$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20001.roa File: AS20001.roa (raw, json) Hash identifier: 8T61HmLdiEdTr/6JCwdi3dKevfcEmEWEVfHxhMCslOk= Subject key identifier: BD:56:BB:0E:F7:C0:45:53:22:BA:CE:09:09:92:CD:35:A3:66:0D:26 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 17E456950D1511F28C763525709F2755AD78842C Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20001.roa Signing time: Thu 21 May 2026 10:36:00 +0000 ROA not before: Thu 21 May 2026 10:31:00 +0000 ROA not after: Thu 20 May 2027 10:36:00 +0000 asID: 20001 IP address blocks: 40.183.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 16:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e4:56:95:0d:15:11:f2:8c:76:35:25:70:9f:27:55:ad:78:84:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: May 21 10:31:00 2026 GMT Not After : May 20 10:36:00 2027 GMT Subject: CN=BD56BB0EF7C0455322BACE090992CD35A3660D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:5c:d5:2e:7d:63:ae:1b:c2:a5:fe:18:51: e7:09:0a:7a:1b:ec:60:ee:5c:8a:91:64:ea:1d:0b: c2:fd:11:2f:13:19:f5:7a:f3:83:d6:7a:b7:00:8d: b8:ea:ad:cb:92:80:e7:66:0e:3b:bb:cf:4e:ef:6a: 1f:65:37:e2:50:11:37:df:68:e8:79:d0:db:45:37: 04:4f:dc:53:b7:ce:52:7f:2c:0a:d9:d2:67:3e:4f: 2f:d4:a8:a4:7a:31:21:96:1f:9d:72:a6:ef:a0:5f: ef:f0:af:da:b4:d2:e0:70:a4:55:f8:52:76:67:72: 50:08:ff:d4:1e:cc:4a:c5:f0:33:a0:66:03:13:f1: 98:f6:52:a4:07:cb:58:d2:06:42:10:91:e2:40:a3: a4:06:26:43:eb:31:95:6b:bd:83:25:38:64:5f:cf: 30:05:dc:88:d9:31:3e:4f:59:5c:b6:11:32:d6:3a: 77:98:85:00:82:0b:45:64:6a:8a:14:fa:c6:92:16: 26:64:d3:e2:56:08:52:fb:91:ac:be:d9:15:a3:18: 4c:a5:ba:bf:08:84:ac:90:35:84:2e:7a:0f:61:2d: 5e:72:83:00:cb:bf:68:78:1a:30:8a:25:f5:31:8c: 5f:2f:81:23:f9:b5:4d:7d:d7:22:d3:79:67:8c:31: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:56:BB:0E:F7:C0:45:53:22:BA:CE:09:09:92:CD:35:A3:66:0D:26 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.128.0/21 Signature Algorithm: sha256WithRSAEncryption 19:81:d4:a9:01:e9:39:8a:42:28:ed:5d:21:a1:5c:de:83:38: f6:82:65:52:74:87:8b:6b:45:27:60:59:46:08:87:ae:b3:52: 36:39:a2:22:db:e3:89:59:45:42:1e:94:d9:61:9a:ab:ae:b7: 28:c5:7d:bd:3c:a7:98:ab:38:a3:6c:d6:79:f0:49:ab:ac:f2: 86:97:f7:d3:b9:bb:20:b2:eb:09:8e:c3:b4:fb:84:cf:38:94: 5a:57:40:19:60:ee:7c:77:9b:2a:aa:8d:12:98:89:f3:38:bd: a8:4e:57:e7:2a:56:73:0c:bd:a7:f0:43:7a:5d:93:89:7b:8a: 0e:9f:68:ed:3a:d0:d4:91:28:0e:bc:b9:f7:b1:5b:4b:57:ef: 73:e8:5b:2e:3f:e9:c2:23:a1:bd:c8:9c:7b:95:0e:5a:e4:ba: bd:0a:1e:3f:ce:c8:fc:d6:58:30:66:a0:94:01:2b:a1:3d:d3: dc:6a:92:b6:6a:e8:4a:be:10:a0:f0:56:e0:ee:0f:e1:eb:49: c3:d3:2b:ca:aa:55:a8:35:4d:ff:19:50:85:b3:9f:c8:e1:66: ff:9b:cc:48:c7:63:d4:9e:ce:f1:90:87:dc:d8:b6:7d:3d:b7: f3:21:f8:d3:ee:8c:c2:36:7d:f5:dc:fc:ae:05:c8:6d:ae:1f: ca:81:98:29 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUF+RWlQ0VEfKMdjUlcJ8nVa14hCwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNTIxMTAzMTAwWhcNMjcwNTIwMTAzNjAw WjAzMTEwLwYDVQQDEyhCRDU2QkIwRUY3QzA0NTUzMjJCQUNFMDkwOTkyQ0QzNUEz NjYwRDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wtc1S59Y64b wqX+GFHnCQp6G+xg7lyKkWTqHQvC/REvExn1evOD1nq3AI246q3LkoDnZg47u89O 72ofZTfiUBE332joedDbRTcET9xTt85SfywK2dJnPk8v1KikejEhlh+dcqbvoF/v 8K/atNLgcKRV+FJ2Z3JQCP/UHsxKxfAzoGYDE/GY9lKkB8tY0gZCEJHiQKOkBiZD 6zGVa72DJThkX88wBdyI2TE+T1lcthEy1jp3mIUAggtFZGqKFPrGkhYmZNPiVghS +5GsvtkVoxhMpbq/CISskDWELnoPYS1ecoMAy79oeBowiiX1MYxfL4Ej+bVNfdci 03lnjDEz9wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFL1Wuw73wEVTIrrOCQmSzTWj Zg0mMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKLeAMA0GCSqGSIb3DQEBCwUAA4IB AQAZgdSpAek5ikIo7V0hoVzegzj2gmVSdIeLa0UnYFlGCIeus1I2OaIi2+OJWUVC HpTZYZqrrrcoxX29PKeYqzijbNZ58EmrrPKGl/fTubsgsusJjsO0+4TPOJRaV0AZ YO58d5sqqo0SmInzOL2oTlfnKlZzDL2n8EN6XZOJe4oOn2jtOtDUkSgOvLn3sVtL V+9z6FsuP+nCI6G9yJx7lQ5a5Lq9Ch4/zsj81lgwZqCUASuhPdPcapK2auhKvhCg 8Fbg7g/h60nD0yvKqlWoNU3/GVCFs5/I4Wb/m8xIx2PUns7xkIfc2LZ9PbfzIfjT 7ozCNn313PyuBchtrh/KgZgp -----END CERTIFICATE-----Generated at Sat Jun 13 08:25:54 2026 by rpki-client