$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: LbGLyK/CzHwC4/0epRffqbwFdpud4+Stt1EHMTx9yjI= Subject key identifier: C8:4B:F7:13:D9:A2:F8:F2:C4:3C:24:E7:8B:14:A8:5D:4B:B9:2A:D3 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6040F891F49D169C7116ED44BFDA025B963DB239 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa Signing time: Sat 18 Apr 2026 08:15:13 +0000 ROA not before: Sat 18 Apr 2026 08:10:13 +0000 ROA not after: Sat 17 Apr 2027 08:15:13 +0000 asID: 20473 IP address blocks: 40.223.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:40:f8:91:f4:9d:16:9c:71:16:ed:44:bf:da:02:5b:96:3d:b2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 18 08:10:13 2026 GMT Not After : Apr 17 08:15:13 2027 GMT Subject: CN=C84BF713D9A2F8F2C43C24E78B14A85D4BB92AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:fe:64:d5:1f:40:fd:05:c7:4e:4c:27:9c: 2f:73:74:89:98:b4:27:f0:b6:b7:b5:1f:0c:0e:69: a6:f8:37:83:9f:9b:42:96:af:e4:d8:44:cf:13:3c: 8b:dc:01:f6:ab:a6:9d:aa:8d:d6:90:79:3a:04:0b: 84:56:6d:f6:1d:bb:c4:22:e5:c3:1b:82:10:c4:1d: 27:b4:5f:79:00:87:f5:d2:3c:c3:80:8a:ff:7d:9f: 45:c3:73:ba:5d:3d:d1:56:4d:98:e4:8d:37:77:92: 45:31:c2:7f:7d:b7:c1:b1:ec:10:9d:e3:17:84:0b: 40:ef:b0:ac:99:d6:ed:7c:f9:8c:74:b2:fc:31:db: c6:e2:32:22:c7:fa:a3:55:17:a7:4a:92:92:c4:be: a2:62:b3:5f:64:6e:70:c0:64:b3:22:82:7a:61:68: 3e:d3:48:5e:47:a8:c6:09:cb:6e:d5:d6:ae:26:df: 13:40:ee:4f:65:70:74:57:c3:b1:f9:9b:00:21:52: fd:5a:44:79:cc:98:31:2d:0c:a9:0a:0c:58:81:1d: ed:ca:a2:4b:60:cc:b5:1f:74:ee:9c:87:1a:20:52: 9e:22:70:d5:5c:0a:0c:0d:64:e7:a0:16:51:71:48: 97:e7:f1:dd:31:81:42:46:27:68:cd:7b:fe:07:a3: ba:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4B:F7:13:D9:A2:F8:F2:C4:3C:24:E7:8B:14:A8:5D:4B:B9:2A:D3 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.13.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:04:a4:d7:f7:e1:50:cb:cc:98:20:04:ae:5a:67:35:e1:11: d3:71:35:20:08:73:d6:69:56:c0:d8:7c:d7:df:49:69:34:a1: 8a:62:36:e9:62:81:79:2f:1e:e9:f3:3b:c8:cf:e2:99:a1:ef: 11:87:8a:b5:ad:2a:99:1a:ee:74:11:7a:d9:48:2e:14:4b:ad: 01:34:b1:7c:9c:d2:03:36:a6:76:e0:73:03:84:1a:5f:5b:bc: 98:a2:d2:a3:ee:ae:76:c1:0f:bc:fc:ff:ce:7d:ac:6d:c2:43: f4:06:94:c4:43:8b:54:9e:60:9b:41:66:5d:ff:4f:80:64:ac: 92:04:3e:f0:59:a0:f9:1d:be:1a:5e:20:b6:67:8b:87:3f:72: 8a:03:18:bf:ab:38:75:72:2f:7a:14:b4:a1:f6:0e:4c:62:c4: 74:9e:8a:6e:f0:bf:47:e8:ba:fe:8a:bd:f0:02:e8:0c:b2:87: 8b:aa:88:ed:c9:10:23:f6:3c:2b:77:e2:49:d2:d5:4e:ad:a2: f8:c4:d7:f3:ad:ab:c8:8f:ea:45:c6:06:8a:c8:1d:31:69:fd: 62:9b:8a:9d:1e:28:cf:dc:64:f7:3f:19:b4:10:5f:7a:a1:0d: 2f:60:49:e7:a0:ac:bd:bb:0e:d5:93:d0:0d:6e:b7:7b:e6:15: f9:4b:31:52 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUYED4kfSdFpxxFu1Ev9oCW5Y9sjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDE4MDgxMDEzWhcNMjcwNDE3MDgxNTEz WjAzMTEwLwYDVQQDEyhDODRCRjcxM0Q5QTJGOEYyQzQzQzI0RTc4QjE0QTg1RDRC QjkyQUQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CP+ZNUfQP0F x05MJ5wvc3SJmLQn8La3tR8MDmmm+DeDn5tClq/k2ETPEzyL3AH2q6adqo3WkHk6 BAuEVm32HbvEIuXDG4IQxB0ntF95AIf10jzDgIr/fZ9Fw3O6XT3RVk2Y5I03d5JF McJ/fbfBsewQneMXhAtA77CsmdbtfPmMdLL8MdvG4jIix/qjVRenSpKSxL6iYrNf ZG5wwGSzIoJ6YWg+00heR6jGCctu1dauJt8TQO5PZXB0V8Ox+ZsAIVL9WkR5zJgx LQypCgxYgR3tyqJLYMy1H3TunIcaIFKeInDVXAoMDWTnoBZRcUiX5/HdMYFCRido zXv+B6O6owIDAQABo4ICfjCCAnowHQYDVR0OBBYEFMhL9xPZovjyxDwk54sUqF1L uSrTMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKN8NMA0GCSqGSIb3DQEBCwUAA4IB AQA8BKTX9+FQy8yYIASuWmc14RHTcTUgCHPWaVbA2HzX30lpNKGKYjbpYoF5Lx7p 8zvIz+KZoe8Rh4q1rSqZGu50EXrZSC4US60BNLF8nNIDNqZ24HMDhBpfW7yYotKj 7q52wQ+8/P/OfaxtwkP0BpTEQ4tUnmCbQWZd/0+AZKySBD7wWaD5Hb4aXiC2Z4uH P3KKAxi/qzh1ci96FLSh9g5MYsR0nopu8L9H6Lr+ir3wAugMsoeLqojtyRAj9jwr d+JJ0tVOraL4xNfzravIj+pFxgaKyB0xaf1im4qdHijP3GT3Pxm0EF96oQ0vYEnn oKy9uw7Vk9ANbrd75hX5SzFS -----END CERTIFICATE-----Generated at Mon Apr 20 04:47:24 2026 by rpki-client