$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa File: AS20115.roa (raw, json) Hash identifier: S2HCbHsG/T5MLWL9gLJHGuM+tK3IGoVXb8Ior509y00= Subject key identifier: BF:A0:77:FE:22:61:A5:E9:50:57:BC:AD:59:ED:65:21:67:4C:CB:13 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 4ED92C32CA2023FCFC45E00F956E0FB963B6CA67 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa Signing time: Fri 29 Aug 2025 15:44:06 +0000 ROA not before: Fri 29 Aug 2025 15:39:06 +0000 ROA not after: Fri 28 Aug 2026 15:44:06 +0000 asID: 20115 IP address blocks: 40.27.0.0/21 maxlen: 24 40.27.40.0/21 maxlen: 24 40.223.122.0/24 maxlen: 24 40.223.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 02:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:2c:32:ca:20:23:fc:fc:45:e0:0f:95:6e:0f:b9:63:b6:ca:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 29 15:39:06 2025 GMT Not After : Aug 28 15:44:06 2026 GMT Subject: CN=BFA077FE2261A5E95057BCAD59ED6521674CCB13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:02:1f:39:89:64:14:bd:93:6d:33:38:6e: 9f:2b:40:e7:bf:66:b4:9c:28:1d:37:80:fb:28:43: c7:b5:96:b0:bd:e2:eb:c7:f7:f7:4f:b5:e6:3b:d3: d0:3e:be:9d:e6:8b:a0:ad:86:04:e2:8f:1c:e7:74: 60:f4:3e:c6:bf:ef:3c:cf:22:e7:21:a3:31:02:c9: 5e:2d:86:50:72:e9:d8:ed:d1:6a:db:e6:d2:41:30: 79:52:b5:9e:1b:5b:2f:a3:a1:94:49:7d:62:ef:b6: f6:7f:ea:a5:9e:ae:94:5c:04:f8:9b:f8:a3:08:eb: 21:33:06:de:0d:0d:68:6e:0d:e6:ea:15:a9:08:e3: 8a:37:19:52:35:02:0d:7d:f2:d2:ff:3f:4d:e0:5b: f0:04:94:ab:5b:33:b9:ae:30:0c:e5:63:bb:2a:55: 7d:37:7c:51:ac:d4:f9:e1:e5:b1:ea:a9:4c:c2:6f: f4:7b:b6:37:27:30:86:7b:ce:a5:50:f4:34:47:5f: 79:e2:0d:d7:89:8b:6f:8c:57:e6:6d:c8:5b:51:c9: 46:8e:c2:5b:4d:74:9c:ac:7f:43:92:ab:a9:c3:1b: ec:bb:70:b4:ef:d5:1d:78:b6:36:5c:15:21:ac:62: bc:51:0b:b9:51:bc:1b:79:4c:54:e3:ea:0b:2c:01: 0d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A0:77:FE:22:61:A5:E9:50:57:BC:AD:59:ED:65:21:67:4C:CB:13 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.0.0/21 40.27.40.0/21 40.223.122.0/24 40.223.245.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:53:4e:3e:54:3d:fd:b6:9c:1d:23:ef:9b:4d:14:f4:3c:27: fb:18:c1:02:f0:e3:65:c5:d4:d6:11:67:25:b9:06:50:3f:a2: 0d:d6:50:d6:bb:27:53:82:d1:f3:32:54:12:18:15:70:7d:57: 05:25:29:49:24:36:3b:f4:23:17:a7:42:26:cf:39:7a:58:db: f6:cf:af:7d:0c:26:f8:de:c7:bf:3d:7a:40:55:77:c6:0c:20: de:7e:f3:57:f6:77:2b:cc:7b:1a:bc:ab:60:39:a2:d5:3f:83: 3d:fa:2c:21:a6:66:b6:b4:da:bb:be:a7:cd:54:44:3d:92:ec: ae:8e:5a:70:75:8a:07:fa:7c:a1:a2:d7:cb:f4:c6:a7:92:98: 02:9f:75:1c:96:93:d4:69:52:e3:85:e9:c3:fd:b7:b1:71:06: 73:95:95:30:43:59:ce:27:57:56:5a:5c:d0:62:04:ec:4b:2e: a2:c5:8d:5d:63:19:c5:8b:68:fc:01:c1:e4:7c:7f:8c:23:67: 4e:dc:06:fd:65:7a:01:25:42:44:e9:54:50:4e:98:74:ca:49: 53:61:30:6b:8f:6d:45:a9:f8:ff:10:c0:36:a4:15:07:16:e6: d9:b0:2b:9a:54:4b:47:6a:bf:39:3f:3c:c9:a3:ec:94:a9:be: d4:57:ea:a0 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUTtksMsogI/z8ReAPlW4PuWO2ymcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODI5MTUzOTA2WhcNMjYwODI4MTU0NDA2 WjAzMTEwLwYDVQQDEyhCRkEwNzdGRTIyNjFBNUU5NTA1N0JDQUQ1OUVENjUyMTY3 NENDQjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2ECHzmJZBS9 k20zOG6fK0Dnv2a0nCgdN4D7KEPHtZawveLrx/f3T7XmO9PQPr6d5ougrYYE4o8c 53Rg9D7Gv+88zyLnIaMxAsleLYZQcunY7dFq2+bSQTB5UrWeG1svo6GUSX1i77b2 f+qlnq6UXAT4m/ijCOshMwbeDQ1obg3m6hWpCOOKNxlSNQINffLS/z9N4FvwBJSr WzO5rjAM5WO7KlV9N3xRrNT54eWx6qlMwm/0e7Y3JzCGe86lUPQ0R1954g3XiYtv jFfmbchbUclGjsJbTXScrH9Dkqupwxvsu3C079UdeLY2XBUhrGK8UQu5UbwbeUxU 4+oLLAENOQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFL+gd/4iYaXpUFe8rVntZSFn TMsTMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwMTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDKBsAAwQDKBsoAwQAKN96AwQAKN/1 MA0GCSqGSIb3DQEBCwUAA4IBAQA6U04+VD39tpwdI++bTRT0PCf7GMEC8ONlxdTW EWcluQZQP6IN1lDWuydTgtHzMlQSGBVwfVcFJSlJJDY79CMXp0Imzzl6WNv2z699 DCb43se/PXpAVXfGDCDefvNX9ncrzHsavKtgOaLVP4M9+iwhpma2tNq7vqfNVEQ9 kuyujlpwdYoH+nyhotfL9MankpgCn3UclpPUaVLjhenD/bexcQZzlZUwQ1nOJ1dW WlzQYgTsSy6ixY1dYxnFi2j8AcHkfH+MI2dO3Ab9ZXoBJUJE6VRQTph0yklTYTBr j21Fqfj/EMA2pBUHFubZsCuaVEtHar85PzzJo+yUqb7UV+qg -----END CERTIFICATE-----Generated at Sat Sep 6 12:19:56 2025 by rpki-client