$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: pE1jDObTKC54vvltOoSBgPLVd3nbVt6TxPymJ4ln1tg= Subject key identifier: 3B:CC:65:6D:DF:54:7C:AC:25:52:85:29:73:68:1B:E8:71:5D:6C:55 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 065F6202B90D6A6BF776C5AAB7BE74ECB3A39925 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa Signing time: Mon 26 Jan 2026 11:50:47 +0000 ROA not before: Mon 26 Jan 2026 11:45:47 +0000 ROA not after: Mon 25 Jan 2027 11:50:47 +0000 asID: 20001 IP address blocks: 140.99.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5f:62:02:b9:0d:6a:6b:f7:76:c5:aa:b7:be:74:ec:b3:a3:99:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jan 26 11:45:47 2026 GMT Not After : Jan 25 11:50:47 2027 GMT Subject: CN=3BCC656DDF547CAC2552852973681BE8715D6C55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:97:1e:fb:27:af:56:7c:f1:46:8a:d8:bf: 27:a2:39:0e:d7:ee:07:96:61:ba:ba:7e:71:25:5e: a1:27:22:6b:68:94:fb:d4:38:7c:21:d1:6e:23:c6: 33:01:f0:07:12:f3:cd:d2:75:3d:0f:27:d6:48:73: da:31:3c:8e:8c:fe:63:0e:fe:c6:c3:71:f3:bc:bf: 56:4f:9e:75:b7:d2:3f:6c:27:bd:d4:06:29:77:d0: cf:17:0c:f5:31:0e:e5:95:e3:e9:99:7c:58:22:7d: 13:6b:6e:ea:d8:c4:03:04:24:f1:65:23:f0:7b:a2: e5:7c:d9:14:b7:80:c4:80:f1:b9:a2:58:16:15:46: a2:9d:89:65:1d:15:b9:ae:04:0f:3f:43:52:6d:bd: 07:ad:3a:7f:f3:09:83:b3:f4:6b:41:3c:3a:61:ef: d8:56:5a:ff:8e:75:ae:f7:2b:f9:c8:17:3d:be:cc: 57:34:35:d5:85:39:68:e2:dc:30:be:d8:d8:e6:02: 88:01:3a:1c:e1:e1:ef:6d:10:54:a7:ca:75:f4:ca: 21:2d:3d:36:8c:2e:af:ad:01:0e:53:51:3a:ec:64: 29:c2:6c:26:e8:ca:a1:0e:fe:49:8a:19:1a:48:f8: 76:17:30:35:0e:1a:95:27:c3:85:18:76:bd:ee:c4: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CC:65:6D:DF:54:7C:AC:25:52:85:29:73:68:1B:E8:71:5D:6C:55 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.43.0/24 Signature Algorithm: sha256WithRSAEncryption 80:73:8d:73:53:77:24:36:4f:e8:a0:5c:ae:14:d0:86:2a:ab: 17:1b:35:2d:7b:e7:0c:94:ac:34:5f:00:3a:02:6b:37:59:5e: 9f:67:48:86:58:be:12:8c:ba:48:f8:98:8d:fa:21:06:d1:6b: 39:16:77:da:56:a3:45:16:88:d5:cd:89:b1:e1:21:85:d1:80: a7:1a:2c:47:1c:a7:37:5d:4b:43:19:29:29:0c:19:16:9b:3d: 9d:bc:5e:d6:40:a2:02:71:87:a1:7b:88:ec:08:39:26:c3:23: 19:2a:b4:a1:e1:10:dd:ee:1d:4c:d5:c4:cf:50:2d:5b:1d:f9: 91:98:91:1f:ab:dd:69:88:31:de:05:ce:ed:7b:ae:ff:13:bb: 93:fd:9b:f1:4f:31:aa:ca:87:33:37:c1:5a:5a:9b:e4:51:dd: db:db:a6:fa:b3:50:7b:f6:4f:b8:b4:f3:94:fe:07:16:da:19: de:aa:b0:2b:70:c0:76:05:24:77:2b:d3:2b:7c:71:82:80:6f: 9a:31:c6:b5:99:4b:30:82:ca:96:35:97:df:dd:50:34:fb:22: ba:eb:96:e2:cf:57:57:34:89:ae:27:55:ec:b0:77:24:fe:80: 3a:37:e6:c6:cb:7f:d3:2e:48:a3:cb:6f:b4:51:03:d2:02:6b: ab:20:f5:f8 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUBl9iArkNamv3dsWqt7507LOjmSUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjYwMTI2MTE0NTQ3WhcNMjcwMTI1MTE1MDQ3 WjAzMTEwLwYDVQQDEygzQkNDNjU2RERGNTQ3Q0FDMjU1Mjg1Mjk3MzY4MUJFODcx NUQ2QzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaSXHvsnr1Z8 8UaK2L8nojkO1+4HlmG6un5xJV6hJyJraJT71Dh8IdFuI8YzAfAHEvPN0nU9DyfW SHPaMTyOjP5jDv7Gw3HzvL9WT551t9I/bCe91AYpd9DPFwz1MQ7llePpmXxYIn0T a27q2MQDBCTxZSPwe6LlfNkUt4DEgPG5olgWFUainYllHRW5rgQPP0NSbb0HrTp/ 8wmDs/RrQTw6Ye/YVlr/jnWu9yv5yBc9vsxXNDXVhTlo4twwvtjY5gKIAToc4eHv bRBUp8p19MohLT02jC6vrQEOU1E67GQpwmwm6MqhDv5JihkaSPh2FzA1DhqVJ8OF GHa97sSi0wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDvMZW3fVHysJVKFKXNoG+hx XWxVMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGMrMA0GCSqGSIb3DQEBCwUAA4IB AQCAc41zU3ckNk/ooFyuFNCGKqsXGzUte+cMlKw0XwA6Ams3WV6fZ0iGWL4SjLpI +JiN+iEG0Ws5FnfaVqNFFojVzYmx4SGF0YCnGixHHKc3XUtDGSkpDBkWmz2dvF7W QKICcYehe4jsCDkmwyMZKrSh4RDd7h1M1cTPUC1bHfmRmJEfq91piDHeBc7te67/ E7uT/ZvxTzGqyoczN8FaWpvkUd3b26b6s1B79k+4tPOU/gcW2hneqrArcMB2BSR3 K9MrfHGCgG+aMca1mUswgsqWNZff3VA0+yK665biz1dXNImuJ1XssHck/oA6N+bG y3/TLkijy2+0UQPSAmurIPX4 -----END CERTIFICATE-----Generated at Mon Mar 2 04:25:56 2026 by rpki-client