
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: iH+zmFC0Mo1d1oDmWbtFNevVQ6E2U2Yoj4s5htw/8f4=
Subject key identifier: CB:47:CC:02:12:27:CE:2E:E0:8D:E1:9F:B6:28:40:8C:34:7E:C2:6E
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 29F461CE90561067EF76193D093A154BF59DC606
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa
Signing time: Thu 21 May 2026 08:36:00 +0000
ROA not before: Thu 21 May 2026 08:31:00 +0000
ROA not after: Thu 20 May 2027 08:36:00 +0000
asID: 20473
IP address blocks: 140.99.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 12 Jun 2026 05:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f4:61:ce:90:56:10:67:ef:76:19:3d:09:3a:15:4b:f5:9d:c6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: May 21 08:31:00 2026 GMT
Not After : May 20 08:36:00 2027 GMT
Subject: CN=CB47CC021227CE2EE08DE19FB628408C347EC26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:83:41:e7:54:bd:7f:91:5b:c8:e2:5c:92:
df:e7:4e:b6:86:f4:b0:59:4d:8f:bf:61:4b:a8:cb:
46:68:5a:dd:98:0c:84:b5:ab:67:fd:7d:2f:d2:4a:
6a:84:16:71:f3:ee:a7:b6:52:36:26:85:4b:40:60:
37:04:06:97:82:9a:3e:22:4f:35:f2:dd:c6:97:92:
a0:b1:65:b8:0c:e0:52:92:b7:42:e3:80:aa:ad:ce:
ff:c4:b8:6b:13:54:3b:bd:83:c4:5f:6e:06:4e:91:
04:66:ae:85:5d:a4:35:d7:f1:1b:74:03:f6:f4:32:
ae:a2:ef:49:84:e7:0e:33:15:4a:93:13:6d:de:75:
d8:c2:22:59:88:2a:f3:f3:f2:d4:30:78:96:58:e9:
ba:f4:4c:a5:14:b3:31:f0:b2:ad:96:7e:61:11:72:
dc:70:d1:0c:33:e5:48:18:86:94:ed:82:a2:30:da:
ee:61:84:d0:50:8d:98:79:6a:9e:28:d5:db:0d:4f:
5f:65:e4:ca:ed:83:90:80:c3:14:7e:0a:82:4a:b5:
af:49:2e:5d:de:f9:17:72:46:77:c6:eb:27:64:63:
50:0d:26:ee:0f:69:80:c4:d5:c9:48:8a:0d:76:f0:
60:b9:95:10:9d:98:e6:05:41:04:0d:70:80:12:cb:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:CC:02:12:27:CE:2E:E0:8D:E1:9F:B6:28:40:8C:34:7E:C2:6E
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.244.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:39:26:93:39:1d:63:cd:18:59:51:07:d8:fe:e4:36:73:98:
5a:de:08:a7:b2:84:5b:82:90:1e:be:01:59:1a:c5:7d:9f:af:
d0:a4:59:cc:f7:9a:b4:25:3a:62:a9:38:6d:2e:88:4e:b5:b0:
c0:f7:d0:dc:fe:e5:45:43:7c:82:e1:f6:0b:8d:16:53:5e:4d:
f2:62:8d:61:8b:02:53:fd:1f:12:d7:38:d6:d3:43:07:42:10:
1d:d2:27:cd:fc:0a:4e:91:03:ea:50:aa:ca:b5:89:5c:b9:c5:
4e:85:df:dd:a1:47:b9:aa:92:fe:07:aa:f6:bb:8c:4a:d5:d9:
0e:b6:1b:4d:e1:80:45:b4:ff:90:17:7b:26:90:7c:19:fb:cc:
59:c0:ac:2a:42:44:eb:f1:18:5c:a2:78:d6:2f:53:be:57:b9:
71:b4:56:28:a0:e4:a7:e1:03:a7:bd:76:01:ac:9c:3f:61:38:
3f:98:4e:0d:d9:34:a1:4a:9b:aa:a5:2b:c2:c3:8a:70:4e:ff:
01:e0:62:df:31:d9:0f:4b:ec:db:d0:ab:f6:71:b7:48:fa:02:
a1:bf:b8:6a:93:e5:91:36:ab:bc:e1:26:ab:37:d4:d6:28:a1:
43:58:e2:e3:15:ba:05:0b:e6:d7:60:bc:c9:b6:d1:96:d2:af:
66:dc:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:38:34 2026 by rpki-client