$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20648.roa File: AS20648.roa (raw, json) Hash identifier: SiVGZGgjnvS8IuPFtVI0YzoN3+t1Y0wPSFHWBuTW1LU= Subject key identifier: 84:3E:AE:09:62:97:9F:D2:8E:5D:97:FB:FB:75:08:43:A6:9A:97:F1 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 41BBFDAC38766F597AE94A1DF215DF74BB2A0C53 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20648.roa Signing time: Tue 23 Sep 2025 08:28:18 +0000 ROA not before: Tue 23 Sep 2025 08:23:18 +0000 ROA not after: Tue 22 Sep 2026 08:28:18 +0000 asID: 20648 IP address blocks: 40.223.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 13:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bb:fd:ac:38:76:6f:59:7a:e9:4a:1d:f2:15:df:74:bb:2a:0c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 23 08:23:18 2025 GMT Not After : Sep 22 08:28:18 2026 GMT Subject: CN=843EAE0962979FD28E5D97FBFB750843A69A97F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:8b:2d:0f:93:8b:0f:21:7c:ab:50:7e:c1: c1:bc:ce:1b:0c:7a:fb:a8:1b:11:a9:ea:ef:8b:5e: ea:c0:50:30:98:41:0c:1b:fe:46:73:7a:a6:7a:cf: 56:bb:92:0e:a2:2a:bf:32:df:dd:fb:cb:9d:8c:68: 89:62:8f:ce:68:25:70:fb:1e:bb:15:58:34:11:4f: be:6c:43:f8:1a:79:37:2d:ae:cb:52:c2:26:8d:1c: df:85:d9:c8:a9:29:0c:80:ba:bb:e7:4d:10:c3:05: 73:c1:80:08:47:6b:5f:43:bc:43:61:30:8b:6d:94: 99:5d:34:ca:a8:32:36:eb:af:43:07:c9:26:4c:95: cd:27:fc:ea:5d:08:ca:5e:4b:b0:53:39:cb:69:34: c0:71:e2:68:d3:76:e0:66:96:60:1b:98:ae:5b:40: ad:43:4a:2d:5c:e9:fb:81:0d:d8:09:fb:c1:00:b4: e4:b1:00:dc:0b:42:fe:6f:57:bb:89:9f:c4:04:1c: 97:97:bc:5e:a0:44:11:fe:db:a8:da:31:b7:57:21: de:72:12:04:85:11:eb:1b:f0:29:ab:5d:5b:96:c1: 83:22:d7:c9:3e:8e:8d:d4:e9:cf:06:1d:07:82:21: 11:f1:54:cb:15:cb:fc:33:b7:2d:9d:f5:17:e5:f1: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3E:AE:09:62:97:9F:D2:8E:5D:97:FB:FB:75:08:43:A6:9A:97:F1 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.4.0/24 Signature Algorithm: sha256WithRSAEncryption a3:b3:c2:a5:c5:01:ad:f4:69:00:53:1d:c8:89:21:c9:2f:66: da:9e:4a:62:5d:a3:ae:6a:6b:27:f6:0f:bd:c6:13:c7:1f:04: 5f:59:1e:69:bb:36:b2:c0:89:e9:15:73:7f:24:01:bc:74:cf: d7:37:a5:7d:ec:e3:c9:67:f1:9e:1b:12:1d:29:d4:15:3c:e2: 19:30:04:73:d9:bd:2e:27:86:aa:08:df:76:d5:5e:21:b9:75: 5b:d3:fd:75:2f:e4:4b:20:9c:b9:4c:0a:40:7a:2a:86:54:bb: 3b:35:06:9f:c5:70:59:6b:d4:b3:d0:8c:ef:8e:72:5e:9e:71: c7:83:14:db:75:b5:2d:97:ab:85:3e:84:a6:5f:7e:34:7a:be: 4f:08:a9:b0:70:f3:8e:48:be:94:2c:22:6b:c9:e9:bf:a9:4d: 04:54:66:eb:44:9e:a7:44:06:a6:fb:41:bc:5f:49:d4:13:b9: 03:e6:33:89:4f:7d:2b:0a:de:84:17:55:fe:85:5e:2d:d5:e1: 3b:c1:4a:dd:9d:fb:3e:1f:a0:76:15:79:56:dc:da:f6:ea:60: ee:f8:0d:77:22:61:2f:07:94:84:d5:5a:06:2a:0a:84:5b:bf: 95:22:e0:2a:ae:a4:0a:0f:d4:72:70:47:f9:82:34:61:ed:cc: 8e:64:5f:c9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUQbv9rDh2b1l66Uod8hXfdLsqDFMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwOTIzMDgyMzE4WhcNMjYwOTIyMDgyODE4 WjAzMTEwLwYDVQQDEyg4NDNFQUUwOTYyOTc5RkQyOEU1RDk3RkJGQjc1MDg0M0E2 OUE5N0YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/mLLQ+Tiw8h fKtQfsHBvM4bDHr7qBsRqervi17qwFAwmEEMG/5Gc3qmes9Wu5IOoiq/Mt/d+8ud jGiJYo/OaCVw+x67FVg0EU++bEP4Gnk3La7LUsImjRzfhdnIqSkMgLq7500QwwVz wYAIR2tfQ7xDYTCLbZSZXTTKqDI2669DB8kmTJXNJ/zqXQjKXkuwUznLaTTAceJo 03bgZpZgG5iuW0CtQ0otXOn7gQ3YCfvBALTksQDcC0L+b1e7iZ/EBByXl7xeoEQR /tuo2jG3VyHechIEhRHrG/Apq11blsGDItfJPo6N1OnPBh0HgiER8VTLFcv8M7ct nfUX5fERnwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIQ+rglil5/Sjl2X+/t1CEOm mpfxMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwNjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKN8EMA0GCSqGSIb3DQEBCwUAA4IB AQCjs8KlxQGt9GkAUx3IiSHJL2bankpiXaOuamsn9g+9xhPHHwRfWR5puzaywInp FXN/JAG8dM/XN6V97OPJZ/GeGxIdKdQVPOIZMARz2b0uJ4aqCN921V4huXVb0/11 L+RLIJy5TApAeiqGVLs7NQafxXBZa9Sz0IzvjnJennHHgxTbdbUtl6uFPoSmX340 er5PCKmwcPOOSL6ULCJryem/qU0EVGbrRJ6nRAam+0G8X0nUE7kD5jOJT30rCt6E F1X+hV4t1eE7wUrdnfs+H6B2FXlW3Nr26mDu+A13ImEvB5SE1VoGKgqEW7+VIuAq rqQKD9RycEf5gjRh7cyOZF/J -----END CERTIFICATE-----Generated at Sun Oct 19 20:04:35 2025 by rpki-client