$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa File: AS20454.roa (raw, json) Hash identifier: TlcYFDsYs+aCF9LB88ArFysjPjkqdPtqUuOM/O/MJc0= Subject key identifier: 97:2F:1E:17:4E:1F:1D:29:E3:6A:C6:CF:8E:25:00:CF:20:7A:F2:1C Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 586AC513AE38236BB70F8D7D107D1A9281A5C658 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa Signing time: Thu 02 Oct 2025 10:12:43 +0000 ROA not before: Thu 02 Oct 2025 10:07:43 +0000 ROA not after: Thu 01 Oct 2026 10:12:43 +0000 asID: 20454 IP address blocks: 66.225.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6a:c5:13:ae:38:23:6b:b7:0f:8d:7d:10:7d:1a:92:81:a5:c6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Oct 2 10:07:43 2025 GMT Not After : Oct 1 10:12:43 2026 GMT Subject: CN=972F1E174E1F1D29E36AC6CF8E2500CF207AF21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:cc:53:b4:d0:ed:d9:ec:00:5a:d1:93:40: bd:dc:cb:bb:85:57:c0:b9:98:2d:81:07:b2:eb:41: 3d:7d:c2:7f:a9:1d:d8:0b:a7:a8:94:8d:19:9b:38: 82:0b:8b:03:aa:38:69:05:ad:9e:f6:cb:d5:40:20: f9:c1:20:ec:d3:f6:89:da:c0:b3:ad:cf:1e:f9:9c: 23:42:78:1c:e7:f2:c8:f7:a6:76:2c:27:76:55:f2: 81:50:8a:76:4a:cc:05:03:49:63:db:4c:42:12:2b: 80:94:71:7c:e9:e1:b8:27:09:b7:14:f6:8f:97:86: 9d:d3:54:12:33:88:17:3b:d9:d7:72:f2:04:ef:31: 11:e9:52:56:db:da:16:ea:0b:b0:68:46:ad:25:b8: 9a:bf:91:aa:33:e3:46:23:b9:e1:9c:1b:98:6a:00: 5e:53:f3:91:61:76:48:e7:7a:7a:ad:13:a6:ff:c4: af:6b:75:90:65:df:db:2d:c5:73:dc:bd:21:af:5a: 71:ac:15:4e:04:d7:2c:6c:7a:e2:af:90:2b:c9:91: 8d:7a:1c:16:8d:d4:ee:c4:4f:13:65:22:08:34:21: 18:99:be:af:d1:0a:70:38:b4:1c:ff:85:54:b8:0e: 75:a4:54:a6:b3:c1:22:66:89:a6:43:51:ad:bd:37: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2F:1E:17:4E:1F:1D:29:E3:6A:C6:CF:8E:25:00:CF:20:7A:F2:1C X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.225.227.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:98:3e:93:a0:fb:0c:27:61:5c:75:26:60:04:53:59:3f:cf: 4e:2d:08:57:45:43:e1:bf:e3:45:96:27:fb:c7:f9:f6:c7:c1: fc:2d:c3:30:0e:17:f4:42:f3:7d:1e:3c:3e:a3:a5:92:0f:b1: bc:76:f8:c4:67:98:00:70:85:d1:f1:1c:d0:18:47:42:95:b2: 29:62:88:7f:90:1d:96:91:81:0e:24:ba:d4:1b:7d:cf:1a:07: 9b:c0:23:41:2b:e3:31:f7:eb:b3:48:21:e4:8a:30:09:df:e7: 61:53:2f:02:4b:03:e9:aa:3e:cf:32:46:3f:b1:58:20:9d:c5: fb:6e:ee:20:16:70:e0:c4:66:44:a6:2a:90:18:b3:ac:e7:4d: f2:aa:13:5d:fb:ee:ba:42:47:9e:13:86:8e:82:77:f6:16:2e: 24:d2:6f:74:2a:92:2e:8a:95:9e:f3:3f:aa:37:df:32:24:95: ef:0a:09:79:0a:3c:6d:fe:19:49:db:68:28:23:63:5f:d2:39: 99:83:2b:42:51:1a:02:e4:9a:91:35:fa:c8:52:49:fb:47:19: 50:79:0f:df:58:e8:e9:aa:06:13:04:cf:30:9b:c8:80:e3:f2: 7e:71:02:e0:0d:42:f9:49:0d:f2:6d:7d:40:23:11:50:b5:b7: be:92:6a:7b -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUWGrFE644I2u3D419EH0akoGlxlgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUxMDAyMTAwNzQzWhcNMjYxMDAxMTAxMjQz WjAzMTEwLwYDVQQDEyg5NzJGMUUxNzRFMUYxRDI5RTM2QUM2Q0Y4RTI1MDBDRjIw N0FGMjFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthzMU7TQ7dns AFrRk0C93Mu7hVfAuZgtgQey60E9fcJ/qR3YC6eolI0ZmziCC4sDqjhpBa2e9svV QCD5wSDs0/aJ2sCzrc8e+ZwjQngc5/LI96Z2LCd2VfKBUIp2SswFA0lj20xCEiuA lHF86eG4Jwm3FPaPl4ad01QSM4gXO9nXcvIE7zER6VJW29oW6guwaEatJbiav5Gq M+NGI7nhnBuYagBeU/ORYXZI53p6rROm/8Sva3WQZd/bLcVz3L0hr1pxrBVOBNcs bHrir5AryZGNehwWjdTuxE8TZSIINCEYmb6v0QpwOLQc/4VUuA51pFSms8EiZomm Q1GtvTfoiQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJcvHhdOHx0p42rGz44lAM8g evIcMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzIwNDU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQuHjMA0GCSqGSIb3DQEBCwUAA4IB AQArmD6ToPsMJ2FcdSZgBFNZP89OLQhXRUPhv+NFlif7x/n2x8H8LcMwDhf0QvN9 Hjw+o6WSD7G8dvjEZ5gAcIXR8RzQGEdClbIpYoh/kB2WkYEOJLrUG33PGgebwCNB K+Mx9+uzSCHkijAJ3+dhUy8CSwPpqj7PMkY/sVggncX7bu4gFnDgxGZEpiqQGLOs 503yqhNd++66QkeeE4aOgnf2Fi4k0m90KpIuipWe8z+qN98yJJXvCgl5Cjxt/hlJ 22goI2Nf0jmZgytCURoC5JqRNfrIUkn7RxlQeQ/fWOjpqgYTBM8wm8iA4/J+cQLg DUL5SQ3ybX1AIxFQtbe+kmp7 -----END CERTIFICATE-----Generated at Mon Oct 20 01:07:45 2025 by rpki-client