$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: KdKSR5WiMULgG/mC/nCuNh2myyjGimPpfnd5FOudUc8= Subject key identifier: 00:DB:B3:D5:02:7A:0D:AE:8D:94:99:7B:B3:6F:34:2A:7A:ED:80:B4 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 512B8EF298F3CDC385E7538B518CDEC066906254 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Wed 23 Jul 2025 00:02:01 +0000 ROA not before: Tue 22 Jul 2025 23:57:01 +0000 ROA not after: Wed 22 Jul 2026 00:02:01 +0000 asID: 20473 IP address blocks: 23.226.140.0/23 maxlen: 24 23.226.143.0/24 maxlen: 24 64.50.190.0/23 maxlen: 24 66.63.167.0/24 maxlen: 24 72.11.136.0/23 maxlen: 24 96.47.228.0/24 maxlen: 24 96.47.231.0/24 maxlen: 24 96.47.236.0/23 maxlen: 24 104.129.44.0/24 maxlen: 24 104.129.55.0/24 maxlen: 24 107.150.28.0/23 maxlen: 24 167.160.163.0/24 maxlen: 24 167.160.172.0/24 maxlen: 24 167.160.174.0/23 maxlen: 24 173.44.37.0/24 maxlen: 24 173.44.42.0/23 maxlen: 24 173.44.45.0/24 maxlen: 24 173.44.47.0/24 maxlen: 24 173.44.48.0/22 maxlen: 24 173.44.52.0/23 maxlen: 24 173.44.54.0/24 maxlen: 24 173.44.56.0/23 maxlen: 24 173.44.59.0/24 maxlen: 24 173.44.63.0/24 maxlen: 24 216.97.225.0/24 maxlen: 24 216.227.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 10:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2b:8e:f2:98:f3:cd:c3:85:e7:53:8b:51:8c:de:c0:66:90:62:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 22 23:57:01 2025 GMT Not After : Jul 22 00:02:01 2026 GMT Subject: CN=00DBB3D5027A0DAE8D94997BB36F342A7AED80B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:f6:04:36:26:6d:08:20:b3:40:a2:32:03: b3:3f:cc:15:82:49:ff:05:16:08:61:0e:61:92:e0: ef:f6:12:8e:df:1c:61:66:34:31:13:47:47:f8:38: 33:3a:41:1e:0a:43:5d:53:a0:0c:cb:3a:d4:f0:f6: c6:e2:ef:f8:0d:57:3f:af:7e:fc:84:ef:00:d5:ec: f6:eb:5d:3e:39:98:90:8c:70:e9:76:b5:26:6c:11: 6d:85:0a:a4:0f:a6:0e:fb:c7:81:38:64:be:fd:87: 05:e0:dd:be:c5:c1:fe:a7:fc:b2:5b:c4:2f:03:9d: 00:fd:a0:c3:db:86:05:aa:a6:2a:ec:60:4b:dd:bc: 36:d3:a5:7e:12:2c:b3:96:20:1e:09:71:3a:b8:4e: 6f:e2:66:83:dc:21:24:c5:92:b4:1e:a2:b0:ae:29: 9b:80:54:fc:3e:e0:ce:ec:58:93:ec:79:e9:2f:77: 1a:7f:f1:5a:86:85:12:32:17:42:ed:f4:06:ca:fa: cf:9f:2b:88:5d:53:4a:a3:e7:97:27:1c:9c:b6:af: 41:5f:12:c9:db:81:0e:e0:c3:c8:1d:87:4a:38:0d: 06:7d:00:2b:3a:30:5d:8d:9a:45:aa:21:2c:61:67: f6:b0:6e:55:d7:d5:22:26:17:04:8d:8a:11:ec:4b: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:B3:D5:02:7A:0D:AE:8D:94:99:7B:B3:6F:34:2A:7A:ED:80:B4 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.140.0/23 23.226.143.0/24 64.50.190.0/23 66.63.167.0/24 72.11.136.0/23 96.47.228.0/24 96.47.231.0/24 96.47.236.0/23 104.129.44.0/24 104.129.55.0/24 107.150.28.0/23 167.160.163.0/24 167.160.172.0/24 167.160.174.0/23 173.44.37.0/24 173.44.42.0/23 173.44.45.0/24 173.44.47.0-173.44.54.255 173.44.56.0/23 173.44.59.0/24 173.44.63.0/24 216.97.225.0/24 216.227.216.0/23 Signature Algorithm: sha256WithRSAEncryption 47:7c:da:e6:15:a8:d6:bc:f4:bc:d0:aa:57:3a:0a:a8:19:58: 59:52:6d:e6:bc:4e:28:17:90:0e:4d:95:fe:62:a3:0d:e3:c2: 55:48:b5:a6:5d:c9:87:b3:06:af:cc:f5:ec:77:a7:12:5e:3d: 9a:93:83:2f:0d:a0:09:3d:b0:18:94:b8:30:50:a0:3e:e3:7a: 48:ec:e1:cd:a5:1c:59:2b:65:16:b8:55:2c:70:99:92:0a:ca: 5c:9e:0c:84:09:16:91:e6:db:49:82:6a:03:37:46:43:aa:8e: 6a:e2:8b:98:4e:15:5c:7c:30:d5:d0:1e:2c:10:60:21:bf:00: 5a:00:03:db:bd:6c:12:6e:aa:5a:85:1e:a2:1b:3c:28:4e:32: 11:49:7e:55:12:4e:37:1d:b2:3a:e7:ae:c2:21:e4:89:fe:90: ea:2e:bf:68:bf:34:3a:b9:87:8d:04:54:ef:76:2f:b3:5e:c2: a7:22:2e:cc:f2:bf:63:8a:15:39:cc:21:71:01:f5:98:aa:0f: 61:0c:37:62:a0:c8:e4:6f:d5:29:47:e4:50:fb:98:33:a5:60: 5f:74:85:69:30:b6:66:96:95:59:e4:8c:1e:2c:0f:16:d4:40: c1:27:43:cc:fd:c6:b7:80:c6:b4:c3:ae:47:aa:db:33:7a:57: ad:2c:47:b4 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIUUSuO8pjzzcOF51OLUYzewGaQYlQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzIyMjM1NzAxWhcNMjYwNzIyMDAwMjAx WjAzMTEwLwYDVQQDEygwMERCQjNENTAyN0EwREFFOEQ5NDk5N0JCMzZGMzQyQTdB RUQ4MEI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP/2BDYmbQgg s0CiMgOzP8wVgkn/BRYIYQ5hkuDv9hKO3xxhZjQxE0dH+DgzOkEeCkNdU6AMyzrU 8PbG4u/4DVc/r378hO8A1ez2610+OZiQjHDpdrUmbBFthQqkD6YO+8eBOGS+/YcF 4N2+xcH+p/yyW8QvA50A/aDD24YFqqYq7GBL3bw206V+EiyzliAeCXE6uE5v4maD 3CEkxZK0HqKwrimbgFT8PuDO7FiT7HnpL3caf/FahoUSMhdC7fQGyvrPnyuIXVNK o+eXJxyctq9BXxLJ24EO4MPIHYdKOA0GfQArOjBdjZpFqiEsYWf2sG5V19UiJhcE jYoR7EuqbwIDAQABo4IDDzCCAwswHQYDVR0OBBYEFADbs9UCeg2ujZSZe7NvNCp6 7YC0MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGv BggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAEX4owDBAAX4o8DBAFAMr4D BABCP6cDBAFIC4gDBABgL+QDBABgL+cDBAFgL+wDBABogSwDBABogTcDBAFrlhwD BACnoKMDBACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0sLwMEAK0s NgMEAa0sOAMEAK0sOwMEAK0sPwMEANhh4QMEAdjj2DANBgkqhkiG9w0BAQsFAAOC AQEAR3za5hWo1rz0vNCqVzoKqBlYWVJt5rxOKBeQDk2V/mKjDePCVUi1pl3Jh7MG r8z17HenEl49mpODLw2gCT2wGJS4MFCgPuN6SOzhzaUcWStlFrhVLHCZkgrKXJ4M hAkWkebbSYJqAzdGQ6qOauKLmE4VXHww1dAeLBBgIb8AWgAD271sEm6qWoUeohs8 KE4yEUl+VRJONx2yOueuwiHkif6Q6i6/aL80OrmHjQRU73Yvs17CpyIuzPK/Y4oV OcwhcQH1mKoPYQw3YqDI5G/VKUfkUPuYM6VgX3SFaTC2ZpaVWeSMHiwPFtRAwSdD zP3Gt4DGtMOuR6rbM3pXrSxHtA== -----END CERTIFICATE-----Generated at Sat Jul 26 02:46:30 2025 by rpki-client