$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: nYiaraIDcNzOPrU8dJblqsw9AmiKIx1NKilv8M+d0Tc= Subject key identifier: 3B:C2:33:B3:18:D8:EC:E2:69:42:90:85:65:AC:50:E2:71:07:83:10 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 3353156B5B76AEE74F04C0D4C19FAEBE124816F3 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa Signing time: Sun 04 Oct 2026 12:34:37 +0000 ROA not before: Sun 04 Oct 2026 12:29:37 +0000 ROA not after: Sun 03 Oct 2027 12:34:37 +0000 asID: 20473 IP address blocks: 104.234.150.0/24 maxlen: 24 104.234.168.0/24 maxlen: 24 104.234.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 14:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:53:15:6b:5b:76:ae:e7:4f:04:c0:d4:c1:9f:ae:be:12:48:16:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 4 12:29:37 2026 GMT Not After : Oct 3 12:34:37 2027 GMT Subject: CN=3BC233B318D8ECE26942908565AC50E271078310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:a7:b0:80:1d:d1:f9:99:cb:a9:8f:6c:63: 8c:dc:c8:c0:ac:ed:04:01:1f:0f:3b:1f:33:d2:c7: 36:7a:88:ba:ad:85:53:80:57:73:39:e2:5a:cb:ef: be:60:05:7f:a3:9b:36:ee:48:3e:96:c2:de:15:c7: 46:29:1f:52:ef:b5:a8:c8:c0:f1:71:69:21:32:26: b8:f1:70:9c:b3:45:c0:e1:1f:25:0a:db:ac:cb:f4: ee:3e:b1:7e:3a:6b:3a:f3:5f:bc:cd:5c:3b:92:aa: ba:65:b1:6f:17:85:f3:b1:3f:31:b5:bd:8d:fe:d8: 34:0c:86:dc:48:8b:ba:c6:a4:07:17:b3:93:52:6e: 06:3b:a7:cd:bd:e4:3e:7a:3b:3e:1d:34:3d:c4:af: 17:1a:d9:34:1a:8d:8c:0c:76:13:96:2a:ae:d9:30: e5:00:7f:08:f4:75:b0:6b:2e:22:85:3e:fe:59:1a: 81:db:65:26:76:1f:e8:19:eb:a2:64:2c:61:d5:35: b6:ff:7f:ae:7c:c9:e9:91:f2:e4:85:09:96:03:fc: 27:f7:13:82:af:a8:4f:d0:7a:c4:13:36:88:7d:f9: ec:e6:8f:db:0a:95:ad:c4:9b:8a:43:9c:55:1d:6e: 22:bb:52:c6:b6:47:7c:6b:28:05:48:a3:11:ea:e5: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:33:B3:18:D8:EC:E2:69:42:90:85:65:AC:50:E2:71:07:83:10 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.150.0/24 104.234.168.0/24 104.234.242.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:86:c7:ae:5b:ae:66:09:4a:bf:75:f1:4d:c3:15:a5:9d:22: 33:46:d5:d5:18:b6:b8:1d:27:a2:6f:30:9c:3f:eb:77:86:f6: 96:a1:12:3f:1e:30:db:ec:a7:69:d2:b5:b8:f6:58:58:8c:fa: ea:18:56:25:6c:7d:04:2d:28:e8:46:f9:8a:25:7a:42:5c:bf: ef:77:73:51:81:80:ec:c5:19:b5:d4:6f:b0:28:2f:46:9c:28: 3a:ab:a8:7a:14:d5:ea:89:a7:25:a6:52:83:01:fe:56:34:11: 49:19:a7:27:06:31:43:bf:82:47:ea:05:f8:d6:26:b0:8c:97: b6:74:d4:7e:38:07:ce:9d:88:1a:85:36:bb:b4:f3:f6:88:0a: 37:2a:66:ad:28:39:51:e0:f3:9f:ec:1b:dd:38:dc:d5:3b:24: e8:a2:32:54:25:df:5d:2c:06:d9:61:44:cc:83:ca:50:fd:67: 10:cb:fe:1e:94:23:f0:ff:04:31:a9:c3:a4:4e:48:73:09:99: b1:f9:4d:29:eb:04:cf:e9:ea:38:4d:70:2f:72:8e:23:3c:67: cd:39:49:ec:17:60:93:17:f9:63:21:59:91:63:06:50:70:1d: 7b:3a:e0:f3:57:e9:87:82:f8:8d:0f:ba:fd:4a:91:f6:61:dd: 18:49:3e:0e -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUM1MVa1t2rudPBMDUwZ+uvhJIFvMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDA0MTIyOTM3WhcNMjcxMDAzMTIzNDM3 WjAzMTEwLwYDVQQDEygzQkMyMzNCMzE4RDhFQ0UyNjk0MjkwODU2NUFDNTBFMjcx MDc4MzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztinsIAd0fmZ y6mPbGOM3MjArO0EAR8POx8z0sc2eoi6rYVTgFdzOeJay+++YAV/o5s27kg+lsLe FcdGKR9S77WoyMDxcWkhMia48XCcs0XA4R8lCtusy/TuPrF+Oms681+8zVw7kqq6 ZbFvF4XzsT8xtb2N/tg0DIbcSIu6xqQHF7OTUm4GO6fNveQ+ejs+HTQ9xK8XGtk0 Go2MDHYTliqu2TDlAH8I9HWway4ihT7+WRqB22Umdh/oGeuiZCxh1TW2/3+ufMnp kfLkhQmWA/wn9xOCr6hP0HrEEzaIffns5o/bCpWtxJuKQ5xVHW4iu1LGtkd8aygF SKMR6uUahQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFDvCM7MY2OziaUKQhWWsUOJx B4MQMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOqWAwQAaOqoAwQAaOryMA0GCSqG SIb3DQEBCwUAA4IBAQBbhseuW65mCUq/dfFNwxWlnSIzRtXVGLa4HSeibzCcP+t3 hvaWoRI/HjDb7Kdp0rW49lhYjPrqGFYlbH0ELSjoRvmKJXpCXL/vd3NRgYDsxRm1 1G+wKC9GnCg6q6h6FNXqiaclplKDAf5WNBFJGacnBjFDv4JH6gX41iawjJe2dNR+ OAfOnYgahTa7tPP2iAo3KmatKDlR4POf7BvdONzVOyToojJUJd9dLAbZYUTMg8pQ /WcQy/4elCPw/wQxqcOkTkhzCZmx+U0p6wTP6eo4TXAvco4jPGfNOUnsF2CTF/lj IVmRYwZQcB17OuDzV+mHgviND7r9SpH2Yd0YST4O -----END CERTIFICATE-----Generated at Tue Oct 20 17:08:16 2026 by rpki-client