$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: d8QBcRg/T2SZpyQCefa28ntxX+I/LsmTpmMo/njki5o= Subject key identifier: 34:08:C4:3A:80:70:DB:31:39:93:F6:AB:D9:0B:D7:22:A4:C5:34:32 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 206DC045DC2AC1B144EDCA76E44FA7A6D6CD7C16 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa Signing time: Mon 25 May 2026 12:36:04 +0000 ROA not before: Mon 25 May 2026 12:31:04 +0000 ROA not after: Mon 24 May 2027 12:36:04 +0000 asID: 20001 IP address blocks: 23.94.90.0/24 maxlen: 24 23.94.106.0/24 maxlen: 24 23.94.109.0/24 maxlen: 24 23.94.135.0/24 maxlen: 24 74.50.16.0/20 maxlen: 24 198.23.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 23:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6d:c0:45:dc:2a:c1:b1:44:ed:ca:76:e4:4f:a7:a6:d6:cd:7c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 25 12:31:04 2026 GMT Not After : May 24 12:36:04 2027 GMT Subject: CN=3408C43A8070DB313993F6ABD90BD722A4C53432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:27:ff:34:83:98:04:58:92:71:4f:f6:5a: eb:44:fa:24:93:ae:80:0c:99:03:57:14:fa:4e:73: 5d:fe:36:7f:ad:89:99:f2:5b:55:1c:8f:0c:a4:02: 6b:5d:14:ac:f2:9b:fc:d0:40:d9:ab:60:e6:21:02: cc:7c:35:d6:68:bc:da:06:84:dd:a3:7b:70:ea:7d: e9:65:46:a2:21:9e:ea:f9:f8:9e:55:59:a4:b6:2e: 9d:c0:42:4b:46:e7:00:39:de:00:65:d5:71:ba:9c: ba:15:3d:1b:a9:4c:00:ad:c2:f7:40:26:9f:78:15: 9e:d4:74:f6:8f:b0:65:9c:1c:32:79:80:ef:3c:91: 93:ff:40:80:a3:ec:ba:6e:cf:ed:3e:2c:f3:c0:33: 46:5a:7b:d4:1e:ce:9f:86:96:51:c6:c8:38:79:4c: 16:38:07:b5:46:68:49:b8:57:45:d8:05:4a:55:91: 17:bd:92:82:a1:d0:8b:12:4c:f2:b8:d2:cb:ab:1a: 8b:63:7d:e5:04:b7:85:3b:b3:67:1a:d7:69:61:83: 51:6f:f1:08:1e:43:41:db:39:39:9d:ca:bf:ab:4c: 8b:54:63:9c:c8:5d:4d:1d:06:0f:15:0f:ed:92:bc: ed:79:b1:0e:c6:5c:31:d7:26:26:89:4e:5c:11:15: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:08:C4:3A:80:70:DB:31:39:93:F6:AB:D9:0B:D7:22:A4:C5:34:32 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.90.0/24 23.94.106.0/24 23.94.109.0/24 23.94.135.0/24 74.50.16.0/20 198.23.222.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:3b:0e:8f:cc:bf:e3:bc:23:94:36:e8:86:46:d3:6c:2f:cf: 09:d4:05:3e:63:4d:fd:16:fe:68:92:20:24:4b:0a:b8:a8:00: 5e:bc:6c:f9:d5:f7:43:9e:61:fc:75:8c:4e:f4:c7:ed:47:5d: f9:a4:ab:fd:29:fb:89:f5:74:1e:8c:39:8a:21:a6:b2:cc:5e: b1:fa:05:04:4e:19:52:34:c9:93:53:f2:66:ae:25:74:38:f1: 41:98:6b:38:ae:37:b2:fb:f8:66:80:5b:2c:d9:08:e6:ae:48: 30:fb:1a:07:5a:b7:55:39:97:91:c2:71:8c:2b:80:29:8e:ea: f7:c6:3d:68:80:fe:c6:19:d8:09:b9:06:05:fc:97:ee:aa:1d: 53:8e:c8:29:fc:52:e4:7b:0d:52:6b:3c:8a:18:b1:7a:89:29: 7c:82:9f:56:35:04:ea:01:da:5d:6a:fc:03:35:10:44:5b:77: 04:cd:9d:b4:14:d9:fe:26:56:27:16:c6:6f:c8:e9:c1:83:bf: 98:24:62:36:7b:75:f6:e0:f0:48:b8:8a:79:bc:73:cc:cb:d4: cb:bb:19:21:e0:f9:98:8a:0a:f7:2d:7e:80:13:4f:cb:4e:28: 7f:30:e2:67:fa:7e:fd:92:9c:63:9c:0a:4c:1b:f0:a2:8c:06: 9b:7f:67:97 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUIG3ARdwqwbFE7cp25E+nptbNfBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNTI1MTIzMTA0WhcNMjcwNTI0MTIzNjA0 WjAzMTEwLwYDVQQDEygzNDA4QzQzQTgwNzBEQjMxMzk5M0Y2QUJEOTBCRDcyMkE0 QzUzNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4wn/zSDmARY knFP9lrrRPokk66ADJkDVxT6TnNd/jZ/rYmZ8ltVHI8MpAJrXRSs8pv80EDZq2Dm IQLMfDXWaLzaBoTdo3tw6n3pZUaiIZ7q+fieVVmkti6dwEJLRucAOd4AZdVxupy6 FT0bqUwArcL3QCafeBWe1HT2j7BlnBwyeYDvPJGT/0CAo+y6bs/tPizzwDNGWnvU Hs6fhpZRxsg4eUwWOAe1RmhJuFdF2AVKVZEXvZKCodCLEkzyuNLLqxqLY33lBLeF O7NnGtdpYYNRb/EIHkNB2zk5ncq/q0yLVGOcyF1NHQYPFQ/tkrztebEOxlwx1yYm iU5cERV0PwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFDQIxDqAcNsxOZP2q9kL1yKk xTQyMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAF15aAwQAF15qAwQAF15tAwQAF16H AwQESjIQAwQAxhfeMA0GCSqGSIb3DQEBCwUAA4IBAQBsOw6PzL/jvCOUNuiGRtNs L88J1AU+Y039Fv5okiAkSwq4qABevGz51fdDnmH8dYxO9MftR135pKv9KfuJ9XQe jDmKIaayzF6x+gUEThlSNMmTU/JmriV0OPFBmGs4rjey+/hmgFss2Qjmrkgw+xoH WrdVOZeRwnGMK4Apjur3xj1ogP7GGdgJuQYF/Jfuqh1Tjsgp/FLkew1SazyKGLF6 iSl8gp9WNQTqAdpdavwDNRBEW3cEzZ20FNn+JlYnFsZvyOnBg7+YJGI2e3X24PBI uIp5vHPMy9TLuxkh4PmYigr3LX6AE0/LTih/MOJn+n79kpxjnApMG/CijAabf2eX -----END CERTIFICATE-----Generated at Sat Jun 13 08:12:21 2026 by rpki-client