8:f2:94:05:da:70:e1: ff:84:b1:f7:b0:8d:40:b9:bf:36:0a:b0:7e:27:1f: 03:43:91:66:6c:22:44:c3:ed:1a:77:40:85:ba:4d: 52:dc:26:60:87:02:14:b9:bb:f4:79:72:83:7a:27: 99:95:65:14:56:cc:eb:4c:9a:84:71:f9:e0:25:a8: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9B:D0:80:29:C9:03:D0:5C:18:8D:72:68:64:D9:AE:20:4E:4E:36 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.50.16.0/20 Signature Algorithm: sha256WithRSAEncryption bd:c2:67:71:a4:30:e3:65:3f:fb:60:33:a6:55:ab:eb:7d:30: fa:92:4e:c6:aa:cd:c3:2d:8e:8e:13:a2:b2:9c:69:8d:b4:c9: dd:5b:f8:d6:23:ba:f9:19:16:2f:57:50:f2:6f:e3:fd:25:62: 0d:c8:5a:80:d0:9a:4d:61:9f:67:4b:5c:8b:41:69:7c:b2:f1: fb:eb:de:50:fb:6d:4f:ca:0e:ed:83:51:85:24:92:6b:00:7f: d6:aa:47:aa:02:92:c9:28:3a:2d:a5:1e:1b:c2:95:ba:63:4d: e4:37:c1:d5:b9:8e:10:ae:f6:ec:19:5d:3d:76:1d:d7:ed:7b: 71:46:22:2a:25:20:94:08:fb:b7:0c:2e:be:8b:11:aa:8f:eb: 64:11:6d:f5:1a:60:8f:02:63:eb:14:0f:30:54:d4:a1:db:2b: 72:d7:65:71:12:f0:94:ac:f0:5e:70:51:35:b4:ad:aa:cc:41: 39:0d:b4:3d:e3:04:96:24:ba:7f:ae:79:74:27:62:a9:a4:11: 2c:bc:66:cb:5b:3e:dd:f7:87:b2:ca:fb:dd:4e:dd:5c:b0:a8: 70:21:19:d4:a4:ff:73:c8:62:55:17:f3:aa:db:99:04:2a:ac: ad:68:3b:17:e3:06:ad:3c:b3:9b:2d:ba:6c:58:9b:f7:b7:bf: c2:8e:93:f9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUGHMY4CHHwsLPkruR7waR8a0OFBAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwODIzMjE0MzU5WhcNMjUwODIyMjE0ODU5 WjAzMTEwLwYDVQQDEyhERjlCRDA4MDI5QzkwM0QwNUMxODhENzI2ODY0RDlBRTIw NEU0RTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RFxb/JKSBPY /2beGC2Xn25GGYx4yJKKB8EzT5I0C93f0GybRpdFdHmY6cg8Fx4cczdb/DwnGhl4 HnnCtdkSaxp1C4wryK6bTOVEO8pTVOFoLOeaP9bkh/azb9amMC+wfVfnB0FMO8R7 3cpfIqfVv6T56OmRu5o8HhSvL7UhmN4FBWCFm2e1e1MZAAk+Sp6dMD/srY43lKG9 klOjcGJspRnAroMz8y2FVfZrXZ/Cuqafq5jcg/Z4dnkUSsjylAXacOH/hLH3sI1A ub82CrB+Jx8DQ5FmbCJEw+0ad0CFuk1S3CZghwIUubv0eXKDeieZlWUUVszrTJqE cfngJagKnQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFN+b0IApyQPQXBiNcmhk2a4g Tk42MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjIQMA0GCSqGSIb3DQEBCwUAA4IB AQC9wmdxpDDjZT/7YDOmVavrfTD6kk7Gqs3DLY6OE6KynGmNtMndW/jWI7r5GRYv V1Dyb+P9JWINyFqA0JpNYZ9nS1yLQWl8svH7695Q+21Pyg7tg1GFJJJrAH/Wqkeq ApLJKDotpR4bwpW6Y03kN8HVuY4QrvbsGV09dh3X7XtxRiIqJSCUCPu3DC6+ixGq j+tkEW31GmCPAmPrFA8wVNSh2yty12VxEvCUrPBecFE1tK2qzEE5DbQ94wSWJLp/ rnl0J2KppBEsvGbLWz7d94eyyvvdTt1csKhwIRnUpP9zyGJVF/Oq25kEKqytaDsX 4watPLObLbpsWJv3t7/CjpP5 -----END CERTIFICATE-----Generated at Sun Feb 16 20:43:35 2025 by rpki-client