$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: sDn+Qvglv6RqAi8EtWMrEqBXhPOj3T38MFLYdEZkR2A= Subject key identifier: 1D:49:3D:5F:B9:B5:B8:43:07:85:70:6A:F7:32:6D:AD:BA:05:37:CA Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 3274020F1BF7D4CE1987DF0742D9F99FD310F611 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa Signing time: Mon 08 Jun 2026 12:36:05 +0000 ROA not before: Mon 08 Jun 2026 12:31:05 +0000 ROA not after: Mon 07 Jun 2027 12:36:05 +0000 asID: 20001 IP address blocks: 104.234.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:74:02:0f:1b:f7:d4:ce:19:87:df:07:42:d9:f9:9f:d3:10:f6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jun 8 12:31:05 2026 GMT Not After : Jun 7 12:36:05 2027 GMT Subject: CN=1D493D5FB9B5B8430785706AF7326DADBA0537CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:39:0d:0c:55:90:15:08:85:8f:93:f3:64:bf: 4a:89:58:5c:0d:e1:09:33:80:6a:4d:1d:f7:95:75: 75:aa:69:7b:66:a6:66:d1:f6:e1:2e:6f:9b:bc:05: cf:c4:0d:2c:c7:89:22:b9:bb:b3:23:33:ff:52:2f: 09:ab:36:8d:ad:dd:d1:50:5c:45:96:31:ba:ef:a6: b7:a6:c5:de:40:e7:03:f5:b2:ce:90:91:c1:7c:c9: ca:26:d5:91:45:c0:7d:d2:a0:fb:02:bd:bc:bf:1b: be:ab:9f:97:b3:fe:42:51:91:bc:79:ee:52:6f:b8: 6e:da:b1:d6:80:1c:07:3d:3e:66:c9:1e:a8:43:04: 10:65:3f:d9:d5:1e:34:3c:e9:74:29:f7:03:28:39: e0:29:e5:9b:03:41:22:77:89:ba:be:bd:a3:c2:61: 0a:95:29:21:84:11:22:88:fd:9b:8c:14:09:ae:e2: 29:7f:86:d6:db:c1:37:6b:eb:d5:ed:2e:78:4e:94: 96:3a:70:28:fb:1b:28:9f:2d:7b:36:c5:df:d3:e9: ff:92:be:e9:0a:2c:95:6b:fb:e0:52:20:61:3a:35: d1:58:ca:f2:a5:02:e8:77:d7:8e:6c:50:ac:0a:fe: 60:d2:ea:b8:aa:f7:91:29:af:ff:4f:61:5c:5c:ea: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:49:3D:5F:B9:B5:B8:43:07:85:70:6A:F7:32:6D:AD:BA:05:37:CA X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.122.0/24 Signature Algorithm: sha256WithRSAEncryption 25:7b:72:44:cd:33:70:26:bd:e0:e0:54:19:b2:3a:fb:5f:b1: 34:44:44:34:89:0f:3b:ac:e2:63:7c:3b:49:16:79:48:c7:cd: 59:b5:16:95:59:ba:35:e9:3d:dd:45:c8:e3:5e:03:43:17:3a: d4:19:eb:1b:f4:db:95:35:e1:ed:a4:28:ff:e4:2f:a5:1d:c3: 0d:f7:39:72:ec:c4:59:a8:7c:ca:48:1a:a4:86:7a:82:3b:ec: 3c:63:bf:4c:6f:c0:88:92:f1:8a:33:39:5d:fc:01:d1:64:4c: ee:cb:92:fd:f8:0e:07:13:72:9b:2a:ce:61:87:60:ba:de:a4: 71:c6:f1:22:38:04:79:2e:a4:b8:a7:73:f6:6e:7c:48:ce:a7: 2a:90:e8:eb:18:67:e2:78:86:dc:8e:f6:6b:3a:70:23:6b:8f: e3:65:b4:92:6e:73:c6:b9:5a:57:ae:b8:05:06:32:ec:3f:b3: d2:a5:44:a6:5a:79:04:d6:2b:85:91:f7:84:de:40:4f:a3:f9: 18:b5:3e:18:77:a8:df:f9:3f:48:de:4a:ed:e1:7a:83:2d:49: b8:b0:5f:ea:e4:59:bf:d4:62:32:78:03:57:ad:d3:a5:6d:24: 8d:ab:20:8c:ee:45:89:0d:31:a2:d5:da:dd:64:81:a4:3e:d5: de:cf:ff:aa -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUMnQCDxv31M4Zh98HQtn5n9MQ9hEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNjA4MTIzMTA1WhcNMjcwNjA3MTIzNjA1 WjAzMTEwLwYDVQQDEygxRDQ5M0Q1RkI5QjVCODQzMDc4NTcwNkFGNzMyNkRBREJB MDUzN0NBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTkNDFWQFQiF j5PzZL9KiVhcDeEJM4BqTR33lXV1qml7ZqZm0fbhLm+bvAXPxA0sx4kiubuzIzP/ Ui8JqzaNrd3RUFxFljG676a3psXeQOcD9bLOkJHBfMnKJtWRRcB90qD7Ar28vxu+ q5+Xs/5CUZG8ee5Sb7hu2rHWgBwHPT5myR6oQwQQZT/Z1R40POl0KfcDKDngKeWb A0Eid4m6vr2jwmEKlSkhhBEiiP2bjBQJruIpf4bW28E3a+vV7S54TpSWOnAo+xso ny17NsXf0+n/kr7pCiyVa/vgUiBhOjXRWMrypQLod9eObFCsCv5g0uq4qveRKa// T2FcXOqdQQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFB1JPV+5tbhDB4Vwavcyba26 BTfKMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOp6MA0GCSqGSIb3DQEBCwUAA4IB AQAle3JEzTNwJr3g4FQZsjr7X7E0REQ0iQ87rOJjfDtJFnlIx81ZtRaVWbo16T3d RcjjXgNDFzrUGesb9NuVNeHtpCj/5C+lHcMN9zly7MRZqHzKSBqkhnqCO+w8Y79M b8CIkvGKMzld/AHRZEzuy5L9+A4HE3KbKs5hh2C63qRxxvEiOAR5LqS4p3P2bnxI zqcqkOjrGGfieIbcjvZrOnAja4/jZbSSbnPGuVpXrrgFBjLsP7PSpUSmWnkE1iuF kfeE3kBPo/kYtT4Yd6jf+T9I3krt4XqDLUm4sF/q5Fm/1GIyeANXrdOlbSSNqyCM 7kWJDTGi1drdZIGkPtXez/+q -----END CERTIFICATE-----Generated at Sat Jun 13 07:58:31 2026 by rpki-client