
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20068.roa
File: AS20068.roa (raw, json)
Hash identifier: bcuyMYsHRulduPfXiMp+G275Nr7riRUqGRw5cc4ZW7Y=
Subject key identifier: 1E:DD:61:F6:CE:C4:3E:0A:47:47:37:78:75:F8:B9:DB:FC:FD:49:24
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 1002EB110C073BFC604CC1FD40441C1F07FB69A9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20068.roa
Signing time: Mon 06 Apr 2026 13:35:55 +0000
ROA not before: Mon 06 Apr 2026 13:30:55 +0000
ROA not after: Mon 05 Apr 2027 13:35:55 +0000
asID: 20068
IP address blocks: 104.223.44.0/24 maxlen: 24
155.94.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 08:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:02:eb:11:0c:07:3b:fc:60:4c:c1:fd:40:44:1c:1f:07:fb:69:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 6 13:30:55 2026 GMT
Not After : Apr 5 13:35:55 2027 GMT
Subject: CN=1EDD61F6CEC43E0A4747377875F8B9DBFCFD4924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:6a:cd:ce:8d:d2:42:41:8c:e4:5f:97:3f:
0e:b7:5c:41:48:31:e2:67:bf:81:6e:ab:83:88:4f:
b5:ae:af:2e:35:49:8d:e9:b1:eb:eb:85:26:64:4a:
56:fd:fd:fd:28:42:72:8d:4b:7a:22:70:fb:b0:84:
35:83:58:82:d4:37:31:14:2e:13:ca:78:03:7c:a8:
3a:d6:69:25:04:15:82:92:3e:35:ac:94:b9:a2:4d:
2a:07:32:66:13:38:e4:37:8a:8e:fd:0d:56:c5:c4:
28:7f:c5:9c:d7:fc:2e:c9:19:fc:cd:ec:f9:d2:44:
ce:7f:d7:7f:e0:81:cc:fd:4f:13:30:53:f9:83:8f:
6f:76:fc:b7:f2:89:58:f2:b0:42:1f:ce:40:18:80:
6d:35:55:d8:17:1b:43:94:32:ff:2c:f3:aa:1d:00:
e0:15:96:85:ea:1d:09:16:36:48:42:7a:5a:1e:61:
0d:31:f8:41:5f:94:e5:58:f9:da:04:b4:a0:09:8a:
aa:3b:78:cd:f8:0c:5f:8e:39:8a:64:88:6e:17:35:
b6:eb:56:84:ad:68:64:4d:bc:5d:ec:36:8f:9f:9e:
76:16:ae:9e:25:52:d7:45:f8:ef:8b:04:24:d2:42:
06:5d:eb:61:64:b1:a6:43:22:09:47:41:a0:44:c6:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:61:F6:CE:C4:3E:0A:47:47:37:78:75:F8:B9:DB:FC:FD:49:24
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.223.44.0/24
155.94.253.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4b:25:c1:81:cb:95:d5:38:7a:c1:9e:4f:59:41:53:de:65:
fa:0f:6d:7d:b1:1b:6e:3f:2b:00:21:e9:54:2c:f0:9a:25:ca:
19:c4:9e:65:75:21:f9:72:8a:d8:b1:b1:08:a5:ad:e3:6f:12:
8d:84:87:b5:aa:ef:57:76:a1:c8:25:cd:f3:79:70:95:5b:39:
0a:02:cc:26:b9:4f:86:8d:7e:dc:4d:49:20:2b:3c:6c:bd:fd:
4a:9c:ee:0e:a5:95:6e:52:51:6c:41:8b:4b:3a:fc:e1:ae:8b:
34:4b:9e:85:f3:f8:22:1f:95:01:75:85:43:4d:e3:cd:73:fc:
10:7a:c5:e2:e2:c8:c2:56:33:80:bd:84:12:bc:2f:74:f7:59:
7d:84:d3:d7:ac:a4:f7:5d:14:30:4d:5a:64:08:02:d5:96:1c:
cc:2b:7e:49:21:e6:27:22:e2:3a:06:a2:60:65:3a:52:4a:f6:
4f:30:de:78:bd:39:e8:75:25:7b:b1:36:eb:a8:92:4a:30:65:
d7:01:93:1e:f2:e6:a1:f7:19:68:ee:ce:a1:6b:42:9a:5d:1e:
9b:d0:a1:0d:42:d9:7a:1f:50:2a:ce:ad:ca:99:aa:d3:d4:31:
f3:1d:24:57:d9:6d:c6:aa:f8:34:b9:c6:a6:a5:cf:83:3f:31:
c5:fe:51:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUEALrEQwHO/xgTMH9QEQcHwf7aakwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNDA2MTMzMDU1WhcNMjcwNDA1MTMzNTU1
WjAzMTEwLwYDVQQDEygxRURENjFGNkNFQzQzRTBBNDc0NzM3Nzg3NUY4QjlEQkZD
RkQ0OTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P9qzc6N0kJB
jORflz8Ot1xBSDHiZ7+BbquDiE+1rq8uNUmN6bHr64UmZEpW/f39KEJyjUt6InD7
sIQ1g1iC1DcxFC4TyngDfKg61mklBBWCkj41rJS5ok0qBzJmEzjkN4qO/Q1WxcQo
f8Wc1/wuyRn8zez50kTOf9d/4IHM/U8TMFP5g49vdvy38olY8rBCH85AGIBtNVXY
FxtDlDL/LPOqHQDgFZaF6h0JFjZIQnpaHmENMfhBX5TlWPnaBLSgCYqqO3jN+Axf
jjmKZIhuFzW261aErWhkTbxd7DaPn552Fq6eJVLXRfjviwQk0kIGXethZLGmQyIJ
R0GgRMYUTQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFB7dYfbOxD4KR0c3eHX4udv8
/UkkMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwMDY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaN8sAwQAm179MA0GCSqGSIb3DQEB
CwUAA4IBAQBVSyXBgcuV1Th6wZ5PWUFT3mX6D219sRtuPysAIelULPCaJcoZxJ5l
dSH5corYsbEIpa3jbxKNhIe1qu9XdqHIJc3zeXCVWzkKAswmuU+GjX7cTUkgKzxs
vf1KnO4OpZVuUlFsQYtLOvzhros0S56F8/giH5UBdYVDTePNc/wQesXi4sjCVjOA
vYQSvC9091l9hNPXrKT3XRQwTVpkCALVlhzMK35JIeYnIuI6BqJgZTpSSvZPMN54
vTnodSV7sTbrqJJKMGXXAZMe8uah9xlo7s6ha0KaXR6b0KENQtl6H1Aqzq3KmarT
1DHzHSRX2W3Gqvg0ucampc+DPzHF/lGn
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:12 2026 by rpki-client