$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20068.roa File: AS20068.roa (raw, json) Hash identifier: nw+rNqri9vh2MTl1T3PLVlixbcFNlC+W2frgrC80E7w= Subject key identifier: 51:D3:A9:01:54:0B:C4:91:66:05:BB:D3:24:60:5A:C9:D6:BF:26:2F Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 70438542D47B3C42B32475B24D3BE929030268B5 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20068.roa Signing time: Mon 05 May 2025 12:46:05 +0000 ROA not before: Mon 05 May 2025 12:41:05 +0000 ROA not after: Mon 04 May 2026 12:46:05 +0000 asID: 20068 IP address blocks: 104.223.44.0/24 maxlen: 24 155.94.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 12:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:43:85:42:d4:7b:3c:42:b3:24:75:b2:4d:3b:e9:29:03:02:68:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 5 12:41:05 2025 GMT Not After : May 4 12:46:05 2026 GMT Subject: CN=51D3A901540BC4916605BBD324605AC9D6BF262F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:79:37:f3:d7:6e:c2:3e:20:bd:d9:64:4f: b2:ac:a9:da:dd:33:e7:24:d0:e8:a9:96:4a:99:2b: bf:50:82:75:a8:e1:35:ac:00:d3:ae:e6:1f:75:f4: 1b:31:e1:54:1e:df:0c:51:94:9f:0a:67:49:d1:32: ee:d4:63:e6:86:78:4f:1f:41:fd:00:e3:bf:0f:cd: 4c:0e:8a:38:dc:18:3e:11:ed:9f:ba:9d:31:1b:f8: 66:45:a8:f4:ae:9d:e0:f4:b1:4c:ce:26:f8:47:8d: 27:28:0a:01:25:23:cd:91:34:c5:25:e0:40:9f:94: 10:b1:77:4a:b0:a1:12:3c:1e:06:96:9a:ab:c8:03: d4:c7:91:f9:66:66:7c:0b:67:48:1d:f3:01:72:4f: 8a:1b:2d:c6:a6:27:29:c3:25:26:e8:48:fe:45:d9: e2:14:32:70:5b:94:f2:59:7c:d3:45:f3:7c:d1:40: f2:33:3a:c9:f4:8a:a6:07:5a:4d:46:ef:11:b5:7a: 6b:88:2e:5d:08:3a:34:6e:93:a6:6f:f1:21:b8:19: 65:92:43:46:a0:26:18:e1:bd:8a:6a:4d:d5:45:30: a1:38:7e:7a:82:8b:15:90:4a:2a:f5:fa:df:34:9e: 48:ff:da:2e:25:f0:70:4d:49:67:cf:69:0f:5e:5e: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D3:A9:01:54:0B:C4:91:66:05:BB:D3:24:60:5A:C9:D6:BF:26:2F X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20068.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.223.44.0/24 155.94.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:5d:50:86:a4:2c:a2:3c:e0:97:87:62:7a:a4:32:7c:b5:d2: 8d:ca:ed:84:8d:03:e7:76:88:1c:65:2e:2b:6e:23:32:88:4e: bf:b5:b6:48:d0:6c:e2:e6:1a:b8:a9:5e:43:f4:cb:fa:25:27: 02:c2:41:11:3b:5a:fb:9f:4f:0f:62:e7:0f:5c:38:1a:d1:ba: 61:64:26:50:87:26:5d:7a:cf:8c:d4:14:82:10:86:df:fb:e5: a7:5c:6f:13:0a:8e:6c:78:85:8b:5e:2b:e3:57:ef:f7:e7:d5: 68:5c:66:89:9d:48:6d:50:07:22:16:54:95:ba:8b:9f:56:2d: 70:99:a8:a6:80:43:19:ca:79:f5:79:b3:35:98:ce:f4:b0:90: ea:00:a9:bf:22:95:81:ca:ba:31:75:12:cd:97:90:66:8d:6b: 72:86:cd:7b:7b:a2:96:f0:bf:b0:a5:c8:76:0b:da:e7:5e:4f: 02:88:c2:8f:92:5d:d1:51:f6:d0:1b:98:48:0f:95:51:e9:13: 97:b1:e1:0a:c7:f8:76:68:2d:c8:6c:3b:76:66:c5:ce:28:f2: c1:b5:fa:61:09:17:df:af:62:0c:d7:78:6e:54:77:6a:7b:44: 3b:35:fc:50:14:8e:55:57:7b:f3:b9:e0:18:9d:87:21:b0:1b: a8:90:2f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUcEOFQtR7PEKzJHWyTTvpKQMCaLUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTA1MTI0MTA1WhcNMjYwNTA0MTI0NjA1 WjAzMTEwLwYDVQQDEyg1MUQzQTkwMTU0MEJDNDkxNjYwNUJCRDMyNDYwNUFDOUQ2 QkYyNjJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVh5N/PXbsI+ IL3ZZE+yrKna3TPnJNDoqZZKmSu/UIJ1qOE1rADTruYfdfQbMeFUHt8MUZSfCmdJ 0TLu1GPmhnhPH0H9AOO/D81MDoo43Bg+Ee2fup0xG/hmRaj0rp3g9LFMzib4R40n KAoBJSPNkTTFJeBAn5QQsXdKsKESPB4GlpqryAPUx5H5ZmZ8C2dIHfMBck+KGy3G picpwyUm6Ej+RdniFDJwW5TyWXzTRfN80UDyMzrJ9IqmB1pNRu8RtXpriC5dCDo0 bpOmb/EhuBllkkNGoCYY4b2Kak3VRTChOH56gosVkEoq9frfNJ5I/9ouJfBwTUln z2kPXl77JQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFFHTqQFUC8SRZgW70yRgWsnW vyYvMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwMDY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaN8sAwQAm179MA0GCSqGSIb3DQEB CwUAA4IBAQA8XVCGpCyiPOCXh2J6pDJ8tdKNyu2EjQPndogcZS4rbiMyiE6/tbZI 0Gzi5hq4qV5D9Mv6JScCwkERO1r7n08PYucPXDga0bphZCZQhyZdes+M1BSCEIbf ++WnXG8TCo5seIWLXivjV+/359VoXGaJnUhtUAciFlSVuoufVi1wmaimgEMZynn1 ebM1mM70sJDqAKm/IpWByroxdRLNl5BmjWtyhs17e6KW8L+wpch2C9rnXk8CiMKP kl3RUfbQG5hID5VR6ROXseEKx/h2aC3IbDt2ZsXOKPLBtfphCRffr2IM13huVHdq e0Q7NfxQFI5VV3vzueAYnYchsBuokC/O -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:35 2025 by rpki-client