$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20648.roa File: AS20648.roa (raw, json) Hash identifier: 8kStELRDwOQZvRoxYzrZBJWhyOl6/dSesgZazkL9ev8= Subject key identifier: C2:25:97:C7:63:3C:EC:99:B4:0D:12:09:62:FD:AF:AC:6A:86:08:C7 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6DFB219EABA04A59A1D15A49714755127EF63CCC Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20648.roa Signing time: Tue 25 Aug 2026 08:36:20 +0000 ROA not before: Tue 25 Aug 2026 08:31:20 +0000 ROA not after: Tue 24 Aug 2027 08:36:20 +0000 asID: 20648 IP address blocks: 40.223.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 10:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fb:21:9e:ab:a0:4a:59:a1:d1:5a:49:71:47:55:12:7e:f6:3c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 25 08:31:20 2026 GMT Not After : Aug 24 08:36:20 2027 GMT Subject: CN=C22597C7633CEC99B40D120962FDAFAC6A8608C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:b0:6f:37:0e:76:91:69:cb:47:89:68:28: 5c:d9:e3:72:91:1f:a5:c8:5e:48:de:64:b3:a2:8a: cd:8d:39:ef:9d:7c:1f:3d:27:c1:a7:27:f0:f6:56: ab:06:83:fe:ac:51:da:b8:66:f8:e5:59:c9:09:e8: 4b:39:63:00:03:d5:f5:f7:16:30:92:17:6c:43:64: 48:ef:51:30:6d:ad:fc:88:f0:e8:b1:77:92:43:0d: 8c:95:94:1e:f8:5a:a7:d5:8a:c4:64:bd:a7:b8:8f: f1:d2:3c:4d:7d:41:84:cc:90:c6:d8:4c:5c:5c:4c: f9:a8:7f:37:37:85:5a:db:a5:a9:47:8a:09:10:8f: c3:8a:24:35:bb:01:e7:ab:8a:09:a2:b7:cf:b1:74: 9e:0a:97:0c:d5:02:f6:c7:c1:f0:0c:a3:e9:e4:cb: 9b:6e:5d:72:4d:d9:aa:8c:4c:70:b4:5f:8b:72:5a: c6:fb:80:4c:fc:28:99:69:79:3f:33:99:fa:f6:f7: 7c:74:b0:1b:16:06:0e:29:f0:50:3d:75:01:3d:05: c2:42:dc:aa:19:69:cf:c3:26:e4:04:ee:44:fa:04: 05:91:2a:84:e2:8a:8d:f3:50:b7:3c:9d:e9:24:97: b6:75:e6:90:be:23:49:45:96:6d:84:11:e7:f5:64: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:25:97:C7:63:3C:EC:99:B4:0D:12:09:62:FD:AF:AC:6A:86:08:C7 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.4.0/24 Signature Algorithm: sha256WithRSAEncryption 28:72:64:04:04:dc:8e:21:db:4d:ff:1b:97:69:3a:21:7a:c8: 11:ba:0a:f4:db:98:dc:c7:37:52:6e:12:7a:02:dd:1d:20:56: d4:59:33:9b:7a:e2:6a:d1:b7:55:84:20:ca:92:4f:78:69:a4: 93:87:f2:a0:ff:0c:41:f2:43:c8:26:9b:80:95:5c:20:33:c9: 00:2f:1b:f0:7f:5b:56:2c:d3:8a:07:76:cd:5c:2b:f3:63:40: 09:8b:e4:c8:7f:32:64:78:97:c5:17:c1:0d:75:37:93:1f:be: 06:67:fd:57:f4:5d:16:a2:22:b7:5c:85:5d:e9:64:7d:1b:5c: 73:2e:d1:72:4d:62:17:8f:2d:65:50:19:b8:da:cc:76:c6:1f: a1:2d:6a:b0:1f:3d:46:01:6f:69:1f:5a:9f:1e:68:c6:ef:e6: 06:10:10:31:f9:71:7f:7f:1c:b4:cf:2a:9e:a6:a9:f3:f8:a8: 08:7a:07:cc:91:91:59:e8:2f:f7:4b:b5:6b:15:50:25:e9:63: 60:9c:a6:3c:af:8e:74:08:52:8d:a7:76:53:32:fd:e0:06:9f: d9:ee:af:60:d7:85:5c:c4:6b:98:81:6a:89:48:34:29:38:4d: 4f:be:e6:6c:76:86:d9:ce:5a:af:93:92:84:2c:56:15:7b:f5: 09:9b:8c:5f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUbfshnqugSlmh0VpJcUdVEn72PMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODI1MDgzMTIwWhcNMjcwODI0MDgzNjIw WjAzMTEwLwYDVQQDEyhDMjI1OTdDNzYzM0NFQzk5QjQwRDEyMDk2MkZEQUZBQzZB ODYwOEM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAGwbzcOdpFp y0eJaChc2eNykR+lyF5I3mSzoorNjTnvnXwfPSfBpyfw9larBoP+rFHauGb45VnJ CehLOWMAA9X19xYwkhdsQ2RI71Ewba38iPDosXeSQw2MlZQe+Fqn1YrEZL2nuI/x 0jxNfUGEzJDG2ExcXEz5qH83N4Va26WpR4oJEI/DiiQ1uwHnq4oJorfPsXSeCpcM 1QL2x8HwDKPp5Mubbl1yTdmqjExwtF+LclrG+4BM/CiZaXk/M5n69vd8dLAbFgYO KfBQPXUBPQXCQtyqGWnPwybkBO5E+gQFkSqE4oqN81C3PJ3pJJe2deaQviNJRZZt hBHn9WSqkQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFMIll8djPOyZtA0SCWL9r6xq hgjHMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwNjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKN8EMA0GCSqGSIb3DQEBCwUAA4IB AQAocmQEBNyOIdtN/xuXaTohesgRugr025jcxzdSbhJ6At0dIFbUWTObeuJq0bdV hCDKkk94aaSTh/Kg/wxB8kPIJpuAlVwgM8kALxvwf1tWLNOKB3bNXCvzY0AJi+TI fzJkeJfFF8ENdTeTH74GZ/1X9F0WoiK3XIVd6WR9G1xzLtFyTWIXjy1lUBm42sx2 xh+hLWqwHz1GAW9pH1qfHmjG7+YGEBAx+XF/fxy0zyqepqnz+KgIegfMkZFZ6C/3 S7VrFVAl6WNgnKY8r450CFKNp3ZTMv3gBp/Z7q9g14VcxGuYgWqJSDQpOE1PvuZs dobZzlqvk5KELFYVe/UJm4xf -----END CERTIFICATE-----Generated at Fri Sep 4 20:56:00 2026 by rpki-client