
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
File: AS20454.roa (raw, json)
Hash identifier: Itta6pWaeHyfAiec1Fu1cMb6ychgMcR5z9QaLMjYuQ4=
Subject key identifier: A9:7D:9F:61:90:46:60:35:51:24:52:F4:96:94:42:FB:11:7E:72:93
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 7157361829F7E4948B0B41DC4908E4C043CE8CA9
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
Signing time: Sun 25 Jan 2026 12:42:25 +0000
ROA not before: Sun 25 Jan 2026 12:37:25 +0000
ROA not after: Sun 24 Jan 2027 12:42:25 +0000
asID: 20454
IP address blocks: 66.225.227.0/24 maxlen: 24
205.234.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 19:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:57:36:18:29:f7:e4:94:8b:0b:41:dc:49:08:e4:c0:43:ce:8c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Jan 25 12:37:25 2026 GMT
Not After : Jan 24 12:42:25 2027 GMT
Subject: CN=A97D9F6190466035512452F4969442FB117E7293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:6d:83:cd:71:1e:ac:ad:80:03:94:cd:6a:
31:0a:46:f8:a2:eb:4c:aa:f2:8e:12:4c:37:5d:c7:
e5:2c:a2:43:90:da:ac:9c:92:f4:49:a3:4e:44:1b:
00:fe:c5:ba:91:db:83:93:35:5f:0d:8f:b8:fd:0a:
b5:10:25:90:e6:6d:4e:e2:35:26:90:af:b9:56:20:
af:d2:90:fc:91:87:4b:e5:05:27:a6:58:c6:51:11:
62:78:83:f3:57:4a:7f:5e:72:74:8e:ea:76:ad:93:
d6:55:8c:1b:d7:c8:78:7b:35:9b:88:d5:cc:e5:c5:
1e:ed:e5:b1:41:cb:f9:ce:63:65:df:c7:93:2f:17:
d7:0d:ac:0a:3a:af:69:dd:2d:5a:b4:f3:e6:33:ed:
f3:e9:47:9b:08:57:fe:ca:8e:a4:7d:5c:53:53:68:
55:19:ef:ee:05:cc:b7:9f:36:9b:6a:c6:0c:44:c2:
2e:99:7b:b6:24:9a:c2:a4:92:6f:5d:d3:0a:f6:db:
8d:ec:8d:b1:fb:ed:d4:4d:79:28:f2:aa:a8:0f:24:
f1:2f:d3:53:6c:66:c3:31:2e:a6:de:d5:ca:38:8c:
3f:03:57:de:50:05:43:e9:b7:8e:96:f9:34:ea:e8:
e6:d4:25:a1:15:1f:cc:b2:cd:b9:2b:dc:b0:5e:f7:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:9F:61:90:46:60:35:51:24:52:F4:96:94:42:FB:11:7E:72:93
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.227.0/24
205.234.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:95:b6:c4:07:4e:49:97:6a:5b:b6:ab:b5:15:d5:14:b6:fe:
f3:af:f4:86:c4:aa:d0:ee:11:52:59:8a:82:32:65:99:e8:9f:
35:47:80:0f:a1:52:7c:f0:36:88:af:17:57:97:b2:5e:1e:4d:
4e:19:fd:8f:b1:e2:c3:80:19:42:4c:f1:e8:2b:02:3b:7a:d3:
26:ab:92:31:33:4b:f7:de:22:ed:91:c2:bd:c5:f7:02:8e:2b:
ba:5a:d5:55:bb:63:9e:bc:c0:f3:c4:db:f1:03:4e:b5:a7:e5:
74:8c:0a:89:e1:be:43:fa:78:96:1b:28:b3:39:e6:06:8e:5f:
db:00:d7:e7:2a:cf:e2:b2:25:4b:c6:ad:27:74:0a:f8:b4:c0:
99:45:8f:52:31:fc:99:ab:b9:8d:df:50:e1:76:84:29:e1:f7:
0b:1e:a2:28:c4:f7:cf:47:2d:a1:32:da:39:a6:a8:ef:76:d9:
33:c8:8c:a6:f7:e3:48:0f:bc:66:f0:e3:b0:21:32:bf:d0:7b:
a3:0f:e8:20:f8:67:3b:c7:5e:50:07:86:8a:52:7a:2a:c6:3d:
70:18:4f:6b:46:72:55:f4:1b:4e:7a:3b:3e:45:c3:22:44:9d:
49:9a:1a:f3:1e:c4:bb:57:80:83:3a:ef:61:de:d3:40:1d:de:
2c:b9:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:46:36 2026 by rpki-client