$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: knxTg9D2dC50hI9Uc7w5IRrTOkmL86qt4kwhR6WhAPE= Subject key identifier: 48:2D:BD:5D:0F:AD:60:98:20:31:D9:7E:5F:A2:44:3F:BC:66:C3:0D Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 045E9E0E8B68EBDEC7A5BB6C544B61A8F9868309 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa Signing time: Thu 05 Mar 2026 05:39:46 +0000 ROA not before: Thu 05 Mar 2026 05:34:46 +0000 ROA not after: Thu 04 Mar 2027 05:39:46 +0000 asID: 20473 IP address blocks: 40.223.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 08:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5e:9e:0e:8b:68:eb:de:c7:a5:bb:6c:54:4b:61:a8:f9:86:83:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Mar 5 05:34:46 2026 GMT Not After : Mar 4 05:39:46 2027 GMT Subject: CN=482DBD5D0FAD60982031D97E5FA2443FBC66C30D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:5a:56:a0:1f:d7:b0:51:21:21:cb:d2:e3: 72:02:1a:14:e5:43:ec:b8:04:fb:3a:12:a1:66:13: a0:5e:dd:81:99:d0:04:1b:01:8a:62:78:96:c1:05: f8:9c:22:ea:4d:32:c0:14:c2:e5:cd:57:8b:9d:97: 62:c1:47:3a:d4:4d:37:a8:30:c0:d0:ee:f7:e6:57: f2:e2:75:34:aa:8e:50:1e:ee:67:5b:74:e2:a1:40: de:01:88:29:5e:31:64:5d:a5:d1:e2:0d:ae:46:63: 6b:fb:b7:ce:86:b1:15:cb:3a:cd:5e:26:99:c7:07: 6c:50:c8:a1:c8:67:5e:11:5a:0e:c8:a4:36:f9:13: 3b:a3:04:08:4a:45:84:42:76:82:b3:d8:54:c3:59: 86:06:91:b8:78:aa:e1:0a:c0:38:5a:84:58:bb:1f: 9d:96:ae:4d:90:2f:73:a1:3d:79:71:c5:23:48:23: 18:f2:c1:6a:d6:f9:e4:7a:f3:c7:6f:3e:7e:2e:9d: 8b:a7:8a:e9:0e:63:46:c7:55:de:12:c6:21:96:9f: 37:41:16:af:f5:14:61:ca:16:77:0d:61:96:48:15: a6:e4:43:18:dc:2f:c5:d1:b7:6c:82:3b:da:97:e8: bf:a9:0c:5d:62:78:92:c5:38:b5:3d:73:19:3a:ec: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2D:BD:5D:0F:AD:60:98:20:31:D9:7E:5F:A2:44:3F:BC:66:C3:0D X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.13.0/24 Signature Algorithm: sha256WithRSAEncryption b0:86:f8:c2:ce:f7:a1:65:e8:ce:2f:83:fa:df:b0:ce:d7:cd: 1c:6c:62:a2:bd:c7:e0:6e:77:33:2c:be:62:a8:86:ef:16:9f: b7:8f:80:de:98:d4:48:8e:83:49:3c:55:62:7a:54:3d:6f:cf: e0:a5:ff:d9:d7:6f:88:d4:ad:ce:55:0c:90:54:69:01:f4:da: 13:5c:06:d7:b2:02:56:52:d3:db:62:ff:6f:b3:cb:0f:a9:21: a2:e4:98:ac:1e:8d:e8:4e:84:11:e2:54:3a:f8:f7:2b:88:d9: 17:f0:5f:d4:37:3b:51:7c:0b:da:3f:64:d2:58:ee:6a:c7:49: 5c:11:24:a0:4b:7f:8f:eb:94:a7:38:2f:4c:c4:ec:16:23:d9: fb:4f:e3:08:30:15:04:02:0d:66:e4:4a:c2:51:4d:70:b3:e2: 3d:3b:29:24:ea:2b:13:1b:33:e0:68:90:19:aa:d0:3f:09:64: 2e:37:02:68:b4:0e:21:48:b5:cf:0d:98:c7:2b:9a:2f:c9:a0: a9:19:e2:be:c6:18:18:ce:68:77:34:55:7f:42:38:db:31:53: e2:38:0f:25:87:32:97:4a:a7:7b:b3:0c:44:06:53:ff:12:0b: 14:78:2c:b2:2e:ee:c8:ab:f9:fe:91:dc:38:75:9d:16:ac:88: e9:5e:ab:a4 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUBF6eDoto697HpbtsVEthqPmGgwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzA1MDUzNDQ2WhcNMjcwMzA0MDUzOTQ2 WjAzMTEwLwYDVQQDEyg0ODJEQkQ1RDBGQUQ2MDk4MjAzMUQ5N0U1RkEyNDQzRkJD NjZDMzBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wVaVqAf17BR ISHL0uNyAhoU5UPsuAT7OhKhZhOgXt2BmdAEGwGKYniWwQX4nCLqTTLAFMLlzVeL nZdiwUc61E03qDDA0O735lfy4nU0qo5QHu5nW3TioUDeAYgpXjFkXaXR4g2uRmNr +7fOhrEVyzrNXiaZxwdsUMihyGdeEVoOyKQ2+RM7owQISkWEQnaCs9hUw1mGBpG4 eKrhCsA4WoRYux+dlq5NkC9zoT15ccUjSCMY8sFq1vnkevPHbz5+Lp2Lp4rpDmNG x1XeEsYhlp83QRav9RRhyhZ3DWGWSBWm5EMY3C/F0bdsgjval+i/qQxdYniSxTi1 PXMZOuxRmwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFEgtvV0PrWCYIDHZfl+iRD+8 ZsMNMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKN8NMA0GCSqGSIb3DQEBCwUAA4IB AQCwhvjCzvehZejOL4P637DO180cbGKivcfgbnczLL5iqIbvFp+3j4DemNRIjoNJ PFVielQ9b8/gpf/Z12+I1K3OVQyQVGkB9NoTXAbXsgJWUtPbYv9vs8sPqSGi5Jis Ho3oToQR4lQ6+PcriNkX8F/UNztRfAvaP2TSWO5qx0lcESSgS3+P65SnOC9MxOwW I9n7T+MIMBUEAg1m5ErCUU1ws+I9Oykk6isTGzPgaJAZqtA/CWQuNwJotA4hSLXP DZjHK5ovyaCpGeK+xhgYzmh3NFV/QjjbMVPiOA8lhzKXSqd7swxEBlP/EgsUeCyy Lu7Iq/n+kdw4dZ0WrIjpXquk -----END CERTIFICATE-----Generated at Thu Mar 5 23:20:10 2026 by rpki-client