$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa File: AS20115.roa (raw, json) Hash identifier: XHY46V05pJ3Cq4qHkvkTBMyDsEhphq9lg6XfcXdsiYI= Subject key identifier: 9F:88:41:15:F5:9F:6B:3F:48:EE:9D:13:73:4D:FE:B2:78:84:C3:43 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 7E2C1AC4EF5B7F1482CC7BEFED270DB7993EA18C Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa Signing time: Fri 26 Sep 2025 00:07:00 +0000 ROA not before: Fri 26 Sep 2025 00:02:00 +0000 ROA not after: Fri 25 Sep 2026 00:07:00 +0000 asID: 20115 IP address blocks: 40.27.0.0/21 maxlen: 24 40.27.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2c:1a:c4:ef:5b:7f:14:82:cc:7b:ef:ed:27:0d:b7:99:3e:a1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 26 00:02:00 2025 GMT Not After : Sep 25 00:07:00 2026 GMT Subject: CN=9F884115F59F6B3F48EE9D13734DFEB27884C343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:82:7f:0b:84:f6:f1:3f:14:17:8d:38:58: 02:83:d9:ce:7c:d0:ae:c2:2a:4a:f9:b3:2b:98:fa: 31:30:06:f7:95:6b:f1:86:ab:aa:c1:83:09:78:1c: 91:46:ee:08:bc:6d:f1:c2:06:f2:44:e0:36:6e:7b: 8b:e9:65:dc:61:53:b9:61:77:f7:b4:89:94:50:b8: aa:e8:f7:60:e3:48:91:80:39:b8:c2:c1:82:6b:2b: 99:69:c1:e0:a5:2c:d2:3a:b9:41:32:bc:65:fe:51: 15:a5:40:c7:d2:c8:66:46:bb:eb:d3:bf:f7:18:e6: 41:90:e4:6f:81:00:5b:bb:3b:62:91:39:28:22:bf: b2:a5:1d:0c:23:22:0c:1b:12:b7:44:ba:aa:ed:03: 16:c7:19:b6:92:c1:df:06:02:d9:68:35:b8:7c:9b: 6b:c0:4f:0e:8d:9c:ec:f6:22:57:3f:e6:21:4e:31: fd:12:62:29:1b:b8:d6:fd:f9:e3:b7:4f:f4:95:60: bf:92:af:e1:48:82:ce:6f:92:4f:eb:27:1c:81:e2: 16:a3:a8:96:23:40:13:43:0c:11:96:f0:87:ea:d5: 94:43:32:18:db:1e:e1:fe:de:66:39:a7:1a:1a:f1: c6:84:74:4e:2c:57:10:9d:64:f4:6c:16:ee:03:07: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:88:41:15:F5:9F:6B:3F:48:EE:9D:13:73:4D:FE:B2:78:84:C3:43 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.0.0/21 40.27.40.0/21 Signature Algorithm: sha256WithRSAEncryption 79:04:fc:ea:69:c0:5d:e5:d8:0e:ad:d5:d6:7b:21:09:65:c9: 3f:4d:a6:97:9d:76:8e:02:11:10:60:7c:4a:c0:c9:4d:d9:b7: 02:5a:10:cb:c2:a2:2f:86:81:31:28:3d:0f:6d:53:e3:be:c4: a9:76:3c:51:89:81:6b:41:9c:68:61:3b:08:5b:cb:63:b2:f0: 4f:12:24:29:d0:b6:ab:45:4e:15:8a:34:dc:43:10:74:f1:74: 7e:91:af:f1:47:3a:d0:e7:12:a2:4e:ef:55:c7:67:b3:f2:29: af:fb:32:04:69:07:eb:22:8d:f3:bf:1b:36:8b:9a:76:01:8d: b3:1c:b9:04:e4:b3:fb:f6:cf:b7:1b:68:3b:f2:c6:58:e5:05: 60:cc:39:20:2c:a7:05:29:f7:d6:fb:f0:ca:d9:c7:cb:b1:8d: b0:5c:fe:57:e3:98:fd:41:88:e8:99:c1:07:60:5d:89:26:7f: fc:b0:5b:a8:32:9c:6a:f3:f9:47:86:12:14:40:36:a5:a4:22: e1:9a:b2:b5:7b:54:7a:58:fc:63:56:aa:ff:08:33:b7:34:70: b0:fd:c9:62:9e:32:21:f7:a6:a3:f6:73:75:37:5f:a9:4d:ab: 3b:fa:df:26:74:bc:e3:9e:56:31:0f:a2:2c:b2:a6:d4:34:ee: b2:0f:aa:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUfiwaxO9bfxSCzHvv7ScNt5k+oYwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwOTI2MDAwMjAwWhcNMjYwOTI1MDAwNzAw WjAzMTEwLwYDVQQDEyg5Rjg4NDExNUY1OUY2QjNGNDhFRTlEMTM3MzRERkVCMjc4 ODRDMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnraCfwuE9vE/ FBeNOFgCg9nOfNCuwipK+bMrmPoxMAb3lWvxhquqwYMJeByRRu4IvG3xwgbyROA2 bnuL6WXcYVO5YXf3tImUULiq6Pdg40iRgDm4wsGCayuZacHgpSzSOrlBMrxl/lEV pUDH0shmRrvr07/3GOZBkORvgQBbuztikTkoIr+ypR0MIyIMGxK3RLqq7QMWxxm2 ksHfBgLZaDW4fJtrwE8OjZzs9iJXP+YhTjH9EmIpG7jW/fnjt0/0lWC/kq/hSILO b5JP6yccgeIWo6iWI0ATQwwRlvCH6tWUQzIY2x7h/t5mOacaGvHGhHROLFcQnWT0 bBbuAwdYFQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFJ+IQRX1n2s/SO6dE3NN/rJ4 hMNDMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwMTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDKBsAAwQDKBsoMA0GCSqGSIb3DQEB CwUAA4IBAQB5BPzqacBd5dgOrdXWeyEJZck/TaaXnXaOAhEQYHxKwMlN2bcCWhDL wqIvhoExKD0PbVPjvsSpdjxRiYFrQZxoYTsIW8tjsvBPEiQp0LarRU4VijTcQxB0 8XR+ka/xRzrQ5xKiTu9Vx2ez8imv+zIEaQfrIo3zvxs2i5p2AY2zHLkE5LP79s+3 G2g78sZY5QVgzDkgLKcFKffW+/DK2cfLsY2wXP5X45j9QYjomcEHYF2JJn/8sFuo Mpxq8/lHhhIUQDalpCLhmrK1e1R6WPxjVqr/CDO3NHCw/clinjIh96aj9nN1N1+p Tas7+t8mdLzjnlYxD6IssqbUNO6yD6rm -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:56 2025 by rpki-client