$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa File: AS20115.roa (raw, json) Hash identifier: ZRB3mXYDSlzsp7o4aLFxNd6B8nfr6sxupDE36p0fDLU= Subject key identifier: 22:93:FF:1B:A2:B9:B1:A3:D6:3A:B0:07:53:52:31:73:A3:DC:26:4E Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6F1CC16C78EA1D9D95461F812AF4BB3C183B659C Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa Signing time: Thu 19 Jun 2025 09:39:36 +0000 ROA not before: Thu 19 Jun 2025 09:34:36 +0000 ROA not after: Thu 18 Jun 2026 09:39:36 +0000 asID: 20115 IP address blocks: 40.27.0.0/21 maxlen: 24 40.27.40.0/21 maxlen: 24 40.27.248.0/21 maxlen: 24 40.223.16.0/21 maxlen: 24 40.223.80.0/21 maxlen: 24 40.223.122.0/24 maxlen: 24 40.223.184.0/21 maxlen: 24 40.223.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1c:c1:6c:78:ea:1d:9d:95:46:1f:81:2a:f4:bb:3c:18:3b:65:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jun 19 09:34:36 2025 GMT Not After : Jun 18 09:39:36 2026 GMT Subject: CN=2293FF1BA2B9B1A3D63AB00753523173A3DC264E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:58:29:27:1e:e6:cd:6e:79:03:d1:43:7b: d3:63:41:4d:e2:fc:81:00:9b:e3:e9:bf:01:4d:be: 49:19:3c:97:43:14:2f:81:60:40:59:e3:b5:f4:8e: 91:41:a9:9d:e9:ad:f9:70:26:b5:40:05:59:68:4a: a9:53:09:f4:bc:20:d5:9f:1c:23:17:cf:8f:4a:aa: d6:49:69:56:ae:3d:14:1f:e1:67:13:a5:35:13:5b: 46:9c:82:78:86:0c:f9:68:da:ea:98:f8:2e:61:29: e3:37:28:ba:e2:89:48:7b:e3:1e:50:2d:ff:28:5c: aa:95:0f:68:8c:3a:05:df:e6:0c:33:e3:59:c7:81: c5:55:08:fa:57:51:28:4c:30:9d:1e:db:06:14:6a: 66:5f:2e:4e:3a:a4:8c:05:f0:c4:3a:e5:6d:b4:90: 74:25:79:c6:13:be:43:a5:60:d4:25:99:dc:8c:96: e2:db:69:d7:c0:aa:07:dc:2f:6c:a5:81:43:9b:a9: 5b:45:a4:db:b8:e9:6f:3a:f1:e8:d8:b7:8d:b1:df: b1:14:79:d8:e2:bd:9d:1e:85:00:04:02:9c:7c:15: dd:33:17:4e:1a:41:61:02:4b:88:72:f4:0f:a2:66: a9:40:d1:2b:57:04:fb:87:e1:79:b4:99:5d:8c:22: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:93:FF:1B:A2:B9:B1:A3:D6:3A:B0:07:53:52:31:73:A3:DC:26:4E X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.0.0/21 40.27.40.0/21 40.27.248.0/21 40.223.16.0/21 40.223.80.0/21 40.223.122.0/24 40.223.184.0/21 40.223.245.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:c4:67:4a:ed:e8:9f:b3:36:1e:fb:cc:b8:a7:9e:49:e9:9d: 94:18:7b:b0:70:05:58:be:cd:3e:c4:66:f6:c1:e3:fa:40:36: e7:62:83:1c:fa:39:7a:46:af:ab:d4:66:a7:e6:65:52:eb:0d: da:75:af:62:5d:44:bd:59:72:fa:8c:f2:ce:42:c8:1c:7c:bc: 9b:a1:6b:e8:d1:4d:e2:53:83:5c:c3:d7:b6:f1:91:d7:b6:01: 12:9a:7b:a5:99:1d:0e:28:74:c2:c4:34:54:cc:f0:cb:30:72: 4a:87:b2:08:93:e1:09:b5:bd:64:ce:73:58:b3:c9:6a:d6:98: ba:ca:25:d9:b5:87:a4:43:44:a0:7e:2e:1e:98:68:59:d8:d1: b0:44:c1:61:15:b1:11:4e:96:b7:0a:fe:d0:08:76:9c:88:91: 44:d4:3d:07:a2:c0:08:98:6f:c9:b7:c8:5f:cf:49:0b:39:f1: e3:ae:fd:cc:f5:91:99:71:14:1b:43:0d:a1:ca:83:0a:eb:7f: 85:d5:74:83:14:84:f8:b6:ed:c4:5e:1b:af:52:e3:67:bc:dc: 5a:85:bc:ca:fe:63:89:cd:80:a6:8a:10:00:ae:25:5b:c7:aa: b7:b1:74:6b:4f:e4:69:b1:d0:74:c0:3b:0b:82:23:9e:b2:b3: bb:2c:d1:63 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUbxzBbHjqHZ2VRh+BKvS7PBg7ZZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjE5MDkzNDM2WhcNMjYwNjE4MDkzOTM2 WjAzMTEwLwYDVQQDEygyMjkzRkYxQkEyQjlCMUEzRDYzQUIwMDc1MzUyMzE3M0Ez REMyNjRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjxYKSce5s1u eQPRQ3vTY0FN4vyBAJvj6b8BTb5JGTyXQxQvgWBAWeO19I6RQamd6a35cCa1QAVZ aEqpUwn0vCDVnxwjF8+PSqrWSWlWrj0UH+FnE6U1E1tGnIJ4hgz5aNrqmPguYSnj Nyi64olIe+MeUC3/KFyqlQ9ojDoF3+YMM+NZx4HFVQj6V1EoTDCdHtsGFGpmXy5O OqSMBfDEOuVttJB0JXnGE75DpWDUJZncjJbi22nXwKoH3C9spYFDm6lbRaTbuOlv OvHo2LeNsd+xFHnY4r2dHoUABAKcfBXdMxdOGkFhAkuIcvQPomapQNErVwT7h+F5 tJldjCIzBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKT/xuiubGj1jqwB1NSMXOj 3CZOMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwMTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDKBsAAwQDKBsoAwQDKBv4AwQDKN8Q AwQDKN9QAwQAKN96AwQDKN+4AwQAKN/1MA0GCSqGSIb3DQEBCwUAA4IBAQCLxGdK 7eifszYe+8y4p55J6Z2UGHuwcAVYvs0+xGb2weP6QDbnYoMc+jl6Rq+r1Gan5mVS 6w3ada9iXUS9WXL6jPLOQsgcfLyboWvo0U3iU4Ncw9e28ZHXtgESmnulmR0OKHTC xDRUzPDLMHJKh7IIk+EJtb1kznNYs8lq1pi6yiXZtYekQ0Sgfi4emGhZ2NGwRMFh FbERTpa3Cv7QCHaciJFE1D0HosAImG/Jt8hfz0kLOfHjrv3M9ZGZcRQbQw2hyoMK 63+F1XSDFIT4tu3EXhuvUuNnvNxahbzK/mOJzYCmihAAriVbx6q3sXRrT+RpsdB0 wDsLgiOesrO7LNFj -----END CERTIFICATE-----Generated at Sun Jun 29 13:27:51 2025 by rpki-client